summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-07-11no bthubTed Unangst
2014-07-11remove bluetooth bitsTed Unangst
2014-07-11remove bthub remnantsTed Unangst
2014-07-11"It's not the years, honey; it's the mileage."Ted Unangst
bluetooth support doesn't work and isn't going anywhere. the current design is a dead end, and should not be the basis for any future support. general consensus says to whack it so as to not mislead the unwary.
2014-07-11syncTheo de Raadt
2014-07-11stop installing netbt headersTed Unangst
2014-07-11remove (commented) bluetooth referenceTed Unangst
2014-07-11nsd.conf is not ready to be an exampleTheo de Raadt
2014-07-11oops, nsd.conf cannot be an example... yetTheo de Raadt
2014-07-11Provide LIBRESSL_VERSION_NUMBER for people who use such things toBob Beck
detect versions distinct from OPENSSL_BLAH_WOOF.. ok jsing@ tedu@ deraadt@
2014-07-11Move more files into the examples directory...Theo de Raadt
2014-07-11Introducing a nifty _ignore function makes the file neater and easierAlexander Hall
to maintain. The eval's must stay to make the aliases expand at run time instead of at parse time. ok krw@
2014-07-118 bits is enough for sslflagsReyk Floeter
2014-07-11Sigh. Further torture finds a race. Back to drawing board forKenneth R Westerback
reducing resolv.conf writing.
2014-07-11better error handling in mkstemp/unlink/fdopen logic.Marc Espie
from Doug Hogan <doug@acyclic.org> okay miod@
2014-07-11Another regress test for OpenSSL PR #3397 (Joyent 7704), from agl via OpenSSLMiod Vallat
RT.
2014-07-11Move updating resolv.conf contents and active lease to before addressKenneth R Westerback
manipulation starts. Thus making it more likely the correct resolv.conf gets written.
2014-07-11Make the test output easier to read by splitting the test casesAlexander Bluhm
with an empty line and a header line.
2014-07-11Regression test for PKCS5_PBKDF2_HMAC(), written by Christian Heimes ; fromMiod Vallat
OpenSSL trunk
2014-07-11Don't write out a new resolv.conf until the new address is addedKenneth R Westerback
and we become responsible for the interface. Don't write out a new resolv.conf when our address has been deleted and we are no longer responsible for the interface. Less writing is more better.
2014-07-11Verify the checksum of the echo reply fragment based on the echoAlexander Bluhm
request.
2014-07-11Add some services needed by comms/hylafaxGiovanni Bechis
ok ajacoutot@
2014-07-11start reducing the attack surface of lynx.Daniel Dickman
leave gopher, news, and dired in place for now. but we will soon catch up to the security level of internet explorer 7 by removing these too. ok's for the version of this diff that removes even more protocols from deraadt@, tedu@. general support from other devs.
2014-07-11Add a test that sends a large ICMP6 packet in many small fragments.Alexander Bluhm
The echo reply has to be fragmented.
2014-07-11simplify and slightly tweak user agent handlingAlexander Hall
ok lteo@
2014-07-11move files which do not change to base set; ok ajacoutotTheo de Raadt
2014-07-11missing \Theo de Raadt
2014-07-11Sometimes I just sort the tokens in parse.yReyk Floeter
2014-07-11syncTheo de Raadt
2014-07-11formattingBob Beck
ok bcook@
2014-07-11my pleasure to move bgpd.conf to examples. ok theoHenning Brauer
2014-07-11Enable the interrupt routine.Paul Irofti
Still work in progress, but the interrupt routine can be enabled now. I tried to match the structure of the other drivers as close as possible: - add octhci_intr1() routine - modify octhci_intr() to call octhci_intr1() - schedule the actual work for the soft interrupt - add octhci_root_intr_{transfer,start,abort} routines - fill in the octhci_poll() routine - use the same style for return directives dmesg progress: octhci0 at iobus0 irq 56: core version 2 pass 3.5 usb0 at octhci0: USB revision 2.0 uhub0 at usb0 " octHCI root hub" rev 2.00/1.00 addr 1
2014-07-11Add support for EDH to provide perfect forward secrecy for older SSLReyk Floeter
clients. Additionally, add options for disallowing client-initiated renegotiations and to prefer the server's cipher list over the client's preferences. This work is based on a diff by Markus Gebert at hostpoint.ch, and was discussed with jsing@ resulting in a few different defaults. ok benno@
2014-07-11syncTheo de Raadt
2014-07-11handle the movement of the first few files to /etc/examples. They areTheo de Raadt
still managed by changelist, as long as the marker is + and they are in the correct distrib/sets/* files Bit of help from ajacoutot
2014-07-11Add some more unofficial services to please ports without the need toAntoine Jacoutot
hand-edit services(5) which moved to base; some more to come probably. ok deraadt@
2014-07-11Fix DHCPINFORM not to lookup the lease database, not to fill the yiaddrYASUOKA Masahiko
field and not to include the lease time parameters. ok krw
2014-07-11some say it is kinda likely you want autoconf if you run rtsol/rtsold onHenning Brauer
a given interface, so turn AFXF_AUTOCONF6 on on it ok bluhm stsp benno florian
2014-07-11Close the control fd when it has reported EOF.Kenneth R Westerback
ok henning@
2014-07-11Tweak error checking for msgbuf_write() as recommended by the imsgKenneth R Westerback
gurus. ok reyk@ benno@
2013-01-03Reengineer the socket splicing regression tests:Alexander Bluhm
- Move the tests from splice to new sosplice directory for consistent naming. - Split the API tests and the TCP splicing tests into separate directories. - Create some tests for the upcoming UDP splicing. - Tests can be run in obj directories now. - The API tests can run both on a local and on a remote machine now. - Fix the forking TCP tests which splice and read or write simultaneously. - Bunch of little fixes for races in the tests. - Deduplicate code, move checks into common functions.
2014-07-11create /etc/examplesTheo de Raadt
2014-07-11net.inet6.ip6.accept_rtadv bit the bucketHenning Brauer
ok florian bluhm benno stsp
2014-07-11allow IFXF_AUTOCONF6 to be set and cleared.Henning Brauer
"ifconfig <if> inet6 autoconf" to turn it on, -autoconf to turn it off. show AUTOCONF6 in the flags line. -inet6 turns IFXF_AUTOCONF6 off as well. ok stsp benno florian bluhm
2014-07-11revert last commitAlexander Hall
eval seems to be needed for reaching the aliases which otherwise aren't available from within functions...
2014-07-11introduce the IFXF_AUTOCONF6 interface flag which controls wether weHenning Brauer
accept rtadvs on that interface. the global net.inet6.ip6.accept_rtadv sysctl just doesn't cut it, even tho the spec wants that - but in their little absurd world, a host just has one interface by definition anyway... the sysctlgoes away. lots of head scratching, brain cell elemination etc from bluhm benno stsp florian, excitement from simon and todd, ok bluhm stsp benno florian
2014-07-11Remove redundant mask check in the interrupt routine.Paul Irofti
We return earlier if the interrupt is masked. Discussed with and okay mpi@
2014-07-11move a few more...Theo de Raadt
2014-07-11Chuck Cranor rescinded clauses in his licenseJonathan Gray
on the 2nd of February 2011 in NetBSD. http://marc.info/?l=netbsd-source-changes&m=129658899212732&w=2 http://marc.info/?l=netbsd-source-changes&m=129659095515558&w=2 http://marc.info/?l=netbsd-source-changes&m=129659157916514&w=2 http://marc.info/?l=netbsd-source-changes&m=129665962324372&w=2 http://marc.info/?l=netbsd-source-changes&m=129666033625342&w=2 http://marc.info/?l=netbsd-source-changes&m=129666052825545&w=2 http://marc.info/?l=netbsd-source-changes&m=129666922906480&w=2 http://marc.info/?l=netbsd-source-changes&m=129667725518082&w=2
2014-07-11add comment about format requirementsBob Beck
ok miod@