| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-10-07 | When we create a new CA, also create an empty (but valid) CRL list. | Peter Hessler | |
| While here, set our used defaults in the config file. OK reyk@, jsg@ | |||
| 2010-10-06 | catch up to openssl-1.0.0a; there's some new commands, as yet undocumented, | Jason McIntyre | |
| but i'll get to those shortly... | |||
| 2010-10-04 | tweak previous; | Jason McIntyre | |
| 2010-10-04 | document ask-update | Marc Espie | |
| 2010-10-02 | somewhat complicated optimization: avoid reading the whole plist file | Marc Espie | |
| when we're only looking for update-info. Means Ustar must deal with "partial" files. Occasionnally a huge win, such as skipping 95% of the kdebase or texlive plist when they don't need updating. I've been running with this for a few weeks now... | |||
| 2010-10-02 | don't try to read bogus stuff, we already errored out on it | Marc Espie | |
| 2010-10-02 | whitespace | Marc Espie | |
| 2010-10-01 | adapt to API changes in OpenSSL-1.0.0a | Damien Miller | |
| 2010-10-01 | update to openssl-1.0.0a | Damien Miller | |
| 2010-10-01 | fix more nsd-zonec references | Jakob Schlyter | |
| 2010-10-01 | fix reference to nsd-zonec; from Kirill Bychkov | Jakob Schlyter | |
| 2010-10-01 | Reword a comment | Claudio Jeker | |
| 2010-10-01 | use "Point-to-Point" for consistency. | Igor Sobrado | |
| ok jmc@ | |||
| 2010-10-01 | tweak previous; | Jason McIntyre | |
| 2010-09-30 | Add jsg@ to the AUTHORS section of ikectl; he wrote the CA/PKI part. | Reyk Floeter | |
| 2010-09-30 | Add some examples about using the CA commands to create and install the | Reyk Floeter | |
| CA and peers certificates. With input from mikeb@ | |||
| 2010-09-30 | Only 6 elements of mib are used so do allocate 6 not 7. | Claudio Jeker | |
| 2010-09-27 | IP_PIPEX mistakenly was applied to the 1723/tcp socket. Apply the option | YASUOKA Masahiko | |
| to the gre socket. | |||
| 2010-09-26 | Allow mod_headers to handle RequestHeader directives known from apache2, | Sebastian Reitenbach | |
| and update documentation accordingly. Patch mostly based on an old patch from Martin Algesten he posted 2002 in apache bugzilla entry: 10772 OK, pyr@ | |||
| 2010-09-26 | correct the path of npppd, and use modp1024 on the sample ipsec.conf | YASUOKA Masahiko | |
| because iPhone doesn't support modp2048. | |||
| 2010-09-25 | spacing, no binary changes. | Igor Sobrado | |
| 2010-09-25 | spacing, no binary changes. | Igor Sobrado | |
| 2010-09-25 | fix typos in documentation and log_debug() function. | Igor Sobrado | |
| ok claudio@ | |||
| 2010-09-25 | zap trailing whitespace; | Jason McIntyre | |
| 2010-09-25 | Print the checksum sum as a simple fingerprint of the LSDB. | Claudio Jeker | |
| OK dlg@ | |||
| 2010-09-25 | When counting the lsa also build the sum of the ls_checksums. This can be | Claudio Jeker | |
| used to quickly verify if two LSDBs are in sync. Other systems do the same. OK dlg@ | |||
| 2010-09-25 | use a consistent argument name in both synopsis and usage; argument | Igor Sobrado | |
| name choosed with help from dlg@ ok claudio@ | |||
| 2010-09-24 | Add support pipex for L2TP call and L2TP on IPv6. | YASUOKA Masahiko | |
| - pipex requires unique session-id in protocol, so session-id generation algorithm has been changed. - change to fit the new PIPEX ioctl. ok dlg@ | |||
| 2010-09-24 | hook iscsid and iscsictl into the build. | David Gwynne | |
| 2010-09-24 | basic manpage for iscsictl. we wont do an iscsi.conf manpage until the | David Gwynne | |
| syntax has settled down. | |||
| 2010-09-24 | basic manpage | David Gwynne | |
| poked by claudio@. repeatedly. | |||
| 2010-09-24 | another useless and noisy debug message | Claudio Jeker | |
| 2010-09-24 | add missing .Ar; | Jason McIntyre | |
| 2010-09-24 | Set TCP_NODELAY since we want the request to be sent ASAP. | Claudio Jeker | |
| OK dlg@ | |||
| 2010-09-24 | Remvoe some debug messages that are not needed. | Claudio Jeker | |
| 2010-09-24 | add -s option. ok martinh@ | lum | |
| 2010-09-24 | Import iscsictl -- the control tool for iscsid. | Claudio Jeker | |
| Currently only discovery and reload work. OK dlg@, matthew@, deraadt@ | |||
| 2010-09-24 | iSCSI Initiatior daemon using vscsi(4). | Claudio Jeker | |
| Currently implements the absolute minimum of the protocol to make it work against targets. Many things still in flux but we're annoyed to work outside of the tree. Commited from a source tree on an iSCSI disk served via iscsid but it is not yet production ready. OK dlg@, matthew@, deraadt@ | |||
| 2010-09-24 | npppd didn't setup a PIPEX session if MPPE is not required by config and | YASUOKA Masahiko | |
| CCP is failed to be opened because the peer doesn't support MPPE. Fixed to setup a PIPEX on such case. | |||
| 2010-09-24 | fix a overflow found by parfait | Jonathan Gray | |
| ok jakob@ | |||
| 2010-09-23 | tweak the mclgeti algorithm to behave better under load. | David Gwynne | |
| instead of letting hardware rings grow on every interrupt, restrict it so it can only grow once per softclock tick. we can only punish the rings on softclock ticks, so it make sense to only grow on softclock tick boundaries too. the rings are now punished after >1 lost softclock tick rather than >2. mclgeti is now more aggressive at detecting livelock. the rings get punished by an 8th, rather than by half. we now allow the rings to be punished again even if the system is already considered in livelock. without this diff a livelocked system will have its rx ring sizes scale up and down very rapidly, while holding the rings low for too long. this affected throughput significantly. discussed and tested heavily at j2k10. there are still some games with softnet we can play, but this is a good first step. "put it in" and ok deraadt@ ok claudio@ krw@ henning@ mcbride@ if we find out that it sucks we can pull it out again later. till then we'll run with it and see how it goes. | |||
| 2010-09-23 | Add the same license text to these files as the rest of npppd. | Jonathan Gray | |
| ok yasuoka@ | |||
| 2010-09-23 | remove support for talking to the zebra routing socket which | Jonathan Gray | |
| was not enabled, we use a kernel routing socket for such things. ok yasuoka@ claudio@ | |||
| 2010-09-22 | unify MS-CHAP implementation to sbin/iked/chap_ms.[ch]. | YASUOKA Masahiko | |
| copy sbin/iked/chap_ms.[ch] and fixed chap.c and eap.c to compile with it. | |||
| 2010-09-22 | make the arguments match the format string in usage | Jonathan Gray | |
| ok yasuoka@ | |||
| 2010-09-21 | when a packet has had addresses and/or ports rewritten, show the original | Henning Brauer | |
| addresses/ports too. ok ryan dlg | |||
| 2010-09-21 | Warn if schema file can't be opened. | Martin Hedenfal | |
| 2010-09-21 | temporary hack to raise snaplen for pflog so that pflog header, ip header | Henning Brauer | |
| and protocol header actually fit in the common cases. stays until canacar tells us how to do it right ;) ok dlg ryan | |||
| 2010-09-20 | Implement support for bsdauth authentication via simple binds, not only | Martin Hedenfal | |
| SASL. This works by prefixing the userPassword attribute with {BSDAUTH}, followed by the (bsd) username. For example: userPassword: {BSDAUTH}username Idea by william@. Tested by william@. | |||
| 2010-09-20 | fix-up the sysORTable by using the same name (sensorsMIBObjects) as used | Stuart Henderson | |
| in the MIB, rather than a different spelling (sensorMIBObjects). ok martinh@ | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |