Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-01-19 | Use initial assignment of action to check for errors. | Brent Cook | |
This simplifies things and make action = -1 no longer a dead store. Also, spell FALLTHROUGH consistently. reported by fritjof@alokat.org | |||
2015-01-19 | Log the remote user in the access.log. | Florian Obser | |
Pointed out by, tweak & OK reyk@ | |||
2015-01-19 | s/clt_fcgi_remote_user/clt_remote_user/ | Florian Obser | |
OK reyk@ | |||
2015-01-19 | Decouple auth parameters from struct server_config into struct auth. | Reyk Floeter | |
OK florian@ | |||
2015-01-19 | Also print the fspace member of map entries when PRINT_VM_MAP_ENTRY is | Mark Kettenis | |
requested. ok deraadt@ | |||
2015-01-19 | remove #ifndef #define blocks trying to handle lack of BUFSIZ | Theo de Raadt | |
ok millert | |||
2015-01-19 | sparc also needs <machine/param.h> for CPU_SUN*. | Miod Vallat | |
2015-01-19 | Replace HOST_NAME_MAX+1 with NI_MAXHOST when the hostname is used | Alexander Bluhm | |
with getaddrinfo() or getnameinfo(), but keep HOST_NAME_MAX+1 when the hostname comes from gethostname(). No binary change; OK deraadt@ | |||
2015-01-19 | remove a couple of unused headers. | Brent Cook | |
reported by Jonas 'Sortie' Termansen | |||
2015-01-19 | add a specialized version of version compares that should not update | Marc Espie | |
everything all the time, at the bequest of aja. (basically, we updated everything when runtime dependencies changed, even though we actually only care for wantlib, and hard dependencies, but those trigger bumps all over the tree) Experimental for now, turn on with -DSHORTENED. Likely to become the new default if nothing bad comes out of it. | |||
2015-01-19 | If SIGUSR1 and SIGUSR2 are unavailable, don't invent something crazy | Theo de Raadt | |
honouring systems before 4.3BSD. | |||
2015-01-19 | move to <limits.h> universe | Theo de Raadt | |
ok yasuoka | |||
2015-01-19 | If UID_MAX is not defined, this should fail to compile. | Theo de Raadt | |
ok guenther | |||
2015-01-18 | Implement sending syslog messages over TLS. | Alexander Bluhm | |
OK reyk@ | |||
2015-01-18 | tweak previous | Florian Obser | |
with help from jmc@ | |||
2015-01-18 | First stab at implementing basic auth. | Florian Obser | |
Currently the htpasswd file needs to be in the chroot; will hopefully improved soonish. Based on a diff from Oscar Linderholm many months ago but turned into a complete rewrite. input/OK reyk@ | |||
2015-01-18 | Drop backward compat syntax. | Antoine Jacoutot | |
2015-01-18 | The world is ELF: use <sys/exec_elf.h> instead of <a.out.h> or <sys/exec.h> | Philip Guenther | |
Use a better test for an input being ELF: struct exec is dead and there are defines for the ELF magic. Reorder #includes and do some whitespace cleanup. Oh, and don't lead the fd if an input file isn't ELF. ok deraadt@ | |||
2015-01-18 | do not require <a.out.h> | Theo de Raadt | |
2015-01-17 | make sure we have an interactivestub... I forgot the -I part from the old | Marc Espie | |
script. | |||
2015-01-17 | document the <sys/param.h> | Theo de Raadt | |
2015-01-16 | More evil bootstrap code. #ifndef ALIGNBYTES #define ALIGNBYTES 3. | Theo de Raadt | |
Which makes this code go all wrong depending on where a system has put their things like ALIGNBYTES. Delete with prejudice. When someone needs to compile this in another environment, they need to face this hurdle, and maybe change the embedded memory allocator... | |||
2015-01-16 | change to <limits.h> universe. The only changes in the binary are due | Theo de Raadt | |
to the heavy use of assert. ok millert | |||
2015-01-16 | move to <limits.h> where possible, annotate <sys/param.h> otherwise | Theo de Raadt | |
2015-01-16 | Move from <sys/param.h>. (The binary change is due to a line number | Theo de Raadt | |
passed to assert, found by doug) ok millert | |||
2015-01-16 | SSL_CTX_use_certificate_chain() has been added to LibreSSL and there | Reyk Floeter | |
is no need to keep a local copy in ssl_privsep.c. This adds a little burden on OpenSMTPD-portable because it will have to put it in openbsd-compat for compatibility with legacy OpenSSL. OK gilles@ | |||
2015-01-16 | Adapt to <limits.h> universe. | Theo de Raadt | |
ok millert | |||
2015-01-16 | Replace <sys/param.h> with <limits.h> | Theo de Raadt | |
millert spotted the accidental <ctype.h> removal that caused binary change. | |||
2015-01-16 | The SSL/TLS session Id context is limited to 32 bytes. Instead of | Reyk Floeter | |
using the name of relayd relay or smtpd pki, use a 32 byte arc4random buffer that should be unique for the context. This fixes an issue in OpenSMTPD when a long pki name could break the configuration. OK gilles@ benno@ | |||
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt | |
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | |||
2015-01-16 | Merge in a commit from upstream.. | Brad Smith | |
- Fix bug#637: fix that nsd.db grows limitlessly, an off by one on one megabyte free chunks, created during AXFRs of large zones, that caused the one megabyte chunk to be leaked. ok sthen@ | |||
2015-01-16 | first batch of cleanup to programs based upon the namespace cleanups | Theo de Raadt | |
in net/pfvar.h sys/proc.h sys/ucred.h arpa/nameser.h change to PATH_MAX, reduce use of MIN() and MAX(), HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc etc ok millert guenther, some review by doug | |||
2015-01-15 | switch to PATH_MAX | Theo de Raadt | |
2015-01-15 | do not assume <netmls/mpls.h> will pull in <limits.h> via <sys/param.h> | Theo de Raadt | |
get <limits.h> directly. ok millert | |||
2013-11-26 | import NSD 4.0.0, tests from Dorian Büttner, Patrik Lundin, requested by ↵ | Stuart Henderson | |
brad@ | |||
2015-01-15 | fully remove disabled mschap support, which does weird DES things. | Ted Unangst | |
(already won't build for some time since the removal of md4) ok naddy | |||
2015-01-15 | Be sure to print time_t with the appropriate format specifier. Repairs | Miod Vallat | |
dump of eeprom variables on sun4. | |||
2015-01-15 | oops, forgotten back-pointer to state for error messages | Marc Espie | |
problem noticed by jca@ | |||
2015-01-15 | When the connection to a TCP syslog server fails or the TCP connection | Alexander Bluhm | |
terminates, try to reconnect after an increasing timeout. test and OK jasper@ | |||
2015-01-15 | when enqueueing offline mails from within the daemon session, we should not | Gilles Chehade | |
rely on getlogin() otherwise mail will end up enqueued as coming from user who started smtpd. bug spotted by deraadt@, diff ok todd@ | |||
2015-01-15 | not supposed to include sys/ttycom.h (these may have rpcgen history) | Theo de Raadt | |
2015-01-14 | Switch drift file format to ppm for compatibility with the ntp.org | Christian Weisgerber | |
daemon. Old drift files will be interpreted as a minuscule adjustment and ntpd will proceed to rediscover the drift, like starting from zero on a newly installed machine. ok deraadt@ | |||
2015-01-14 | Use reallocarray() instead of calloc() when making a copy of the | Todd C. Miller | |
environment. We already explicitly NULL terminate the array. | |||
2015-01-14 | Replace MAXHOSTNAMELEN with HOST_NAME_MAX+1 and MAXNAMLEN with NAME_MAX | Todd C. Miller | |
and use limits.h instead of sys/param.h. | |||
2015-01-14 | Use HAVE_FOO for BSD-specific features instead of relying on the | Todd C. Miller | |
BSD macro from sys/param.h. | |||
2015-01-14 | Use standard types for wait, readdir, signals and pids. | Todd C. Miller | |
2015-01-14 | Remove compatibility defines for ancient systems. We assume a | Todd C. Miller | |
reasonable level of POSIX compliance. | |||
2015-01-14 | recipient and sender lists now support the user+TAG notation, allowing | Gilles Chehade | |
among other things a secondary MX to filter recipients to be relayed to a primary MX even if they are using tags. there are other nice things to do with that feature, use your imagination. tested and ok florian@, tested by several users for a few days too | |||
2015-01-14 | bring back reverted commits, the crash was unrelated | Gilles Chehade | |
2015-01-13 | bump failure to set the initial time from debug to warning | Brent Cook | |
from Paul B. Henson, ok phessler@ |