summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-08-26remove nginx referencesRobert Nagy
2014-08-26remove nginx from the base system in favor of OpenBSD's own httpd(8)Robert Nagy
2014-08-26usr.sbinRobert Nagy
2014-08-26syncTheo de Raadt
2014-08-26Update regress to follow openssl(1) move.Joel Sing
2014-08-26Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is notJoel Sing
a system/superuser binary. At the same time, move the source code from its current lib/libssl/src/apps location to a more appropriate home under usr.bin/openssl. ok deraadt@ miod@
2011-09-22import of nginx 1.0.6 with a bundled libpcre needed for pcre to workRobert Nagy
properly. this is not yet linked to the build but we would like to work on it in tree to provide an apache replacement for base
2014-08-26Revert the addition of broadcast addresses, it apparently also corruptsMartin Pieuchot
the tree. Found by millert@.
2014-08-26Don't single out ami(4) here; other RAID drivers support logicalTodd C. Miller
drive reporting too. OK jsing@
2014-08-26inevitable churn caused by the section title changeIngo Schwarze
2014-08-26Unify console and CGI section titles, bringing them closer to groff,Ingo Schwarze
is an attempt to reduce confusion for users switching between media and between different operating systems. Not using the groff title for section 4 is intentional, it is just too awful ("Kernel Interfaces Manual"), and the difference from sections 2 and 9 would be too hard to see. Positive feedback from at least deraadt@ millert@ bluhm@ jca@. Previously also agreed with the general direction: jmc@ Nick@. The title for 3p was polished by bluhm@. The existing mismatches were originally noticed by jsg@.
2014-08-26Revert part of the if_rxr diff that incorrectly moves RX ring tailMike Belopuhov
index update code from the buf_get success path to the do it all the time code path. Tested by millert; ok dlg, deraadt
2014-08-25Base system special services have no flags, so move the test for themIngo Schwarze
up front in add_flags(). This avoids unnecessary work, avoids setting bogus variables, and reduces the risk of screwing up things when changing the code. No functional change right now. ok ajacoutot@
2014-08-25get rid of the tempfile in svc_default_enabled_flags();Ingo Schwarze
feedback and ok ajacoutot@
2014-08-25rc.d scripts are shell scripts and need to be sourced in svc_get_flags().Antoine Jacoutot
It's the only way to get daemon_flags in case it contains line continuation... We only need to do that for enable package scripts. original idea from Sebastien Marie discussed with, input from and ok schwarze@
2014-08-25Document the IPv4/IPv6 command line switches and protocol loghostAlexander Bluhm
prefixes. OK jmc@ henning@
2014-08-25Call check_tty_name() and check_log_name() with the string size andAlexander Bluhm
don't access memory beyond. Make sure that the complete string "/dev/null" can be copied. OK henning@
2014-08-25Add tests where the IP address family has been chosen by -4 or -6Alexander Bluhm
command line switch and udp4:// or udp6:// loghost prefix.
2014-08-25Inspired by the previous brainpool addition, copy isakmpd's dh test toReyk Floeter
iked. Both daemons share the same dh implementation, but this makes it easier to test iked directly.
2014-08-25No more /etc/X11/fsMatthieu Herrb
2014-08-25For functions that take args, return immediately if no args is passed.Antoine Jacoutot
Add/drop missing/unused local variables. no functionnal change
2014-08-25Cope with some weird rc.conf.local file like "foobar" in pkg_scriptsAntoine Jacoutot
while "foobar_flags" is set to "NO"... Reparse deamon_flags at the end of add_flags() since they may have been modified by the function.
2014-08-25Allow to restrict syslogd to a protocol family with -4 and -6 commandAlexander Bluhm
line switches. If the log server is an FQDN, DNS chooses wether to take the IPv4 or IPv6 route. Allow to prefix the log host with udp4:// or udp6:// to choose a protocol. OK henning@
2014-08-25Fix the gcc compiler warnings "comparison between signed andAlexander Bluhm
unsigned". Some checks got stricter. The (size_t) cast is only done, if the argument is not negative. OK henning@
2014-08-25Add tests for syslogd sending and receiving over IPv6 sockets.Alexander Bluhm
2014-08-20Run syslogd regressions tests. As only one syslogd can run perAlexander Bluhm
machine, each test kills any syslogd first. At the end the system's syslogd gets restarted. The test framework runs a client, and a server, and a syslogd. The messages are passed via the log socket or via UDP from the client to syslogd. From there UDP transport is used to reach the server. All processes write log files where the message has to show up. The test arguments are kept in the args-*.pl files. The content of a log file, the data sent to a pipe process and what the server received are checked. The invocation of the sendsyslog(2) syscall is checked with ktrace, the open file descriptors of syslogd are checked with fstat.
2014-08-25you broke the ramdisk builds...Theo de Raadt
2014-08-25add an example vmx config lineJonathan Gray
ok dlg@
2014-08-25Sync dh.[ch] from iked. The files are identical, so any change inReyk Floeter
either iked or isakmpd should be synced to the other daemon. The previous changes from iked include: plug two memory leaks, verify EC points and add the Brainpool curves. All tests in regress/sbin/isakmpd/dh passed OKAY. ok markus@ mikeb@
2014-08-25Add support for DH groups 27-30 using the Brainpool curves which haveReyk Floeter
previously been added to LibreSSL's libcrypto. ok markus@ mikeb@
2014-08-25Previosuly forgot the Makefile bit: add mime.typesReyk Floeter
2014-08-25Simplify rm_from_pkg_scripts(); minus ten lines; no functional change;Ingo Schwarze
ok ajacoutot@. For non-trivial automated text editing in sh(1), thou shalt use sed(1).
2014-08-25Add a generic system-wide /usr/share/misc/mime.types file that can beReyk Floeter
included in httpd.conf. httpd(8) now supports both mime.types flavours with or without semicolon at the end of the line (nginx- or apache-style). Discussed with many, with input from halex@ OK halex@
2014-08-25We have never limited the definition of "supported SPF modules"Mike Belopuhov
to the vendor/make whitelist maintained by Intel so there's no reason to start doing it now. When syncing the driver to the FreeBSD codebase I have decided to take this chunk as is but it appears that it breaks cheap chinese SFP+ fiber optics modules that we all love. And while there's still a lot of places where we check for the vendor OUI, most of these checks are not necessary. Issue reported and fix tested by Tony Sarendal. Thanks!
2014-08-25Move sending of router solicitations to the kernel; receiving andFlorian Obser
processing of router advertisements was already in the kernel. With this rtsol{,d}(8) is no longer necessary. The kernel starts sending solicitations with # ifconfig $IF inet6 autoconf or inet6 autoconf in /etc/hostname.$IF. input stsp@ much help & OK mpi@ tweaks & OK bluhm@
2014-08-25Don't allow pasting into input-disabled panes, from Anish R Athalye.Nicholas Marriott
2014-08-25snmpd cannot reloadAlexander Hall
ok reyk@
2014-08-25When using a proxy for an https connection, validate the cert hostnameJeremie Courreges-Anglas
against the target hostname, not the proxy hostname. Issue reported by dlg@, fix by Alex Wilson on tech@, tweaks by me. No reply from tech@
2014-08-25Fix a few fd leaks in isakmpd.Doug Hogan
The latter close is from a sweep of the tree looking for fdopen problems. While reviewing the patch, gerhard@ fixed another leak. ok gerhard@
2014-08-25Delete secret or secret-derived data with explicit_bzero.Doug Hogan
concept ok deraadt@ diff looks ok tedu@
2014-08-25Display usage on 2 lines.Antoine Jacoutot
reworked from an original diff by schwarze@
2014-08-25Put _rc_err argument under quotes to respect the syntax we are passing.Antoine Jacoutot
2014-08-25Start removing unused documentation and the server and related binaries sourceBrad Smith
code.
2007-12-09ISC BIND release 9.4.2Jakob Schlyter
2006-04-05ISC BIND release 9.3.2Jakob Schlyter
2006-04-05ISC BIND release 9.3.2Jakob Schlyter
2004-09-28ISC BIND version 9.3.0. ok deraadt@Jakob Schlyter
2003-01-20ISC BIND version 9.2.2rc1Jakob Schlyter
2014-08-24Oops. Garbage collect unused variable.Ingo Schwarze
2014-08-24When support for bold italic font was added to the parsers and to theIngo Schwarze
generic parts of the formatters some time ago, the PostScript- and PDF-specific part of the formatters was neglected. Now pascal@ reports that mandoc -Tps throws an assertion on perl(1), apparently because that manual actually uses bold italic font. So here is an overdue implementation of bold italic font support for PostScript and PDF output.