summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-06-07eliminate differences between all the list files as much asTheo de Raadt
possible, and remove the failed previous attempts at sharing in ./miniroot and ./ramdisk. maybe now that differences are eliminated we can start a new sharing effort? i dunno..
2019-06-07Add -lz to the library list, since one architecture (armv7) needs it andTheo de Raadt
there is no downside for others.
2019-06-07Typo and spelling fixes in comments and error messages. Patch fromDarren Tucker
knweiss at gmail.com via -portable.
2019-06-07Reyk's ISP sends him router advertisements from non-link localFlorian Obser
addresses about every 10 - 30 seconds. Reduce log level to debug to stop the syslog spam. OK reyk
2019-06-07fix print not specified process.asou
ok guenther@ yasuoka@
2019-06-07Refactor up_get_nexthop() to work for all AFI/SAFI cases. AdditionallyClaudio Jeker
clean up the possible nexthop overrides to better match the RFC. - set nexthop self is still overriding all other decisions - set nexthop no-modify has only relevance for ebgp multihop links Instead of using the router locall address the nexthop is passed unmodified - set nexthop <address> depends on BGP session type * for IBGP sessions the address will be used unless it is the same as the remote peers address * for directly connected EBGP sessions the address is only used if the IP is part of the connected network (no matter what other flags are used). * for multihop EBGP sessions it depends if no-modify was also set Adjust manual page to explain this properly. "probably OK" job@
2019-06-07Switch to v02 api url.Florian Obser
2019-06-07Implement RFC 8555 "Automatic Certificate Management EnvironmentFlorian Obser
(ACME)" to be able to talk to the v02 Let's Encrypt API. With this acme-client(1) will no longer be able to talk to the v01 API. Users must change the api url in /etc/acme-client.conf to https://acme-v02.api.letsencrypt.org/directory Existing accounts (and certs of course) stay valid and after the url change acme-client will be able to renew certs. Tested by Renaud Allard and benno Input & OK benno
2019-06-07Amend showcpos() to show more information about how mg is operating.Mark Lumsden
The additions help while developing mg by not having to go into gdb to see somethings mg believes about itself. The extra data shown could be removed in future, but it is benign so perhaps it could stay. Also, do not fake a '\n' on the end of buffer. It is confusing. However do not change the lie about '\n' being on the end of every line within the buffer. Hopefully, one day, that will no longer be a lie.
2019-06-07make struct mcx_cq_entry a bit closer to realityDavid Gwynne
this puts the timestamp, rx drops, and hash fields in the right place. ok jmatthew@
2019-06-07have mcx_process_rx return the number of slots it made freeDavid Gwynne
this is instead of passing a pointer to the counter. while here use byte swapping loads and stores, which is mostly a nop cos i dont think we have an LE arch with swapping memory operations. ok jmatthew@
2019-06-07tidy up the formatting of gendsa synopsis a little;Jason McIntyre
2019-06-07Allow specifying area by number as well as id. No change to outputs.David Gwynne
ok remi@ (who did the same change to ospfctl, ospf6d, and ospf6ctl) ok denis@ some grumbling from sthen@ and bluhm@ who didn't want output changed.
2019-06-07enable mcx(4) on arm64, found in Packet's g2.large.arm servers.Jonathan Matthew
tested by and ok patrick@
2019-06-07Check for user@host when parsing sftp target. This allows user@[1.2.3.4]Darren Tucker
to work without a path in addition to with one. bz#2999, ok djm@
2019-06-07Convert openssl(1) gendsa to the newer style of option handlingKinichiro Inoguchi
- Adapt openssl(1) gendsa command to new option handling. - Add lacking ciphers and passout description in openssl.1 manpage. - Describe paramfile as argument in openssl.1 manpage. ok bcook@
2019-06-06Stop promoting the TSC as a high quality timecounter on MULTIPROCESSORMark Kettenis
systems. There is no guarantee that the TSCs on different cores are synchronized when the OpenBSD kernel boots and we don't have code to synchronize them ourselves. This affects both AMD and Intel CPUs and even cores on the same socket can by out of sync. ok deraadt@, sthen@
2019-06-06tweak previous;Jason McIntyre
2019-06-06minor errors in previous commit pointed out by jmc@Ingo Schwarze
2019-06-06Restore missing newline.Visa Hankala
2019-06-06Replace calls to ssh_malloc_init() by a static init of malloc_options.Otto Moerbeek
Prepares for changes in the way malloc is initialized. ok guenther@ dtucker@
2019-06-06ConnectX-5 cards work tooJonathan Matthew
2019-06-06Set up the interrupt handler before creating the event queue.Jonathan Matthew
Apparently the boot rom on some cards leaves an interrupt vector set up, which will be run on completion of the first command after we set up the event queue, causing kernel crashes. chris@ reported this a while ago.
2019-06-06Tree structure for manual pages: crypto(3) links to 33 functionIngo Schwarze
group pages, and these link on to all their second-level subpages. Only a handful of second-level pages have third-level subpages. So all crypto pages can now be reached from the www.libressl.org frontpage via at most four clicks, in most cases three clicks. Also link back from leaf pages to their respective group pages and add a couple of additional links between related pages. Triggered by a question from deraadt@. OK jmc@ tb@
2019-06-06Reapply patches lost in the perl 5.28.2 updateAndrew Fresh
2019-06-05Add a -v flag to source-file to show the commands and line numbers.Nicholas Marriott
2019-06-05Need to increment the argument to skip the prefix earlier, fixesNicholas Marriott
repeated incremental search in copy mode, reported by Kaushal Modi in GitHub issue 1780.
2019-06-05assume RSA_METHOD is opaque and only access members through setters/gettersGilles Chehade
2019-06-05provide getters and setters for the RSA_METHOD interfaceGilles Chehade
ok tb@, jsing@, sthen@
2019-06-05Remove workaround and return EINVAL when userland sends routing messagesClaudio Jeker
with bad address flags. OK bluhm@ sthen@
2019-06-05a long long time ago, in a galaxy quite close actually, reyk@ introduced anGilles Chehade
RSA privsep engine to isolate private keys in the ca process. ECDSA support in smtpd is become a frequent request so here's an ECDSA privsep engine and the code required for smtpd to load ECDSA certificates and use them.
2019-06-05Fix bogus cross reference: EVP_SignDigest* -> EVP_DigestSign*Theo Buehler
2019-06-05We know which flow table entries are actually in use, so we can justJonathan Matthew
delete those rather than blindly deleting everything, which also means we don't need to check against a specific syndrome code to ignore errors we get deleting entries that aren't there.
2019-06-05this can support 64BIT DVA for ioDavid Gwynne
2019-06-04Fix capitalization in XAUTHORITY defaultkn
2019-06-04if_netisr(): trade NET_LOCK() for NET_RLOCK()Alexandr Nedvedicky
OK mpi@
2019-06-04pfsync_sendout() requires PF_LOCK()Alexandr Nedvedicky
OK mpi@
2019-06-04OPENSSL_realloc(3) is no longer used, we now use reallocarray(3)Ingo Schwarze
2019-06-04Readability tweak in a comment.Theo Buehler
2019-06-04Remove the blinding later to avoid leaking information on the lengthTheo Buehler
of ckinv. Pointed out and fix suggested by David Schrammel and Samuel Weiser ok jsing
2019-06-04Readability tweaks for comments that explain the blinding.Theo Buehler
2019-06-04Remove the blinding later to avoid leaking information on the lengthTheo Buehler
of kinv. Pointed out and fix suggested by David Schrammel and Samuel Weiser ok jsing
2019-06-04Add missing NULL check for the protocol control block (pcb) pointer inanton
mrt{6,}_ioctl. Calling shutdown(2) on the socket prior to the ioctl command can cause it to be NULL. ok bluhm@ claudio@ Reported-by: syzbot+bdc489ecb509995a21ed@syzkaller.appspotmail.com Reported-by: syzbot+156405fdea9f2ab15d40@syzkaller.appspotmail.com
2019-06-04Do nog segfault on malformed ttys(5) entry; ok kn@ jca@Otto Moerbeek
2019-06-04Let SP kernel work with WITNESS. The necessary instrumentation wasVisa Hankala
missing from the SP variant of mtx_enter() and mtx_enter_try(). mtx_leave() was correct already. Prompted by and OK patrick@
2019-06-04Remove the unused pvh_attrs attribute from struct vm_page_md.Patrick Wildt
ok kettenis@
2019-06-04Bump MAXCPUS to 32 so that we can use all cores on the Ampere eMAG.Patrick Wildt
ok kettenis@
2019-06-04.In openssl/x509_vfy.hIngo Schwarze
for consistency with all the other X509_STORE_*(3) manual pages
2019-06-04Move a function used as a callback out of a header so there will only beJonathan Gray
one function with a single address.
2019-06-04Add several missing .In linesIngo Schwarze
and add a sentence pointing to the detailed description in RSA_get_ex_new_index(3), worded like in DH_get_ex_new_index(3).
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 03:03:02 +0000