Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-04-11 | KNF, capitalization, whitespace | dv | |
2021-04-11 | Remove dead code for unused IMSG_CTL_NOTIFY messages. | dv | |
Some vestigial code left over from when priv-sep was implemented. ok mlarkin@ | |||
2021-04-11 | Create a sparc64 install*.img file also | Theo de Raadt | |
tested by kettenis | |||
2021-04-11 | vnconfig is run without a label-type (install360), because in-Makefile | Theo de Raadt | |
scripting calculates msdos+ffs layout, so FSTYPE= is not neccessary. | |||
2021-04-11 | On systems that hide the PCI bridge device corresponding to a PCIe RC port | Mark Kettenis | |
we may end up passing a NULL pointer to pcie_get_speed_cap(). Handle this by returning PCI_SPEED_UNKNOWN instead of dereferencing a null-pointer. ok jsg@ | |||
2021-04-11 | Correct a comment: reference the correct file | dv | |
2021-04-11 | bwfm(4) needs firmload | kn | |
Otherwise compiling a kernel witout any other wifi drivers fails. OK patrick deraadt | |||
2021-04-11 | do not build unused code and remove uneeded dependency on libm. | Eric Faurot | |
ok tb@ | |||
2021-04-11 | Update a stale comment and fix a typo. | Theo Buehler | |
2021-04-11 | sync | Theo de Raadt | |
2021-04-11 | Fix two typos in comments | job | |
sure deraadt@ | |||
2021-04-10 | build arm64 install*.img | Theo de Raadt | |
requested by kettenis, first testing by kn | |||
2021-04-10 | Make sure the ip header lands on a 4 byte alignment by adding 2 bytes | Florian Obser | |
padding because the ethernet header in front is only 14 bytes. Found the hard way by me while testing on sparc64. Solution suggested by & OK deraadt | |||
2021-04-10 | Add cabal-module(5) man page | gnezdo | |
OK kn | |||
2021-04-10 | remove dead code and unused dependencies | Eric Faurot | |
ok tb@ | |||
2021-04-10 | Do not compare TLS config params for non-TLS servers. This allows to | Claudio Jeker | |
mix 'listen * port 80' and 'listen * tls port 443' in one server block. Also the last argument of server_tls_cmp - match_keypair - is always 0 so remove this code. OK florian@ tb@ some long time ago | |||
2021-04-10 | bump smtpd version | Eric Faurot | |
2021-04-09 | regen | Mike Larkin | |
2021-04-09 | add pcidevs entries for Aquantia ethernet devices | Mike Larkin | |
2021-04-09 | It is macobio0; hit with the cluestick from jsg | kn | |
2021-04-09 | allow to specify tls ciphers and protocols on listeners | Eric Faurot | |
ok tb@ | |||
2021-04-09 | When a DHCP server sends an invalid T1 or T2 default back to the default | Martijn van Duren | |
values as specified in RFC2131 section 4.4.5. Allows my Comtrend VI-3223u to work. OK florian@ | |||
2021-04-09 | synopsis: macobio0* -> macobio* | kn | |
2021-04-09 | Add a minimal regress test for the http client code. | Claudio Jeker | |
This currently uses some external website to do redirect test and to check both regular and chunked downloads. Only for libressl because you can't mix openssl 1.1 and libtls on OpenBSD. | |||
2021-04-09 | Only modify routes if SA has a valid address lease. On IKE SA rekey | tobhe | |
sa_cp_addr and sa_cp_addr6 are moved to the new SA before the old SA is deleted. Fixes a bug where host routes were deleted on IKE SA rekey. ok patrick@ | |||
2021-04-09 | Change a type to fix a warning with some compilers. | Nicholas Marriott | |
2021-04-09 | Tidy up the http state machine a bit. Make sure that http_nextstate() runs | Claudio Jeker | |
until an error or an IO opperation is needed. In other words it should not return 0. Because of this adjust the http_tls_connect() call a bit. Also call http_connect() in http_redirect() instead of needing an extra step in the state machine. Last but not least make sure that http_handle() does only one IO operation and check for possible POLLHUP event. OK tb@ | |||
2021-04-09 | An extra internal consistency check and a missing stats adjustment. ok tb@ | Otto Moerbeek | |
2021-04-09 | Cache implementation has changed, we do not hold on to an exact number | Otto Moerbeek | |
of pages anymore, but also cache larger regions; ok tb@ | |||
2021-04-09 | Fix release time | Theo Buehler | |
ok deraadt | |||
2021-04-08 | Expose two extra metrics via JSON | job | |
This removes some of the needs of rpki-client affiniadios who screen-scrape rpki-client's STDOUT. OK deraadt@ | |||
2021-04-08 | sync | Theo de Raadt | |
2021-04-08 | Increase buffer size for http_info a bit. 64 chars is a bit short for | Claudio Jeker | |
RRDP URLs. | |||
2021-04-08 | Refactor the regular and chunked data write so that one function can | Claudio Jeker | |
handle both cases. Simplifies the code a fair bit. OK tb@ | |||
2021-04-08 | Do not request unused "classless-static-routes" dhcp-options(5) | kn | |
Doing so implies support for it, but dhcpleased(8) currently ingores it entirely and does not configure any route from it. As per RFC 3442 servers SHOULD NOT respond with a "routers" option when "classless-static-routes" is set. dhcpd(8)/dhcpd.conf(5) follows that, hence requesting but not using static routes results in not installing any routes at all. Stop signaling support for this option and only request "routers" such that dhcpleased continues to install a default route and properly ignores the unsupported option if used by the server. Report from Uwe Werler <uwe @ werler dot is> about a default route not being set when requesting the "classless-static-routes" dhcp-options(5) from dhcpd(8), thanks! OK florian | |||
2021-04-08 | Enable test-cve-2016-6309.py | Theo Buehler | |
2021-04-08 | Switch logic from != to ==. Makes the code easier to read. | Claudio Jeker | |
2021-04-08 | Change the order of the poll loop to first process active http connections | Claudio Jeker | |
and then accept new ones. This way there is no risk of processing a new connection before poll() was called. OK tb@ as part of a larger diff | |||
2021-04-08 | Shuffle deck chairs so that the order is more logical (at least for me). | Claudio Jeker | |
No functional change. | |||
2021-04-08 | Prevent a use-after-free access in case of a http redirect by also clearing | Claudio Jeker | |
the conn->res pointer after calling freeaddrinfo(). OK tb@ (as part of a bigger diff) | |||
2021-04-08 | More cleanup of the main function. Use a loop to collect all childs with | Claudio Jeker | |
waitpid() and print if they exited non-zero or by a signal. Also adjust the poll hangup case to exit the poll loop instead of erroring out. This way a crashed child should be reported before exit. OK job@ tb@ | |||
2021-04-08 | Missing setproctitle("rrdp") noticed by deraadt@ | Claudio Jeker | |
2021-04-08 | Log the key written to the terminal as well as tmux's idea of what it | Nicholas Marriott | |
is. | |||
2021-04-08 | reword manpage on -n | job | |
OK claudio@ | |||
2021-04-08 | The path with the *highest* local weight is selected | Daniel Jakots | |
ok kn | |||
2021-04-08 | fix SEE ALSO, and tidy up the text a little; | Jason McIntyre | |
2021-04-08 | tidy up AUTHORS with -nosplit; | Jason McIntyre | |
2021-04-07 | Avoid clobbering the error code when sending an alert | Theo Buehler | |
In order to fail gracefully on encountering a self-signed cert, curl looks at the top-most error on the stack and needs specific SSL_R_ error codes. This mechanism was broken when the tls13_alert_sent_cb() was added after people complained about unhelpful unknown errors. Fix this by only setting the error code from a fatal alert if no error has been set previously. Issue reported by Christopher Reid ok jsing | |||
2021-04-07 | Use ERR_print_error_fp() to avoid leaking a BIO in fatal() | Theo Buehler | |
2021-04-07 | graphaudio(4) | Mark Kettenis | |