summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2010-10-15use standard list width;Jason McIntyre
2010-10-15nicer formatting for the various synopses;Jason McIntyre
2010-10-15document "openssl ts";Jason McIntyre
2010-10-15Rework the kroute framework of ldpd. ldpd is different from the otherClaudio Jeker
routing daemons. Change the way the kroute tree is indexed (by FEC with a linked list in case there is a priority conflict -- same route + nexthop at different priorities). This needs a mpath capable MPLS routing table. Still work in progress but works a lot better in close meshed networks.
2010-10-15return numeric 0 rather than attempting to return a null string,Stuart Henderson
fixes a segfault when walking memiftable. seems sane to phessler, ok dlg@
2010-10-15Switch the remaining users of libdes in src to libcrypto,Jonathan Gray
telnet portion partially from the latest heimdal. ok mikeb@
2010-10-15typo in commentStuart Henderson
2010-10-15Add the FSM suberrors specified in draft-ietf-idr-fsm-subcode. ThisClaudio Jeker
should help identifying FSM errors since the state is know known. OK henning@ sthen@
2010-10-15Add a few more wanrings to the UPDATE parser. Mainly to warn whenClaudio Jeker
attributes are ignored or UPDATEs are invalidated and withdrawn. While there use % to check if a attribute is a multiple of X. OK henning@, sthen@
2010-10-14probabalistic -> probabilistic; from naddyJason McIntyre
2010-10-14Same fix as previously commited to ospfd. Ensure that kr_redistribute()Claudio Jeker
is called with the head node of a multipath chain.
2010-10-14kr_redistribute() needs to be called with the head node of a multipathClaudio Jeker
chain. Fix kroute_insert() and rtmsg_process() to correctly do this. OK bluhm@
2010-10-14for openssl prime, note that results are probabalistic; from djmJason McIntyre
2010-10-13'socket "path" [restricted]' needs quotes around path; make it clearStuart Henderson
in the manual. Help from jmc@.
2010-10-13document "openssl prime";Jason McIntyre
2010-10-13document "openssl pkeyparam";Jason McIntyre
2010-10-13The heimdal code switched to using DES from libcrypto when 0.7.2Jonathan Gray
was imported over four years ago, so we don't need to link libdes for kerberos anymore. ok mikeb@ deraadt@
2010-10-12document "openssl pkeyutl";Jason McIntyre
2010-10-12Plug a significant memory leak when using SSL.David Hill
ok claudio@, jsg@, phessler@
2010-10-11and another one... s/10.4.5.6/10.3.4.5/, also from jy-p.Stuart Henderson
2010-10-11typo, s/10.1.2.3/10.2.3.4/, from jy-pStuart Henderson
2010-10-11bgpd needs to see all routing messages so set the ROUTE_TABLEFILTER toClaudio Jeker
RTABLE_ANY. OK henning@
2010-10-11zap unused definitionsPierre-Yves Ritschard
2010-10-09these need to be re-added tooGilles Chehade
2010-10-09missing from previous commitGilles Chehade
2010-10-09no longer compiled, i will reintroduce them later, lots of stuff needs toGilles Chehade
be done before we can write queue backends anyway ...
2010-10-09backout the "new" queue code commited 4 months ago. it has many good ideas,Gilles Chehade
is way more optimized than what we had earlier and there's definitely stuff we want to keep, however it is early optimization that doesn't account for many features and makes them hard (if not impossible) to write without ugly workarounds that ruin the purpose of the optimizations. the backout goes to 30 May's right before the commit and catches up on all the non-queue related commits that happened since then. i'll work on reintroducing the ideas from this queue when the basic features we expect from a MTA are implemented. suggested on tech@ about a week ago, no objections, several "please make smtpd move forward" mails from hackers and tech readers.
2010-10-09document "openssl pkey";Jason McIntyre
2010-10-09document "openssl genpkey";Jason McIntyre
2010-10-09Do not use BPF_WORDALIGN when computing pflog header length as it alignsCan Erkin Acar
to 8-byte boundary on 64-bit architectures. Instead explicitly round up to a 4-byte boundary. Reported and tested by sthen@
2010-10-08document "openssl engine";Jason McIntyre
2010-10-08document "openssl ecparam";Jason McIntyre
2010-10-08set the client/server certificate options with all the common keyusageReyk Floeter
and extendedkeyusage and nscerttype flags. the ikectl CA can now be used with all kinds of other vpn tools in addition to iked and isakmpd. ok phessler@
2010-10-08check if a directory exists before trying to create it in the exportJonathan Gray
case as well, spotted by mikeb
2010-10-08use the right capitalization in the Nd strings.Igor Sobrado
ok jmc@
2010-10-08tweak for nroffJonathan Gray
2010-10-08if non absolute paths are specified in install commands assume theyJonathan Gray
are relative to /etc
2010-10-08allow optional paths for the install commands so we canJonathan Gray
install into the isakmpd directory hierarchy for example.
2010-10-08Allow to show certificate details (show ca x cert [y]).Reyk Floeter
2010-10-08supply the correct value of ciphers DEFAULT; from djmJason McIntyre
2010-10-08document "openssl ec";Jason McIntyre
2010-10-07only try to setup a passfile when creating a CAJonathan Gray
2010-10-07Allow to specify the export password on the command line (optionally, forReyk Floeter
scripting). The "peer" argument now needs to be preceded with the "peer" keyword, eg. ... export peer 10.1.1.1 instead of export 10.1.1.1.
2010-10-07sync usage();Jason McIntyre
2010-10-07aginst -> against; from Luca CortiJason McIntyre
2010-10-07Don't try to add MPLS routes with a incomming MPLS_LABEL_IMPLNULL label.Claudio Jeker
The kernel has now a static entry for them and they should not hit the wire anyway.
2010-10-07nroff doesn't like long argument lists that work fine with mandoc.Reyk Floeter
split them into Xo/Xc blocks to make nroff happy again.
2010-10-07- add a -q (quiet) command line option that will be used by ikeca toReyk Floeter
set openssl batch mode: don't ask for x509 options, use the defaults. - allow to specify the initial ca password on the command line to also make it scriptable. - allow to create certificates for clientAuth or serverAuth only (eg. ikectl ca foo certificate bar server). - cosmetics: move double declarations of ca_*() functions to parser.h. ok phessler@
2010-10-07Garbage collect some unused structs.Claudio Jeker
2010-10-07set saner permissions on the directory we export, so we don't changePeter Hessler
perms of /etc/iked when extracting OK jsg@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-12 05:38:53 +0000