summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-04-01Abate superfluous lines from remote serversjob
OK claudio@
2021-04-01Compare the pointer variable explicitly with NULL in if conditionKinichiro Inoguchi
2021-04-01Hardcode meaningful alert level, track apm's battery state betterkn
The current code looks for the nonexistent "cellwise,alert-level" property and falls back to zero as threshold (like the original NetBSD code). It also updates the CONFIG register with that very threshold to let the hardware set a bit and thus alert us when it has been reached. Since our sensor framework is designed to poll every N seconds and this driver does not actually look at whether the hardware alerted, neither using a default threshold of zero nor updating the hardware with it makes sense. Remove the alert level code and simply map >50%, >25% and <=25% of remaining battery life to apm(4)'s "high", "low" and "critical" battery state respectively; this matches exactly what acpibat(4) does and provides more meaningful sensor readings without relying on nonexistent device tree bindings. Feedback OK patrick
2021-04-01merge NSD 4.3.6rc1Stuart Henderson
2021-04-01Push kernel lock down to umb_rtrequest().mvs
We are going to unlock PF_ROUTE sockets. This means `if_rtrequest' handler will be performed without kernel lock. umb_rtrequest() calls umb_send_inet_proposal() which touches kernel lock protected `ipv{4,6}dns' array. Also umb_rtrequest() is the only handler which requires kernel lock to be held. So push the lock down to umb_rtrequest() instead of grab it around `if_rtrequest' call. This hunk was commited separately for decreases PF_ROUTE sockets unlocking diff. ok gerhard@ deraadt@
2021-04-01Make build_crls() behave like build_chain(). If there is not auth dataClaudio Jeker
just NULL the STACK_OF() pointer since libcrypto calls can handle that. Update comments to be more accurate. With and OK tb@
2021-04-01Do a better job at cleaning up. Remove empty directories, scan not only theClaudio Jeker
known repositories but also clean up no longer known repositories. With this rpki-client keeps its cache nice and shiny. With and OK job@
2021-04-01Add encoding.c to the various build targetsClaudio Jeker
2021-04-01Change search-again with vi keys to work like actual vi(1), also someNicholas Marriott
other fixes. From Aaron Jensen with help from Anindya Mukherjee.
2021-04-01Move base64 and hex encoding functions into their own place.Claudio Jeker
OK tb@
2021-04-01Missing commas, from Vipul Kumar.Nicholas Marriott
2021-03-31Use new limits@openssh.com protocol extension to let the client selectDamien Miller
good limits based on what the server supports. Split the download and upload buffer sizes to allow them to be chosen independently. In practice (and assuming upgraded sftp/sftp-server at each end), this increases the download buffer 32->64KiB and the upload buffer 32->255KiB. Patches from Mike Frysinger; ok dtucker@
2021-03-31cannot effectively test posix-rename extension after changes inDamien Miller
feature advertisment.
2021-03-31do not advertise protocol extensions that have been disallowed byDamien Miller
the command-line options (e.g. -p/-P/-R); ok dtucker@
2021-03-31Set 'select_timeout' to 'now' when an OFFER is received for the IP addressKenneth R Westerback
requested in the DISCOVER. i.e. immediately accept the OFFER rather than waiting for select_timeout to expire before accepting the same OFFER. A corner case since select-timeout is 0 by default.
2021-03-31Add two missing checks for strdup() returning NULL.Kenneth R Westerback
2021-03-31one of the examples needs an -N (and explanation);Jason McIntyre
diff from robert scheck discussed with and tweaked by sthen
2021-03-31add --no-motd to SYNOPSIS;Jason McIntyre
2021-03-31Add option to suppress the Message of the Dayjob
Fine deraadt@
2021-03-31tweak column widths of a .Bl -column tableIngo Schwarze
and avoid an over-long source line while here; OK martijn@ jmc@
2021-03-31turn log_trace() into a macro to prevent evaluating the format stringEric Faurot
parameters when tracing is not enabled. ok millert@
2021-03-31Update for DTLSv1.2 support.Theo Buehler
2021-03-31allow to specify tls protocols and ciphers on relay actionsEric Faurot
ok espie@ sthen@ tb@
2021-03-31change the barrier so that fd's are always passed and received withEric Faurot
the first byte of the imsg they belong to. idea, tweaks and ok claudio@
2021-03-31Remove workarounds for SSL_is_dtls()Theo Buehler
Reminded by inoguchi jsing
2021-03-31Remove workaround for missing d2i_DSAPrivateKey_fp prototypeTheo Buehler
2021-03-31syncTheo Buehler
2021-03-31Bump minors after symbol additionTheo Buehler
2021-03-31Expose various DTLSv1.2 specific functions and definesTheo Buehler
ok bcook inoguchi jsing
2021-03-31Document SSL_set_hostflags(3) and SSL_get0_peername(3)Theo Buehler
ok bcook inoguchi jsing
2021-03-31Expose SSL_set_hostflags(3) and SSL_get0_peername(3)Theo Buehler
ok bcook inoguchi jsing
2021-03-31Document SSL_use_certificate_chain_file(3)Theo Buehler
ok bcook inoguchi jsing
2021-03-31Expose SSL_use_certificate_chain_file(3)Theo Buehler
ok bcook inoguchi jsing
2021-03-31Provide missing prototype for d2i_DSAPrivateKey_fp(3)Theo Buehler
ok bcook inoguchi jsing
2021-03-31Document EVP_PKEY_new_CMAC_key(3)Theo Buehler
ok bcook inoguchi jsing
2021-03-31Provide EVP_PKEY_new_CMAC_key(3)Theo Buehler
ok bcook inoguchi jsing
2021-03-31Set the process title for the rpki-client subprocesses so they can beClaudio Jeker
identified more easily. OK deraadt@
2021-03-31Fix some debug output when running in foreground.Kenneth R Westerback
Call tick_msg() at startup so it knows if the link is up. Don't emit 'link timeout expired' messages after the link has been up.
2021-03-31Make ddb's dependency on libz explicit.Visa Hankala
OK deraadt@ mpi@
2021-03-31syncStuart Henderson
2021-03-31Remove redundant "HUAWEI Mobile" in usbdevs strings, mention radioStuart Henderson
technology where known. ok deraadt
2021-03-31Introduce UAO_USES_SWHASH() and use tabs instead of spaces in #defines.Martin Pieuchot
No functionnal change, reduce the difference with NetBSD. ok jmatthew@
2021-03-31Do not exit if cannot write to normal log file, GitHub issue 2630.Nicholas Marriott
2021-03-31document trusted_snapshotMarc Espie
2021-03-30fix typos in commentsStuart Henderson
2021-03-30In HTML output, correctly render .Bd -unfilled in proportionally-spacedIngo Schwarze
font, rather than with the monospace font appropriate for .Bd -literal. This fixes a minibug reported by anton@. Implemented by no longer relying on the typical browser default of "pre { font-family: monospace }" but instead letting <pre> elements inherit the font family from their parent, then adding an explicit CSS .Li class only for those displays where the manual page author requested it by using the -literal option on the .Bd macro.
2021-03-30Handle systems, such as the Dell Precision 3640, that accessMark Kettenis
GenericSerialBus operating regions witout checking whether they're really available. This needs to work on RAMDISK kernels as well. Since we don't want to pull in the i2c subsystem on those, provide a separate and much simpler dummy implementation of the GenericSerialBus access code when SMALL_KERNEL is defined. ok tb@
2021-03-30Register the PCI variant of dwiic(4) with acpi(4).Mark Kettenis
ok tb@
2021-03-30Make http_new() take care of all the error handling. By closing theClaudio Jeker
outfd and sending back the failure report via http_fail(). This was partially done in the failure case of http_resolv() and resulted in double failure reports in that case. With and OK tb@, previous version OK deraadt@
2021-03-30Some cards announce support for the NTB16 format, but that support does notPatrick Wildt
work. Hence, add support for NTB32 in the transmit path. We already have support for NTB32 in the receive path. We detect the supported format on boot and can then decide on transmit which format to use. From ehrhardt@ with gerhard@ Tested by jan@ ok sthen@