summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-02-11Provide a tls_connect_servername() function that has the same behaviourJoel Sing
as tls_connect(), however allows the name to use for verification to be explicitly provided, rather than being inferred from the host value. Requested by reyk@ ok reyk@ tedu@
2015-02-11Be consistent with naming - only use "host" and "hostname" when referringJoel Sing
to an actual host and use "servername" when referring to the name of the TLS server that we expect to be indentified in the server certificate. Likewise, rename verify_host to verify_name and use the term "name" throughout the verification code (rather than host or hostname). Requested by and ok tedu@
2015-02-11dont need lockmgr for pmap things, so we dont need sys/lock.hDavid Gwynne
2015-02-11Do not rely upon malloc(0) not returning NULL. Not all malloc implementationsMiod Vallat
have this property. Instead, skip the malloc and memcmp if their size is zero. Per bcook@ request in order to run on AIX
2015-02-11this doesnt need lockmgr. we dont need sys/lock.hDavid Gwynne
2015-02-11Fix debug build, etc.Masao Uebayashi
2015-02-11Save OpenFirmware mappings in save_ofw_mapping(), currently unusedMartin Pieuchot
but required for upcoming firmware callback improvement. ok miod@
2015-02-11Use sizeof(u_short) in the first check since there are RT messages thatClaudio Jeker
are less then sizeof(*rtm) bytes long (e.g. interface announcements). Found the hard way by phessler@
2015-02-11syncTheo de Raadt
2015-02-11deprecate use of sys/lock.h and replace it with sys/atomic.h orDavid Gwynne
machine/lock.h as appropriate.
2015-02-11Use sizeof(u_short) in the first check since there are RT messages thatClaudio Jeker
are less then sizeof(*rtm) bytes long (e.g. interface announcements). Found the hard way by phessler@
2015-02-11Direct config glue for octdwctwo(4).Masao Uebayashi
2015-02-11Explicitely include <sys/atomic.h>Miod Vallat
2015-02-11Extend struct kinfo_file a bit for netstat (sync with the kernel).Claudio Jeker
Bump minor number because of this. OK guenther@
2015-02-11Extend struct kinfo_file a bit so that netstat has all the info it needs.Claudio Jeker
OK guenther@
2015-02-11Don't rely in <sys/lock.h> bringing <sys/rwlock.h>.Miod Vallat
2015-02-11dont need lockmgr locks here.David Gwynne
2015-02-11Until carp(4) is converted to call ether_ifattach() and ether_ifdetach(),Martin Pieuchot
reroll the loop to free its Ethernet multicast addresses when destroying an interface. Prevent a panic found the hard way by phessler@ ok henning@, pelikan@, phessler@
2015-02-11Eliminate sc_tx_cnt. Instead use an unsigned integer for sc_tx_prod andMark Kettenis
sc_tx_cont and let them wrap around. Make sure we don't fill the last descriptor on the ring such that we don't confuse a completely filled ring with a completely empty one. Also make sure we don't post the same descriptors twice.
2015-02-11Guenther has plans for OPENSSL_NO_CMS, so revert this for the moment.Bob Beck
2015-02-11initialize a variable in case "goto done" makes us compare itMartin Pelikan
found by clang, ok henning
2015-02-11refer to crypt_checkpass for cipher explananationTed Unangst
2015-02-11the possible algos for pref should be documented hereTed Unangst
2015-02-11Remove initialisers with default values from the ASN1 data structures.Joel Sing
Minor changes in generated assembly due to the compiler swapping from .quad 0/.long 0 to .zero, along with changes due to line numbering.
2015-02-11Prefer arg != 0 over arg for non-boolean. nitted kettenis@Philip Guenther
2015-02-11the only user of __cpu_cas is lock_machdep, so move it there.David Gwynne
machine/lock.h only provides SPINLOCK_SPIN_HOOK which is included directly by the three files that use it.
2015-02-11get rid of OPENSSL_NO_CMS code we do not use.Bob Beck
ok miod@
2015-02-11get rid of OPENSSL_NO_COMP code we don't use.Bob Beck
jajaja miod@
2015-02-11Expand most of the ASN1_SEQUENCE* and associated macros, making the dataJoel Sing
structures visible and easier to review, without having to wade through layers and layers of asn1t.h macros. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@
2015-02-11Backout non-wanted changed introduced by accident as part of 1.24.Miod Vallat
2015-02-11Enable building with -DOPENSSL_NO_DEPRECATED.Doug Hogan
If you didn't enable deprecated code, there were missing err.h and bn.h includes. This commit allows building with or without deprecated code. This was not derived from an OpenSSL commit. However, they recently enabled OPENSSL_NO_DEPRECATED in git and fixed these header problems in a different way. Verified with clang that this only changes line numbers in the generated asm. ok miod@
2015-02-11Remove dead code (IMSG_HOST_DNS has been moved from the parent toReyk Floeter
ntp_dns some years ago). OK henning@
2015-02-11sysctl({CTL_KERN, KERN_FILE, KERN_FILE_BYFILE}) previously requiredPhilip Guenther
the extra argument to be zero; instead, make it filter on the file type (DTYPE_*) when non-zero to make claudio's netstat work easier. ok claudio@
2015-02-11More unifdef OPENSSL_NO_RFC3779 that got missed last time around.Joel Sing
Spotted by beck@
2015-02-11sys/lock.h and machine/lock.h dont provide anything this code uses.David Gwynne
2015-02-11intr.c needs atomic.h for atomic_setbits_int to say softints are pending.David Gwynne
2015-02-11Fix DIAGNOSTIC build. Trim blank lines.Masao Uebayashi
2015-02-11this doesnt need anything sys/lock.h providesDavid Gwynne
2015-02-11Needs <sys/atomic.h> now.Miod Vallat
2015-02-11Catch up with the new taskq_create(9) API.Masao Uebayashi
2015-02-11YPPROC_XFR will trigger a crash, even if using it doesn't make sense.Martin Pelikan
ok deraadt miod
2015-02-11Some packet error messages show the address of the peer, but might beDamien Miller
generated after the socket to the peer has suffered a TCP reset. In these cases, getpeername() won't work so cache the address earlier. spotted in the wild via deraadt@ and tedu@
2015-02-11get SPINLOCK bits from machine/lock.h instead of sys/lock.hDavid Gwynne
2015-02-11get the SPINLOCK bits from machine/lock.hDavid Gwynne
2015-02-11Convert to uiomove(). ok kettenis@Miod Vallat
2015-02-11alpha (nor any other arch) uses any types or api provided by sys/lock.h.David Gwynne
2015-02-11g/c sys/cdefs.h header.Brad Smith
ok stsp@
2015-02-11slight knf, and __inline is really spelled inline.David Gwynne
2015-02-11use reallocarray; ok dougTheo de Raadt
2015-02-11Prevent processes from entering iwm_ioctl while another process isStefan Sperling
tsleep'ing in it. From iwn(4).