summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Expand)Author
2024-06-11I've written/touched/contributed to most of crl.cTheo Buehler
2024-06-11rpki-client: simplify signature type checking for certs/CRLsTheo Buehler
2024-06-10In get_alternate_addr() consider sessions to IPv6 link-local addressesClaudio Jeker
2024-06-10rpki-client: allow multiple EKU OIDs for BGPsec certsTheo Buehler
2024-06-10rpki-client: zap outdated comment.Theo Buehler
2024-06-10rpki-client: fix and move more KU/EKU to x509_get_purpose()Theo Buehler
2024-06-09introduce a new K_AUTH service to allow offloading the credentials to aGilles Chehade
2024-06-08Improve the check for is_ta in filemodeTheo Buehler
2024-06-08Tigthen cert_parse_ee_cert() and ta_parse()Theo Buehler
2024-06-08Add a TODO item for BGPsec router certsTheo Buehler
2024-06-08Improve x509_get_purpose()Theo Buehler
2024-06-08Helper to convert purpose into a printable stringTheo Buehler
2024-06-08Extend the cert_purpose enumTheo Buehler
2024-06-08Add a x509_cache_extensions() helperTheo Buehler
2024-06-08Do not enforce the next version key if installing a snapshot.Florian Obser
2024-06-07trim the -w text: it's obvious -l is a different case, so no need to noteJason McIntyre
2024-06-07rpki-client: if anything changed, choose the freshly-fetched TATheo Buehler
2024-06-07Fine-tune the TA tiebreaker logicJob Snijders
2024-06-07Add two related todo items for purpose handlingTheo Buehler
2024-06-07Rework trust anchor handlingTheo Buehler
2024-06-07Download new TA files into a temporary place (.ta/) so that the parserClaudio Jeker
2024-06-06hook dhcp6leasectl to the builtFlorian Obser
2024-06-06dhcp6leasectlFlorian Obser
2024-06-06Correct plural form usage.Florian Obser
2024-06-06Tell my future self why I don't want to change this checkTheo Buehler
2024-06-06Check that TA certs are correctly signedTheo Buehler
2024-06-06rpki-client: fix RFC section references in ta_parse()Theo Buehler
2024-06-06rpki-client: fix a crash in filemodeTheo Buehler
2024-06-06ip_resources_print(): zap extra blank lineTheo Buehler
2024-06-06rpki-client: simplify ta_parse()Theo Buehler
2024-06-05Only complain about empty list of revoked certs if verbosity > 1Theo Buehler
2024-06-04rpki-client: rework AIA, SIA, and CRL handlingTheo Buehler
2024-06-04rpki-client: reject certs with unexpected SIA accessMethodsTheo Buehler
2024-06-04rpki-client: only allow a single rpkiNotify SIA accessMethodTheo Buehler
2024-06-04rpki-client: remove proto argument from x509_location()Theo Buehler
2024-06-03httpd: render "emojis" as text in directory listingOmar Polo
2024-06-03Rework SIA handling to be less incorrectTheo Buehler
2024-06-03Passing a NULL digest to SHA routines from libcrypto is no longerAnton Lindqvist
2024-06-02remove prototypes with no matching functionJonathan Gray
2024-06-02ugh, another typo; spotted by naddyTheo de Raadt
2024-06-02oops typoTheo de Raadt
2024-06-02Due to growth, crunchgen must also try to block -fret-clean, so also useTheo de Raadt
2024-05-31Preferred and valid lifetime options are sometimes ignored.Florian Obser
2024-05-31Prefixes delegated via DHCPv6 have a lifetime, honour it.Florian Obser
2024-05-31getifaddrs(3) does a non trivial amount of work.Florian Obser
2024-05-31Document a weird decision in RFC 8209Theo Buehler
2024-05-31rpki-client: check issuer for certs and CRLsTheo Buehler
2024-05-30Properly setup the fts_state in the FTS_D case.Claudio Jeker
2024-05-30Increase logging verbosity as to what exactly hit a limitJob Snijders
2024-05-30Fix copy-paste error in last commit. Fixes lladdr and l3vpn regress.Claudio Jeker
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 01:30:12 +0000