summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2007-09-27Move SSL context creation after privileges are dropped.Pierre-Yves Ritschard
This puts the ssl_privsep code to use. One more step towards graceful L7 reload.
2007-09-27Simplify ssl_privsep.c, since it won't need to remain synced with thePierre-Yves Ritschard
equivalent openssl functions.
2007-09-27Do not clear the changed flag to early, which prevented a tablePierre-Yves Ritschard
from being used by several services. ``looks fine'' reyk@
2007-09-25Last missing piece in the equal cost multipath support for ospfd.Claudio Jeker
Send all possible nexthops to the parent process and correctly sync the RIB, FIB and kernel routing table. Based on initial work by pyr@. OK pyr@ norby@ PS: don't forget that you need to enable multipath support via a sysctl
2007-09-25handle empty strings returned by fgetsCharles Longeau
ok ray@
2007-09-25Introduce two new functions to be able to load certificates whilePierre-Yves Ritschard
already chrooted and with privileges dropped. This is the very first step in being able to reload a layer 7 configuration. not ok reyk who's away but should be glad to see this in.
2007-09-22avoid case ranges; ok millert@Otto Moerbeek
2007-09-21typo: print hexdump of packet, instead of pcap header; ok canacar, henningMarkus Friedl
2007-09-20obey -F installedMarc Espie
noticed by kurt@, tested by him too.
2007-09-18use C99 explicit struct initializer instead of deprecated gcc 2.5Otto Moerbeek
style. ok miod@ millert@
2007-09-18Correctly track the E-bit of router LSA on config reloads. If redistributionClaudio Jeker
is turned on or off the E-bit needs to be toggled accordingly else the AS-external LSA are ignored by the other OSPF routers. OK norby@
2007-09-16log_fmt_peer() does not use a static buffer so it is necessary to free theClaudio Jeker
string that it returned later. rde_update_log() did not do that. Memory leak found and diff provided by Mike Belopuhov.
2007-09-16Change the way nexthops are calculated on the root level. Instead of lookingClaudio Jeker
from the target back and trying to figure the nexthop out, the link is searched in the interface list and the info from the matiching interface is used. This should solve the nexthop issues with setups having multiple point-to-point links between two routers as reported on misc@ some time ago. tested and OK norby@
2007-09-15[fF]uther -> [fF]urther in comments and man page. First one spotted onKenneth R Westerback
tech@ by Jung.
2007-09-14remove some warnings:Charles Longeau
unused variable `variable' `variable' might be used uninitialized in this function ok gilles@ ray@
2007-09-14use a setup function for options, cleaner; ok cloderTheo de Raadt
2007-09-14Correctly assign a default weight of 1 to sensors and servers.Chris Kuethe
ok beck
2007-09-13Move parser to use NUMBER as all other parse.y do know. A bit tricky becauseClaudio Jeker
all the relative metrics need some special handling. OK henning@ deraadt@
2007-09-13add -n to usage();Jason McIntyre
2007-09-13Provide the -n switch like in the other imsg daemons for testingPierre-Yves Ritschard
the configuration file. "yes please, ok" henning@
2007-09-13one more missed change;Jason McIntyre
2007-09-13Small style tweak, from jmc and Maurice JanssenChris Kuethe
2007-09-12Add a knob to compensate for a refclock that is early or late. Based on aChris Kuethe
diff from Maurice Janssen. Manpage help from jmc and Maurice, other nits from deraadt and otto. ok deraadt, otto
2007-09-12default weight has to remain 1; seen by Maurice JanssenTheo de Raadt
2007-09-12Another parser.y that switches to parse numbers directly in the lexer.Claudio Jeker
Most complex part was "redistribute 10/8" which need special handling. With and OK deraadt@, OK norby@
2007-09-12tweak previous;Jason McIntyre
2007-09-12Add NUMBER support for signed and unsigned 64bit numbers to the lexerReyk Floeter
instead of passing numbers as STRINGs. Add careful range checks whenever NUMBERs are used in the grammar. From deraadt@ (except the specific range checks)
2007-09-12unchecked conversion from signed 64 to unsigned 32Theo de Raadt
2007-09-12spacingTheo de Raadt
2007-09-11this is where it all started, since future ntpd.conf commands will requireTheo de Raadt
negative parameters. extend lex to spot numbers in the stream. as well, make it easier to add parameters on command line in any order later ok otto ckuethe
2007-09-11extend lex to spot numbers in the stream, without impacting the parsingTheo de Raadt
of ip addresses and such. this change is being pushed into all the pfctl derived parsers, starting with the easier ones; range check written by mpf; ok mpf
2007-09-11macro argument unused, using local instead; spotted by mpfTheo de Raadt
2007-09-11extend lex to spot numbers in the stream, without impacting the parsingTheo de Raadt
of ip addresses and such. this change is being pushed into all the pfctl derived parsers, starting with the easy ones; ok claudio michele
2007-09-11The same dance as in all other routing daemons. baudrate is 64bit plusClaudio Jeker
initialize iface->baudrate when the interface is created. An additional gimmick don't set the ictl->baudrate twice when building the control message.
2007-09-11More baudrate fixes. Again don't forget to initialize the iface->baudrate.Claudio Jeker
2007-09-1164bit baudrate and %llu to printHenning Brauer
2007-09-11baudrate, two non-obvious ones marked for micheleHenning Brauer
2007-09-11baudrate 64bit, two more questionable marked for norbyHenning Brauer
2007-09-11baudrate is 64bit now, plus print w/ %lluHenning Brauer
2007-09-11baudrate u_long -> u_int64_tHenning Brauer
2007-09-11use strcspn to properly overwrite '\n' in fgets returned bufferGilles Chehade
ok pyr@, ray@, millert@, moritz@, chl@
2007-09-11add application/x-bittorrentHenning Brauer
From: Alex Holst <a@mongers.org>
2007-09-11Switch some more baudrates to 64 bit and initialize iface->baudrate.Claudio Jeker
2007-09-11Baudrate is 64bit so use %llu in printf(). Reminded by chl@Claudio Jeker
2007-09-11Improve the ospfd(8) manpage.Esben Norby
Hooray! claudio@
2007-09-10Proper use of fseek/fseeko macros.Tobias Stoeckmann
OK joris@, otto@
2007-09-10add support for relaying DNS traffic (with a little bit of packetReyk Floeter
header randomization). this adds an infrastructure to support UDP-based protocols. ok gilles@, tested by some
2007-09-09better printing code, fixing certain properties; reported by kettenis,Federico G. Schwindt
tested by him and Johan Mson Lindman. ok kettenis.
2007-09-07Initialize length variable slen properly to avoid possible EINVALAlexander Bluhm
errors from setsockopt(2) in function double_rbuf(). ok markus@ mpf@
2007-09-07unexpeced -> unexpected;Jason McIntyre
from Wouter Schoot, netbsd-bugs #36931