summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-10-31ssh client support for U2F/FIDO keysDamien Miller
2019-10-31Separate myproposal.h userauth pubkey typesDamien Miller
U2F/FIDO keys are not supported for host authentication, so we need a separate list for user keys. feedback & ok markus@
2019-10-31ssh-keygen support for generating U2F/FIDO keysDamien Miller
2019-10-31U2F/FIDO middleware interfaceDamien Miller
Supports enrolling (generating) keys and signatures. feedback & ok markus@
2019-10-31Initial infrastructure for U2F/FIDO supportDamien Miller
Key library support: including allocation, marshalling public/private keys and certificates, signature validation. feedback & ok markus@
2019-10-31Protocol documentation for U2F/FIDO keys in OpenSSHDamien Miller
2019-10-31fix inconsistency; from tim kuijstenJason McIntyre
agreed by deraadt
2019-10-31Constrain and correct the routes being deleted when applying a newKenneth R Westerback
lease. Constrain by only looking at static routes, which are the only kind dhclient will add. Correct by realizing direct /32 routes in the lease look different when returned from the routing table. Further correct route comparison by applying appropriate netmask to both destination addresses before comparing them. Fixes "arpresolve: ... route contains no arp information" issue reported on bugs@. Much problem analysis and fix testing by Lauri Tirkkonen. Thanks!
2019-10-31Add RSA OAEP test for pkeyutl in appstest.shKinichiro Inoguchi
2019-10-31In rsa_pmeth.c rev. 1.30, jsing@ set the minimum RSA key lengthIngo Schwarze
for RSA key generation to 512 bits. Document that minimum.
2019-10-31Add CMS controls for RSA.Joel Sing
2019-10-31Add support for RSA-PSS.Joel Sing
From OpenSSL 1.1.1d. ok inoguchi@
2019-10-31Move RSA min modulus to a define and increase from 256 to 512 bits.Joel Sing
From OpenSSL 1.1.1d. ok inoguchi@
2019-10-31Fix indent and indent before labels.Joel Sing
2019-10-31Use braces where a statement has both multi-line and single-line blocks.Joel Sing
Makes code more robust and reduces differences with OpenSSL. ok inoguchi@
2019-10-31Add additional validation of key size, message digest size and publicJoel Sing
exponent. From OpenSSL 1.1.1d. ok inoguchi@
2019-10-31 With the asr fallback we can skip the service port up & down dance,Florian Obser
unwind should now be able to work in networks with crappy middle boxes. We also need to switch to the ASR resolver, not DHCP when we are behind a captive portal. Some captive portals let through DNS queries with edns0 options but the "click here to accept the terms of service page" is not resolvable with edns0.
2019-10-31Add asr resolver type which completely bypasses libunbound and uses theFlorian Obser
libc asynchronous resolver directly with DHCP provided nameservers. This is a last-ditch effort when we find ourself behind a completely broken middle-box. Input & OK otto OK benno
2019-10-31Clean up some code.Joel Sing
Assign and test, explicitly test against NULL and use calloc() rather than malloc. ok inoguchi@
2019-10-31Avoid potentially leaking pub_exp in pkey_rsa_copy().Joel Sing
ok inoguchi@
2019-10-31Make background scans less frequent if we keep choosing the same AP.Stefan Sperling
This helps a bit in situations where a single AP is used and background scans are causing packet loss, as seen with Jesper Wellin's Broadcom-based AP and my Android phone in hotspot mode. This is not a proper fix but our background scan frequency against a single AP was much higher than needed anyway. Tested by jan, job, benno, Tracey Emery, Jesper Wallin
2019-10-31Administrative Shutdown messages can be 255 byte long.Sebastian Benoit
ok claudio@
2019-10-31Handle the TAL files in the master process and pass them as buffer to theClaudio Jeker
parser process. This way the parser never needs to read outside of the cache directory which makes the unveil simpler. Additionally rsync_uri_parse no longer needs to know about .tal files so there is now no chance to sneak in a .tal file later on. OK deraadt@
2019-10-31declare HAVE_DECL___FUNC__ so flex_die() output can include __func__.miko
ok millert@
2019-10-31When writing to a raw vnd device with dd if the input file size is not aJonathan Gray
multiple of bs use conv=sync to zero pad the final record. Avoids "vnd0: sloppy write from proc" messages when building arm releases. tested by deraadt@
2019-10-30spacing; from martinJason McIntyre
2019-10-30Add PREFIX_FLAG_STALE to mark prefixes in the Adj-RIB-Out as stale duringClaudio Jeker
graceful reload. At the same time extend peer_dump() to force all updates getting sent by adding every entry in the Adj-RIB-Out to the update tree unless they are PREFIX_FLAG_DEAD or PREFIX_FLAG_STALE. The latter will be removed during that stage since peer_dump() just did a full update of the Adj-RIB-Out. Also fix prefix_withdraw to check the correct prefix flags before removing a prefix from the update or withdraw tree. OK benno@
2019-10-30drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1Jonathan Gray
From Hans de Goede 4d5307c099afc9ce5fe89e8acf9b3c65104d0e08 in linux 4.19.y/4.19.81 984d7a929ad68b7be9990fc9c5cfa5d5c9fc7942 in mainline linux
2019-10-30drm/ttm: Restore ttm prefaultingJonathan Gray
From Thomas Hellstrom 11377c3e997eca9c9ff562fc4fc7a41a455bddf6 in linux 4.19.y/4.19.81 941f2f72dbbe0cf8c2d6e0b180a8021a0ec477fa in mainline linux
2019-10-30drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50Jonathan Gray
From Kai-Heng Feng 33af2a8ee304ee2deb618eebb534b52ce166467f in linux 4.19.y/4.19.81 11bcf5f78905b90baae8fb01e16650664ed0cb00 in mainline linux
2019-10-30Revert "drm/radeon: Fix EEH during kexec"Jonathan Gray
From Alex Deucher 0933b0db7fb239be01270b25bf73884870d8c1e6 in linux 4.19.y/4.19.81 8d13c187c42e110625d60094668a8f778c092879 in mainline linux
2019-10-30Fix declaration of S1 by swapping misplaced ',' and ';'.Theo Buehler
This is inside !(defined(__amd64__) || defined(__i386__)), while the file is only used on those two architectures. "Free commit! No strings attached! No hidden tricks!" from miod
2019-10-29syncJoshua Stein
2019-10-29add an Intel 9260 wifi cardJoshua Stein
2019-10-29In rsa.h rev. 1.41, jsing@ provided RSA_pkey_ctx_ctrl(3).Ingo Schwarze
Write the documentation from scratch.
2019-10-29merge documentation for several macros EVP_PKEY_CTX_*_rsa_oaep_*(3)Ingo Schwarze
and EVP_PKEY_CTX_*_ecdh_*(3); from Antoine Salon <asalon at vmware dot com> via OpenSSL commit 87103969 Oct 1 14:11:57 2018 -0700 from the OpenSSL 1.1.1 branch, which is still under a free license
2019-10-29don't print a blank line if no stage1 or stage2 aspectsTheo de Raadt
2019-10-29merge documentation for EVP_PKEY_CTX_set1_id(3), EVP_PKEY_CTX_get1_id(3),Ingo Schwarze
and EVP_PKEY_CTX_get1_id_len(3), but make it sound more like English text; from Paul Yang via OpenSSL commit f922dac8 Sep 6 10:36:11 2018 +0800 from the OpenSSL 1.1.1 branch, which is still under a free license
2019-10-29merge documentation of EVP_PKEY_CTX_set_ec_param_enc(3)Ingo Schwarze
from Stephen Henson via OpenSSL commit 146ca72c Feb 19 14:35:43 2015 +0000
2019-10-29Consistently release the vnode lock while calling d_close of cloned andVisa Hankala
non-cloned devices. Combine spec_close() and spec_close_clone() to avoid code duplication. OK mpi@
2019-10-29correct HISTORY of some RSA control macrosIngo Schwarze
2019-10-29list supported algorithm ids and clarify how the engine argument is usedIngo Schwarze
2019-10-29Regen for Marvell 88SE9128 AHCI.Kurt Miller
2019-10-29Add Marvell 88SE9128 AHCI. okay kettenis@Kurt Miller
2019-10-29Add two controls that were missed in the previous commit.Joel Sing
2019-10-29Update RSA OAEP code.Joel Sing
This syncs the RSA OAEP code with OpenSSL 1.1.1d, correctly handling OAEP padding and providing various OAEP related controls. ok inoguchi@ tb@
2019-10-29Provide EVP_PKEY_CTX_md().Joel Sing
This handles controls with a message digest by name, looks up the message digest and then proxies the control through with the EVP_MD *. This is internal only for now and will be used in upcoming RSA related changes. Based on OpenSSL 1.1.1d. ok inoguchi@ tb@
2019-10-29Signal handler cleanup: remove leftover support for unreliable signalsDarren Tucker
and now-unneeded save and restore of errno. ok deraadt@ markus@
2019-10-29Replace the fatal non existing prefix call with a pt_add() call thatClaudio Jeker
actually inserts the missing prefix in the prefix tree. While for regular updates to the Adj-RIB-Out this case is indeed not reachable it is reachable when using 'export default-route'. Problem reported and fix tested by Esa Kuusisto. OK benno@
2019-10-29Fix two cases where the nexthop_runners tail queue can get corrupted.Claudio Jeker
First by requeuing an element that is already on the list and second by freeing a nexthop that is still on the list resulting in a use after free. This should fix bgpd crashes seen by various people. Problem report including backtrace from benno@ OK benno@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-17 23:19:37 +0000