summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-04-11KNF, capitalization, whitespacedv
2021-04-11Remove dead code for unused IMSG_CTL_NOTIFY messages.dv
Some vestigial code left over from when priv-sep was implemented. ok mlarkin@
2021-04-11Create a sparc64 install*.img file alsoTheo de Raadt
tested by kettenis
2021-04-11vnconfig is run without a label-type (install360), because in-MakefileTheo de Raadt
scripting calculates msdos+ffs layout, so FSTYPE= is not neccessary.
2021-04-11On systems that hide the PCI bridge device corresponding to a PCIe RC portMark Kettenis
we may end up passing a NULL pointer to pcie_get_speed_cap(). Handle this by returning PCI_SPEED_UNKNOWN instead of dereferencing a null-pointer. ok jsg@
2021-04-11Correct a comment: reference the correct filedv
2021-04-11bwfm(4) needs firmloadkn
Otherwise compiling a kernel witout any other wifi drivers fails. OK patrick deraadt
2021-04-11do not build unused code and remove uneeded dependency on libm.Eric Faurot
ok tb@
2021-04-11Update a stale comment and fix a typo.Theo Buehler
2021-04-11syncTheo de Raadt
2021-04-11Fix two typos in commentsjob
sure deraadt@
2021-04-10build arm64 install*.imgTheo de Raadt
requested by kettenis, first testing by kn
2021-04-10Make sure the ip header lands on a 4 byte alignment by adding 2 bytesFlorian Obser
padding because the ethernet header in front is only 14 bytes. Found the hard way by me while testing on sparc64. Solution suggested by & OK deraadt
2021-04-10Add cabal-module(5) man pagegnezdo
OK kn
2021-04-10remove dead code and unused dependenciesEric Faurot
ok tb@
2021-04-10Do not compare TLS config params for non-TLS servers. This allows toClaudio Jeker
mix 'listen * port 80' and 'listen * tls port 443' in one server block. Also the last argument of server_tls_cmp - match_keypair - is always 0 so remove this code. OK florian@ tb@ some long time ago
2021-04-10bump smtpd versionEric Faurot
2021-04-09regenMike Larkin
2021-04-09add pcidevs entries for Aquantia ethernet devicesMike Larkin
2021-04-09It is macobio0; hit with the cluestick from jsgkn
2021-04-09allow to specify tls ciphers and protocols on listenersEric Faurot
ok tb@
2021-04-09When a DHCP server sends an invalid T1 or T2 default back to the defaultMartijn van Duren
values as specified in RFC2131 section 4.4.5. Allows my Comtrend VI-3223u to work. OK florian@
2021-04-09synopsis: macobio0* -> macobio*kn
2021-04-09Add a minimal regress test for the http client code.Claudio Jeker
This currently uses some external website to do redirect test and to check both regular and chunked downloads. Only for libressl because you can't mix openssl 1.1 and libtls on OpenBSD.
2021-04-09Only modify routes if SA has a valid address lease. On IKE SA rekeytobhe
sa_cp_addr and sa_cp_addr6 are moved to the new SA before the old SA is deleted. Fixes a bug where host routes were deleted on IKE SA rekey. ok patrick@
2021-04-09Change a type to fix a warning with some compilers.Nicholas Marriott
2021-04-09Tidy up the http state machine a bit. Make sure that http_nextstate() runsClaudio Jeker
until an error or an IO opperation is needed. In other words it should not return 0. Because of this adjust the http_tls_connect() call a bit. Also call http_connect() in http_redirect() instead of needing an extra step in the state machine. Last but not least make sure that http_handle() does only one IO operation and check for possible POLLHUP event. OK tb@
2021-04-09An extra internal consistency check and a missing stats adjustment. ok tb@Otto Moerbeek
2021-04-09Cache implementation has changed, we do not hold on to an exact numberOtto Moerbeek
of pages anymore, but also cache larger regions; ok tb@
2021-04-09Fix release timeTheo Buehler
ok deraadt
2021-04-08Expose two extra metrics via JSONjob
This removes some of the needs of rpki-client affiniadios who screen-scrape rpki-client's STDOUT. OK deraadt@
2021-04-08syncTheo de Raadt
2021-04-08Increase buffer size for http_info a bit. 64 chars is a bit short forClaudio Jeker
RRDP URLs.
2021-04-08Refactor the regular and chunked data write so that one function canClaudio Jeker
handle both cases. Simplifies the code a fair bit. OK tb@
2021-04-08Do not request unused "classless-static-routes" dhcp-options(5)kn
Doing so implies support for it, but dhcpleased(8) currently ingores it entirely and does not configure any route from it. As per RFC 3442 servers SHOULD NOT respond with a "routers" option when "classless-static-routes" is set. dhcpd(8)/dhcpd.conf(5) follows that, hence requesting but not using static routes results in not installing any routes at all. Stop signaling support for this option and only request "routers" such that dhcpleased continues to install a default route and properly ignores the unsupported option if used by the server. Report from Uwe Werler <uwe @ werler dot is> about a default route not being set when requesting the "classless-static-routes" dhcp-options(5) from dhcpd(8), thanks! OK florian
2021-04-08Enable test-cve-2016-6309.pyTheo Buehler
2021-04-08Switch logic from != to ==. Makes the code easier to read.Claudio Jeker
2021-04-08Change the order of the poll loop to first process active http connectionsClaudio Jeker
and then accept new ones. This way there is no risk of processing a new connection before poll() was called. OK tb@ as part of a larger diff
2021-04-08Shuffle deck chairs so that the order is more logical (at least for me).Claudio Jeker
No functional change.
2021-04-08Prevent a use-after-free access in case of a http redirect by also clearingClaudio Jeker
the conn->res pointer after calling freeaddrinfo(). OK tb@ (as part of a bigger diff)
2021-04-08More cleanup of the main function. Use a loop to collect all childs withClaudio Jeker
waitpid() and print if they exited non-zero or by a signal. Also adjust the poll hangup case to exit the poll loop instead of erroring out. This way a crashed child should be reported before exit. OK job@ tb@
2021-04-08Missing setproctitle("rrdp") noticed by deraadt@Claudio Jeker
2021-04-08Log the key written to the terminal as well as tmux's idea of what itNicholas Marriott
is.
2021-04-08reword manpage on -njob
OK claudio@
2021-04-08The path with the *highest* local weight is selectedDaniel Jakots
ok kn
2021-04-08fix SEE ALSO, and tidy up the text a little;Jason McIntyre
2021-04-08tidy up AUTHORS with -nosplit;Jason McIntyre
2021-04-07Avoid clobbering the error code when sending an alertTheo Buehler
In order to fail gracefully on encountering a self-signed cert, curl looks at the top-most error on the stack and needs specific SSL_R_ error codes. This mechanism was broken when the tls13_alert_sent_cb() was added after people complained about unhelpful unknown errors. Fix this by only setting the error code from a fatal alert if no error has been set previously. Issue reported by Christopher Reid ok jsing
2021-04-07Use ERR_print_error_fp() to avoid leaking a BIO in fatal()Theo Buehler
2021-04-07graphaudio(4)Mark Kettenis