summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2014-05-09Modernize spelling. 'Mimick' -> 'Mimic' in comment.Kenneth R Westerback
2014-05-09Fix '-b' option to work with the superblock locations output by newfsKenneth R Westerback
2014-05-09my previous attempt to fix the renaming of the inet(3) pages was wrong;Jason McIntyre
2014-05-09get rid of redundant {csa,flow}_{src,dst}id pointers, so we don't needMarkus Friedl
2014-05-09replace iked_transform pointer with xform id, since target of pointerMarkus Friedl
2014-05-08match iked proc.c infrastructure with proc.cBret Lambert
2014-05-08inet(3) -> inet_net(3);Jason McIntyre
2014-05-08Introduce two new route flags: RTF_LOCAL and RTF_BROADCAST.Martin Pieuchot
2014-05-07jmc@ points out '-F/-f' are available only in conjunction withKenneth R Westerback
2014-05-07consolidate some code by using reallocarray in all cases.Ted Unangst
2014-05-07try postponed requests first, so we do in-order processing; ok mikeb@Markus Friedl
2014-05-07print msgid for debugging; ok reyk & mikebMarkus Friedl
2014-05-07make authentication work with X509 certificates that don't have aMarkus Friedl
2014-05-07factor out ikev2_ike_auth() (state machine; used multiple times via callbacks)Markus Friedl
2014-05-07Kill the {nd6_,}useloopback buttons, using the loopback interface forMartin Pieuchot
2014-05-07missing word in error message. ok millertTed Unangst
2014-05-07delete some crusty castsTed Unangst
2014-05-06change the create-child-sa responder code, so it does not store anyMarkus Friedl
2014-05-06zap stray word; ok markusJason McIntyre
2014-05-06Explicitly zero out the ibufs before releasing the memory to make sureReyk Floeter
2014-05-06initiate ike sa rekeying (ikesalifetime keyword), re-queue pfkeyMarkus Friedl
2014-05-06cleanup IKE-SA tree handling (fixes repeated-insert & double-remove)Markus Friedl
2014-05-06don't sa_free() in the receive path (prevents use-after-free); ok mikeb@Markus Friedl
2014-05-06send the delete with the locally allocated SPI in ikev2_init_create_child_sa()Markus Friedl
2014-05-06make sure some notify payloads are encrypted; ok mikeb@Markus Friedl
2014-05-06initial support for PFS; ok reyk@Markus Friedl
2014-05-06retire IKED_REQ_DELETE and fix delete parsing; ok reyk@Markus Friedl
2014-05-06no need to include rand.h now the RAND_seed() calls are gone.Jonathan Gray
2014-05-05ca_x509_serialize: don't leak the bio buffer; ok reyk@Markus Friedl
2014-05-05make the ca_pubkey_serialize() code similar to the private key code, andMarkus Friedl
2014-05-05pfkey is unreliable, so add a select-timeout before MSG_PEEK;Markus Friedl
2014-05-05Zap trailing whitespace. Started by pointed comments from andre@.Kenneth R Westerback
2014-05-05Ugly workaround for an overoptimistic alignment expectation of dos_partitionMiod Vallat
2014-05-05Enhance reading of saved ascii labels (-R) to process mountpointKenneth R Westerback
2014-05-05the caller of ikev2_msg_retransmit_response already frees the sa; ok mikebMarkus Friedl
2014-05-05don't leak on pid mismatch; ok mikebMarkus Friedl
2014-05-05validate the attribute length, too; from hshoexer; ok mikebMarkus Friedl
2014-05-05convert select to poll. from peter maloneTed Unangst
2014-05-05"new file systemsize is" -> "new filesystem size is".Kenneth R Westerback
2014-05-05A couple of malloc()+memset(0) -> calloc.Kenneth R Westerback
2014-05-05change surprisingly consistent mispelling of length ("lenght")Bret Lambert
2014-05-04Factor out the code to set the expiry, renewal and rebinding times forKenneth R Westerback
2014-05-04With the recent change by deraadt@ to introduce kern.nosuidcoredump=3,Reyk Floeter
2014-05-04tweak previous;Jason McIntyre
2014-05-04When kern.nosuidcoredump=3, act like =2 but try to dump cores intoTheo de Raadt
2014-05-02remove unused variableCharles Longeau
2014-05-02'for (part == 0; ...)' is not the same as 'for(part = 0; ...)'.Kenneth R Westerback
2014-05-01Correct a test for X509_get_notAfter() failing or returningJonathan Gray
2014-04-30Preserve intended chronological order of leases inKenneth R Westerback
2014-04-30Write last disk sector, not last 512-byte block, when testing validityKenneth R Westerback