summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2014-07-13Also ignore examplessum.Antoine Jacoutot
2014-07-13improve log output for relays. adjust regress testsSebastian Benoit
ok reyk
2014-07-13repair matching of headers, add regress test for this errorSebastian Benoit
ok reyk
2014-07-12Use Comic Sans (or Chalkboard) as the default font for HTTP errorReyk Floeter
messages because we love web hipsters. ok beck@
2014-07-12Add httpd(8), an attempt to turn the relayd(8) codebase into a simpleReyk Floeter
web server. It is not finished yet and I just started it today, but the goal is to provide an HTTP server that a) provides minimal features, b) serves static files, c) provides FastCGI support, and d) follows common coding practices of OpenBSD. It will neither support plugins, nor custom memory allocators, EBCDIC support, PCRE or any other things that can be found elsewhere. httpd(8) is not intended to provide a fully-featured replacement for nginx(8) or the Apache, but it will provide enough functionality that is needed in the OpenBSD base system. ok deraadt@
2014-07-12don't check_security on newer *after* making sure the set doesn't haveMarc Espie
errors. Note that the errors are already signaling enough (conflicts, bad package etc)... And not having any errors mean we actually have proper plists. problem noticed by zhuk@
2014-07-12egsum -> examplessumAntoine Jacoutot
2014-07-12zap trailing whitespace;Jason McIntyre
2014-07-12Close connections when msgbuf_write() returns 0.Kenneth R Westerback
ok claudio@
2014-07-12Fix a potential bug. privsep.c didn't check the interface nameYASUOKA Masahiko
correctly if it's pppx.
2014-07-12oh well, remove -Q entirely... I'm probably the only one who ever used that.Marc Espie
2014-07-12security check in quirksMarc Espie
2014-07-12undocument -QMarc Espie
2014-07-12finish killing old experiment, less confusing codeMarc Espie
2014-07-12@endfake died a while agoMarc Espie
2014-07-12so, pkg_check can now troll thru the whole file system. Either useMarc Espie
a full pkglocatedb, or the system locate dbs...
2014-07-12Fix error in previous.YASUOKA Masahiko
2014-07-12msgbuf_write() <= 0 for a few more daemons.Kenneth R Westerback
ok claudio@
2014-07-12andone last (i hope) accept_rtadv sysctl remnant, also found by jmcHenning Brauer
2014-07-12Extend output a bit.Antoine Jacoutot
2014-07-12Use sha256(1) for compared files, just like we do for examples.Antoine Jacoutot
2014-07-12fix relay "append header" action, add regression test for appendSebastian Benoit
ok reyk
2014-07-12Initial support for /etc/examples.Antoine Jacoutot
2014-07-12Fix the sentence in the BUGS section. Colon is usable for password.YASUOKA Masahiko
Also add a mention about the escape sequence for the password. pointed out giovanni
2014-07-12Move HTTP error codes into http.h.Reyk Floeter
ok benno@
2014-07-12Sync msgbuf_write() changes from relayd.Reyk Floeter
Please note that proc.c should be kept identical in relayd, iked and snmpd (currently without the includes). ok benno@
2014-07-12Use imsg(3) for the IPC between the privileged process and theYASUOKA Masahiko
non-privileged process to be unify the way. Also fix style.
2014-07-12The hosts.lpd file must exist, or no permission is granted. Change theTheo de Raadt
the log messages to clarify the reason for the failure to clarify the condition. ok guenther
2014-07-11optimize a FALLTHROUGHSebastian Benoit
implicit ok reyk
2014-07-11Limit HTTP header length to about 8K (based on the default of 4-8K inReyk Floeter
common web servers). Add a related regress test. OK benno@
2014-07-118 bits is enough for sslflagsReyk Floeter
2014-07-11Sometimes I just sort the tokens in parse.yReyk Floeter
2014-07-11Add support for EDH to provide perfect forward secrecy for older SSLReyk Floeter
clients. Additionally, add options for disallowing client-initiated renegotiations and to prefer the server's cipher list over the client's preferences. This work is based on a diff by Markus Gebert at hostpoint.ch, and was discussed with jsing@ resulting in a few different defaults. ok benno@
2014-07-11Fix DHCPINFORM not to lookup the lease database, not to fill the yiaddrYASUOKA Masahiko
field and not to include the lease time parameters. ok krw
2014-07-11some say it is kinda likely you want autoconf if you run rtsol/rtsold onHenning Brauer
a given interface, so turn AFXF_AUTOCONF6 on on it ok bluhm stsp benno florian
2014-07-11Close the control fd when it has reported EOF.Kenneth R Westerback
ok henning@
2014-07-11Tweak error checking for msgbuf_write() as recommended by the imsgKenneth R Westerback
gurus. ok reyk@ benno@
2014-07-11missing prototypesFlorian Obser
OK tedu@ but don't ask him questions about mrouted, ever
2014-07-11tweak previous;Jason McIntyre
ok krw yasuoka
2014-07-11use the merged 4.4BSD.dist mtree if BSD.local is goneMarc Espie
2014-07-11display the extraction tally only if verboseMarc Espie
2014-07-11with out-of-order extraction, match tempnames to item namesMarc Espie
2014-07-11Simplify the code that handles the HTTP headers by using an RB treeReyk Floeter
with associated lists instead of the complicated lookup table and "others" list. This might add a little malloc overhead for common headers but also fixes some issues like the handling of repeated headers - for example, handling of multiple "Set-Cookie" headers. ok bluhm@ (regress part) ok benno@
2014-07-11Fix typoYASUOKA Masahiko
2014-07-11Add -u option to bind UDP port as a socket to answer DHCPINFORM fromYASUOKA Masahiko
the clients on non ethernet interfaces (eg. tun(4) or pppx(4)). input krw ok krw
2014-07-11we wont ship this table in base anymoreGilles Chehade
2014-07-11a failed socket is -1. from Doug HoganTed Unangst
2014-07-11add additional includes required to build with -DOPENSSL_NO_DEPRECATEDJonathan Gray
2014-07-10make quirks slightly more special, grab the whole packing-list always,Marc Espie
and display the timestamp from the signature if we were signed.
2014-07-10add additional includes required to build with -DOPENSSL_NO_DEPRECATEDJonathan Gray
ok eric@ gilles@