summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2020-12-04Reference count prefixes added to a pftable. This allows to exportClaudio Jeker
prefixes from multiple sessions into the same table. Before a prefix was removed from the table on the first withdraw (even though there was an alternative around). Requested by, tested and OK dlg@
2020-12-04Don't link tcpdump(8) with libl and remove reference to `yydebug'.mvs
From Martin Vahlensieck.
2020-12-03grammar fixes from Varik "The Genuine Article!!!" Valefor;Jason McIntyre
2020-12-03Make sure that the strcasecmp for .tal is only done if dlen is large enough.Claudio Jeker
Found by naddy@
2020-12-03Use strndup() instead of hand rolling our own version.Claudio Jeker
OK naddy@
2020-12-03rework the overflow checks for the various relative metric adjustments.Claudio Jeker
This test no longer depends on specific overflow behaviour. OK millert@
2020-12-03Kill unused `ch' variable within safeputs routine. Also use putchar(3)mvs
instead of printf(3) to output printable characters. Pointed by Martin Vahlensieck. ok gnezdo@
2020-12-02Remove the last users of io_*_write functions that call io_simple_write()Claudio Jeker
internally. This is a step in direction of more async aware io in rpki-client. Now everything uses a buffer which is then written. OK tb@
2020-12-01The print() function only accepts a single argument.anton
ok mpi@
2020-12-01Remove useless void cast annotation.Florian Obser
2020-12-01Let rad(8) handle all rdomains in a single daemon, similar to previousFlorian Obser
work in slaacd. Suggested / requested by tb who showed me previous work by reyk which unfortunately predated my work in slaacd and followed a different pattern to that done in slaacd. Testing & OK tb
2020-11-29Sync bsnprintf() with ldapd/util.c r1.13Theo Buehler
Pointed out by jmatthew and requested by florian.
2020-11-29Silence -Wsign-compare whining in bsnprintf()Theo Buehler
This warning was present since an incorrect cast was removed in r1.11. Add the cast to the correct place, i.e., cast to the wider type. ok florian martijn
2020-11-29Fix cert and key path inference for absolute pathsTheo Buehler
ldapd infers certificate and key paths from the configured certificate string. It appends ".crt" and ".key", respectively, and in the case of a relative path it also prepends "/etc/ldap/certs/". A logic error results in prepending "/etc/ldap/certs/" also for absolute paths. Avoid this by making the whole thing readable at the cost of a bit of verbosity. Problem reported by Maksim Rodin on misc@, thanks! Initial fix from me, committing an improved version on behalf of martijn. ok jmatthew, tb
2020-11-27Check if the interface has an IPv6 link-local address before using it.Florian Obser
Problem noted by & OK tb
2020-11-24Kill connection if rsync server stallsjob
OK deraadt@
2020-11-24Pid files? Where we're going, we don't need pid files.Florian Obser
OK sthen
2020-11-22add a comma;Jason McIntyre
2020-11-20remove an unused structJoerg Jung
from Edgar Pettijohn ok kn
2020-11-20partially revert revision 1.423 which went a bit too farJoerg Jung
slightly relax the ORCPT check by not enforcing that a domain is required, allowing e.g.: ORCPT=rfc822;root originally reported via github issue #1084 by Leo Gaspard with input from gilles ok kn
2020-11-18Do not check the list of SAN's in the cert when -F is specified to force renewalBob Beck
This allows you to add a SAN DNS name to a cert, and request a forced renewal to get the new name added immediately ok florian@
2020-11-16zap trailing whitespace;Jason McIntyre
2020-11-11remove reference to non-existent pidfile;Jason McIntyre
issue raised by martin vahlensieck discussed with and ok sthen
2020-11-10Remove prototypes for functions removed 10+ years ago. Return types should be onKenneth R Westerback
their own lines. Diffs from Martin Vahlensiech via tech@. Thanks!
2020-11-09blurb about @tag being recorded as wellMarc Espie
2020-11-09speed up the dependency check pass significantly:Marc Espie
first pass will read packing-lists fully, use that to cache along dependency information, so we don't have to read packing-list again during second pass. we do not cache full plists for the file checks, because 1/ that is significantly larger 2/ that pass is disk io bound anyway
2020-11-09fix indirect dependencies bug: match what pkg_add does by adding tagMarc Espie
definitions to the list of RequiredBy. requires passing the pkgname around for the special case where tag and define-tag are in the same location, so use that info for better diagnostics Note that this loses the optimization where we only need read DependsOnly this can be addressed later by storing stub packing-lists with only relevant info during the first pass, so that we don't have to read them again
2020-11-09reword confusing messageMarc Espie
2020-11-06Explain vcpu strides, provide examplekn
Quite a few users and developers (including me) were confused by how virtual CPU strides would work. Initial diff together with stsp, final feedback from kettenis
2020-11-06mention that acme-client generates a 4096-bit or secp384r1 key if the keyStuart Henderson
file doesn't exist; ok florian jmc
2020-11-068 spaces -> tabTheo Buehler
2020-11-06Treat stale manifests as such, not as 'failed to parse'Theo Buehler
There is currently dead code in mft_parse() that handles stale manifests by setting the stale flag and removing all files they reference. This code was made unreachable in a refactor that fixed a logic error that made mft_parse() succeed despite its error handling. check_validity() returns three possible values. Report failures and stale mfts back immediately via rc. Success needs to reset rc to -1, so subsequent errors are reported as such. This is mostly cosmetic and only changes the rpki-client output in that the comment at the top of the config now actually shows stale manifests. This makes regress pass again. ok claudio job
2020-11-05typoTheo Buehler
2020-11-05Fix checks for manifest validity intervalTheo Buehler
The check_validity() function used the X509_cmp_time() functions with GeneralizedTime. This doesn't work with current dates since LibreSSL enforces conformance with RFC 5280 in X509_cmp_time(), which requires that dates before 2050 are represented with UTCTime. The functions would return an error, but missing error checking led to failing to detect expired or not yet valid manifests. Fix this by converting the dates into struct tm and using ASN1_time_tm_cmp() instead. With input from claudio, jsing ok benno claudio jsing
2020-11-05Mark some common symbols of RDE and SE as static so that linkingClaudio Jeker
with -fno-common does not fail. OK bcook@
2020-11-05Kill bgpd_process, nothing uses it anymore. Instead pass the processClaudio Jeker
type directly to log init. One less common in bgpd. OK benno@
2020-11-05Refactor the filterset handling of nexthops. Instead of depending onClaudio Jeker
bgpd_process and changing the behaviour that way add a new filterset type ACTION_SET_NEXTHOP_REF which is used when the nexthop reference of the union is used. Adjust the RDE to convert ACTION_SET_NEXTHOP to ACTION_SET_NEXTHOP_REF when receiving the filtersets. OK benno@
2020-11-05Refactor the control code to be more like a module.Claudio Jeker
Change control_dispatch_msg() to return the change of control connection count since the return value was not used before. Add control_fill_pfds() to replace the TAILQ_FOREACH loop in session.c. This allows to move the ctl_conns symbol to control.c (from session.h where it caused issues when compiled with -fno-common). OK benno@
2020-11-05Fix comment to better reflect realityClaudio Jeker
2020-11-05Send print-skip.c to the atticTheo Buehler
This was unhooked from the build in a code sync in 1996 and didn't make it into the upstream revision history. Prompted by a diff from Neeraj Pal that showed that this file wasn't compiled. ok jca kn
2020-11-04Back out last commit.denis
Some devs are not convinced.
2020-11-03insert missing EXIT STATUS section;Ingo Schwarze
OK jmc@ deraadt@
2020-11-02acme response challenge location to issue better error codedenis
Notified to me by jmc@ Diff by Matthias Pressfreund <mpfr @ fn de>, thanks
2020-11-02fix HISTORY section; no objection when shown on tech@Ingo Schwarze
2020-11-02print "depend on" information when available in "ospfctl sh int" output.David Gwynne
ok remi@
2020-11-02apply the "depend on" logic in the the default handling of rtr links.David Gwynne
this fixes the use of "depend on" in my situation, which is an Ethernet (broadcast) interface where I'm actually peering with multiple routers so i don't have "type p2p" set. with this the ospf peers now know how to route around my firewalls when their carp interfaces are in the backup state. discussed with claudio@ and jmatthew@ ok remi@
2020-11-01some comma fixes; from varik valeforJason McIntyre
(audio.4 tweaked from that submitted)
2020-10-30Use metrics instead of statistics. Also point people where in the treeMartijn van Duren
they might be able to find said metrics. OK denis@ jmc@
2020-10-30Remove deprecated snmp keyword.Martijn van Duren
OK denis@
2020-10-30Remove the old deprecated listen on syntax.Martijn van Duren
OK deraadt@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-26 20:20:02 +0000