summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2019-12-08More compact two column format for first section of status display; useOtto Moerbeek
* to mark opportunistic DoT forwarders; ok florian
2019-12-08close the gap for the "final" hint that did not install debug packagesMarc Espie
(coincidentally, that's the pattern used for install from ports) This just requires always passing pkgname thru parse to extract the right name. There's definitely a bit of code to clean up in pkg_add afterwards :/
2019-12-08have DEBUG_PKG_CACHE also apply to already installed packages, toMarc Espie
help bootstrap the process Clean the code: - move the decision logic into individual may_grab_debug_for - acknowledge the PkgAdd object doesn't matter in there, just use class - for already installed stuff, we skip packages that already exist
2019-12-08Turn opportunistic DoT into their own strategies.Florian Obser
This is beneficial since we prefer strategies according to their performance. Previously name servers were upgraded to opportunistic DoT if it was available even if the round trip times went through the roof and there was no way to got back to plain udp/53 DNS. To make up a bit of space in the unwindctl status output, name servers learned via DHCP or SLAAC are printed in a new subcommand. The status output will be further improved shortly. Input & OK otto
2019-12-06Add missing "and"kn
Fixes r1.15 "Document ILOM command to reset hardware".
2019-12-06add -d to usage();Jason McIntyre
2019-12-06Histogram header formatting tweaks; ok florian@Otto Moerbeek
2019-12-06Don't hardcode the cache directory for rpki-client. If started as rootClaudio Jeker
rpki-client will use the defaults for cache and output directory. If not started as root users need to provide both directories as arguments. While there switch from absolute path names to relative ones. For this the parser and rsync process do a chdir(2) to the cache directory on startup. OK benno@
2019-12-05revert previous; ingo said itJason McIntyre
2019-12-05replace "Pf < ... Ns >" with Aq; tidy up lists a little;Jason McIntyre
2019-12-05tweak the FILTERING text a little; ok gillesJason McIntyre
2019-12-05No need to unveil(NULL, NULL) right before pledge "stdio rpath".Theo Buehler
From George Brown. ok benno
2019-12-04use return x; instead of return (x);, like all other files here.Sebastian Benoit
ok deraadt@
2019-12-04reduce includes to the required minimum.Sebastian Benoit
ok deraadt@
2019-12-04Rework rpki-client documentationjob
OK Ingo Schwarze
2019-12-04split output management code into seperate file. iterate over outputTheo de Raadt
methods using a table. detect output truncation (for instance filesystem full) and don't overwrite previous output ok claudio
2019-12-04explicitly say you're not allowed to insert most of these yourselfMarc Espie
2019-12-04document DEBUG_PKG_CACHEMarc Espie
2019-12-04add DEBUG_PKG_CACHE functionality. Doesn't interfere with normal operation.Marc Espie
Basically, if you set DEBUG_PKG_CACHE to a directory, pkg_add will download debug packages "on the sly" any time it installs packages. It is mostly silent (apart from fetching error or directory non existent). It *won't* download packages that are already installed, but this allows keeping debug packages "just in case" in synch with your current snapshot, as some people (mpi@) have worried that by the time you get to debugging something, the snapshots will have moved too much.
2019-12-04allow error to be passed along, in case we need to save $? for laterMarc Espie
2019-12-03"variable name=value" can be used multiple timeskn
2019-12-03don't crash with *NULL if user does not existTheo de Raadt
from discussion with jsg
2019-12-03nicer learned resolver formatingFlorian Obser
OK otto
2019-12-03No more status subcommands; ok florian@Otto Moerbeek
2019-12-03add support for printing RFC 8300 Network Service Header (NSH)David Gwynne
ok deraadt@
2019-12-02add support for VXLAN-GPE as per draft-ietf-nvo3-vxlan-gpe-08.David Gwynne
it's nicely backwards compatible, so we can use the same code for both vxlan and vxlan-gpe.
2019-12-02the dhcp6 printing doesn't need these files anymore.David Gwynne
they were based on draft-ietf-dhc-dhcpv6-14, which was not what ended up in the dhcpv6 rfc(s). the current printing code is a lot smaller and self contained. ok deraadt@
2019-12-02rewrite dhcpv6 parsing so it follows the rfc, not an incompat draft.David Gwynne
it looks like this code was using draft-ietf-dhc-dhcpv6-14 from 1999. there were 27 drafts, and by the time it got to draft 23 and the rfc it was significantly different. this code for draft 14 cannot handle actual dhcpv6 messages. im kind of surprised (disappointed?) that noone noticed before. i only noticed cos the code was segfaulting on sparc64, and when i tried to fix it the resulting messages looked nothing like what stock tcpdump produced. the main difference between the early drafts and what ended up in the rfc is that the base dhcpv6 messages in early drafts were large structure with a lot of fixed fields, while the rfc settled on a 4 byte header that contains a 1 byte message type and a 3 byte transaction id. the rest of the messages are built from dhcp options fields. this cuts all the old handling out, and fixes the fault in the options handling by using EXTRACT_16BITS to get at the code and length fields instead of using ntohs. dhcpv6 explicitly states that it does not align options, so this is necessary to avoid faults on strict alignment archs anyway. no options are pretty printed at the moment, you just get a numeric type, a length, and a hexdump of the value. this is still better than the garbage that the draft parsing produced. if someone is interested in making this easier to read, it would be a straightforward and well contained project to better handle option printing. ok deraadt@
2019-12-02Revert "timeout(9): switch to tickless backend"cheloha
It appears to have caused major performance regressions all over the network stack. Reported by bluhm@ ok deraadt@
2019-12-02Add an "all" mode for status and a much more compact and readable histogramOtto Moerbeek
display; remove the why bogus status message; ok florian@
2019-12-02output_createtmp() remembers the true name, so output_finish() does notTheo de Raadt
need to replay it.
2019-12-02linewrap usageTheo de Raadt
2019-12-02missing | leads to incompete resultsTheo de Raadt
2019-12-01Simplify sets directory check and creation (/home/_syspatch).Antoine Jacoutot
It can now be a symlink. ok naddy@ solene@ kn@
2019-11-30- no -r optionJason McIntyre
- man page is bgpd, not openbgpd ok deraadt
2019-11-30unveil(2) /dev with read permissions since it's the only directory usbdevs(8)Ricardo Mestre
will read from OK kn@
2019-11-30pcidump(8) only opens devices in O_RDONLY from /dev, and additionally writes aRicardo Mestre
`romfile' if -r is used, but since I'm only unveiling after that file is actually opened there's no need to unveil it as well. OK deraadt@ kn@
2019-11-30Add create-vdisk commandkn
Analogue to amd64's vmctl create, this command creates sparse disk image files of the given size. This is less error prone than creating full files with dd(1), but comes with other caveats - still, it is worth having around. Further refinements yet to come; vmctl and ldomctl should also behave more alike in the future, as briefly discussed with kettenis and deraadt.
2019-11-30Document new flag and output arrangement betterTheo de Raadt
2019-11-30Tweak rpki-client to create all 4 output file formats from a singleTheo de Raadt
compute, based upon flags. OpenBGPD compatible format by default if no options, to integrate with bgpd.conf and bgpctl reload. Adapt mtree and stuff. This will receive further refactoring... ok benno job
2019-11-30Revert previous - the stability was not as improved as we had thought andMike Larkin
we ended up accidentally breaking vmctl. This will need more thought. ok ori@
2019-11-29Use X509_STORE_CTX_set_flags() instead of doing the same thing by handClaudio Jeker
in a much more complicated way. OK benno@
2019-11-29correct order of region bits for -a case: rwxSepcTheo de Raadt
2019-11-29Restore the previous behaiviour of not checking the crl for the mft.Sebastian Benoit
Added back by accident when readding CRL checks. ok claudio@
2019-11-29remove two items from the todo listSebastian Benoit
2019-11-29... and fix the compile.Sebastian Benoit
2019-11-29bring back CRL checks, noted by claudio@Sebastian Benoit
2019-11-29delete REAMDE.mdSebastian Benoit
ok claudio@ deraadt@
2019-11-29Improve the programs description a littleSebastian Benoit
2019-11-29add a comment noting missing functionalitySebastian Benoit