| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2019-01-22 | bump minors after symbol addition | Theo Buehler | |
| 2019-01-22 | Document SSL_get1_supported_ciphers(3) and SSL_get_client_ciphers(3). | Theo Buehler | |
| The text comes from OpenSSL, where it was still published under a free license. from schwarze | |||
| 2019-01-22 | Add a re-implementation of SSL_get1_supported_ciphers(). | Theo Buehler | |
| Part of OpenSSL 1.1 API (pre-licence-change). input schwarze ok jsing | |||
| 2019-01-22 | Provide SSL_get_client_ciphers(). | Theo Buehler | |
| Part of OpenSSL 1.1 API, pre-licence change. ok jsing | |||
| 2019-01-22 | Add missing symbols from the EC_KEY_METHOD port. | Theo Buehler | |
| Reported by bcook and sthen | |||
| 2019-01-22 | #ifdef video junk as required. | Theo de Raadt | |
| 2019-01-22 | add support for xchacha20 and xchacha20-poly1305 | David Gwynne | |
| xchacha is a chacha stream that allows for an extended nonce, which in turn makes it feasible to use random nonces. ok tb@ | |||
| 2019-01-22 | Point people to ipcomp(4) instead of ipsecctl(8) for | Antoine Jacoutot | |
| net.inet.ipcomp.enable. ok deraadt@ bluhm@ | |||
| 2019-01-21 | Forgot to add -J to the synopsis. | Theo Buehler | |
| 2019-01-21 | Don't return 1 if we rollback and there's no installed patches. | Antoine Jacoutot | |
| 2019-01-21 | this driver does actually work | Jonathan Matthew | |
| 2019-01-21 | Warn user to reboot the machine when a new kernel is installed and let him know | Antoine Jacoutot | |
| where to look on the local machine for errata (/var/syspatch) so one can decide if a reboot is needed. ok Theos (tb@ deraadt@) | |||
| 2019-01-21 | select(2), pselect(2), poll(2), ppoll(2): Support full timeout range. | cheloha | |
| Remove the arbitrary and undocumented 24hr limits for timeouts from these interfaces. To do so, loop tsleep(9) to chip away at timeouts larger than what tsleep(9) can handle in one call. Use timerisvalid(3)/timespecisvalid() for input validation instead of itimerfix()/timespecfix() to avoid the 100 million second upper bounds those functions introduce. POSIX requires support for timeouts of at least 31 days for select(2) and pselect(2), so these changes make our implementation more compliant. Other improvements here include better variable names for the time stuff and more consolidated timeout logic with less backwards goto jumping, all of which made dopselect() and doppoll() a bear to read. Naming improvements prompted by tedu@ in a prior patch for nanosleep(2). With input from deraadt@. Validation bug spotted by matthew@ in an earlier version. ok visa@ | |||
| 2019-01-21 | lenght -> length | Jonathan Gray | |
| 2019-01-21 | lenght -> length | Jonathan Gray | |
| 2019-01-21 | Add a -J option as a shortcut for -o Proxyjump= to scp(1) and sftp(1) | Theo Buehler | |
| to match ssh(1)'s interface. ok djm | |||
| 2019-01-21 | switch sntrup implementation source from supercop to libpqcrypto; | Damien Miller | |
| the latter is almost identical but doesn't rely on signed underflow to implement an optimised integer sort; from markus@ | |||
| 2019-01-21 | add a -f pformat flag to parse the given time with strptime. | Ted Unangst | |
| 2019-01-21 | strftime can print epoch seconds with %s, so allow strptime to parse it. | Ted Unangst | |
| ok cheloha | |||
| 2019-01-21 | sometimes we don't call unveil_add, which means memory allocated by namei | Ted Unangst | |
| doesn't get freed. move the free calls into the same function as namei. fixed bug report from Dariusz Sendkowski ok beck | |||
| 2019-01-21 | a few tweaks | Ted Unangst | |
| 2019-01-21 | Add example showing a proper comparison function, as many examples show | Otto Moerbeek | |
| the wrong idiom. ok tedu@ but probably needs some tweakin | |||
| 2019-01-21 | Document 'video' promise. | Landry Breuil | |
| looks fine to jmc@ | |||
| 2019-01-21 | Add "video" promise. | Landry Breuil | |
| Allows a subset of ioctls on video(4) devices, subset selected from video(1) and firefox webrtc implementation. ok semarie@ deraadt@ | |||
| 2019-01-21 | Introduce a dedicated entry point data structure for file locks. This new data | anton | |
| structure allows for better tracking of pending lock operations which is essential in order to prevent a use-after-free once the underlying vnode is gone. Inspired by the lockf implementation in FreeBSD. ok visa@ Reported-by: syzbot+d5540a236382f50f1dac@syzkaller.appspotmail.com | |||
| 2019-01-21 | Use the actual handshake message type in the certificate request handler. | Joel Sing | |
| 2019-01-21 | Move ssl_cipher_list_to_bytes() and ssl_bytes_to_cipher_list() to | Theo Buehler | |
| a more appropriately licenced file. jsing and doug have rewritten these functions (including the comments) over the past years. ok jsing | |||
| 2019-01-21 | Provide the initial TLSv1.3 client implementation. | Joel Sing | |
| Move tls13_connect() to a new tls13_client.c file and provide a legacy wrapper to it, which allocates a struct tls_ctx if necessary. Also move tls13_client_hello_send() to tls13_client.c and actual implement the building of a client hello. ok tb@ | |||
| 2019-01-21 | Wire up the handshake message send and recv actions. | Joel Sing | |
| This means that we actually receive and send handshake messages to and from the record layer. ok tb@ | |||
| 2019-01-21 | add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up debug | Damien Miller | |
| verbosity. Make ssh-agent turn on ssh-pkcs11-helper's verbosity when it is run in debug mode ("ssh-agent -d"), so we get to see errors from the PKCS#11 code. ok markus@ | |||
| 2019-01-21 | adapt to changes in KEX APIs and file removals | Damien Miller | |
| 2019-01-21 | In ssl_lib.c rev. 1.197, jsing@ added TLSv1.3 support to SSL_get_version(3). | Ingo Schwarze | |
| Document it. | |||
| 2019-01-21 | adapt to changes in KEX API and file removals | Damien Miller | |
| 2019-01-21 | adapt to bignum1 API removal and bignum2 API change | Damien Miller | |
| 2019-01-21 | fix reversed arguments to kex_load_hostkey(); manifested as errors in | Damien Miller | |
| cert-hostkey.sh regress failures. | |||
| 2019-01-21 | Allocate buffer before using it. | Kenneth R Westerback | |
| Encountered, diagnosed, fix tested and ok jca@ | |||
| 2019-01-21 | While using buffered stdio over a socket, fflush(3) command before | Sunil Nimmagadda | |
| reading the response. Ok eric@ jung@ | |||
| 2019-01-21 | Adapt to allwinner device tree changes in linux >= 5.0-rc1 | Jonathan Gray | |
| "allwinner,sun6i-a31-rtc" has been removed from h3/h5/r40/a64 ok kettenis@ | |||
| 2019-01-21 | forgot to cvs add this file in previous series of commits; grrr | Damien Miller | |
| 2019-01-21 | Improve logging for TLS certificate validity checking. | Joel Sing | |
| Actually specify whether the certificate is not yet valid or has expired, and log the actual time values to hopefully save some head scratching. ok deraadt@ tb@ | |||
| 2019-01-21 | Explicitly check timegm() return value. | Joel Sing | |
| Spotted by tb@ ok deraadt@ tb@ | |||
| 2019-01-21 | nothing shall escape this purge | Damien Miller | |
| 2019-01-21 | The main handshake loop can be shared between client and server. | Joel Sing | |
| Pull the shared code up into a function and call it from tls13_connect() and tls13_accept() instead of duplicating it. "Yes, please!" tb@ | |||
| 2019-01-21 | rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamed | Damien Miller | |
| to kexgen from markus@ ok djm@ | |||
| 2019-01-21 | merge kexkem[cs] into kexgen | Damien Miller | |
| from markus@ ok djm@ | |||
| 2019-01-21 | pass values used in KEX hash computation as sshbuf rather than | Damien Miller | |
| pointer+len suggested by me; implemented by markus@ ok me | |||
| 2019-01-21 | remove kex_derive_keys_bn wrapper; no unused since the DH-like KEX | Damien Miller | |
| methods have moved to KEM from markus@ ok djm@ | |||
| 2019-01-21 | Use ssl_cipher_is_permitted() in ssl_cipher_list_to_bytes(). | Theo Buehler | |
| ok jsing | |||
| 2019-01-21 | use KEM API for vanilla ECDH | Damien Miller | |
| from markus@ ok djm@ | |||
| 2019-01-21 | Add ssl_cipher_is_permitted(), an internal helper function that | Theo Buehler | |
| will be used in a few places shortly, e.g. in ssl_cipher_list_to_bytes(). ok jsing | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |