summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-11-22Use a table for unbound options; ok florian@Otto Moerbeek
2019-11-22Sync tests with current NetBSD. Enable t_mkfifo test.Alexander Bluhm
from Moritz Buhl
2019-11-22Be consistent and always use CLR() to clear flags.Kenneth R Westerback
2019-11-22DNS Proposals are treated as replacements in unwind now.Florian Obser
To withdraw a proposal sent an empty list of nameservers. This one is a bit of a hack by me to keep everything in sync for now. A better version from krw is coming soon.
2019-11-22Treat DNS proposals as replacement of previous proposals from the sameFlorian Obser
daemon and interface. An empty list is automatically a withdrawl. prodding deraadt@
2019-11-22 Merge DNS proposals coming from the same interface.Florian Obser
That way we no longer need to handle withdraws in unwind. A new proposal from a daemon on an interface is always a replacement. If nameservers expire or an interface goes away we sent an empty list of nameservers. pestering^Wprodding deraadt
2019-11-22The DNS proposal list can (soon) be empty to signal a withdraw, relaxFlorian Obser
the size constraint to allow this to pass through the kernel. Looks good to deraadt@
2019-11-22Wait for FD to be readable or writeable during a nonblocking connect,Darren Tucker
not just readable. Prevents a timeout when the server doesn't immediately send a banner (eg multiplexers like sslh) but is also slightly quicker for other connections since, unlike ssh1, ssh2 doesn't specify that the client should parse the server banner before sending its own. Patch from mnissler@chromium.org, ok djm@
2019-11-22sndiod(8) reopens audio interfaces on SIGHUP, which makes a lot of senseClaudio Jeker
when -F is used. Because of this allow rc.d script to reload sndiod. OK kn ratchov aja
2019-11-22Add RTP_PROPOSAL_UMB to the priorities listClaudio Jeker
2019-11-22Teach route(8) about RTP_PROPOSAL_UMBClaudio Jeker
2019-11-22Use rtm_proposal() to send out DNS updates. Both when DNS are added andClaudio Jeker
when the interface is deconfigured (when going down).
2019-11-22Add rtm_proposal, a function to send out RTM_PROPOSAL messages from theClaudio Jeker
kernel. Will be used to have umb(4) inform unwind(8) about DNS changes. OK bluhm@ tested by florian@ and deraadt@
2019-11-21Be consistent and always use [!]ISSET() to test flags in xs->flags.Kenneth R Westerback
2019-11-21Be consistent and always use SET() to set flags in xs->flags.Kenneth R Westerback
2019-11-21A touch of style(9)Tim van der Molen
OK tb@ tedu@
2019-11-21Use explicit_bzero() to clear key materialTim van der Molen
OK tb@ tedu@
2019-11-21 We do not send lifetimes or source in DNS proposals.Florian Obser
Do not copy them to the main process.
2019-11-21output RTM_PROPOSALs more similar to other route messagesFlorian Obser
no objection krw@ who has further suggestions for improvement
2019-11-21Fix comment typo: specificationakoshibe
2019-11-21zero tmpout too. reminded by related diff from timTed Unangst
2019-11-21overwrite the key in failure modes in case the caller doesn't check.Ted Unangst
ok deraadt
2019-11-21rename struct tun_softc members so they're prefixed with "sc".David Gwynne
this makes tun more consistent with more of our drivers.
2019-11-21Remove duplicate #define OFP_ALIGNMENTakoshibe
2019-11-21Remove arguments from ofp13_flowmod() which are unused and unnecessary.akoshibe
ok guenther@
2019-11-21Remove workaround for broken 'openssl rsa -text' output thatTheo Buehler
was fixed in libcrypto/rsa/rsa_ameth.c r1.24. ok dtucker inoguchi
2019-11-21 Track on which interface nameservers have been learned.Florian Obser
prodding deraadt@
2019-11-21Configure the default route with RTP_NONE so that the kernel assignsFlorian Obser
different priorities for wired vs. wireless interfaces for us. Gleaned from dhclient.
2019-11-20ksmn(4): Improve the precision of the fractional part of temperatures.Bryan Steele
Before we were losing some precision in the raw value sensor conversion. raw: 478 before: 59.70 after: 59.75 real: 59.750 raw: 479 before: 59.80 after: 59.88 real: 59.875 raw: 480 before: 60.00 after: 60.00 real: 60.000 Tested on Ryzen 7 2700X, Ryzen 5 2500U, and Zen2 by nte. Diff and feedback from nte <lists at nte.email>
2019-11-20Honour DEBUGkn
OK deraadt
2019-11-20Form DNS proposals from router advertisements with a router lifetimeFlorian Obser
of zero. It just means that the router is not a default router. This is also true for prefixes, but not yet implemented. (The diff looks complicated but it's only a } moved up + reindent.)
2019-11-20Some Intel SD/MMC controllers do not like the voltage beingPatrick Wildt
set to 0V, so add a quirk for Apollo Lake, Gemini Lake and 100 Series. Tested by and ok bmercer@ and mlarkin@ for 100 Series Tested by and diff from James Hastings for Apollo and Gemini Lake
2019-11-20regenPatrick Wildt
2019-11-20Add PCI IDs for Gemini Lake SD/MMC controllersPatrick Wildt
2019-11-20Add accessors to change the buffer in a handshake message.Bob Beck
Needed for doing TLS 1.3 Post Handshake Handshake messages. ok jsing@
2019-11-20Correctly match another 9560-based device.Patrick Wildt
From Bryan Vyhmeister
2019-11-20Check for a too short answer packet in all callback functions becauseFlorian Obser
otherwise we try to parse an invalid packet. This can be triggered by captive_portal_resolve_done() when dhcp provided nameservers do not answer and asr hits a timeout. answer_packet is NULL and answer_len -1 in that case. Found the hard way by claudio
2019-11-20Ensure that the kernel stack is properly aligned on mips64. This fixesVisa Hankala
a panic related to vararg function sppp_auth_send(). The vararg code generated by clang assumes 16-byte stack alignment. pppoe(4)-induced panic seen by many on octeon Fix from miod@
2019-11-20Add test for cms -keyopt in appstest.shKinichiro Inoguchi
2019-11-20Do not check the client readonly flag when there is no client, GitHub issue ↵Nicholas Marriott
1980.
2019-11-20Fix rsa key output formatKinichiro Inoguchi
This fixes openssl(1) rsa -text output format ok tb@
2019-11-19Sync documentation fixes from upstream:Damien Miller
commit 99c4cb00b50b846e4ba2492f67d44171de8c7066 Author: pedro martelletto <pedro@yubico.com> Date: Mon Nov 18 16:55:37 2019 +0100 documentation fixes ensure man pages are named after existing functions; pointed out by Jason McIntyre <jmc@openbsd.org>; thanks!
2019-11-19adjust on-wire signature encoding for ecdsa-sk keys to better matchDamien Miller
ec25519-sk keys. Discussed with markus@ and Sebastian Kinne NB. if you are depending on security keys (already?) then make sure you update both your clients and servers.
2019-11-19a little more information from the monitor when signatureDamien Miller
verification fails.
2019-11-19fix typos in smtpd.conf.5Gilles Chehade
from Ryan Kavanagh
2019-11-19Link system call tests to build.Alexander Bluhm
2019-11-19Import NetBSD system call regression tests. They were written withAlexander Bluhm
ATF (Automated Testing Framework), so we use a small wrapper to map it to our bsd.regress.mk framework. Only half of the 80 NetBSD tests have been taken, the others need more work to adapt. Of them 34 syscall tests pass. Moritz Buhl ported the tests to OpenBSD.
2019-11-19When waiting on pipe I/O, simplify the unlock/relock logic usinganton
rwsleep(). All made possible by the recent switch to using a rwlock as the exclusive pipe lock. ok visa@
2019-11-19revert previous: naddy pointed out what's meant to happen. rethink needed...Jason McIntyre
2019-11-19-c and -s do not make sense with -k; reshuffle -k into the main synopsis/usage;Jason McIntyre
ok djm