summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-04-29Use the same inittodr()/resettodr() implementation as onMark Kettenis
amd64/arm64/armv7/sparc64 and move it to the end of machdep.c. Rework the actual implementation for the MC14818 compatible RTC into something that can be used as a todr_handle just like on amd64. ok sthen@
2020-04-29remove some trailing whitespace. no functional change.David Gwynne
2020-04-29json should have headers in same orderTheo de Raadt
2020-04-29Ensure that if we are doing a delayed write with a NOCACHE buffer, weBob Beck
clear the NOCACHE flag, since if we are doing a delayed write the buffer must be cached or it is thrown away when the "write" is done. fixes vnd on mfs regress tests. ok kettenis@ deraadt@
2020-04-29tls13_record_layer internal functions to static in libsslKinichiro Inoguchi
We might remove static again for further regress around record layer in the future. ok jsing@ tb@
2020-04-29tls13_handshake internal functions to static in libsslKinichiro Inoguchi
ok jsing@ tb@
2020-04-28In virtual alias context, do not try to match catchall entries forEric Faurot
usernames, but only for email addresses. fixes an issue where usernames always expand to the @ wildcard if defined in the virtual alias file. discussed with Gilles Chehade ok millert@
2020-04-28Move legacy stack interfacing functions into tls13_legacy.c.Joel Sing
No functional change. ok inoguchi@ tb@
2020-04-28Rename tls13_client_synthetic_handshake_message() and move to tls13_lib.c.Joel Sing
The server-side will need to use the same function. No functional change. ok inoguchi@ tb@
2020-04-28Calculate divisor for i.MX8M composite clocks. So far we have setPatrick Wildt
fixed values for the divisors, but the imxesdhc(4) nodes for SD Cards usually have an assigned clock rate of 200 MHz instead of 400 MHz. So instead of just clearing the divisor, we should set it according to what is asked. This also allows us to add the clock for the second imxesdhc(4) node to the list, which I have previously skipped, since otherwise the controller would have been clocked too high. ok kettenis@
2020-04-28The order of arguments to proposals_negotiate makes a difference.tobhe
'key->pol_proposals' should be the peer proposal as it is derived from a received SA payload, 'p->p_proposal' comes from a locally configured policy. ok patrick@
2020-04-28Enable all clocks referenced by the imxesdhc(4) device tree node. UsuallyPatrick Wildt
those are already on, since on those machines we mostly boot from SD/MMC and U-Boot prepares them for us. On machines with a WiFi on imxesdhc(4), U-Boot isn't necessarily configured to do so. Enabling the clocks is the right thing to do anyway. ok kettenis@
2020-04-28Recognize a few more clocks referenced by the i.MX8MM and i.MX8MQPatrick Wildt
imxesdhc(4) device tree nodes.
2020-04-28Rather than attempting to lookup the keyword "set" as a hostname,Theo de Raadt
issue a usage message. This matches both historical behaviour, and the operation upon other keywords. ok florian
2020-04-28Remove support for insecure EC2N groups. Clarify which Diffie-Hellmantobhe
groups are not recommended to use and are only supported for backwards compatibility. Feedback from sthen@ ok kn@
2020-04-28re-organize statistics printing code, to make it less verbose andTheo de Raadt
more readable.
2020-04-28a blank line in the header is prettierTheo de Raadt
2020-04-28Print statistics as comments at the top of the files which can takeTheo de Raadt
comments. ok claudio job
2020-04-28document FETCH_PACKAGES betterMarc Espie
feedback and okay schwarze@
2020-04-28There have been no floppy images since the 6.2 release. Remove mentionSebastian Benoit
of boot floppies from the INSTALL.alpha notes. ok deraadt@
2020-04-28Use the same inittodr()/resettodr() implementation as on arm64/armv7/sparc64Mark Kettenis
and move it to the end of machdep.c. Rework the actual implementation for te MC14818 compatible RTC into something that can be used as a todr_handle. ok mpi@
2020-04-28Use the same inittodr()/resettodr() implementation as on arm64/armv7Mark Kettenis
and move it to the end of machdep.o. ok mpi@
2020-04-28syncStuart Henderson
2020-04-28Document that thread credentials are owned by curproc.Martin Pieuchot
From Vitaliy Makkoveev, ok visa@
2020-04-28Configure Tx interrupt mitigation thresholds on athn(4) devices.Stefan Sperling
ok kevlo@ mpi@
2020-04-28adapt dummy FIDO middleware to API change; ok markus@Damien Miller
2020-04-28use (long long) and %llx to satisfy both 32-bit and 64-bit systems.Theo de Raadt
2020-04-28when signing a challenge using a FIDO toke, perform the hashing in theDamien Miller
middleware layer rather than in ssh code. This allows middlewares that call APIs that perform the hashing implicitly (including Microsoft's AFAIK). ok markus@
2020-04-27Add curve25519 IANA group number.tobhe
2020-04-27Display multi-state controls with exactly three decimal places.Ingo Schwarze
Because for now, the maximum raw value of such controls is either 127 or 255, that assures that whenever the raw value changes, the displayed value changes, too. At the same time, it preserves the property that control values are not shown with excessive, misleading precision. If controls will ever be introduced that will have maximum raw values of less than 100 or of more than 999, the number of decimal places should then be reduced or increased for such controls as appropriate. With important help and an OK from ratchov@.
2020-04-27tcpci(4)Patrick Wildt
2020-04-27Enable tcpci(4).Patrick Wildt
2020-04-27Add tcpci(4) to support TCPCI-compliant USB Type-C port controllers.Patrick Wildt
A Type-C controller has multiple tasks. Even though the orientation of the plug doesn't matter for the user, it matters for the hardware. To be able to know how to route the SuperSpeed pins you need to know which way the plug is connected. Also you need to know if you're a sink/source or device/host. To get the first connection, you toggle between the modes until you find a connection. In case you see that a sink is connected, you can turn on USB Vbus to power the sink. This driver explicitly does not implement USB's Type-C state machine, but if we get more and more of these controllers it might be worth doing. Also there's no support for Power Delivery messages yet. "go for it" kettenis@
2020-04-27Add bcmclock(4) and bcmmbox(4). Fixes a hang because the clock for sdhc(4)Mark Kettenis
can't be enabled.
2020-04-27While i.MX6Q and i.MX7D's USB controller nodes claim to be compatiblePatrick Wildt
to i.MX27, they actually need different bits to be set than the i.MX27. The i.MX8MM's node instead rightfully only claims to be compatible to i.MX7D, since it's the same implementation. Thus change imxehci(4) to also match the i.MX7D compatible. ok kettenis@
2020-04-27Shuffle some functions around.Joel Sing
Move functions so that they are in the order that the TLSv1.3 messages are processed. While here, also move tls13_client_end_of_early_data_send() from tls13_client.c to tls13_server.c. No functional change. ok beck@ tb@
2020-04-27Remove reset hack; these days the U-Boot we ship for the CuBox-i isMark Kettenis
perfectly happy without it. ok patrick@
2020-04-27Use the device tree properties to setup imxehci(4)'s USB non-corePatrick Wildt
instead of hardcoding the values. Tested on a Cubox-i by kettenis@ ok kettenis@
2020-04-27Enable the power domain and set the assigned clocks on imxehci(4)'s USBPatrick Wildt
controller and its nop-PHYs. This is needed on the i.MX8MM. ok kettenis@
2020-04-27Fix two bugs in the AES-CBC-PKCS5 tests that didn't hide failing tests:Theo Buehler
1. Use the correct slice for comparing the cipher output 2. Fix logic error similar to the one in AES-GCM in the previous commit
2020-04-27Fix a logic error that hid the failing ZeroLengthIv tests.Theo Buehler
This issue was fixed in lib/libcrypto/evp/e_aes.c r1.40.
2020-04-27Disallow the use of zero length IVs in AES-GCM viaTheo Buehler
EVP_AEAD_CTX_{open,seal}, as this leaks the authentication key. Issue reported and fix tested by Guido Vranken. ok beck, jsing This commit adds a constant to a public header despite library lock, as discussed with deraadt and sthen.
2020-04-27Log with SPI_SA().tobhe
2020-04-27The parent of the i.MX8MM and i.MX8MQ USB_CTRL_ROOTs is USB_BUS,Patrick Wildt
not USB_CORE_REF.
2020-04-27If the DHCP server disappears between OFFER'ing and ACK'ing a lease,Kenneth R Westerback
stop trying to get an ACK from that server after 'timeout' seconds. Give up and try to get another lease. Possible infinite loop pointed out by Alexander Markert on tech@.
2020-04-27syncTheo de Raadt
2020-04-27Bring inittodr()/resettodr() in line with arm64 and move it toMark Kettenis
arrm32_machdep.c. ok mpi@
2020-04-27Move inittodr() and resettodr() to the end of the file to easy move an MIMark Kettenis
implementation. ok mpi@
2020-04-27Attach when the name matches "dallas,ds1307" which is what the device treeMark Kettenis
binding uses. Remove warning about overwriting todr_handle since that is normal behaviour on arm64 systems. ok sthen@
2020-04-27Don't clear OSF flag when we attach such that we can reject the RTC clockMark Kettenis
time if the flag is set. Instead clear the flag when we set the time. This way we don't use the clock time if the oscillator has been interrupted. This happens for example when the battery is dead. ok sthen@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-25 05:27:15 +0000