summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-03-05in ifa_ifwithaddr, do not use the shiny new RB tree, there is aHenning Brauer
balancing issue from wrong order of operations (change after insert is illegal with RB). and apparently there are cases left. to be revisited after release
2010-03-05head towards release, correctly. tsk tsk tsk.Miod Vallat
2010-03-05mention loading of certificate files from [private]-cert.pub whenDamien Miller
they are present; feedback and ok jmc@
2010-03-05head towards releaseTheo de Raadt
2010-03-05document certificate authentication; help/ok djmJason McIntyre
2010-03-05use boot -k on Lemete (non Gdium) examples; ok miod@Otto Moerbeek
2010-03-05tweak previous;Jason McIntyre
2010-03-05make the warning for a revoked key louder and more noticableDamien Miller
2010-03-04"force-command" is not spelled "forced-command"; spotted byDamien Miller
imorgan AT nas.nasa.gov
2010-03-04move section on CA and revoked keys from ssh.1 to sshd.8's known hostsDamien Miller
format section and rework it a bit; requested by jmc@
2010-03-04missing word; spotted by jmc@Damien Miller
2010-03-04fix Bk/Ek;Jason McIntyre
2010-03-04has been no -r flag for a few years; J.C. RobertsTheo de Raadt
2010-03-04remove -6 from usage();Jason McIntyre
2010-03-04Add a -L flag to print the contents of a certificate; ok markus@Damien Miller
2010-03-04Add defines for header and data offset, offsetof() uses from mk@.Jonathan Armani
ok mk@
2010-03-046Bone is dead. Use the literal '3ffe::/16' rather than '6bone testKenneth R Westerback
address range' when explaining the -L example.
2010-03-046Bone is dead and doesn't respond to whois requests. Remove manKenneth R Westerback
page mentions and '-6' related code. Pointed out by Sebastian Rother. ok deraadt@ henning@
2010-03-04syncTheo de Raadt
2010-03-04Introduce odyssey(4), a driver for the SGI VPro (aka Odyssey) graphicsJoel Sing
card, which can be found in Octane, Octane2, Fuel, Tezro and Onyx systems. ok miod@
2010-03-04Add wsdisplay type for SGI VPro (aka Odyssey)Joel Sing
ok miod@
2010-03-04don't crash on invalid phase 2 IDs; from hshoexer; ok sthen@Markus Friedl
2010-03-04tweak previous;Jason McIntyre
2010-03-04Remove old $Sudo$ tags; the main sudo tree no longer lives in cvs.Todd C. Miller
2010-03-04cherrypick patch from OpenSSL 0.9.8m:Damien Miller
*) Always check bn_wexpend() return values for failure. (CVE-2009-3245) [Martin Olsson, Neel Mehta]
2010-03-04- sync header to 4.7Jasper Lievisse Adriaanse
2010-03-04additional regression tests for revoked keys and TrustedUserCAKeysDamien Miller
2010-03-04Add a TrustedUserCAKeys option to sshd_config to specify CA keys thatDamien Miller
are trusted to authenticate users (in addition than doing it per-user in authorized_keys). Add a RevokedKeys option to sshd_config and a @revoked marker to known_hosts to allow keys to me revoked and banned for user or host authentication. feedback and ok markus@
2010-03-04`speed' is an argument, not a flag.Igor Sobrado
ok jmc@
2010-03-04utilize the fact that the softc is zero'd to simplify the initializationTheo de Raadt
sequences ok yuo
2010-03-04Gracefully handle trailing '/'s when asking for [sub]Timezones.Kenneth R Westerback
i.e. ignore them all. Problem pointed out by Sebastian Rother. More script discipline and voodoo from halex@. ok halex@ deraadt@
2010-03-04use buffer_get_string_ptr_ret() where we are checking the returnDamien Miller
value explicitly instead of the fatal()-causing buffer_get_string_ptr()
2010-03-03Change third parameter for urndis_decap() to be of type u_int32_t.Michael Knudsen
2010-03-03In urndis_ctrl_recv(), don't copy the received data to a newly allocatedMichael Knudsen
buffer of the exact response when we can just pass on the buffer. It's going to be released right away anyway.
2010-03-03s/similar same/similar/; from imorgan AT nas.nasa.govDamien Miller
2010-03-03the authorized_keys option for CA keys is "cert-authority", notDamien Miller
"from=cert-authority". spotted by imorgan AT nas.nasa.gov
2010-03-03Add athn(4).Mark Kettenis
2010-03-03Compare against correct flag when printing "network inet6 static"Claudio Jeker
2010-03-03Add support for the ipp_ind_ext_int[0] interrupt.Mark Kettenis
2010-03-03Enable urndis(4) everywhere that has USB enabled to get it tested.Michael Knudsen
Much prodding from deraadt.
2010-03-03Bring back cua code for sparc zs; lost in zs.c 1.36 on sparc and later forgottenMiod Vallat
about, and never implemented in sparc64 but changes are the same. ok deraadt@
2010-03-03supply apm(4) with infomation and events; ok miod@Otto Moerbeek
2010-03-03Add some more devices that ckuethe has tested with.Michael Knudsen
2010-03-03Correctly initialize the command frame in uyurex_write_value_request();Miod Vallat
ok yuo@
2010-03-03When I first started on urndis, I didn't realise that all values wereMichael Knudsen
u_int32_ts, so I made some typedefs for certain types. It's just pointless, so get rid of them. Jonathan and Fabien agree.
2010-03-03Remove XXX that's no longer valid.Michael Knudsen
From Jonathan Armani.
2010-03-03When allocating virtual space for bus_space_map, don't useOwain Ainsworth
uvm_km_alloc() (which allocates some virtual space and then $size_of_mapping pages which it then enters) *then* pmap_kenter the bus_space address that we wish to map, it's just a little bit stupid and a waste of memory. replace with uvm_km_valloc and ponies for everyone. ok drahn@
2010-03-03Add description of -p and remove reference to fstab processing.Otto Moerbeek
Prompted by J.C. Robers; ok jmc@
2010-03-03it's true!Jasper Lievisse Adriaanse
2010-03-03Replace enum rib_state with enum reconf_action since their doing the same.Claudio Jeker
NEW is now REINIT, ACTIVE is KEEP and DELETE and NONE stay the same.