summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-06-26Add the extendedKeyUsage flags serverAuth and clientAuth. Newer WindowsReyk Floeter
version require these flags to accept the X.509 certificates from the gateway or client; I just add both flags to make it work in both cases and verified it with win7, for example when authenticating against iked. go ahead beck@
2010-06-26PCH needs its own Low Power Link Up code as it it is configuredJonathan Gray
in the PHY instead of the MAC like ICH8.
2010-06-26Include the Id type in the generated SA tag that is passed to theReyk Floeter
kernel, just like isakmpd does it. In difference to isakmpd, the Id type is printed in capital letters, eg. FQDN/foo.example.com, because it is using the existing print_map() API. For consistency, rename a few Id types in grammar and code from the RFC-names to the OpenBSD-style names; including RFC822_ADDR to UFQDN, IPV4_ADDR to just IPV4, DER_ASN1_DN to ASN1_DN etc.
2010-06-26allow a user to set a -c count of 0.Peter Hessler
while here, change ping6 to use strtonum instead of strtol. OK claudio@
2010-06-26irr->irr_raf_mask_onlink and irr->irr_raf_mask_auto are single-bit bitfieldsPhilip Guenthe
so they can only be set to 1 or 0. Caught by gcc4. ok mcbride@ pyr@
2010-06-26Setting the cmdlist pointer in the bind-key to NULL to prevent it being freedNicholas Marriott
after the command is executing is bogus because it may still be needed if the same command is going to be executed again (for example if you "bind-key a bind-key b ..."). Making a copy is hard, so instead add a reference count to the cmd_list. While here, also print bind-key -n and the rest of the flags properly. Fixes problem reported by mcbride@.
2010-06-26Use offsetof() instead of writing our own version (...which generatesPhilip Guenthe
warnings from gcc4) os claudio@
2010-06-26merge release 1.10.2Ingo Schwarze
* bug fixes: - interaction of ASCII_HYPH with special chars (found by Ulrich Spoerlein) - handling of roff conditionals (found by Ulrich Spoerlein) - .Bd -offset will no more default to 6n * maintenance: - more caching of .Bd and .Bl arguments for efficiency - deconstify man(7) validation routines - add FreeBSD library names (provided by Ulrich Spoerlein) * start PostScript font-switching
2010-06-26Add GENERIC.MP.Joel Sing
ok kettenis@
2010-06-26sync libexpat with upstream. mostly formating cleanup, no binary change.Eric Faurot
ok deraadt nicm
2010-06-26bye bye DLT_OLD_PFLOG & friends. dead since 2003. 7 years oughta be enoughHenning Brauer
ok ryan theo reyk
2010-06-26remove support for the old pflog format, replaced in 2003Henning Brauer
ok ryan theo & herr reyksminister
2010-06-26From the Loganaden Velvindron:Kjell Wooding
Make dired more sane (and emacslike): * Position cursor at first filename after .. * Don't reposition cursor on reopening * Check for permission before attempting to open directory I took forever to get this in. Thanks, Logan for being patient!
2010-06-26Don't try to halt an AP if holding sched_lock since that causes hangsMike Larkin
on resume. Fail early if this is detected, so that we have a chance to catch it. ok kettenis@, deraadt@
2010-06-26syncTheo de Raadt
2010-06-26Fix 100% interrupt usage on amd64 MP resume.Mike Larkin
ok kettenis@, pirofti@, marco@
2010-06-26xs->cmd[n] doesn't mean the n'th byte, because xs->cmd is a structKenneth R Westerback
*scsi_generic. Change xs->cmd[0] references in sii.c to xs->cmd->opcode and do (caddr_t) arithmetic when copying chunks into the adw adapter struct. Found by Matthew Dempsky, diff tweaked and tested by me.
2010-06-26disable opencvs; maintainers went bye byeTheo de Raadt
2010-06-26tweak previous;Jason McIntyre
2010-06-26Do not store curcpu() in syscall and trap handlers since we can go toJoel Sing
sleep and wake up on another CPU. ok kettenis@
2010-06-26Avoid a potential race when unlocking a mutex.Joel Sing
ok kettenis@
2010-06-26add huawei E182 and emobile D31HW to the supported device listYojiro Uo
2010-06-26add HUAWEI E182 (aka Emobile D31HW)Yojiro Uo
2010-06-26regenYojiro Uo
2010-06-26add new umsm device (HUAWEI E182 / aka Emobile D31HW)Yojiro Uo
2010-06-25remove -m (merge).Henning Brauer
it is violating the transactional model we have and made stronger in pf, it is broken in some cases and since some options are passed to the kernel while some are userland only and affect how the rules are parsed it is complete bullshit anyway - obviously, changing options that affect ruleset parsing without reloading and thus reparsing the ruleset cannot work. so stop pretending it could and cut the crap. ok dlg krw deraadt
2010-06-25Add X11ForwardTimeout option to specify timeout for untrusted X11Damien Miller
authentication cookies to avoid fallback in X11 code to fully-trusted implicit authentication using SO_PEERCRED described at: http://lists.x.org/archives/xorg-devel/2010-May/008636.html After the X11ForwardTimeout has expired the client will now refuse incoming X11 channel opens. based on patch from Tavis Ormandy; "nice" markus@
2010-06-25log the hostname and address that we connected to at LogLevel=verboseDamien Miller
after authentication is successful to mitigate "phishing" attacks by servers with trusted keys that accept authentication silently and automatically before presenting fake password/passphrase prompts; "nice!" markus@
2010-06-25There is no need for {} to just specifiy an interface.Claudio Jeker
2010-06-25minor cleanupsMarc Espie
2010-06-25fix bad opt('l') printing.Marc Espie
don't create names list to recreate handles list
2010-06-25remove last local vars.Marc Espie
2010-06-25simplify message printing a bitMarc Espie
2010-06-25document ::State a bitMarc Espie
2010-06-25clean-up options handling some moreMarc Espie
2010-06-25new styleMarc Espie
2010-06-25move handle_options in state, as should be.Marc Espie
fix a buglet in vsystem
2010-06-25do options the other way so that we provide defaults that can be overriddenMarc Espie
locally
2010-06-25use new state (so no need to parse some options).Marc Espie
this requires exporter for now.
2010-06-25use locator object.Marc Espie
rework options into state
2010-06-25move common options (-D/-v) handling code upto State.Marc Espie
rework handle_options to be code in state proper, so that I can remove a class that's actually useless. reuse the export code from getopt so that legacy code still get opt_x working.
2010-06-25allow creation of a unique PackageLocator object, that stores state,Marc Espie
and thus can eventually be used to create repositories, print messages, etc.
2010-06-25fix "deduplicate" code.Marc Espie
allow prepend as well as add
2010-06-25sha25 -> sha256 as noticed by Nigel TaylorMarc Espie
2010-06-25skip the initial check for access with an empty password whenDamien Miller
PermitEmptyPasswords=no;
2010-06-25don't attempt to drain devices after they are destroyed, whichAlexandre Ratchov
results in a use after free(). Catched by jakemsr@ with MALLOC_OPTIONS=J
2010-06-25bz#1750: fix requirement for /dev/null inside ChrootDirectory forDamien Miller
internal-sftp accidentally introduced in r1.253 by removing the code that opens and dup /dev/null to stderr and modifying the channels code to read stderr but discard it instead; ok markus@
2010-06-25bz#1327: remove hardcoded limit of 100 permitopen clauses and portDamien Miller
forwards per direction; ok markus@ stevesk@
2010-06-25move st over to using xshandlers for scheduling io. based on theDavid Gwynne
same changes in cd and sd. tested by and ok krw@
2010-06-24- remove ISAPNP_FREE and ISAPNP_MALLOC macro's and just use them inline.Jasper Lievisse Adriaanse
ok thib@ deraadt@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-09 17:00:20 +0000