summaryrefslogtreecommitdiff
path: root/usr.sbin/relayd
AgeCommit message (Expand)Author
2014-05-20Unify the SSL privsep key loading functions.Reyk Floeter
2014-05-15Use log_warn() to include errno if write() fails.Reyk Floeter
2014-05-12Fix a leak from a recent added mark/marked keywords check.Andre de Oliveira
2014-05-08fail for unsupported node action/type combinations. Also fail for theReyk Floeter
2014-05-08remove debug prints that snuck in; found by reyk@Bret Lambert
2014-05-08match relayd proc.c infrastructure with snmpdBret Lambert
2014-05-06Fix two memory leaks: EVP_PKEY_get1_RSA() returns a referenced keyReyk Floeter
2014-05-06no need to include rand.h now the RAND_seed() calls are gone.Jonathan Gray
2014-05-05Replacing test files from previous commit to the right directory. There is noAndre de Oliveira
2014-05-05Add two more regression tests to relayd, these cover "digest" and "file"Andre de Oliveira
2014-05-04Create a new default RSA engine instead of patching the existing oneReyk Floeter
2014-05-04With the recent change by deraadt@ to introduce kern.nosuidcoredump=3,Reyk Floeter
2014-04-23Fix format string in DEBUG message (not compiled by default).Reyk Floeter
2014-04-22Support the CA key for SSL inspection in the ca process. Instead ofReyk Floeter
2014-04-21Add a few missing free's in the grammar.Reyk Floeter
2014-04-21Use RSA_set_ex_data()/RSA_get_ex_data() directly instead ofReyk Floeter
2014-04-21The OpenSSL engine passes a "const u_char *" to the callback butReyk Floeter
2014-04-21The OpenSSL engine passes a "const u_char *" to the callback butReyk Floeter
2014-04-20Add a few more overflow checks for strlc* functions in parse.yReyk Floeter
2014-04-20Check another strlcpy overflow that is very unlikely to happen.Reyk Floeter
2014-04-20Check for strlcpy overflow when expanding the HTTP input value.Reyk Floeter
2014-04-20Check strlcpy of the script path names for overflow and use the size of theReyk Floeter
2014-04-20Just to be pedantic, fail if strlcpy managed to overflow the socket path.Reyk Floeter
2014-04-20Reimplement the multi-dimensional arrays that are used to set up theReyk Floeter
2014-04-20Partially revert the previous: snmp_agentx_ping() didn't leak the pduReyk Floeter
2014-04-20Fix a small leak in the error path.Reyk Floeter
2014-04-18round up some enemy sympathizers found calling RAND_seed().Ted Unangst
2014-04-18fix previousReyk Floeter
2014-04-18spacingReyk Floeter
2014-04-18spacingReyk Floeter
2014-04-18Fix SSL client-only mode when no RSA private key is needed.Reyk Floeter
2014-04-18The RSA_FLAG_SIGN_VER is not yet supported and the current code usesReyk Floeter
2014-04-18Introduce privsep for private keys:Reyk Floeter
2014-04-18The proc.c code sets up some socketpair for the communication betweenReyk Floeter
2014-04-15Print hashkey to debug output, this helps hash-action use cases to be tested.andre
2014-04-14macro fixes for previous;Jason McIntyre
2014-04-14No need to include ber.h here, probably overlooked while importing.andre
2014-04-14remove 'restricted' symbol from yacc parser, overlooked in previousBret Lambert
2014-04-14Adapt relayd to use AgentX protocol to send trapsBret Lambert
2014-04-14Fix the following idiom in the following way:Bret Lambert
2014-03-16lint is dead (long live the lint!), so stop using it as a cpp conditionalPhilip Guenther
2014-02-24fix a buffer overflow of an array introduced with the ssl inspection commitJonathan Gray
2014-02-14remove unused function that distracts from cleaning up the imsg_flush() messSebastian Benoit
2014-01-22relax the cfg file secrecy check slightly to allow group readabilityHenning Brauer
2014-01-21fix a a double free caused by a config with two listen on statementsSebastian Benoit
2014-01-18Remove -Wbounded: it is now the compiler default.Martynas Venckus
2013-11-27unsigned char for ctypeTheo de Raadt
2013-11-26don't intentionally cast the argument to isprint() to the wrong type...Theo de Raadt
2013-11-25use u_char for buffers in yylex, for ctype callsSebastian Benoit
2013-11-13handle msgbuf_write() returning EAGAINSebastian Benoit