Age | Commit message (Collapse) | Author |
|
|
|
introduce 'ca' keyword to allow specifying a custom CA.
making CA part of pki was a bad idea and several people hit use-cases that
plain couldn't work.
instead of:
pki foobar.org ca "/etc/mail/CA.pem"
use now:
ca foobar.org certificate "/etc/mail/CA.pem"
ok sunil@, jung@
|
|
commit doing the same.
|
|
|
|
|
|
dialogue, if `masquerade' is used as a parameter then rewrite the email
address of the DATA From header to the email address in the map.
|
|
ok sunil@, jung@
|
|
different key bindings for different sessions and a few other things.
|
|
being shared between smtpd and another daemon
|
|
|
|
would rather bind the prefix in the root table).
|
|
|
|
ok jung@, sunil@, millert@
|
|
and I've been running with it since June with no side-effect
ok sunil@, jung@, millert@
|
|
seem to trigger an IPI. According to IP27 headers in Linux, those have a
special meaning in hardware.
|
|
|
|
have inadequate or invalid leases. In particular leases for addresses
that are already configured on a different interface. After the
DECLINE, return to INIT state and start looking for a valid lease. This
conforms much closer to the relevant RFC's.
Avoids 'hanging' dhclient(8) during boot when the attempt to configure
the address fails without dhclient(8) realizing it.
Issue found and various fixes tested by mpi@. Feedback from beck@ and
reyk@.
ok mpi@
|
|
|
|
|
|
|
|
|
|
username
|
|
global certificate
|
|
|
|
|
|
subframe length and a clean exit at the bottom of the subframe loop.
ok mpi@
|
|
code, no functional change but this makes code easier to read, and will
ease implementing DANE later on.
|
|
code that handles the same imsg's too
ok sunil@, ok jung@
|
|
speedup interrupt handling on virtual machines. Unfortunately it is
broken on Xen 4.2 or older, so use the early pvbus detection to drop
the advertised x2APIC CPU feature. Xen has fixed this in late 2013,
but the problem still shows up in "the Cloud" (it doesn't seem to
affect others as they either use legacy APIC or Xen IPIs).
OK mlarkin@ mikeb@
Cvs: ----------------------------------------------------------------------
|
|
|
|
|
|
|
|
tested by Bryan Vyhmeister, krw, tb, and myself
ok krw tb
|
|
(bios, CPU, interrupt handlers, pvbus). This splits the pvbus attach
function into two parts: pvbus_identify() to scan the CPUID registers
for supported hypervisors and pvbus_attach() to attach the bus, print
information, and configure the children.
This will be needed for Xen and KVM, as discussed with mikeb@ and sf@
OK mlarkin@
|
|
tested by Bryan Vyhmeister, krw, tb, and myself
ok jcs krw tb
|
|
tested by Bryan Vyhmeister, krw, tb, and myself
ok jcs krw tb
|
|
|
|
|
|
or probe responses. Makes 11n negotiation with Linux iwlwifi AP succeed.
ok mpi@
|
|
|
|
|
|
Some APs will not negotiate HT if the vendor-specific WME info
element is missing in probe and association requests, so add one.
Fix the wrong flag (NODE_HT) being checked to determine whether 11n
related elements should be included in management frames. If 11n mode
is enabled (F_HTON flag) we can always include 11n related elements
in management frames.
ok mpi@
|
|
senders table allows to restrict the addresses that an authenticated
user can use in the SMTP dialogue.
Ok gilles@
|
|
reminded by jmc@
|
|
The initial implementation was added by damien@ years ago.
Summary of the changes made in this commit:
- In ieee80211_input(), process A-MPDUs before duplicate detection.
- Don't forget to set ba->ba_ni in ieee80211_recv_addba_req()
so we don't crash in ieee80211_rx_ba_timeout().
- In ieee80211_recv_addba_req(), tweak the logic to deny BlockAck
requests if the driver has no callback for doing so.
- Implement ieee80211_ba_del() which cleans up BlockAck state.
- Increase the minimum and maximum lifetime for BlockAck agrements.
ok mpi@
|
|
|
|
cleanup and later on for DANE support
|
|
|
|
|
|
|