summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-01-21The POSIX APIs that that sockaddrs all ignore the s*_len field in thePhilip Guenther
incoming socket, so userspace doesn't need to set it unless it has its own reasons for tracking the size along with the sockaddr. ok phessler@ deraadt@ florian@
2017-01-21Stop calling out to sudo/doas to kill processes. Reliance on systemTheo de Raadt
configuration to perform a racy behaviour is not wise. ok natano
2017-01-21Switch include of virtio header from dev/pci/to dev/pv/Reyk Floeter
2017-01-21Move vmmci.c to sys/dev/pv/vmmci.cReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/vmmci.c. no objections from sf@ mlarkin@
2017-01-21Move virtiovar.h to sys/dev/pv/virtiovar.hReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/virtiovar.h. no objections from sf@ mlarkin@
2017-01-21Move virtioreg.h to sys/dev/pv/virtioreg.hReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/virtioreg.h. no objections from sf@ mlarkin@
2017-01-21Move virtio.c to sys/dev/pv/virtio.cReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/virtio.c. no objections from sf@ mlarkin@
2017-01-21Move vioscsireg.h to sys/dev/pv/vioscsireg.hReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/vioscsireg.h. no objections from sf@ mlarkin@
2017-01-21Move vioscsi.c to sys/dev/pv/vioscsi.cReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/vioscsi.c. no objections from sf@ mlarkin@
2017-01-21Move viornd.c to sys/dev/pv/viornd.cReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/viornd.c. no objections from sf@ mlarkin@
2017-01-21Move viomb.c to sys/dev/pv/viomb.cReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/viomb.c. no objections from sf@ mlarkin@
2017-01-21Move viocon.c to sys/dev/pv/viocon.cReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/viocon.c. no objections from sf@ mlarkin@
2017-01-21Move vioblkreg.h to sys/dev/pv/vioblkreg.hReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/vioblkreg.h. no objections from sf@ mlarkin@
2017-01-21Move vioblk.c to sys/dev/pv/vioblk.cReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/vioblk.c. no objections from sf@ mlarkin@
2017-01-21In iwm(4), cancel mira timeouts in iwm_stop() and iwm_newstate() instead ofStefan Sperling
relying on the newstate task to do so. Fixes races of driver code against mira timeouts leading to crashes in some situations, e.g. occasionally when changing channels while the interface is up. ok procter@
2017-01-21Move if_vio.c to sys/dev/pv/if_vio.cReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the second step of moving the virtio files to dev/pv. No functional change. Moving the file is done by removing and adding it again - the old history can be found in the Attic of sys/dev/pci/if_vio.c. no objections from sf@ mlarkin@
2017-01-21Add an explicit syntax() call to indicate that no binary op wasKenneth R Westerback
found. Makes gcc happier. Add __dead to function prototype as we go by. ok guenther@
2017-01-21Add ct and nonct versions of BN_mod_inverse for internal useBob Beck
ok jsing@
2017-01-21Move virtio config from files.pci to files.pciReyk Floeter
virtio itself is not PCI, it is a paravirtual bus on top of either PCI or MMIO (arm). This is the first step of moving the virtio files to dev/pv. No functional change. arm kernel changes tested by jsg@ and patrick@ no objections from sf@ mlarkin@
2017-01-21Split out BN_div and BN_mod into ct and nonct versions for Internal use.Bob Beck
ok jsing@
2017-01-21Having a 'case 256:' in a switch (<uchar>) {} is bad on principleKenneth R Westerback
and makes gcc unhappy. In-line the single use #define, eliminate the 256: case and remove a now unneeded local variable. ok guenther@
2017-01-21sockets tell us the size of their data. since we want one udp packet,Peter Hessler
just use that. uses one less soreceive() loop per packet received. hints from claudio@
2017-01-21Nuke more whitespace caught in the headlights of "warning:"Kenneth R Westerback
rectification.
2017-01-21Nuke more whitespace caught in the headlights of "warning:"Kenneth R Westerback
rectification.
2017-01-21Add missing spl0() call.Patrick Wildt
2017-01-21Make explicit _ct and _nonct versions of bn_mod_exp funcitons thatBob Beck
matter for constant time, and make the public interface only used external to the library. This moves us to a model where the important things are constant time versions unless you ask for them not to be, rather than the opposite. I'll continue with this method by method. Add regress tests for same. ok jsing@
2017-01-21whitespaceTheo de Raadt
2017-01-21Only switch the pagetable if we were asked to switch to a userPatrick Wildt
process. This seems to happen when we switch away from a proc to kill it. We should probably start keeping a 'dummy' table around.
2017-01-21Default configuration file: use quotes for all files andSebastian Benoit
give a sensible example for the domain {} section. ok florian
2017-01-21Improve DocumentationSebastian Benoit
ok florian
2017-01-21add option 'domain full chain certificate "path"',Sebastian Benoit
revokation works, the fullchain file will be unlinked. ok florian
2017-01-21document default challengedir "/var/www/acme"Sebastian Benoit
2017-01-21see also acme-client.conf(5) suggested by millert and Raf CzlonkaSebastian Benoit
ok florian
2017-01-21Implement domain chain certificate.Florian Obser
OK benno
2017-01-21Split certificate file from config file into certdir and certfile.Florian Obser
This way we can still chroot to certdir but the the certificate file is not fixed to "cert.pem". Writing of chain.pem and fullchain.pem is currently broken with this. OK benno
2017-01-21Add Allwinner A64 devices to OpenBSD/arm64. This means we can runPatrick Wildt
on the Pine64. While there add a few more usb and pseudo devices.
2017-01-21remove unused vars; OK bennoFlorian Obser
2017-01-21Remove backup option. This is not acme-client's business; also it getsFlorian Obser
in the way. OK benno
2017-01-21We are only dealing with one domain on the command lineFlorian Obser
OK benno
2017-01-21Accommodate gcc's suggestion that assignments used as truth valuesKenneth R Westerback
should be enclosed in parentheses. ok deraadt@
2017-01-21Add my copyright.Theo Buehler
2017-01-21typo; ok bennoFlorian Obser
2017-01-21kill remote with fire, we need to handle this differentlyFlorian Obser
OK benno
2017-01-21typo; ok bennoFlorian Obser
2017-01-21acme-client use configuration file [5 of 5]Sebastian Benoit
implement new -n option to check and print configuration ok florian
2017-01-21acme-client use configuration file [4 of 5]Sebastian Benoit
fix getopt() ok florian
2017-01-21arm64 does not make use of constab but instead uses the samePatrick Wildt
mechanism as armv7. Remove it so no one starts to believe we would do it that way.
2017-01-21acme-client use configuration file [3 of 5]Sebastian Benoit
change command line options: n -> A new Account key N -> D new Domain key With this acme-client has these main usage patterns: * create new Account Key and Domain Key and get a certificate: acme-client -A -D www.example.com * renew certificate: acme-client www.example.com * revoke certificate: acme-client -r www.example.com ok florian
2017-01-21acme-client use configuration file [2 of 5]Sebastian Benoit
- add challengedir option to config file - remove -C option from command line ok florian
2017-01-21acme-client use configuration file [1 of 5]Sebastian Benoit
start using the configuration file and delete command line arguments: -a agreement -> agreement url ... -c certdir -> domain certificate "path" -f accountkey -> account key "path" -k domainkey -> domain key "path" -s authority -> sign with "name" new argument: -f configfile the changes needed to use the new configuration are local to main.c for now. While the configuration could be passed directly to netproc(), keyproc() etc, the diff is smaller this way. This also removes the multidir (-m) mode for now - specify different paths in each domain {} block instead. ok florian