summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-12-15Add a STANDARDS section and mention the relevant section of the standard.Ingo Schwarze
Link to X509_ALGOR_new(3) because one of the functions uses X509_ALGOR. Delete a sentence about a function we don't have. Delete another sentence that says nothing new. Remove some macros that we don't normally use.
2016-12-15link back to X509_ALGOR_new(3)Ingo Schwarze
2016-12-15Document X509_ALGOR_new(3) and X509_ALGOR_free(3)Ingo Schwarze
listed in <openssl/x509.h> and in OpenSSL doc/man3/X509_dup.pod. Explain what an X509_ALGOR object represents and where it is used. Explain how copying works, like in similar pages. New RETURN VALUES, SEE ALSO, and STANDARDS sections. Some macro and wording fixes.
2016-12-15Add missing braces in DenyUsers code. Patch from zev at bewilderbeest.net,Darren Tucker
ok deraadt@
2016-12-15Fix text in error message. Patch from zev at bewilderbeest.net.Darren Tucker
2016-12-15Nuke some trailing tabs.Kenneth R Westerback
2016-12-15Nuke a couple of unused variables making gcc upset. Leftovers from strippingKenneth R Westerback
down doas for install media. ok tedu@
2016-12-15Remove rasops2 (2-bit color depth) functions, they are unused.Frederic Cambus
It seems unlikely that any future new platform will ever need them. OK mpi@
2016-12-15provide missing section number to Xr;Jason McIntyre
2016-12-15Regen usbdevsPaul Irofti
2016-12-15Add Intel Bluetooth devices found on x250 and x260 Thinkpads.Paul Irofti
2016-12-15Make sure all pages talking about X509_EXTENSION objectsIngo Schwarze
link back to X509_EXTENSION_new(3).
2016-12-15cut back some excessive cross referencesIngo Schwarze
and link to X509_EXTENSION_new(3) instead
2016-12-15Document X509_EXTENSION_new(3) and X509_EXTENSION_free(3) listedIngo Schwarze
in <openssl/x509.h> and in OpenSSL doc/man3/X509_dup.pod. Explain what an X509_EXTENSION object is and where it is used. Add STANDARDS references. Sort the functions into a more logical order. Link to all other pages dealing with X509_EXTENSION objects.
2016-12-15Add a helper script, format-pem.pl: a filter to sort and pretty-printStuart Henderson
cert.pem entries. ok jsg
2016-12-15remove "(DEPRECATED)" from the Nd: none of the other base pagesJason McIntyre
document things this way and DESCRIPTION is clear anyway that this should not be used; wording of the Nd suggested by schwarze ok schwarze
2016-12-15fix build when DIAGNOSTIC is not definedJonathan Gray
ok mikeb@
2016-12-14an Xr and new line fix;Jason McIntyre
2016-12-14Allow to start disabled and pre-configured VMs by name, "vmctl start foo".Reyk Floeter
With testing from Jon Bernard OK mlarkin@
2016-12-14Make 'route add default' show a nicer error message if the providedStefan Sperling
gateway is not reachable (e.g. not on a local subnet). ok millert@ mikeb@ mpi@ (and shrugs by jca@)
2016-12-14Sync extern decl of eproto_db with what's in libpcap.Jeremie Courreges-Anglas
For some reason this crashes on armv7. Issue reported by Lars Nooden.
2016-12-14Kill compat for old VNDIOCSET; ok deraadt@Jeremie Courreges-Anglas
2016-12-14Allow a guest to reboot by reinitializing its state and booting again.Reyk Floeter
This is technically a reset since memory is cleared and the dmesg buffer is lost. Patch from Jon Bernard (jbernard at jbernard.io) - Thanks OK reyk@ mlarkin@
2016-12-14Fix up winlink lists after swap-window.Nicholas Marriott
2016-12-14syncTheo de Raadt
2016-12-14Document X509_NAME_dup(3) and X509_NAME_ENTRY_dup(3) listed inIngo Schwarze
OpenSSL doc/man3/X509_dup.pod and d2i_X509_NAME_ENTRY(3) and i2d_X509_NAME_ENTRY(3) listed in OpenSSL doc/man3/d2i_X509.pod. Also add a RETURN VALUES section.
2016-12-14Set the rtableid for new mbufs when sending packets in igmp_sendpkt().Rafael Zalamena
ok mikeb@, phessler@
2016-12-14Clarify X509_NAME stuff and cut back excessive references.Ingo Schwarze
Ultimately, this page will have to be merged into X509_new(3), but we're not quite ready for that just yet.
2016-12-14Make sure all manual pages discussing X509_NAME objectsIngo Schwarze
reference X509_NAME_new(3). Sparingly add a few other references to relevant X509_NAME*(3) pages while here.
2016-12-14Complete rewrite to improve clarity.Ingo Schwarze
Add some cross references and STANDARDS.
2016-12-14Document X509_NAME_ENTRY_new(3) and X509_NAME_ENTRY_free(3),Ingo Schwarze
both listed in <openssl/x509.h> and in OpenSSL doc/man3/X509_dup.h. Note that the OpenSSL documentation specifies the wrong header file. Explain what X509_NAME_ENTRY represents. Simplify and clarify some wording. Sort parts of the text into a more logical order. Delete an irrelevant cross reference and add some relevant ones. Add a STANDARDS section.
2016-12-14Write X509_NAME_new(3) manual from scratch. Both functions areIngo Schwarze
listed in <openssl/x509.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file.
2016-12-14Some of the executables that are used by bgplg need the set-user-IDReyk Floeter
bit, so they should be mounted on a filesystem without the nosuid option. OpenBSD's /var/www is mounted nosuid by default and using bgplg with the statically-linked "ping" doesn't work with nosuid. Reported by Michael W. Lucas (mwlucas at michaelwlucas.com) OK jmc@ jca@
2016-12-14Various typos and minor cleanupMike Belopuhov
2016-12-14Add the TSC timecounter and use it on Skylake machines where the HPETReyk Floeter
is too slow and the invariant TSC more accurate. The commit includes joint work by mikeb@ kettenis@ and me; tested for some time by a large group of volunteers. OK mikeb@ kettenis@
2016-12-14Remove a resource leak by closing the socket in all error cases.Ricardo Mestre
The patch was already committed upstream. OK tb@ and sthen@. jca@ has a valid point that the error would be fatal and most likely the socket would not leak, nevertheless create_tcp_accept_sock() close the socket everytime so for clarity apply the same principal here in create_local_accept_sock()
2016-12-14fix typo (bas->base), "please commit" mikeb@Stuart Henderson
2016-12-14tweak previous;Jason McIntyre
2016-12-14If a VM terminates with the result EAGAIN, close all fds except theReyk Floeter
pty and re-send it to the vmm monitor process. With additional changes in vmm.c, this will allow perform a cold reboot of VM. With testing and feedback from Jon Bernard OK mlarkin@
2016-12-14New manuals ESS_SIGNING_CERT_new(3) and TS_REQ_new(3) writtenIngo Schwarze
from scratch. All these functions are listed in <openssl/ts.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file.
2016-12-14disable Unix-domain socket forwarding when privsep is disabledDamien Miller
2016-12-13New media types from FreeBSDMike Belopuhov
No objections from deraadt@, OK dlg Thanks to stsp@ who has extended ifm_media field to 64 bits.
2016-12-13Use new xs_{get,set}num functions instead of hand-rolled weirdnessMike Belopuhov
2016-12-13Start RSA_PSS_PARAMS_new(3) stub from scratch. Both functionsIngo Schwarze
are listed in <openssl/rsa.h> and OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. More could probably be said about PSS, but this is a start...
2016-12-13Fix up tsleep priorities and make them interruptibleMike Belopuhov
With help from and OK sf, OK mpi on the previous version.
2016-12-13Enable xbf(4)Mike Belopuhov
2016-12-13Bounce unaligned transfer data through a scratch bufferMike Belopuhov
Thanks to the detailed report from Nathanael Rensen, the issue with unaligned transfer data became apparent: the backend expects buffers be multiple of 512 bytes and to be 512 byte aligned, which is not always satisfied. This isn't an issue when requests are coming from the buffer cache, but can happen with raw device access since physio(9) ensures the former requirement is met by disallowing non-block sized reads, but doesn't enforce the latter. It remaps userland buffers into the kernel virtual space which preserves the data offset within the memory page and thus the original alignment. Buffers with offsets under the block size can't be referenced by Blkfront ring descriptors that measure data in blocks and must be substituted with temporary buffers for the duration of the I/O operation.
2016-12-13Poll until the ITSDONE flag is set on the transferMike Belopuhov
2016-12-13Add an efibind.h for arm64. Taken from edk2, modified to be similarPatrick Wildt
to our arm version. ok millert@
2016-12-13Unbreak the dhcrelay(8) support to run on enc(4) interfaces.Rafael Zalamena
ok reyk@