summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-01-19provide EVP_ENCODE_CTX_{new,free}().Theo Buehler
ok jsing
2019-01-19$OpenBSD$Theo Buehler
2019-01-19Partial port of EC_KEY_METHOD from OpenSSL 1.1.Theo Buehler
Pass const method to EC_KEY_METHOD_get_*() to get rid of an XXX. from markus
2019-01-19Partial port of EC_KEY_METHOD from OpenSSL 1.1.Theo Buehler
This commit adds missing API for ECDH/ECDSA_verify. from markus
2019-01-19Partial port of EC_KEY_METHOD from OpenSSL 1.1.Theo Buehler
This commit adds init/free, support for signing, setting and getting the method, engine support as well as extra data. from markus
2019-01-19syncTheo de Raadt
2019-01-19jmatthew@ got my crappy ixl code to work, so I'm pretending to beDavid Gwynne
useful by writing the man page. suggested by jmatthew@
2019-01-19actually set CAUSE_ENA on the rx and tx queues, and re-enable interruptsJonathan Matthew
at the start of the interrupt handler. now it works well enough to commit over. ok dlg@
2019-01-19CXXFLAGS are the correct spelling for c++ options.Ted Unangst
ok deraadt millert
2019-01-18switch the default algorithm for the dgst command from MD5 to SHA256Christian Weisgerber
ok deraadt@
2019-01-18Don't store the mpe information in struct ktable but instead pass theClaudio Jeker
ifindex from the RDE over. This will allow to import prefixes to multiple mpe interfaces in one rdomain. OK dlg@
2019-01-18pack hmc bits in the right orderJonathan Matthew
ok dlg@
2019-01-18Add -iter and -pbkdf2 to the usage synopsis.Christian Weisgerber
Reorder option descriptions so -iter and -pbkdf2 show up alphabetically. Add missing argument name for -iter. ok jmc@
2019-01-18no need to KERNEL_LOCK before calling ktrstruct() anymore; ok mpi@ visa@cheloha
2019-01-18Bring back the ip_pcbopts() refactor. Pad the option buffer and thereforClaudio Jeker
the mbuf to the next word length as it is required by the standard. Also use the correct offset from the input mbuf. OK visa@, input & OK bluhm@
2019-01-18when removing the currently active network from the join list, disconnectPeter Hessler
from it as well OK stsp@
2019-01-18add a len field when we delete an essid from the joinlist. this will havePeter Hessler
us properly match, instead of hoping we got lucky when selecting it. OK stsp@
2019-01-18let users automatically use join to connect to any open wifi network.Peter Hessler
if a known network is visible, always prefer that instead. requested by many, OK stsp@
2019-01-18Add missing types, and fix incorrect names.Visa Hankala
2019-01-18Adapt expected number of dropped messages after sendsyslog(2) kernelAlexander Bluhm
buffer size has changed.
2019-01-18Increase the socket buffer size for sendsyslog(2) to 1 MB. DuringAlexander Bluhm
bursts it is possible that syslogd(8) cannot process messages fast enough. The larger kernel buffer allows to work them off in more time. Then fewer dropped messages are reported. problem found by millert@; OK claudio@ deraadt@
2019-01-18The .UR and .MT blocks in man(7) are represented by <a> elementsIngo Schwarze
which establish phrasing context, but they can contain paragraph breaks (which is relevant for terminal formatting, so we can't just change the structure of the syntax tree), which are respresented by <p> elements and cannot occur inside <a>. Fix this by prematurely closing the <a> element in the HTML formatter. This menas that the clickable text in HTML output is shorter than what is represented as the link text in terminal output, but in HTML, it is frankly impossible to have the clickable area of a hyperlink extend across a paragraph break. The difference in presentation is not a major problem, and besides, paragraph breaks inside .UR are rather poor style in the first place. The implementation is quite tricky. Naively closing out the <a> prematurely would result in accessing a stale pointer when later reaching the physical end of the .UR block. So this commit separates visual and structural closing of "struct tag" stack items. Visual closing means that the HTML element is closed but the "struct tag" remains on the stack, to avoid later access to a stale pointer and to avoid closing the same HTML element a second time later. This also needs reference counting of pointers to "struct tag" stack items because often more than one child holds a pointer to the same parent item, and only the outermost child can safely do the physical closing. In the whole corpus of nearly half a million manual pages on man.openbsd.org, this problem occurs in exactly one page: the groff(1) version 1.20.1 manual contained in DragonFly-3.8.2, which contains a formatting error triggering the bug.
2019-01-18Check for negative length in NFS strings. This affects both, theAlexander Bluhm
client and server. OK beck@
2019-01-18Check for negative length integers in NFS server. A maliciousAlexander Bluhm
client could crash the server. OK tedu@
2019-01-18Check for negative length integers in NFS client. A maliciousAlexander Bluhm
server could confuse the client file system code. OK beck@
2019-01-18initialize offset value so this passesBob Beck
ok jsing@
2019-01-18copyrightBob Beck
2019-01-18bump copyright years appopriatelyBob Beck
2019-01-18Add client side of supported versions and keyshare extensions with basic regressBob Beck
ok jsing@
2019-01-18sys/time.h: new macros: timerisvalid() and timespecisvalid().cheloha
Make it less likely you miss a zero when typing out 100000 or 100000000. Document them in getitimer.2 for the masses. These may be of use in library code as well as the kernel. Comparable inline functions exist in Linux but are not available to userspace like these. "OK." deraadt@
2019-01-18Sayt that using capabilities to negociate audio parameters (ie usingAlexandre Ratchov
sio_getcap() function) is not recomended. From Paul Swanson <psw at protonmail.com>, ok jmc
2019-01-18chase sounlock() api change, make bfd(4) build againPeter Hessler
"go ahead" deraadt@
2019-01-18remove a debugging printf that has outlived its usefulnessMike Larkin
2019-01-18Move link state change test & check for new lladdr intoKenneth R Westerback
interface_state(). Simplifies code a bit.
2019-01-18Improve the description of locale dependency:Ingo Schwarze
* mention LC_COLLATE; * clarify that all these functions are infested, including the *_l() versions; * avoid ENVIRONMENT, these functions don't inspect it; * and point to the C library functions that change the locale. OK millert@
2019-01-18Ignore HUP signals. If you need to modify the running configurationKenneth R Westerback
just run dhclient again, which does the same thing. i.e. kills existing dhclient processes and exec's a new copy. One less knob. Improves documention by eliminating very non-standard SIGNALS section. Feedback from schwarze@. ok deraadt@
2019-01-18Replace the vague, incorrect, and confusing BUGS sections with CAVEATSIngo Schwarze
clearly stating which arguments have to be avoided, and mention the header files defining the constants required for the checks. Feedback and OK guenther@, OK bluhm@.
2019-01-18tweak previous;Jason McIntyre
2019-01-18Expose some symbols in a new tls13_handshake.h for regression testing.Theo Buehler
Update the handshake state tables and flag names according to the design decisions and naming conventions in the hackroom. Garbage collect some things that turn out not to belong here. ok jsing
2019-01-18Removed unused struct members.Joel Sing
2019-01-18minor tweaks:Ingo Schwarze
* correctly mark up NULL * avoid gratuitous future tense * replace one wrong .Nm macro
2019-01-18Adjust EINVAL wording: tv_nsec cannot be 1 billion, either.cheloha
2019-01-18futex(2): validate relative timeout before sleeping.cheloha
Linux does validation. Document this new failure case as an EINVAL, like Linux. "stop waiting" deraadt
2019-01-18adjtime(2), settimeofday(2), clock_settime(2): validate inputcheloha
Add documentation for the new EINVAL cases for adjtime(2) and settimeofday(2). adjtime.2 docs ok schwarze@, settimeofday(2)/clock_settime(2) stuff ok tedu@, "stop waiting" deraadt@
2019-01-18Add the -iter and -pbkdf2 argumenst to encBob Beck
2019-01-18Change the default digest type to sha256, and add support forBob Beck
pbkdf2 with OpenSSL compatible flags ok jsing@
2019-01-18Remove this copy, we have decided we can do this in placeBob Beck
ok jsing@
2019-01-18Add support for RFC 8446 section 4.2 enforcing which extensions mayBob Beck
appear with which messages. ok jsing@
2019-01-18add missing .Vt markupIngo Schwarze
2019-01-18Oops. Nuke debug statement that snuck it.Kenneth R Westerback