summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-09-12hook up libagentx; ok martijn@Anton Lindqvist
2021-09-12Revert recent uhidev report size changes. It's reported to break fido devicesAnton Lindqvist
for as of now unknown reasons.
2021-09-11Identify TPM2.0 devices and perform the 2.0-specific "suspend" commandTheo de Raadt
(researched by mlarkin). With this, and the latest BIOS which added S3, the lenovo x1r9 and x1nano can resume. ok kettenis mlarkin
2021-09-11Don't set the highspeed bit on bcm2835-sdhci sdhc(4) controllers.Marcus Glocker
Same approach as on Linux and NetBSD. This fixes bwfm(4) Wi-Fi on the Raspberry Pi 3 Model B Plus. help and ok kettenis@
2021-09-11merge the description of SSL_get_tlsext_status_type(3)Ingo Schwarze
from the OpenSSL 1.1.1 branch, which is still under a free license
2021-09-11Change the scope of the locking in pmap_extract() to prevent a race betweenMark Kettenis
walking the page tables and another thread calling pmap_remove() that ends up removing a page table page. tested by sthen@ ok deraadt@, mpi@
2021-09-11Merge documentation of EC_GROUP_order_bits(3) from the OpenSSL 1.1.1Ingo Schwarze
branch, which is still under a free license. While here, also merge a few other improvements, mostly regarding EC_GROUP_get_order(3) and EC_GROUP_get_cofactor(3); in particular, some statements below RETURN VALUES were outright wrong. This patch includes a few minor tweaks and an addition to HISTORY by me. Feedback and OK tb@.
2021-09-11Zero out iwx(4) Tx descriptors of frames which are done.Stefan Sperling
This will hopefully prevent the device from ever writing to the former DMA address of a buffer which has been taken off the Tx ring. As far as I understand, the Linux driver unmaps (parts of) Tx descriptors that are done. We use a static DMA mapping for the entire descriptor array, so unmapping is not an option for us. Tested by several as part of my Tx aggregation support patch.
2021-09-11Fix a bug in iwx(4) Tx done interrupt processing.Stefan Sperling
Clear the byte-count for the correct frame while taking frames off the ring. This should fix some 'fatal firmware errors' seen under load, and prevent memory corruption: The device could access an mbuf we have freed, but which is still marked as used in the byte count table and which still has a DMA address in its Tx descriptor. Problem observed by mlarkin with NFS while testing my patch for Tx aggregation support.
2021-09-11Add BGPSec Router (RFC 8209) Key Purpose OIDJob Snijders
OK tb@
2021-09-11Do not ignore SIGINT while waiting for input if editline(3) is not used.Ingo Schwarze
Instead, in non-interactive mode, exit sftp(1), like for other serious errors. As pointed out by dtucker@, when compiled without editline(3) support in portable OpenSSH, the el == NULL branch is also used for interactive mode. In that case, discard the input line and provide a fresh prompt to the user just like in the case where editline(3) is used. OK djm@
2021-09-11Merge documentation for BN_bn2binpad(3), BN_bn2lebinpad(3),Ingo Schwarze
and BN_lebin2bn(3) from the OpenSSL 1.1.1 branch, which is still under a free license. While here, tweak a number of details for clarity. OK tb@
2021-09-11when using SFTP protocol, continue transferring files after aDamien Miller
transfer error occurs. This matches original scp/rcp behaviour. ok dtucker@
2021-09-10Calling OpenSSL_add_all_digests() is no longer needed since the libraryTodd C. Miller
automatically initializes itself. OK tb@
2021-09-10Let iwx(4) resume directly in DVACT_WAKEUP instead of running the init task.Stefan Sperling
Suggested by deraadt@ during discussion at k2k21. With additional input from mlarkin. And deraadt spotted some pointless splnet() calls which this patch is removing. Resume from S3 tested by me on an x250 thinkpad with a compatible ax200 wifi card provided by mlarkin. Hibernate tested by deraadt. Sync comments about the PCI retry timeout workaround with Linux while here. ok mlarkin@
2021-09-10Stop using NULL as a synonym for "s" (SECTORS). Just use "s".Kenneth R Westerback
Remove now pointless NULL check in unit_lookup(). No intentional functional change.
2021-09-10When writing a message, syslogd did a combination of puttingAlexander Bluhm
everything into an iov and do some sprintf() formating later. Better put everything into the iov upfront based on what the output methods need. Then either the full iov is written or a line is created by concatenating. OK martijn@
2021-09-10syncTheo Buehler
2021-09-10crank major for libcrypto as wellTheo Buehler
'may as well' deraadt
2021-09-10major bump (same type of crank as libssl)Theo Buehler
2021-09-10bump major after symbol addition and struct removal, struct visibilityTheo Buehler
changes
2021-09-10Update Symbols.list after API additionsTheo Buehler
2021-09-10Bump minor after symbol additionTheo Buehler
2021-09-10Add BN_bn2{,le}binpad(), BN_lebin2bn(), EC_GROUP_order_bits to Symbols.listTheo Buehler
ok beck inoguchi jsing
2021-09-10Do fatal/fatalx a different way so the compiler trick to avoid warningsNicholas Marriott
becomes unnecessary, prompted by theo.
2021-09-10Move SSL_set0_rbio() outside of LIBRESSL_HAS_TLS1_3Theo Buehler
ok inoguchi jsing
2021-09-10Expose SSL_get_tlext_status_type() in tls1.hTheo Buehler
ok beck jsing
2021-09-10Expose SSL_R_NO_APPLICATION_PROTOCOL in ssl.hTheo Buehler
ok beck jsing
2021-09-10Expose SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE in ssl.hTheo Buehler
ok beck jsing
2021-09-10Expose SSL_CTX_get0_privatekey() in ssl.hTheo Buehler
ok beck
2021-09-10Remove TLS1_get_{,client_}version()Theo Buehler
ok jsing
2021-09-10Remove SSL3_RECORD and SSL3_BUFFERTheo Buehler
with/ok jsing
2021-09-10Remove TLS1_RT_HEARTBEATTheo Buehler
ok jsing
2021-09-10Make SSL opaqueTheo Buehler
with/ok jsing
2021-09-10Remove struct tls_session_ticket_ext_st and TLS_SESSION_TICKET_EXTTheo Buehler
from public visibility. with/ok jsing
2021-09-10Uncomment LIBRESSL_HAS_{TLS1_3,DTLS1_2} in opensslfeatures.hTheo Buehler
2021-09-10Use BN_RAND_* instead of mysterious values in the documentation ofTheo Buehler
BN_rand_range() From OpenSSL 1.1.1l ok beck jsing
2021-09-10Expose EC_GROUP_order_bits() in <openssl/ec.h>Theo Buehler
ok beck jsing
2021-09-10Expose BN_bn2{,le}binpad() and BN_lebin2bn() in <openssl/bn.h>Theo Buehler
ok beck inoguchi
2021-09-10Expose BN_RAND_* in <openssl/bn.h>Theo Buehler
ok beck jsing
2021-09-10Get rid of the last two warnings by turning them off around the problemNicholas Marriott
statements, if the compiler supports it.
2021-09-10Quirk-compatibility with GNU tbl(1):Ingo Schwarze
With the "nospaces" option, skip space characters before and after "T{", in addition to skipping those at the beginning and end of data cells. Minor issue reported by <Oliver dot Corff at email dot de>.
2021-09-10Properly handle keep-alive for HTTP/1.1. If the server uses HTTP/1.1Claudio Jeker
keep-alive is the default. Check this early on and disable keep-alive if a Connection: closed header is sent. Fixes the keep-alive issues I have seen. OK sthen@
2021-09-10In a tbl(7) having the "nospaces" option, skip space charactersIngo Schwarze
not only at the end of data cells, but also after "T}", aligning the behaviour of the parser with GNU tbl(1). Issue reported by <Oliver dot Corff at email dot de>.
2021-09-10Document that non-interactive commands are run via the user's shellDarren Tucker
using the -c flag. ok jmc@
2021-09-10Document behaviour of arguments following non-interactive commands.Darren Tucker
Prompted by github PR#139 from EvanTheB, feedback & ok djm@ jmc@
2021-09-10Do not ignore SSL_TLSEXT_ERR_FATAL from the ALPN callbackTheo Buehler
As reported by Jeremy Harris, we inherited a strange behavior from OpenSSL, in that we ignore the SSL_TLSEXT_ERR_FATAL return from the ALPN callback. RFC 7301, 3.2 states: 'In the event that the server supports no protocols that the client advertises, then the server SHALL respond with a fatal "no_application_protocol" alert.' Honor this requirement and succeed only on SSL_TLSEXT_ERR_{OK,NOACK} which is the current behavior of OpenSSL. The documentation change is taken from OpenSSL 1.1.1 as well. As pointed out by jsing, there is more to be fixed here: - ensure that the same protocol is selected on session resumption - should the callback be called even if no ALPN extension was sent? - ensure for TLSv1.2 and earlier that the SNI has already been processed ok beck jsing
2021-09-10Prepare to provide BN_RAND_* flags for BN_rand_range()Theo Buehler
ok beck jsing
2021-09-10Prepare to provide SSL_CTX_get0_privatekey()Theo Buehler
ok beck
2021-09-10Disable aliases inside aliases for the moment.Nicholas Marriott
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 00:33:44 +0000