summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2020-09-14No need to check for SDEV_DYING as the first thing in both branches of anKenneth R Westerback
2020-09-14Move state initialisation from SSL_clear() to ssl3_clear().Joel Sing
2020-09-14Fix handling of user names containing '@' symbols.Todd C. Miller
2020-09-14Cleanup and simplify SSL_set_session().Joel Sing
2020-09-14perform the uvm_map_inentry() after the data_aborts handlers are executedTheo de Raadt
2020-09-14Typofixkn
2020-09-14Avoid NULL deref SSL_{,CTX_}set_ciphersuitesTheo Buehler
2020-09-14We need to be able to provide contact information to use theFlorian Obser
2020-09-14Relax parsing of pem files a bit. Apparently there are CAs that useFlorian Obser
2020-09-14Use more specific regex for ktrace to avoid false positives.Alexander Bluhm
2020-09-14umstc_intr is not in process context when adjusting wscons brightness. When b...Theo de Raadt
2020-09-14Allow snmp mibtree to take one or more arguments who will be converted toMartijn van Duren
2020-09-14Do not bother scanning file systems that are both nodev and nosuidIngo Schwarze
2020-09-14simplify RETURN VALUES for x509_verify(3) after beck@ made the rulesIngo Schwarze
2020-09-14Report what's wrong when account creation fails instead of a genericFlorian Obser
2020-09-14Delete some emulator code which has never been used on 64 bit sparcTheo de Raadt
2020-09-14Document "pki" option for relay delivery too; from Nick GassonTodd C. Miller
2020-09-14similar to fix by kettenis on amd64:Theo de Raadt
2020-09-14The uvm_map_inentry() check may sleep to grab the lock of the map.Mark Kettenis
2020-09-14Add initial man page for new x509_verify chain validatorBob Beck
2020-09-14Set error if we are given an NULL ctx in x509_verify, and set errorBob Beck
2020-09-14nuke a stray spaceTheo Buehler
2020-09-14Fix potential leak when tmpext fails to be added toBob Beck
2020-09-14Rewrite the agentx code of relayd. This new framework should allow usMartijn van Duren
2020-09-14pf: Merge NOTES column into NAME columnkn
2020-09-14All buffers are in rw-memory, but lookup_record has it defined asMartijn van Duren
2020-09-14syncStuart Henderson
2020-09-14Change the known output to be the expected output, so that weBob Beck
2020-09-14Use a fixed validation time in these tests so we neverBob Beck
2020-09-14Make "spf walk" report if an spf-record has macro's and can't be resolved.Martijn van Duren
2020-09-14remove unneeded variable "type".Bob Beck
2020-09-14We might race against removal of an rdomain we just want to handle.Florian Obser
2020-09-14Document the fact that the maximum size of a font is currently 512 KiB.Frederic Cambus
2020-09-14Don't leak names on successBob Beck
2020-09-14remove unneded variable "time1"Bob Beck
2020-09-14Let slaacd handle all rdomains in a single daemon.Florian Obser
2020-09-14remove unneded variable "time"Bob Beck
2020-09-14fix bug introduced on review where refactor made it possible toBob Beck
2020-09-14Mechanically replace isc_boolean_t with int.Florian Obser
2020-09-14Bunch of dead stores and otherwise unused stuff lets us get rid ofFlorian Obser
2020-09-14Rewrite isc_time_microdiff() as uelapsed() and put it directlyFlorian Obser
2020-09-14re-enable new x509 chain verifier as the defaultBob Beck
2020-09-14Correctly fix double free introduced on review.Bob Beck
2020-09-14No need to check for NULL before calling free.Martijn van Duren
2020-09-14Fix double free - review moved the pop_free of roots to x509_verify_ctx_freeBob Beck
2020-09-14revert previous, need to fix a problemBob Beck
2020-09-14Fix comment, ktrace flags are per-process.Martin Pieuchot
2020-09-14Enable the use of the new x509 chain validator by default.Bob Beck
2020-09-14syncTheo de Raadt
2020-09-14Connect a client to a server. Both can be current libressl, orAlexander Bluhm