summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2019-11-12fix a logic bug in ruleset matching that makes `from socket` rules possiblyGilles Chehade
2019-11-12remove extra layer for ed25519 signature; ok djm@Markus Friedl
2019-11-12check sig_r and sig_s for ssh-sk keys; ok djmMarkus Friedl
2019-11-12enable ed25519 support; ok djmMarkus Friedl
2019-11-12update sk-api to version 2 for ed25519 support; ok djmMarkus Friedl
2019-11-12implement sshsk_ed25519_assemble(); ok djmMarkus Friedl
2019-11-12implement sshsk_ed25519_inner_sig(); ok djmMarkus Friedl
2019-11-12rename sshsk_ecdsa_sign() to sshsk_sign(); ok djmMarkus Friedl
2019-11-12factor out sshsk_ecdsa_inner_sig(); ok djm@Markus Friedl
2019-11-12factor out sshsk_ecdsa_assemble(); ok djm@Markus Friedl
2019-11-12implement ssh-ed25519-sk verification; ok djm@Markus Friedl
2019-11-12syncTheo de Raadt
2019-11-12fix a formatting warning;Jason McIntyre
2019-11-12Add configuration options to explicitly specify ESN support for child SAs.tobhe
2019-11-12document new helperMarc Espie
2019-11-12document how DEBUG_PACKAGES worksMarc Espie
2019-11-12document DEBUGINFO_ARCHS.Marc Espie
2019-11-12document the new annotations corresponding to DEBUG_PACKAGESMarc Espie
2019-11-12we are not using was_ratelimitedFlorian Obser
2019-11-12Pass in a callback function to resolve() instead of a flag toFlorian Obser
2019-11-12 Error logging is done inside of resolve since it depends on theFlorian Obser
2019-11-12 It is possible to cancel libunbound queries by tracking an id.Florian Obser
2019-11-12use the default URL when running fw_update, we can't guarantee that pkg_add willStuart Henderson
2019-11-12Only check if the current thread has the lock in rw_assert_unlocked(9).Martin Pieuchot
2019-11-12Convert tsleep(9) that wait for a multiple of `hz' to tsleep_nsec(9).Martin Pieuchot
2019-11-12Default to 0 arguments if no symbol has been found in the CTF section.Martin Pieuchot
2019-11-12Fix support for 3168 iwm(4) devices, and load new firmware for them.Stefan Sperling
2019-11-12tweak previous; ok deraadtJason McIntyre
2019-11-12syncTheo de Raadt
2019-11-12enable rpki-client buildTheo de Raadt
2019-11-12Now that libc.so has only five PLT entries on almost all our archs,Philip Guenther
2019-11-12Check sleep timeout state only if the sleep has a timeout. Otherwise,Visa Hankala
2019-11-12SIOCDVNETID mutates state, so should only be run by root.David Gwynne
2019-11-11Prevent underflows in tp->snd_wnd if the remote side ACKs more thanAlexander Bluhm
2019-11-11skip demanding -fstack-protector-all on hppa. we never wrote a stack protectorTheo de Raadt
2019-11-11Typo.Martin Pieuchot
2019-11-11print the URL when sysupgrade fetches new sets, allowing time for a quick ^CStuart Henderson
2019-11-11Prevent a NULL deref in ieee80211_node2req() which could be triggeredStefan Sperling
2019-11-11Kernel is missing propper input validation when configuring IPv6Alexander Bluhm
2019-11-11sensors can als be marked trusted; ok deraadt@Otto Moerbeek
2019-11-11fix 'mx:' mechanism in smtpd spf walkGilles Chehade
2019-11-11tweak previous: delete stray .PpIngo Schwarze
2019-11-11Extended the scope of the pipelock() in pipe_write() making the lockinganton
2019-11-11change the nmea sensor to "trusted"Theo de Raadt
2019-11-11trusted sub-option works on sensors also now; ok ottoTheo de Raadt
2019-11-11Cleanup message retransmission handling with new helper functions.tobhe
2019-11-11drm/amdgpu: fix potential VM faultsJonathan Gray
2019-11-11Also implement "trusted" for sensors; do not do constraint validationOtto Moerbeek
2019-11-11Implement DNS proposals to learn nameservers from networkFlorian Obser
2019-11-11 Send DNS proposals on route socket when new nameservers are learnedFlorian Obser