Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-02-11 | Provide a tls_connect_servername() function that has the same behaviour | Joel Sing | |
as tls_connect(), however allows the name to use for verification to be explicitly provided, rather than being inferred from the host value. Requested by reyk@ ok reyk@ tedu@ | |||
2015-02-11 | Be consistent with naming - only use "host" and "hostname" when referring | Joel Sing | |
to an actual host and use "servername" when referring to the name of the TLS server that we expect to be indentified in the server certificate. Likewise, rename verify_host to verify_name and use the term "name" throughout the verification code (rather than host or hostname). Requested by and ok tedu@ | |||
2015-02-11 | dont need lockmgr for pmap things, so we dont need sys/lock.h | David Gwynne | |
2015-02-11 | Do not rely upon malloc(0) not returning NULL. Not all malloc implementations | Miod Vallat | |
have this property. Instead, skip the malloc and memcmp if their size is zero. Per bcook@ request in order to run on AIX | |||
2015-02-11 | this doesnt need lockmgr. we dont need sys/lock.h | David Gwynne | |
2015-02-11 | Fix debug build, etc. | Masao Uebayashi | |
2015-02-11 | Save OpenFirmware mappings in save_ofw_mapping(), currently unused | Martin Pieuchot | |
but required for upcoming firmware callback improvement. ok miod@ | |||
2015-02-11 | Use sizeof(u_short) in the first check since there are RT messages that | Claudio Jeker | |
are less then sizeof(*rtm) bytes long (e.g. interface announcements). Found the hard way by phessler@ | |||
2015-02-11 | sync | Theo de Raadt | |
2015-02-11 | deprecate use of sys/lock.h and replace it with sys/atomic.h or | David Gwynne | |
machine/lock.h as appropriate. | |||
2015-02-11 | Use sizeof(u_short) in the first check since there are RT messages that | Claudio Jeker | |
are less then sizeof(*rtm) bytes long (e.g. interface announcements). Found the hard way by phessler@ | |||
2015-02-11 | Direct config glue for octdwctwo(4). | Masao Uebayashi | |
2015-02-11 | Explicitely include <sys/atomic.h> | Miod Vallat | |
2015-02-11 | Extend struct kinfo_file a bit for netstat (sync with the kernel). | Claudio Jeker | |
Bump minor number because of this. OK guenther@ | |||
2015-02-11 | Extend struct kinfo_file a bit so that netstat has all the info it needs. | Claudio Jeker | |
OK guenther@ | |||
2015-02-11 | Don't rely in <sys/lock.h> bringing <sys/rwlock.h>. | Miod Vallat | |
2015-02-11 | dont need lockmgr locks here. | David Gwynne | |
2015-02-11 | Until carp(4) is converted to call ether_ifattach() and ether_ifdetach(), | Martin Pieuchot | |
reroll the loop to free its Ethernet multicast addresses when destroying an interface. Prevent a panic found the hard way by phessler@ ok henning@, pelikan@, phessler@ | |||
2015-02-11 | Eliminate sc_tx_cnt. Instead use an unsigned integer for sc_tx_prod and | Mark Kettenis | |
sc_tx_cont and let them wrap around. Make sure we don't fill the last descriptor on the ring such that we don't confuse a completely filled ring with a completely empty one. Also make sure we don't post the same descriptors twice. | |||
2015-02-11 | Guenther has plans for OPENSSL_NO_CMS, so revert this for the moment. | Bob Beck | |
2015-02-11 | initialize a variable in case "goto done" makes us compare it | Martin Pelikan | |
found by clang, ok henning | |||
2015-02-11 | refer to crypt_checkpass for cipher explananation | Ted Unangst | |
2015-02-11 | the possible algos for pref should be documented here | Ted Unangst | |
2015-02-11 | Remove initialisers with default values from the ASN1 data structures. | Joel Sing | |
Minor changes in generated assembly due to the compiler swapping from .quad 0/.long 0 to .zero, along with changes due to line numbering. | |||
2015-02-11 | Prefer arg != 0 over arg for non-boolean. nitted kettenis@ | Philip Guenther | |
2015-02-11 | the only user of __cpu_cas is lock_machdep, so move it there. | David Gwynne | |
machine/lock.h only provides SPINLOCK_SPIN_HOOK which is included directly by the three files that use it. | |||
2015-02-11 | get rid of OPENSSL_NO_CMS code we do not use. | Bob Beck | |
ok miod@ | |||
2015-02-11 | get rid of OPENSSL_NO_COMP code we don't use. | Bob Beck | |
jajaja miod@ | |||
2015-02-11 | Expand most of the ASN1_SEQUENCE* and associated macros, making the data | Joel Sing | |
structures visible and easier to review, without having to wade through layers and layers of asn1t.h macros. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@ | |||
2015-02-11 | Backout non-wanted changed introduced by accident as part of 1.24. | Miod Vallat | |
2015-02-11 | Enable building with -DOPENSSL_NO_DEPRECATED. | Doug Hogan | |
If you didn't enable deprecated code, there were missing err.h and bn.h includes. This commit allows building with or without deprecated code. This was not derived from an OpenSSL commit. However, they recently enabled OPENSSL_NO_DEPRECATED in git and fixed these header problems in a different way. Verified with clang that this only changes line numbers in the generated asm. ok miod@ | |||
2015-02-11 | Remove dead code (IMSG_HOST_DNS has been moved from the parent to | Reyk Floeter | |
ntp_dns some years ago). OK henning@ | |||
2015-02-11 | sysctl({CTL_KERN, KERN_FILE, KERN_FILE_BYFILE}) previously required | Philip Guenther | |
the extra argument to be zero; instead, make it filter on the file type (DTYPE_*) when non-zero to make claudio's netstat work easier. ok claudio@ | |||
2015-02-11 | More unifdef OPENSSL_NO_RFC3779 that got missed last time around. | Joel Sing | |
Spotted by beck@ | |||
2015-02-11 | sys/lock.h and machine/lock.h dont provide anything this code uses. | David Gwynne | |
2015-02-11 | intr.c needs atomic.h for atomic_setbits_int to say softints are pending. | David Gwynne | |
2015-02-11 | Fix DIAGNOSTIC build. Trim blank lines. | Masao Uebayashi | |
2015-02-11 | this doesnt need anything sys/lock.h provides | David Gwynne | |
2015-02-11 | Needs <sys/atomic.h> now. | Miod Vallat | |
2015-02-11 | Catch up with the new taskq_create(9) API. | Masao Uebayashi | |
2015-02-11 | YPPROC_XFR will trigger a crash, even if using it doesn't make sense. | Martin Pelikan | |
ok deraadt miod | |||
2015-02-11 | Some packet error messages show the address of the peer, but might be | Damien Miller | |
generated after the socket to the peer has suffered a TCP reset. In these cases, getpeername() won't work so cache the address earlier. spotted in the wild via deraadt@ and tedu@ | |||
2015-02-11 | get SPINLOCK bits from machine/lock.h instead of sys/lock.h | David Gwynne | |
2015-02-11 | get the SPINLOCK bits from machine/lock.h | David Gwynne | |
2015-02-11 | Convert to uiomove(). ok kettenis@ | Miod Vallat | |
2015-02-11 | alpha (nor any other arch) uses any types or api provided by sys/lock.h. | David Gwynne | |
2015-02-11 | g/c sys/cdefs.h header. | Brad Smith | |
ok stsp@ | |||
2015-02-11 | slight knf, and __inline is really spelled inline. | David Gwynne | |
2015-02-11 | use reallocarray; ok doug | Theo de Raadt | |
2015-02-11 | Prevent processes from entering iwm_ioctl while another process is | Stefan Sperling | |
tsleep'ing in it. From iwn(4). |