summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2001-02-20provide SIOC[SG]LIFPHYADDR, which greatly simplify userland manipulation.Jun-ichiro itojun Hagino
sync with kame. old ioctls are kept but not really recommended.
2001-02-19passphrase-md5-hex: and passphrase-sha1-hex: formats for passphrases.Angelos D. Keromytis
2001-02-18Move default protocol setting of TCP into the redir-specific codeTodd C. Miller
so it doesn't affect the "map" entries. Fixes a problem introduced in last commit where protocols other than TCP were not being mapped correctly.
2001-02-18Encode the X509 expiration in the KeyNote credential/policiesAngelos D. Keromytis
generated on the fly. For the record, this commit done at the beach in Cayman Islands :-)
2001-02-16use the hash algorithm found in original certificate for the signatureNiels Provos
after it has been patched. from angelos@
2001-02-16Nicer EXAMPLES format.Aaron Campbell
2001-02-13Compile state top in, thus allowing -t; kjell@ ok.Federico G. Schwindt
2001-02-12Temporarily disable dlopen() support, some issues with latest OpenSSL update.Hakan Olsson
2001-02-12skip empty lines in rulefile. ok jason@Jakob Schlyter
2001-02-10Don't make the string table pointers into absolute addresses sinceTodd C. Miller
ddb will do that for us on the fly. Also check some return values to catch short reads. OK'd by niklas@
2001-02-08Typo.Angelos D. Keromytis
2001-02-08Add debug printf.Angelos D. Keromytis
2001-02-07by default, don't bark on inbound ND messages, as outsider may be able toJun-ichiro itojun Hagino
fill up /var with bogus packets. setting net.inet6.icmp6.nd6_debug will re-enable kernel messages on invalid ND packet and other occasions. improve icmp6 stats.
2001-02-05when flags are FLG_WRONLY, say "write only" instead of "read only"Matthieu Herrb
2001-02-05Restore change from revision 1.8 that got lost in last commit.Todd C. Miller
Set default proto earlier enough so service names may be used as well as numbers
2001-02-05Remove the NOMAN hack. This is not the way we want to do this.Artur Grabowski
(and the original problem is gone anyway).
2001-02-05Remove the NOMAN hack. This is not the way we want to do this.Artur Grabowski
(and the original problem is gone anyway).
2001-02-04mention scan_ffs; map@infinitum.chTheo de Raadt
2001-02-04add more pedantic checks for recvmsg return value. sync with kameJun-ichiro itojun Hagino
2001-01-31errx() misuse; tomo@ns1.infinitedata.netTheo de Raadt
2001-01-31KNF; tomo@ns1.infinitedata.netTheo de Raadt
2001-01-31typo; tomo@ns1.infinitedata.netTheo de Raadt
2001-01-30Change /dev/ttyE* to /dev/ttyC* to reflect reality in OpenBSD.Aaron Campbell
2001-01-30reimplement whacked ipfstat changesKjell Wooding
2001-01-30reimplement whacked ipnat changesKjell Wooding
2001-01-30reimplement local ipf mods and import some missed patchesKjell Wooding
2001-01-30install wscons utils manpages into i386 subdir as wellMichael Shalayeff
2001-01-30Build these userland wscons utilities on i386.Aaron Campbell
2001-01-30switch to wsconsTheo de Raadt
2001-01-28$OpenBSD$Niklas Hallqvist
2001-01-28$OpenBSD$Niklas Hallqvist
2001-01-28remove i386 md note per Theo's requestMarco S Hyman
2001-01-28remove i386 md note per Theo's requestMarco S Hyman
2001-01-28remove i386 md note per Theo's requestMarco S Hyman
2001-01-28More -Wall cleanup. Ansi style nit.Tobias Weingartner
2001-01-28Quick -Wall fixes, ok niklas@, aaron@Tobias Weingartner
2001-01-27Call OpenSSL functions with LC (). Various style nits.Hakan Olsson
2001-01-27(c) 2001Niklas Hallqvist
2001-01-27include dnssec.h only if USE_DNSSEC; niklas okJun-ichiro itojun Hagino
2001-01-27"obj" target conflicts with one defined in share/mk; obey bsd.*.mkJun-ichiro itojun Hagino
2001-01-27Cleanup the MP_FLAVOUR situation. Still needs work.Niklas Hallqvist
2001-01-27Tell about OpenBSD being isakmpd's home.Niklas Hallqvist
2001-01-27correct 1.28 -> 1.29 (ortentry removal, cmetz).Jun-ichiro itojun Hagino
can't use routename() here since it could overwrite DNS lookup result pointed to by "hp". maybe we need to change every gethostby* to get*info.
2001-01-26Preliminary but working code to permit IKE authentication using DNSSECHakan Olsson
validated KEY records. Uses lwresd from the bind-9.1.0 port. Enable by adding 'dnssec' to FEATURES.
2001-01-26Mention that shutdown brings the system to single user mode when issuedMarco S Hyman
without options. Other wording tweaks. Move comment related to -p to where -p is defined, not where -h is defined.
2001-01-26include keynote.h only if USE_KEYNOTE is defined; ok niklas@Markus Friedl
2001-01-26Small cleanup patch from <mpech@prosoft.org.lv>.Tobias Weingartner
niklas@ ok.
2001-01-26There is no need to check the subjectAltName anymore, since we are in factNiklas Hallqvist
looking up the certificate via the name. The lookup method already guarantees a match. It is also a problem to look at the subjectAltName should we have got the certificate with no such name in it. Prodded by mickey@ although I solved the problem in a different way.
2001-01-26There is no need to check the subjectAltName anymore, since we are in factNiklas Hallqvist
looking up the certificate via the name. The lookup method already guarantees a match. It is also a problem to look at the subjectAltName should we have got the certificate with no such name in it. Prodded by mickey@ although I solved the problem in a different way.
2001-01-26better signal handling. look at check signal flag bit every time we visitJun-ichiro itojun Hagino
the loop (not just after EINTR on select). sync with kame
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-01 08:55:13 +0000