summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-01-19now that it works, enable ixl(4) on amd64Jonathan Matthew
2019-01-19Hook record regress.Joel Sing
2019-01-19Add regress for TLSv1.3 record handling.Joel Sing
2019-01-19IMSG_HUP -> IMSG_RESTART. sendhup() -> sendrestart.Kenneth R Westerback
2019-01-19Provide a TLS record handling implementation.Joel Sing
This is a self-contained struct and set of functions that knows how to decode and read a TLS record from data supplied via a read callback, and send itself via a write callback. This will soon be used to build the TLSv1.3 record layer handling code. ok beck@ tb@
2019-01-19Drop pseudo-signal idiom. Rename INTERNALSIG to TERMINATE. Use RESTARTKenneth R Westerback
instead of overloading SIGHUP.
2019-01-19'quit' no longer holds signals, so strsignal(quit) is both pointlessKenneth R Westerback
and now in unreachable code. Simplifies dispatch loops by eliminating most uses of INTERNALSIG.
2019-01-19Move boottime into the timehands.cheloha
To protect the timehands we first need to protect the basis for all UTC time in the kernel: the boottime. Because the boottime can be changed at any time it needs to be versioned along with the other members of the timehands to enable safe lockless reads when using it for anything. So the global boottime timespec goes away and the static boottimebin becomes a member of the timehands. Instead of reading the global boottime you use one of two interfaces: binboottime(9) or microboottime(9). nanoboottime(9) can trivially be added later, though there are no consumers for it at the moment. This introduces one small change in behavior. We used to advance the reported boottime just before launching kernel threads from main(). This makes it look to userland like we "booted" moments before those threads were launched. Because there is no longer a boottime global we can no longer trivially do this from main(), so the boottime we report to userspace via e.g. kern.boottime will now reflect whatever the time was when we bootstrapped the timehands via inittodr(9). This is usually no more than a minute before the kernel threads are launched from main(). The prior behavior can be restored by adding a new interface to the timecounter layer in a future commit. Based on FreeBSD r303387. Discussed with mpi@ and visa@. ok visa@
2019-01-19'quit' is no longer set in a signal handler so it no longer needs toKenneth R Westerback
be sig_atomic_t. Plain int should be sufficient.
2019-01-19syncTheo Buehler
2019-01-19bump minors after symbol additionTheo Buehler
2019-01-19provide EVP_ENCODE_CTX_{new,free}().Theo Buehler
ok jsing
2019-01-19$OpenBSD$Theo Buehler
2019-01-19Partial port of EC_KEY_METHOD from OpenSSL 1.1.Theo Buehler
Pass const method to EC_KEY_METHOD_get_*() to get rid of an XXX. from markus
2019-01-19Partial port of EC_KEY_METHOD from OpenSSL 1.1.Theo Buehler
This commit adds missing API for ECDH/ECDSA_verify. from markus
2019-01-19Partial port of EC_KEY_METHOD from OpenSSL 1.1.Theo Buehler
This commit adds init/free, support for signing, setting and getting the method, engine support as well as extra data. from markus
2019-01-19syncTheo de Raadt
2019-01-19jmatthew@ got my crappy ixl code to work, so I'm pretending to beDavid Gwynne
useful by writing the man page. suggested by jmatthew@
2019-01-19actually set CAUSE_ENA on the rx and tx queues, and re-enable interruptsJonathan Matthew
at the start of the interrupt handler. now it works well enough to commit over. ok dlg@
2019-01-19CXXFLAGS are the correct spelling for c++ options.Ted Unangst
ok deraadt millert
2019-01-18switch the default algorithm for the dgst command from MD5 to SHA256Christian Weisgerber
ok deraadt@
2019-01-18Don't store the mpe information in struct ktable but instead pass theClaudio Jeker
ifindex from the RDE over. This will allow to import prefixes to multiple mpe interfaces in one rdomain. OK dlg@
2019-01-18pack hmc bits in the right orderJonathan Matthew
ok dlg@
2019-01-18Add -iter and -pbkdf2 to the usage synopsis.Christian Weisgerber
Reorder option descriptions so -iter and -pbkdf2 show up alphabetically. Add missing argument name for -iter. ok jmc@
2019-01-18no need to KERNEL_LOCK before calling ktrstruct() anymore; ok mpi@ visa@cheloha
2019-01-18Bring back the ip_pcbopts() refactor. Pad the option buffer and thereforClaudio Jeker
the mbuf to the next word length as it is required by the standard. Also use the correct offset from the input mbuf. OK visa@, input & OK bluhm@
2019-01-18when removing the currently active network from the join list, disconnectPeter Hessler
from it as well OK stsp@
2019-01-18add a len field when we delete an essid from the joinlist. this will havePeter Hessler
us properly match, instead of hoping we got lucky when selecting it. OK stsp@
2019-01-18let users automatically use join to connect to any open wifi network.Peter Hessler
if a known network is visible, always prefer that instead. requested by many, OK stsp@
2019-01-18Add missing types, and fix incorrect names.Visa Hankala
2019-01-18Adapt expected number of dropped messages after sendsyslog(2) kernelAlexander Bluhm
buffer size has changed.
2019-01-18Increase the socket buffer size for sendsyslog(2) to 1 MB. DuringAlexander Bluhm
bursts it is possible that syslogd(8) cannot process messages fast enough. The larger kernel buffer allows to work them off in more time. Then fewer dropped messages are reported. problem found by millert@; OK claudio@ deraadt@
2019-01-18The .UR and .MT blocks in man(7) are represented by <a> elementsIngo Schwarze
which establish phrasing context, but they can contain paragraph breaks (which is relevant for terminal formatting, so we can't just change the structure of the syntax tree), which are respresented by <p> elements and cannot occur inside <a>. Fix this by prematurely closing the <a> element in the HTML formatter. This menas that the clickable text in HTML output is shorter than what is represented as the link text in terminal output, but in HTML, it is frankly impossible to have the clickable area of a hyperlink extend across a paragraph break. The difference in presentation is not a major problem, and besides, paragraph breaks inside .UR are rather poor style in the first place. The implementation is quite tricky. Naively closing out the <a> prematurely would result in accessing a stale pointer when later reaching the physical end of the .UR block. So this commit separates visual and structural closing of "struct tag" stack items. Visual closing means that the HTML element is closed but the "struct tag" remains on the stack, to avoid later access to a stale pointer and to avoid closing the same HTML element a second time later. This also needs reference counting of pointers to "struct tag" stack items because often more than one child holds a pointer to the same parent item, and only the outermost child can safely do the physical closing. In the whole corpus of nearly half a million manual pages on man.openbsd.org, this problem occurs in exactly one page: the groff(1) version 1.20.1 manual contained in DragonFly-3.8.2, which contains a formatting error triggering the bug.
2019-01-18Check for negative length in NFS strings. This affects both, theAlexander Bluhm
client and server. OK beck@
2019-01-18Check for negative length integers in NFS server. A maliciousAlexander Bluhm
client could crash the server. OK tedu@
2019-01-18Check for negative length integers in NFS client. A maliciousAlexander Bluhm
server could confuse the client file system code. OK beck@
2019-01-18initialize offset value so this passesBob Beck
ok jsing@
2019-01-18copyrightBob Beck
2019-01-18bump copyright years appopriatelyBob Beck
2019-01-18Add client side of supported versions and keyshare extensions with basic regressBob Beck
ok jsing@
2019-01-18sys/time.h: new macros: timerisvalid() and timespecisvalid().cheloha
Make it less likely you miss a zero when typing out 100000 or 100000000. Document them in getitimer.2 for the masses. These may be of use in library code as well as the kernel. Comparable inline functions exist in Linux but are not available to userspace like these. "OK." deraadt@
2019-01-18Sayt that using capabilities to negociate audio parameters (ie usingAlexandre Ratchov
sio_getcap() function) is not recomended. From Paul Swanson <psw at protonmail.com>, ok jmc
2019-01-18chase sounlock() api change, make bfd(4) build againPeter Hessler
"go ahead" deraadt@
2019-01-18remove a debugging printf that has outlived its usefulnessMike Larkin
2019-01-18Move link state change test & check for new lladdr intoKenneth R Westerback
interface_state(). Simplifies code a bit.
2019-01-18Improve the description of locale dependency:Ingo Schwarze
* mention LC_COLLATE; * clarify that all these functions are infested, including the *_l() versions; * avoid ENVIRONMENT, these functions don't inspect it; * and point to the C library functions that change the locale. OK millert@
2019-01-18Ignore HUP signals. If you need to modify the running configurationKenneth R Westerback
just run dhclient again, which does the same thing. i.e. kills existing dhclient processes and exec's a new copy. One less knob. Improves documention by eliminating very non-standard SIGNALS section. Feedback from schwarze@. ok deraadt@
2019-01-18Replace the vague, incorrect, and confusing BUGS sections with CAVEATSIngo Schwarze
clearly stating which arguments have to be avoided, and mention the header files defining the constants required for the checks. Feedback and OK guenther@, OK bluhm@.
2019-01-18tweak previous;Jason McIntyre
2019-01-18Expose some symbols in a new tls13_handshake.h for regression testing.Theo Buehler
Update the handshake state tables and flag names according to the design decisions and naming conventions in the hackroom. Garbage collect some things that turn out not to belong here. ok jsing