summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-09-13Adjust printf for the fact that device locators are now long.Mark Kettenis
2015-09-13Wrap <ctype.h> and <wctype.h> so that calls go direct and the symbols notPhilip Guenther
in standard C are all weak. Hide several symbols internal to the implementation
2015-09-13Wrap <uuid.h> so that calls go direct and the symbols are all weakPhilip Guenther
2015-09-13Wrap <vis.h> so that calls go direct and the symbols are all weakPhilip Guenther
2015-09-13<sys/systm.h> must be before <sys/syscall_mi.h> now.Miod Vallat
2015-09-13syncTheo de Raadt
2015-09-13Introduce sched_barrier(9), an interface that acts as a scheduler barrier inMark Kettenis
the sense that it guarantees that the specified CPU went through the scheduler. This also guarantees that interrupt handlers running on that CPU will have finished when sched_barrier() returns. ok miod@, guenther@
2015-09-13Add Certplus CA root certificate:Stuart Henderson
C=FR, O=Certplus, CN=Class 2 Primary CA req by beck@, ok miod@ beck@
2015-09-13match a few if_media uint64_t conversions; ok miodTheo de Raadt
2015-09-13display negotiated TLS version and cipher suite in verbose mode.Bob Beck
ok jsing@
2015-09-13Lob a style(9) grenade in here.Joel Sing
2015-09-13Set woken flag when flushing so that the channel is freed, while hereNicholas Marriott
use the same loop construct for both loops.
2015-09-13Mechanical minor bump to follow libcrypto.Miod Vallat
2015-09-13queue revarps to softnet so we can defer processing to a context withDavid Gwynne
the kernel lock. "do it" claudio@ mpi@
2015-09-13replace hand rolled refcounts and sleep_setup/finish with refcnts andDavid Gwynne
refcnt_finalize.
2015-09-13add visibility of ciper and connection version stringsBob Beck
ok jsing@
2015-09-13explicit_bzero() from Michael McConville, thanks!Florian Obser
OK claudio
2015-09-13Mark IGNORE_IS_FATAL and IGNORE_SILENT as user settings explicitly.Vadim Zhukov
This makes syncing list of such variables with portcheck code easier.
2015-09-13Add a new interface, OPENSSL_cpu_caps(), to return the currently runningMiod Vallat
cpu's specific hardware capabilities users of libcrypto might be interested in, as an integer value. This deprecates the existing OPENSSL_ia32cap() macro and the OPENSSL_ia32cap_loc() function (which returns the pointer so that you can mess with stuff you shouldn't mess with). Interpreting the value returned by OPENSSL_cpu_caps() is, of course, machine-dependent. Minor version bump for libcrypto. ok beck@ jsing@
2015-09-13replace hand rolled reference counting with refcnts.David Gwynne
2015-09-13Run the interface watchdog timer routine as a task such that we have processMark Kettenis
context. ok mpi@, claudio@
2015-09-13reintroduce mpsafe vlan_input.David Gwynne
the last commit was missing SRPL_INITs of the vlan_tagh buckets, which was in a different tree to the one i committed from. apologise to naddy@ again
2015-09-13Remove setup_X_sockets():Robert Peichaer
The creation of Unix sockets directories in /tmp for X happens right after pruning /tmp. So the whole dance of checking for their existence, ownership or permissions is not necessary. It's safe to just create them with the right permissions if X is installed. Changes to do_fsck(): Remove the _flags variable and pass flags to fsck directly with "$@". Feedback and OK halex@ OK krw@ on a similar diff
2015-09-13The *_accept() functions increment in_handshake at the start of the function,Joel Sing
then decrement it and call a callback on exit from the function. As such, these functions should not return in the middle, otherwise in_handshake is never decremented and the callback never called. ok beck@ "with many sighs" miod@
2015-09-13If we have hardware acceleration for AES, prefer AES as a symmetric cipherJoel Sing
over CHACHA20. Otherwise, prefer CHACHA20 with AES second. ok beck@ miod@
2015-09-13tweak ordering slightlyDavid Gwynne
2015-09-13namespace.h is pulled in via -include, so don't do it herePhilip Guenther
2015-09-13forgot to prototope SRPL_RC_INITIALIZERDavid Gwynne
2015-09-13mpool(3) is no longer installed; delete it. prodded by jmc@Philip Guenther
2015-09-13Wrap <stdlib.h> so that calls go direct and the symbols not in thePhilip Guenther
C standard are all weak. Apply __{BEGIN,END}_HIDDEN_DECLS to gdtoa{,imp}.h, hiding the arch-specific __strtorx, __ULtox_D2A, __strtorQ, __ULtoQ_D2A symbols.
2015-09-13On show the ps/o output and ddb.html blurb once, so that we don't get themPhilip Guenther
after each "mach ddbcpu N" ok miod@ deraadt@
2015-09-13Set the index of the interface in handroller link_addr(3) like code.Martin Pieuchot
This is now necessary on OpenBSD because our routing interface no longer use ifunit() to find the corresponding interface. ok yasuoka@, dlg@
2015-09-13tweak STANDARDS;Jason McIntyre
2015-09-13Do provide hidden _libc_* aliases for sig{block,setmask} and use them inPhilip Guenther
the ASM *setjmp implementations. Skip the PLT when calling them on amd64 (other archs to do this after testing) ok miod@
2015-09-13back out mpsafe vlans while i chase down a panic when operationsDavid Gwynne
are done in a certain order. panic found by naddy@
2015-09-12Restore SMBIOS detection in ISA. OK yasuoka@Masao Uebayashi
2015-09-12Call socreate(9) only when we have a destination ip and port.Florian Obser
Call sobind(9) only when we have a source ip. With this we can treat sc->so != NULL as a flag if the interface is in state IFF_RUNNING. Input & OK bluhm@, OK benno@
2015-09-12Add missing free() in efid_io(). Found by jsg.YASUOKA Masahiko
ok kettenis jsg
2015-09-12Adapt to just committed libtls api changeBob Beck
2015-09-12Move connection info into it's own private structure allocated and filled inBob Beck
at handshake time. change accessors to return const char * to remove need for caller to free memory. ok jsing@
2015-09-12Split ssl3_send_client_key_exchange() (387 lines of code) into fiveJoel Sing
functions. The original was written as a huge if/else if chain - split out the handling for each key exchange type. This allows us to reduce two levels of indentation, make the code far more readable and have single return paths so that we can simplify clean up. ok beck@
2015-09-12consistently name the ifnet * that refers to the parent interfaceDavid Gwynne
ifp0, and the ifnet * that refers to the carp interface ifp. this makes it easier for me to read. it's probably not the right name for ifp0, but at least it's consistent. ok sthen@ bluhm@ mpi@ claudio@
2015-09-12Fix function name.Joel Sing
2015-09-12Now that rtrequest1(9) properly sets RTF_UP for newly added route,Martin Pieuchot
stop passing it in every rt_ifa_add(9) calls. ok claudio@
2015-09-12make vlan_input mpsafe by using srp lists in the vlan tag hash buckets.David Gwynne
ok mpi@ claudio@
2015-09-12Sync handling of cached record digests with s3_srvr.c.Joel Sing
2015-09-12Stop overwriting the rt_ifp pointer of RTF_LOCAL routes with lo0ifp.Martin Pieuchot
Use instead the RTF_LOCAL flag to loop local traffic back to the corresponding protocol queue. With this change rt_ifp is now always the same as rt_ifa->ifa_ifp. ok claudio@
2015-09-12explicit_bzero() the GOST premaster secret.Joel Sing
ok miod@
2015-09-12Ensure that we clear the libssl error stack before we make a function callJoel Sing
that we will pass the result through tls_ssl_error() on failure. Otherwise we can end up reporting spurious errors due to their being unrelated errors already on the error stack. Spotted by Marko Kreen. ok beck@
2015-09-12Unwrap a bunch of lines.Joel Sing