summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-03-03Use time_t for x11_refuse_time timeout. We need SSH_TIME_T_MAX forDarren Tucker
this, so move from misc.c to misc.h so it's available. Fixes a Coverity warning for 64bit time_t safety, ok djm@
2023-03-03Check return value from fctnl and warn on failure. Spotted by Coverity,Darren Tucker
ok djm@
2023-03-02Simplify the ct Makefile slightlyTheo Buehler
2023-03-02Clean up the x509 regress make file a littleTheo Buehler
2023-03-02Remove a few more unnecessary line continuationsTheo Buehler
2023-03-02Nitpick error checks of BN_get_mem_data()Theo Buehler
BN_get_mem_data() returns a non-positive long on error, so assigning it to a size_t and displaying that in error messages is incorrect.
2023-03-02Some more Makefile cosmeticsTheo Buehler
The verbose evp test actually depends on the evptest binary. Use consistent spacing and indentation.
2023-03-02The evp_ecx_test no longer needs static linkingTheo Buehler
2023-03-02Hide the hexdumps behind a verbose flags. Should have been part ofTheo Buehler
the previous commit.
2023-03-02Simplify evp test Makefile.Theo Buehler
Make evptest silent by default: these pages of hexdumps are useless noise. Add a verbose target for debugging.
2023-03-02evp_pkey_check: make this test silent on successTheo Buehler
2023-03-02Remove a few unnecessary line continuationsTheo Buehler
2023-03-02restructure the page into one single list for all routing commands;Jason McIntyre
while there, whack anything either out of date or not useful joint work with claudio
2023-03-02improve the Nd lines such that the format is consistent for theJason McIntyre
various *d, *conf, *ctl files (where relevant) and simple; also makes "man -k routing" more useful; help from claudio and florian ok claudio florian millert
2023-03-02syncTheo de Raadt
2023-03-02No need to protect exports from SIGHUP, the handler just sets a flag.Todd C. Miller
The signal handlers in mountd.c were made safe in rev 1.34 from 2001. OK bluhm@ kn@
2023-03-02When parsing %s, the result should be in the local time zone.Todd C. Miller
Based on a patch from enh@google. OK tb@
2023-03-02rad_recv: verify length field in received auth_hdr_t before using it.Todd C. Miller
Reported by Peter J. Philipp. OK deraadt@
2023-03-02add arch to DtJonathan Gray
2023-03-02mention eephy(4)Jonathan Gray
ok jmatthew@
2023-03-02Remove SUDO in proxy command wrapper. Anything that needs sudo isDarren Tucker
already run by it, and it breaks if root isn't in sudoers.
2023-03-02mvodog(4) and mvortc(4)Jonathan Matthew
2023-03-02Enable mvodog(4) and mvortc(4)Jonathan Matthew
2023-03-02Add mvortc(4), a driver for the RTC on the ARMADA 38x series.Jonathan Matthew
ok kettenis@ patrick@
2023-03-02Add mvodog(4), a driver for the watchdog on the ARMADA 38x series.Jonathan Matthew
ok kettenis@ patrick@
2023-03-02Add eephy(4), found on the Turris Omnia's WAN portJonathan Matthew
2023-03-02Fix breakage on dhgex test.Darren Tucker
This was due to the sshd logs being written to the wrong log file. While there, make save_debug_logs less verbose, write the name of the tarball to regress.log and use $SUDO to remove the old symlinks (which shouldn't be needed, but won't hurt). Initial problem spotted by anton@.
2023-03-02Quote grep and log message better.Darren Tucker
2023-03-02Ensure we always call fclose when writing checkpoints. In the case ofDarren Tucker
an fprintf failure we would not call fclose which would leak the FILE pointer. While we're there, try to clean up the temp file on failure. Spotted by Coverity, ok djm@
2023-03-01Fix potentially uninitialized use of variable fsb on error.Todd C. Miller
OK mbuhl@
2023-03-01/etc/examples/iked.conf tweaks:Stuart Henderson
- show a demo of a strong random string for psk, for some types of configuration psk makes sense. the previous example hinted at.not using it. - change the EAP MSCHAPv2 example so that more than one client can connect (previous used address config but with only a single address not a pool), and use the newer keywords to show how to route all traffic from dynamic-ip clients over the tunnel ok tobhe@
2023-03-01Remove old log symlinks before creating new ones. In -portable someDarren Tucker
platforms don't like overwriting existing symlinks.
2023-03-01Bogus full stop.Antoine Jacoutot
2023-03-01Comment out glob for JSON webcrypto tests for nowTheo Buehler
Allows test to pass with the old version of the wycheproof-testvectors package.
2023-03-01Link evp/cipher_method_lib.c to the buildTheo Buehler
ok jsing
2023-03-01Convert EVP_CIPHER_meth_dup() to using calloc()Theo Buehler
There is no reason for this to call EVP_CIPHER_meth_new(), as the flags will be copied a line later anyway. Simplify this. Requested by jsing
2023-03-01Make cipher_method_lib.c compile with LibreSSLTheo Buehler
OPENSSL_zalloc() -> calloc(), OPENSSL_free() -> free() and a few assorted cosmetic tweaks to match our style better. ok jsing
2023-03-01Add EVP_CIPHER_meth_* prototypes to evp.hTheo Buehler
As usual, this will be guarded by LIBRESSL_INTERNAL || LIBRESSL_NEXT_API until the next bump. ok jsing
2023-03-01Make the cleanup() method return an int againTheo Buehler
This partially reverts jsing's OpenBSD commit b8185953, but without adding back the error check that potentialy results in dumb leaks. No cleanup() method in the wild returns anything but 1. Since that's the signature in the EVP_CIPHER_meth_* API, we have no choice... ok jsing
2023-03-01Fix line wrapping of function pointer argumentsTheo Buehler
ok jsing
2023-03-01First KNF approximation as per knfmt(1)Theo Buehler
ok jsing
2023-03-01Drop the EVP_CIPHER_METH_get_* functionsTheo Buehler
Nothing interesting uses them. There's a Debian SSH-1 module and corresponding ncrack bits. That's not reason enough to have this garbage. ok jsing
2023-03-01Add RCS tagTheo Buehler
2023-03-01Revert OpenSSL commit aa6bb135Theo Buehler
This reinstates the original license on this file. Don't bother bumping the copyright year. Nothing interesting has happened in here since the initial commit. (There was one interesting commit though: "Don't care openssl_zmalloc()", which is interesting due to the lack of care, not because it's copyright worthy) ok jsing
2023-03-01libcrypto: import a copy of OpenSSL 1.1's cmeth_lib.cTheo Buehler
This is the file as of OpenSSL 1.1.1 commit 82dfb986. Call the file cipher_method_lib.c since the short names in this directory are hard enough to read. This is a first step towards providing the poorly named EVP_CIPHER_meth_* API which is needed by some projects because of EVP_CIPHER opacity. ok jsing
2023-03-01Rework logging for the regression tests. Previously we would log toDarren Tucker
ssh.log and sshd.log, but that is insufficient for tests that have more than one concurent ssh/sshd. Instead, we'll log to separate datestamped files in a $OBJ/log/ and leave a symlink at the previous location pointing at the most recent instance with an entry in regress.log showing which files were created at each point. This should be sufficient to reconstruct what happened even for tests that use multiple instances of each program. If the test fails, tar up all of the logs for later analysis. This will let us also capture the output from some of the other tools which was previously sent to /dev/null although most of those will be in future commits.
2023-03-01Change fatal() to fatalx() since the errno has no meaning here.Claudio Jeker
OK tb@
2023-03-01KNF, no functional change.Claudio Jeker
2023-02-28fatal out if allocating banner string fails to avoid potential nullDarren Tucker
deref later in sscanf. Spotted by Coverity, ok deraadt@
2023-02-28+syncStuart Henderson
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-11 19:24:46 +0000