Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-11-17 | Allow the -D command line flag to actually define macros. | Chris Kuethe | |
ok mikeb@ reyk@ | |||
2010-11-17 | Switch fsck_msdos(8) to opendev(3) so that it can handle disklabel UIDs. | Joel Sing | |
2010-11-17 | Try to determine file system type using readlabelfs(3) if fsck is given | Joel Sing | |
a disklabel UID. | |||
2010-11-16 | - remove XXX here now that CMDBUFLEN is defined in scsiio.h | Jasper Lievisse Adriaanse | |
ok krw@ | |||
2010-11-12 | The ioctl to show states returns a pfsync_state which is in network byte | Claudio Jeker | |
order and therefore a ntohs is needed to show the rdomain correctly. OK henning@ dlg@ | |||
2010-11-09 | when setting the rdomain, use the same define as the kernel | Jonathan Gray | |
for the maximum route-id instead of a currently incorrect number ok claudio@ | |||
2010-11-08 | fixup number rounding; ok reyk | Mike Belopuhov | |
2010-11-02 | expose the kernels network livelock counter | David Gwynne | |
2010-11-01 | bye bye wpa-psk. instead of using ifconfig wpapsk `wpa-psk password` you | Theo de Raadt | |
can now simply use ifconfig wpakey password ok damien | |||
2010-11-01 | add support for (full length only) hex keys to the wpakey code. for the | Theo de Raadt | |
remainder of the 4.8->4.9 transition, alias wpapsk to wpakey (since it swings both ways) ok damien halex tedu | |||
2010-10-25 | range check rtm_type more carefully against the known RTM_ values. | Theo de Raadt | |
this is not the real solution to PR 6500; claudio is going to fix that properly in the kernel ok claudio | |||
2010-10-23 | make sure an interface is registered before we start using it | Peter Hessler | |
found by clang OK claudio@, krw@ | |||
2010-10-19 | convert to fuse cast from the libcrypto. with a simplification nit from | Mike Belopuhov | |
blambert, ok jsg, "seems ok" todd | |||
2010-10-18 | document the new wpakey option | Alexander Hall | |
prodded by deraadt@ "tweak previous" expected... ;-) | |||
2010-10-18 | as determined 4 years ago, FortiGate needs DOI of 0 responses to DPD | Todd T. Fries | |
so, copy a small bit of logic to make DPD interop with FortiGate function tested by me, ok mikeb@, silence from 'the usual suspects' | |||
2010-10-18 | Revert non-compatible and undocumented bullshit commited by 3 developers | Theo de Raadt | |
who decided to just do it on their own. henning, mcbride, jsing -- shame on you -- if you had shown this diff to just 1 other network developer, the astounding mistake in it would have been noticed. Start practicing inclusionary development instead of going alone. ok claudio | |||
2010-10-18 | smm bits removal; whilst here, fix up aliases.5; | Jason McIntyre | |
2010-10-18 | Add wpakey/-wpakey options. This was originally written by halex and | Theo de Raadt | |
has gone many times around now (it is smaller now). man page diff coming soon. Fits onto the media that need it. ok halex | |||
2010-10-17 | Add quirks support to operating system fingerprinting. tcpdump part | Joel Sing | |
by mcbride@. ok mcbride@ henning@ | |||
2010-10-15 | fixup generation of suites string for isakmpd wrt "group none" | Mike Belopuhov | |
bug noticed and fix tested by robert | |||
2010-10-15 | Switch the remaining users of libdes in src to libcrypto, | Jonathan Gray | |
telnet portion partially from the latest heimdal. ok mikeb@ | |||
2010-10-15 | Add and ignore DHCP option 66/0x42 TFTP server name. | Jonathan Gray | |
ok krw@ phessler@ | |||
2010-10-15 | tweak previous; | Jason McIntyre | |
2010-10-15 | freebsd uses SIGINT to request a reboot, we may as well be consistent. | David Gwynne | |
pointed out by kettenis@ and deraadt@ | |||
2010-10-14 | add a SIGQUIT handler that does the same as USR1 and USR2, except it | David Gwynne | |
reboots the machine instead just halting or powering down. diff from Jonathan Matthew manpage tweaks from jmc@ ok deraadt@ | |||
2010-10-14 | plug a tiny leak. | David Hill | |
ok mikeb@ | |||
2010-10-14 | looks like i jumped the gun with the duid stuff; back it out | Jason McIntyre | |
2010-10-13 | paste in the description of "special"; ok krw | Jason McIntyre | |
2010-10-12 | pfctl -sr did not show divert-reply rules without address family | Alexander Bluhm | |
correctly. A zero address field is used to identify divert-reply rules. If the rule's address family is unspecified, PF_AZERO() always returns false. So use AF_INET6 as address family, to check all bits of the address. ok markus@ | |||
2010-10-11 | Make route(8) use the ROUTE_TABLEFILTER and change the code so that | Claudio Jeker | |
route(8) will default to the process rtableid. route -T 1 exec route add default 192.168.1.1 route -T 1 exec route -n show These commands will now operate outmatically on rtable 1 and not on rtable 0 as it was done before. OK henning@ | |||
2010-10-11 | Remove net.inet.tcp.recvspace and net.inet.tcp.sendspace here as well. | Claudio Jeker | |
Reminded by jmc@ | |||
2010-10-08 | use the right capitalization in the Nd strings. | Igor Sobrado | |
ok jmc@ | |||
2010-10-06 | Retire Skipjack | Mike Belopuhov | |
There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts. | |||
2010-10-03 | tweak previous; | Jason McIntyre | |
2010-10-01 | the grammar of my last commit worked with mandoc, but didn't work with nroff; | Reyk Floeter | |
convert a long .Op line into a few lines of .Xo ... .Xc. no "binary" change with mandoc. | |||
2010-10-01 | Add the -R id option to pfctl that allows to show only a specified rule | Reyk Floeter | |
by numeric ID in combination with the "-s rules" or "-s labels" options. For example, this allows you to dump the statistics of a specified rule only (pfctl -sr -v -R 0). ok henning@ | |||
2010-09-30 | promote openssl errors to the warning level; ok reyk | Mike Belopuhov | |
2010-09-30 | check that there are transforms in the proposal before trying | Mike Belopuhov | |
to actually parse it. ok reyk | |||
2010-09-30 | disable padding correctly. therefore we no longer need to supply | Mike Belopuhov | |
additional space in the buffer and just pad input length up to the block size. finalization is not needed for properly padded data. kills a bunch of XXX's and an annoying error from openssl. also, check a result from CipherUpdate while here. ok reyk | |||
2010-09-30 | More information about creating and maintaining the PKI with a link to | Reyk Floeter | |
ikectl(8). | |||
2010-09-29 | Add missing err.h include | David Coppa | |
OK deraadt@ | |||
2010-09-28 | document disklabel uids and move a little text to improve readability; the | Jason McIntyre | |
duid text was supplied by krw ...after much discussion with jsing and krw ok krw | |||
2010-09-24 | Make it possible to use "dhclient egress" to refetch a lease without | Claudio Jeker | |
rememberingwhich interface dhclient was actually active on. Requested by deraadt, OK deraadt@, krw@ | |||
2010-09-24 | remove the check that enforced rdr-to only inbound and nat-to only outbound. | Henning Brauer | |
both now can be used in both directions. the kernel allowed that ever since we did the great NAT rewrite. still enforce that a direction is given, a rule with rdr-to and/or nat-to and no direction is pretty certainly an error (which it would work, technically) ok ryan claudio dlg | |||
2010-09-24 | Now that HW_DISKNAMES returns xx0: or xx0:uid entries, we must truncate | Theo de Raadt | |
the : and uid components out -- otherwise these two programs will work poorly. | |||
2010-09-23 | tweak the disklabel uid stuff; ok jsing | Jason McIntyre | |
2010-09-23 | Correctly identify mount points when they are specified in /etc/fstab using | Joel Sing | |
a disklabel UID. Based on a diff from josh@elsasser.org. Resolves PR6471. ok krw@ | |||
2010-09-23 | Print disklabel UIDs using printf/fprintf instead of using the hand rolled | Joel Sing | |
uid_print() function. ok krw@ | |||
2010-09-23 | change description for AES-GMAC a bit. | Mike Belopuhov | |
prompted by reyk | |||
2010-09-23 | support for aes-gcm | Mike Belopuhov | |
OK reyk |