summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2023-12-21Fix a few unchecked allocations; ok millert@ miod@Otto Moerbeek
2023-12-20Don't unset the SA tag set by ipsec_sa_tag in ipsec_sa_iface.Tobias Heider
2023-12-18Check if calloc calls succeeded; ok millert@Otto Moerbeek
2023-12-14Use imsg_get_fd() to access the fd passed with the imsg.Claudio Jeker
2023-12-12ibuf_getdata() abuses the rpos from the ibuf. This is no longer allowedClaudio Jeker
2023-11-25whitespace; spotted by knFlorian Obser
2023-11-25First stab at IPv6-only preferred from RFC8925.Florian Obser
2023-11-24Empty IKEv2 DPD messages should not contain extra NONE payloadsTobias Heider
2023-11-23add an endpoint command for "bridges" that use addresses as endpoints.David Gwynne
2023-11-23add support for specifying ports on the src address in tunnel endpoints.David Gwynne
2023-11-18Scan past whitespace before checking if flag string startsKenneth R Westerback
2023-11-17Do not log errors form pcap_dispatch() caused by signals.Claudio Jeker
2023-11-12fix the signal numbers passed to siginterrupt.David Gwynne
2023-11-10GPT partitions have many attributes. Don't stomp on them all whenKenneth R Westerback
2023-11-10Enhance 'flag' to accept hex values in addition to the current 0Kenneth R Westerback
2023-11-10Always prefer group from initial KE payload as responder if supported.Tobias Heider
2023-11-10MNT_SOFTDEP and mount -o softdep no longer have any effectIngo Schwarze
2023-11-09avoid restartable syscalls with siginterrupt() against all our handlers.David Gwynne
2023-11-09sort .xr after previous; from jmcKlemens Nanni
2023-11-09link to showmount(8); OK deraadtKlemens Nanni
2023-11-03typo: ignorning -> ignoringTheo Buehler
2023-11-02Use pfctl_fopen (which checks to ensure the given file isn't a directory)Stuart Henderson
2023-10-29Use clock_gettime(), not timespec_get() like other parts of ifconfig.Todd C. Miller
2023-10-26whitespace cleanup my fingers couldn't avoid doing while i was re-readingTheo de Raadt
2023-10-10Print at most pkgsize - hdrsize bytes for pfkey tag and identity toTobias Heider
2023-10-10Do not copy stack garbage, that's not going to be used.Florian Obser
2023-10-09Add pledge("stdio") before parsing pfkey messages. This applies toTobias Heider
2023-10-07Retry on empty passphraseKlemens Nanni
2023-10-06rename pass{word -> file} variableKlemens Nanni
2023-09-15Improve handling of ENOBUFS by not running in a tight loop forever.Florian Obser
2023-09-14satisfy non-c99 compilersTheo de Raadt
2023-09-12Revert accidentally committed debugging codeTheo Buehler
2023-09-11Improve handling of ENOBUFS by not running in a tight loop forever.Florian Obser
2023-09-06explicitly cast ULLONG_MAX to double when comparing to a doubleRobert Nagy
2023-09-06remove unused variableJonathan Gray
2023-09-05Fix indentation, found with -Wmisleading-indentation.Florian Obser
2023-09-05Prevent warnings from -Wmissing-prototypesFlorian Obser
2023-09-05Fix built.Florian Obser
2023-09-05sync to unbound 1.18.0; heavy lifting by sthenFlorian Obser
2023-09-05fix mismatching declaration of argument with mismatched boundsRobert Nagy
2023-09-02Make sure cert_type is not 0 to prevent leak of certid->id_buf.Tobias Heider
2023-09-02Remove unneccessary id == NULL check after dereferencing it. id can neverTobias Heider
2023-09-02Use a hardware based number of KDF rounds by default for passphrasesKlemens Nanni
2023-08-21Retry passphrase on mismatch by defaultKlemens Nanni
2023-08-21Print softraid(4) errors on standard errorKlemens Nanni
2023-08-18Make -s read passphrases without prompts or confirmationKlemens Nanni
2023-08-14Improve error message when if_indextoname() fails.Tobias Heider
2023-08-14Add explicit NULL checks for sa_cp_addr and sa_cp_addr6.Tobias Heider
2023-08-11Add iked support for route based sec(4) tunnels.Tobias Heider
2023-08-08have a go at documenting the Interface config statement.David Gwynne