summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2012-09-29Remove extra .PpLawrence Teo
ok jmc
2012-09-25Correct DPADD to not list libssl which is not used by iked.Brad Smith
ok sthen@ mikeb@
2012-09-25lost preposition "in"Otto Moerbeek
2012-09-23Allow route -T 3 add to create a table even if the table does not existClaudio Jeker
yet. This is the only way to create alternate routing tables. Reminded by and OK jsg@
2012-09-22last stage of rfc changes, using consistent Rs/Re blocks, and moving theJason McIntyre
references into a STANDARDS section;
2012-09-20add more sensor types to sensor framework.Yojiro Uo
- Pressure (10^-3 Pa) - distance (10^-6 m) - acceleration (10^-6 m/s^2) ok deraadt@ reyk@
2012-09-19Show which limit cannot be set. idea mikebCamiel Dobbelaar
ok mikeb henning beck
2012-09-18Once resolv.conf.saved has been copied back as resolv.conf, delete it soKenneth R Westerback
it isn't copied again the next time a dhclient goes away. Do the resolv.conf.saved restore for v6 as well since v6 goes through the trouble to create resolv.conf.saved. ok beck@
2012-09-18update email addresses to match reality.Reyk Floeter
sure jsg@ mikeb@
2012-09-18prio 0 is valid, therefore, I chose an "impossible" value for prio meaningHenning Brauer
"not set" and used a PF_PRIO_NOTSET define for it. now that means that everything that creates a struct pf_rule doesn't get away with bzero'ing it, which turned out to be not so nice. so get rid of PF_PRIO_NOTSET, instead, make a rule+state flag PFSTATE_SETPRIO which indicates wether the prio should be set. ok benno claudio mikeb
2012-09-18Don't accept leases that offer a subnet that is already configuredKenneth R Westerback
on an interface. Crude hammer that may be refined as needed. Feedback from tedu@, beck@, sthen@ claudio@
2012-09-18remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not setMarkus Friedl
anywhere) as well as the matching TDBF_{HALFIV,RANDOMPADDING,NOREPLAY} code. ok mikeb@
2012-09-17unbreak the last commit by making sure that the transform nameMarkus Friedl
does not include a "," character. ok otto@
2012-09-17When a link is lost, call dhclient-script with reason "FAIL". ThisKenneth R Westerback
does the resolv.conf dance and removes 'dead' routes, rather than leaving these droppings behind. When dhclient is exiting after calling dhclient-script with "FAIL", give the script a couple of seconds to finish. Also pass the lease parameters (old_*) to dhclient-script so routes can be cleaned up in this path too. ok beck@
2012-09-17De-obfuscate and update reality correspondance of some comments.Kenneth R Westerback
2012-09-15Encode the transform parameters in the transform name, too.Markus Friedl
Only using p1name or p2name as a transform identifier (as in rev 1.74) breaks setups that allow multiple transforms for a connection, e.g. in ike passive esp from any to 1.1.1.1 quick enc aes-128 ike passive esp from any to 1.1.1.1 quick enc aes-192 the aes-128 will be overwritten. ok and feedback mikeb@
2012-09-12Define empty CDIAGFLAGS for programs that use Werror.Christiano F. Haesbaert
Makes "make build" build with WARNINGS=Yes on amd64. ok espie
2012-09-10Only keep track of the bio(4) cookie, not an entire bio_locate struct.Joel Sing
2012-09-07no need for the ../bioctlTheo de Raadt
2012-09-06move pkcs5_pbkdf5 function to libutil so everybody can play with itTed Unangst
ok deraadt jsing matthew
2012-09-04sort sections;Jason McIntyre
2012-09-03- resolve unchecked malloc()'s; prompted by rustyBSD.Okan Demirmen
- first pass at fixing err() and exit() usage. - document that scsi(8) returns 0 or >0. ok krw@ otto@ (noting this code is barely worth the effort...)
2012-09-01Oops. Missed a reinitialize_interface() declaration.Kenneth R Westerback
2012-09-01Nuke a static global I can't get my head around - interfaces_invalidated.Kenneth R Westerback
Since reinitialize_interface() was simply setting interfaces_invalidated to 0, nuke it too! Always update ifi->linkstat in dispatch() loop.
2012-08-31modload needs to invoke ld with -nopie now on ELF platformsMatthew Dempsky
ok pascal
2012-08-31Nuke a bunch of annoying "/* Send a packet. */" comments aboveKenneth R Westerback
invocations to send_packet(), and similiar combinations.
2012-08-30Do not issue a spurious "force" when "group none" is specified.Christian Weisgerber
Tweaked from his fix and ok mikeb@
2012-08-29no point having two copies of this file - this copy never gotJason McIntyre
installed anyway; ok krw henning
2012-08-27correct the description of VLAN_MTU; from brad smithJason McIntyre
ok sthen haesbaert while here, knock out a useless .Pp, and provide a section number for an Xr;
2012-08-26Junk global cur_time, and use time(NULL) or local variables whereKenneth R Westerback
time is checked multiple times. Add a set_timeout_interval() function to allow setting a timeout based on an interval from current time. Fixes issues with initial startup where the global cur_time was always old and caused initial DHCPDISCOVER or DHCPREQUEST packets to be sent multiple times. And probably other timeout related oddities. Tested by naddy@
2012-08-24ikev2 is described in rfc 5996 now;Jason McIntyre
2012-08-23- rfc 4443 replaces rfc 2463Jason McIntyre
- "ipv6 node information queries" has gone from draft to rfc 4620 - while here, a readability tweak for ping6(8)
2012-08-23remove unneccessary .Pp;Jason McIntyre
2012-08-23get rid of mount_nnpfsTheo de Raadt
2012-08-22- open a remote file/device with the same flags we use when opening aAlexander Hall
local one - replace a few magic numbers with the appropriate constants ok millert@ (pre-lock)
2012-08-22add ignore keyword to conf file, allowing one to ignore unwanted infoTed Unangst
from the server without necessarily speciyfing a supersede value
2012-08-21Reverse the name and meaning of the IFXF_INET6_PRIVACY interfaceAlexander Bluhm
flag. It is now called IFXF_INET6_NOPRIVACY. So IPv6 privacy addresses are on by default without resetting the flag during ifconfig down/up. OK stsp@, sperreault@ (who wrote the same diff)
2012-08-21Don't abandon time_t precision for intervals. Use (long long) and %lld whenKenneth R Westerback
printing, rather than (int) and %d. Follows idiom used for 64-bit size_t and off_t. Suggested by deraadt@
2012-08-18Don't store a time_t into an int. Make the variable time_t.Kenneth R Westerback
Part of larger time_t rectification diff from guenther@.
2012-08-18Don't try to printf() a time_t value with %d. Cast to (int) justKenneth R Westerback
in case time_t ever changes size. Values in these cases are intervals, i.e. (time_t - time_t) so int/%d will be fine. Part of larger time_t rectification diff from guenther@.
2012-08-18Remove unused field 'next' from struct timeout. There's only oneKenneth R Westerback
timeout now, not a list.
2012-08-18Update global cur_time after exiting poll() and before calling theKenneth R Westerback
state engine for packet processing. Time may have passed! Use cur_time in routing message processing. Makes sense to todd@
2012-08-17Don't forget to byteswap the state_flags since it's a uint16_t now.Mike Belopuhov
From Hrvoje Popovski via Florian Obser, ok henning
2012-08-14fix bad argument passed to errx()Charles Longeau
ok sthen@ benno@ claudio@
2012-08-14remove unused variableCharles Longeau
ok krw@
2012-08-12Use .Lk for HTTP hyperlinks, not .Pa.Ingo Schwarze
Most of the patch from Arto Jonsson <ajonsson at kapsi dot fi>. jmc@ agrees in principle that .Lk is the right macro to use. While here, update a few broken links, and add missing markup at a few places.
2012-08-12Explicitly state that only two unit specifiers are recognized instead ofLawrence Teo
"several." Note: if anyone adds support for more unit specifiers in the future, please change this back to "several" (instead of using an exact number) so that it matches the iked.conf(5) man page. :) While here, fix a typo in the quick mode section: "phase 1 lifetime" -> "phase 2 lifetime" ok mikeb sthen jmc haesbaert henning
2012-08-08fix type (part from NetBSD)Alexandr Shadchin
ok miod@
2012-08-08remove mac68k leftoversJonathan Gray
ok miod@ mpi@ deraadt@ martin@
2012-07-26Make interface_status() assume that a link is up when IFM_AVALIDKenneth R Westerback
is not set. This is what the late interface_link_status() did. Allows drivers who cannot tell what the link state is to get dhcp leases. Prodding by henning@. ok deraadt@ miod@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-19 21:48:38 +0000