summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-06-10add new commands: the couple/decouple commands will set loading of theReyk Floeter
learned flows and SAs to the kernel which is useful for testing and debugging. the active/passive commands are required to use iked with sasyncd(8); sasyncd just needs to call "ikectl active/passive" or send the appropriate imsg to support iked but this is not implemented yet.
2010-06-10No need to print FEC twice. Remove it in the log function.Claudio Jeker
2010-06-10Add another tree to lookup policy SAs by peer address.Reyk Floeter
2010-06-10simplify the pfkey code by adding a pfkey_write() functionReyk Floeter
2010-06-10Signal a neighbor down event to the LDE when the TCP session is closed.Claudio Jeker
The LDE only tracks neighbors with a running sessions, no session no neighbor needed. So do not wait until the neighbor is removed in the engine to signal the LDE since that happens a lot later. Solves a fatal in LDE when restarting a remote ldpd quickly. OK michele
2010-06-10small fix for sockaddr_cmp()Reyk Floeter
2010-06-10fix typos in comments: lineair -> linear.Thordur I. Bjornsson
2010-06-10the pagedaemon sleeps on uvm.pagedaemon notThordur I. Bjornsson
uvm.pagedaemon_proc, do the wakeup on the right ident. this had been fixed, but the fix got backed out during The Big Backout. ok oga@
2010-06-10i don't like splitting source code in too many source files but ikev2.cReyk Floeter
has grown too large, so split it in 3 files and rename a few functions to organize the code a bit better.
2010-06-10only call RB_REMOVE once when removing an SA.Reyk Floeter
2010-06-10next -> return after code change (noticed by Antti Harri)Marc Espie
2010-06-10vscsi just works, as a proof the debug macro is wrong and was never used,Jonathan Armani
just remove it. "vscsi is kinda perfect" "you should delete it" dlg@
2010-06-09add missing headers needed for opendev() and close()Charles Longeau
ok jsing@ krw@
2010-06-09switch `ref' data type to int, because it is tested for negative value inzinovik
queue_mem_content_unref() function ok jacekm@, gilles@
2010-06-09Remove the CRYPTO_ALGORITHM_ALL define, fixup accordinglyThordur I. Bjornsson
and make the loop invartiants <= CRYPTO_ALGORITHM_MAX Do this also for the CRK_ALGORITHM_MAX this also fixes the a bug that caused us to skip CRK_DH_COMPUTE_KEY. ok deraadt@
2010-06-09Only embed the interface scope for link local nexthops. AS-ext LSA haveClaudio Jeker
an optional non link local forwarding address so we need to be a bit more careful here. Problem found and analyzed by Martin Pelikán.
2010-06-09Correctly decode prefixes. Fixes an infinite loop hit when the prefixlen isClaudio Jeker
not devidable by 32. Problem found and identified by Martin Pelikán.
2010-06-09syncTheo de Raadt
2010-06-09syncTodd T. Fries
2010-06-09add diskmap entries, not on ramdisks yetTodd T. Fries
get it in! jsing@
2010-06-09Do not set time 100 years in the future if the time read is beforeMiod Vallat
POSIX_BASE_YEAR (1970) because the clock's base year is before that year as well (as found on sparc which use 1968 as their base year); this allows clocks with dead batteries to ``correctly'' report the current date as in year 1968, instead of year 2068 which causes a 32 bit time_t wraparound in year 1931. Found the hard way by Philippe Meunier, ok deraadt@
2010-06-09Move declaration of cn_tab from dev/cons.c to dev/cninit.c, or appropriateMiod Vallat
md files for ports which do not use dev/cninit.c. This gets rid of a common at kernel link time. feedback drahn@ ok deraadt@
2010-06-09Wire up device nodes for disk mapper.Joel Sing
ok deraadt@
2010-06-09Move the logging of FEC changes to the LDE and print the FEC and labelClaudio Jeker
information. This is more useful. OK michele
2010-06-09More useful warning message.Claudio Jeker
2010-06-09Teach FFS mounts about disklabel UIDs. This allows file systems to beJoel Sing
mounted by specifying a disklabel UID followed by a dot and a partition. For example: mount -t ffs 0123456789abcdef.a /mnt ok otto@
2010-06-09common pattern reuseMarc Espie
2010-06-09Fix the pop operation to make PHP work again. When popping the last labelClaudio Jeker
by a pop operation we need to forward the packet to the specified nexthop as is. This is done by calling the interface output routine directly. This is different to the local operation since that one injects the packets into ip_input() via netisr. OK michele
2010-06-09wrap most stuff read from files in safe(), so that if the fs is in a bad shape,Marc Espie
we don't put junk on the terminal.
2010-06-09use State usage, so that I can get rid of duplicate code...Marc Espie
2010-06-09no need to fatal(), we can error() and keep going.Marc Espie
2010-06-09warns if packages contain symlinks that point to non-existent places.Marc Espie
actually error out if a symlink points to itself. this breaks evolution, until someone fixes the bogus symlinks.
2010-06-09uniform spelling: packing-listMarc Espie
2010-06-09make error messages more consistent. Add an extra sanity check whichMarc Espie
shouldn't trigger for special files
2010-06-09check digital signatures, document thatMarc Espie
2010-06-09Move the prototype for uvm_wait() to uvm_extern.h and removeThordur I. Bjornsson
uvm_pdaemon.h has it was only holding that one prototype. OK art@, oga@, miod@, deraadt@
2010-06-09replace confusing (n to go) message with #done/#total annotations.Marc Espie
e.g., Checking packages|No change in apr-util-mt-1.2.10p4 (26/1530)
2010-06-09ui changes: go thru a state object for most printoutsMarc Espie
2010-06-08check length of value returned C_GetAttributValue for != 0Markus Friedl
from mdrtbugzilla@codefive.co.uk; bugzilla #1773; ok dtucker@
2010-06-08syncTodd T. Fries
2010-06-08properly enable vscsi, fix incorrect majorTodd T. Fries
ok jasper@ (also compile tested)
2010-06-08ber_calc_len() is not an internal function, so adjust the comment.Martin Hedenfal
from Dawe
2010-06-08syncTodd T. Fries
2010-06-08added vscsi a while back, add it here tooTodd T. Fries
2010-06-08Calculate size of update packet with IPv6 header and reserve spaceAlexander Bluhm
for IPsec. Avoid IPv6 fragments where possible. If a single LSA is too big, put it into a separate packet with up to IPV6_MAXPACKET bytes. This packet may get fragmented by the kernel. ok stsp@
2010-06-08tweak previous; help/ok naddyJason McIntyre
2010-06-08Introduce a diskmap pseudo device which allows userland to open a diskJoel Sing
specified via its disklabel UID. The mapping from the disklabel UID to the real disk and the opening of the resulting device is performed atomically using a single ioctl. ok krw@ deraadt@
2010-06-08Add missing function prototype.Joel Sing
2010-06-08tweak tweak so it worksMarc Espie
2010-06-08in viac3_crypto_setup(), if we fail to get a crypto driverid,Thordur I. Bjornsson
free the softc before we return. While here, make the allocation code a bit prettier too. OK deraadt@