summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-07-12reboot(9): Shutdown system by signaling init(8) from kernel where appropriateMasao Uebayashi
Some ports watch temperature in MD and try to shutdown system, when overheated, by calling directly (re)boot(9). Change this to signal init(8) from kernel, as acpi(4) and acpitz(4) do, which has been more tested. This also helps to clarify design that ``clean shutdown must be always started by init(8)''. Note that SIGUSR2 causes init(8) to call reboot(2) with RB_POWERDOWN, as acpi(4) etc. already does. It is reasonable, pointed out by kettenis@, considering system is overheated and immediate reboot may be dangerous. OK deraadt@ miod@
2014-07-12Close connections when msgbuf_write() returns 0.Kenneth R Westerback
ok claudio@
2014-07-12Protect the freelists of transfer descriptors with the appropriate splMartin Pieuchot
so that we do not end up allocating two times new descriptors. This happens if a thread finds an empty list, start allocating, got interrupted and the interrupt also finds an empty list. Fix an issue reported by Nils Frohberg. ok yuo@, pirofti@
2014-07-12Remove private_{Camellia,RC4}_set_key FIPS indirection tentacles, as has beenMiod Vallat
done for other symmetric algorithms recently.
2014-07-12Mark the interface down and cancel the watchdog timer in imxenet_stop().Brad Smith
ok matthieu@ rapha@
2014-07-12Fix a potential bug. privsep.c didn't check the interface nameYASUOKA Masahiko
correctly if it's pppx.
2014-07-12oh well, remove -Q entirely... I'm probably the only one who ever used that.Marc Espie
2014-07-12ewps, that giant table has -inet6 twice, for SMALL and !SMALLHenning Brauer
no breakage involved, but wasn't correct in the SMALL case either
2014-07-12WhitespacePaul Irofti
2014-07-12security check in quirksMarc Espie
2014-07-12undocument -QMarc Espie
2014-07-12finish killing old experiment, less confusing codeMarc Espie
2014-07-12rename variable to better indicate it's meaningJasper Lievisse Adriaanse
2014-07-12Provide ssl_version_string() function, which uses one of those modern CJoel Sing
constructs (a switch statement) and returns the appropriate string defined by SSL_TXT_* for the given version, including support for DTLSv1 and DTLSv1-bad. Use this function in SSL_get_version() and SSL_SESSION_print(). ok beck@
2014-07-12@endfake died a while agoMarc Espie
2014-07-12so, pkg_check can now troll thru the whole file system. Either useMarc Espie
a full pkglocatedb, or the system locate dbs...
2014-07-12Fix error in previous.YASUOKA Masahiko
2014-07-12In openssl_startup(), call SSL_library_init() and SSL_load_error_strings().Joel Sing
This allows us to remove the ERR_load_crypto_strings() call, along with the various SSL_load_error_strings() and OpenSSL_add_ssl_algorithms() calls scattered around the place. ok beck@
2014-07-12Make the BLOCK_CIPHER_{generic,custom} macros expand to more readable structMiod Vallat
definitions using C99 field initializers. No functional change.
2014-07-12msgbuf_write() <= 0 for a few more daemons.Kenneth R Westerback
ok claudio@
2014-07-12syncTheo de Raadt
2014-07-12guenther (who also should have been credited in previous free size commits)Ted Unangst
noticed that i missed committing one file.
2014-07-12Remove the redundant csum_flag variable and just set the checksum flagLawrence Teo
in the pkthdr directly. ok henning@
2014-07-12Protocol checksums have been recalculated on reinjection for a whileLawrence Teo
now, so there is no need to calculate them before sending them to userspace. ok henning@
2014-07-12revert bogus free changes in not kernel files. got a little trigger happy.Ted Unangst
2014-07-12Wrap "thread_private.h" with #ifdef __OpenBSD__ so that other systemsTheo de Raadt
can copy this file (plus chacha_private.h) directly and reuse it trivially. Well, as long as they have a getentropy() as well.. ok beck
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
after discussions with beck deraadt kettenis.
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
after discussions with beck deraadt kettenis.
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
after discussions with beck deraadt kettenis.
2014-07-12Remove extra parenthesis.Joel Sing
2014-07-12need_cert is now always true, so remove the variable and associatedJoel Sing
conditionals. ok miod@
2014-07-12More KNF.Joel Sing
2014-07-12No need for run-time configuration, add minimal compile-timeIngo Schwarze
configuration facilities, just two paths and two HTML strings. Show the title on all pages, not just the index page.
2014-07-12Remove #ifndefs for OPENSSL_NO_DH, OPENSSL_NO_ECDH andJoel Sing
OPENSSL_NO_X509_VERIFY. We're not going to build with these and the same removal has already been done for libssl.
2014-07-12No INET6 in ramdisk, fix the tree.Martin Pieuchot
2014-07-12openssl(1) is only built as a single monolithic binary, so just callJoel Sing
load_config() once when we start. ok miod@
2014-07-12Fix root hub descriptors by matching ehci(4)'s descriptors.Paul Irofti
Reminded by mpi@, thanks! On a side note usb sticks don't get fried anymore, they "just" freeze the system.
2014-07-12Remove the temporary dospartoff work around.Joel Sing
From Markus Mueller. ok krw@ miod@ tedu@
2014-07-12To enable Intel XHCI host controller, re-route all of usb port to xhciYojiro Uo
instead of connected to ehci. ok mpi@
2014-07-12provide a missing rfc number;Jason McIntyre
From: Josh Grosse i've actually just whacked the titles to keep it brief and avoid the mess of the punctuation added by these macros.
2014-07-12jsing and I are investigating removal of all? most? 'getenv from library'Theo de Raadt
instances. This one for OPENSSL_ALLOW_PROXY_CERTS gets turned off first, especially since it had this special comment: /* A hack to keep people who don't want to modify their software happy */ ok beck jsing
2014-07-12more accept_rtadv removal;Jason McIntyre
2014-07-12Simplify: Delete 74 lines of code including one enum type, oneIngo Schwarze
global lookup table, two functions, two function arguments, one struct member, one local variable, and the "search/" and "show/" part of the URIs, all without losing functionality.
2014-07-12syncTheo de Raadt
2014-07-12some basic formatting tweaks;Jason McIntyre
2014-07-12tweak previous;Jason McIntyre
2014-07-12andone last (i hope) accept_rtadv sysctl remnant, also found by jmcHenning Brauer
2014-07-12no more net.inet6.ip6.accept_rtadvHenning Brauer
no idea how jmc finds these, but I'm very glad he does
2014-07-12jmc points out this babbled about the accept_rtadvd sysctl which is no moreHenning Brauer
2010-10-01import OpenSSL-1.0.0aDamien Miller