summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-11-28Align an annoying comment.Kenneth R Westerback
2019-11-28Use x509_get_crl() to get the crl distribution point out of the x509 cert.Claudio Jeker
Simplifies the code a fair bit.
2019-11-28Document x509_get_crl()Claudio Jeker
2019-11-28Always pass a pointer to 'big' to scsi_do_mode_sense().Kenneth R Westerback
Sets up some simplifications.
2019-11-28ks_mapblocks is gonePhilip Guenther
2019-11-28Delete km_mapblocks from kmemstats and its always-zero column from the ddbPhilip Guenther
"show malloc" output ok deraadt@ mpi@
2019-11-28Fix panic noticed by bluhm@ and florian@. bp->b_pobj is usedBob Beck
to determine if the buffer has pages to free. we have to set this pointer only after we could sleep allocating pages. setting it before creates the potential for a race to free us while we are sleeping ok kettenis@
2019-11-28Merge host_v{4,6}() into host_ip(), simplify host()kn
Zap lots of duplicate code and unify address family specific code where possible. There's probably more to improve, but this already cuts a lot. This is the minimal version without any cosmetic fixes or logical relocations to either improve the code or sync it with pfctl, bgpd, etc. OK tobhe
2019-11-28Introduce copy_sockaddrtoipa() and set_ipmask() bits from pfctlkn
The new wrapper will be used in the upcoming diff, set_ipmask() will be called with -1. Both is in analogy to pfctl, bgpd and others where IP/host parsing has been made more AF agnostic already. copy_sockaddrtoipa() is not called copy_satoipa() to avoid confusion with IPSec terminology (SA) as suggested by tobhe. No functional change OK tobhe
2019-11-28No more example file; ok florian@Otto Moerbeek
2019-11-28improve the text for -A a little;Jason McIntyre
input from naddy and djm
2019-11-28reshuffle the text to read better;Jason McIntyre
input from naddy, djmc, and dtucker
2019-11-28Move Notify and Certreq payload handlers after the parser. Modify SA statetobhe
only when the full message was parsed successfully. ok patrick@, "that's working for me" - sthen@
2019-11-28Add manual for openssl(1) cmsKinichiro Inoguchi
ok and comments jmc@
2019-11-28Missing after-kill-pane option.Nicholas Marriott
2019-11-28show median RTT in unwindctl statusFlorian Obser
2019-11-28Parse out DA features.Nicholas Marriott
2019-11-28Track all elements of a forwarder configuration individually:Florian Obser
IP address, port and authentication name. This makes print_config less awkward and fixes a bug were an alternative port number was not printed.
2019-11-28Long lines and spacing fixes.Nicholas Marriott
2019-11-28Add xrecallocarray.Nicholas Marriott
2019-11-28Bump the escape sequence timeout to five seconds to allow for longerNicholas Marriott
legitimate sequences.
2019-11-28Make a best effort to set xpixel and ypixel for each pane and addNicholas Marriott
formats for them.
2019-11-28Store xpixel/ypixel from TIOCGWINSZ and add formats.Nicholas Marriott
2019-11-28status-left and status-right need push-default also, reported by EricNicholas Marriott
Pruitt in GitHub issue 1989.
2019-11-28typoTheo Buehler
2019-11-28tweak wordingDamien Miller
2019-11-28syncTheo de Raadt
2019-11-28struct execsw's es_emul is no longer used, so delete itPhilip Guenther
ok deraadt@
2019-11-28Usage on excessive select, delete, download, start, stop, panic argumentskn
2019-11-28some whitespace invaded this island, and deraadt@ demanded its removal.Sebastian Benoit
2019-11-28To verify a manifest, a roa, or a certificate, we check its signatureSebastian Benoit
against the CA one layer above it. This check just needs to use the certificate revocation list published by that CA. Instead of loading all CRLs we find into the trust store, we create a STACK_OF(X509_CRL), push the onto it and use it with X509_STORE_CTX_set0_crls(ctx, crls); The x509_get_crl() function to retrieve a crl path from an X509 object is written by claudio@. ok claudio@
2019-11-28Fix typo in comment in struct pcap_pkthdrakoshibe
2019-11-28update to libcbor rev 56a43b1e799; this includes a number of fixesDamien Miller
for unaligned accesses, requested by miod@ ok deraadt@
2019-11-28Fix the buffer cache code to not use a giant uvm obj of all pagesBob Beck
when a small one on each buf is all that is needed. reduces the cost of large frees by about 25%. ok kettenis@
2019-11-28No train stations allowed in the airport file.Mike Larkin
ok deraadt@
2019-11-28Although ifconfig(8) checks it already, enforce contiguous inetAlexander Bluhm
netmask in the kernel. OK visa@
2019-11-28Implement a hexdump command in the boot loader. This helps toAlexander Bluhm
inspect the memory layout that the firmware has created. It is especially useful for UEFI debugging. OK deraadt@ kettenis@
2019-11-27Remove references of cvsync in favour of rsync. The former has alreadyNayden Markatchev
been removed from ports and the website has been updated accordingly.
2019-11-27remove stray semicolon after closing brace of function;Damien Miller
from Michael Forney
2019-11-27Add to do list.Theo Buehler
2019-11-27Only run the test vectors from x25519_test.json for now.Theo Buehler
2019-11-27RSASig now has the more specific name RSASSA-PKCS1-v1_5.Theo Buehler
2019-11-27REG_STARTEND is not portable, but it turns out we don't actually needNicholas Marriott
it. From Evan Green, GitHub issue 1982.
2019-11-27tweak previous: add missing name after .Fn, delete stray .Pp,Ingo Schwarze
and drop NetBSD RCS tag apparently left over from copy & paste
2019-11-27Only print the basename of skipped test files.Theo Buehler
2019-11-27Add list-io commandkn
list-io lists available PCIe devices to be used with ldom.conf(5)'s iodevice parameter. OK kettenis
2019-11-27Document msyscall(2): ld.so can use this (once only) to tell the kernelTheo de Raadt
where libc.so's text segment is, thereby allowing invocation of system calls from that region. An upcoming change will kill the process if a system call is invoked from addresses not explicitly permitted. ok guenther kettenis mortimer
2019-11-27Fix function name in error message (zap trailing s)kn
2019-11-27go fmtTheo Buehler
2019-11-27Run RSAES-PKCS1-v1_5 test vectors against libcrypto.Theo Buehler
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-24 02:41:56 +0000