| Age | Commit message (Expand) | Author |
|---|
| 2017-12-08 | Convert snprintf+write into dprintf. It is simply easier to read, and | Theo de Raadt |
| 2017-12-07 | Now that we have RB_NFIND, the canacar's trick with RB_INSERT+RB_NEXT | Vadim Zhukov |
| 2017-12-07 | client_addr_init() never fails and its return value is never checked, | Vadim Zhukov |
| 2017-12-07 | Fix a potential fd leak in client_aldap_open(). | Vadim Zhukov |
| 2017-12-06 | Make vmd respect owner when starting non-disabled vms. | Aaron Bieber |
| 2017-12-02 | switching to _pbuild is tricky, you can't take it back. | Marc Espie |
| 2017-12-01 | Avoid using an uninitialized variable. | Visa Hankala |
| 2017-11-30 | When performing vmctl reload and a previously configured vm is running, | ccardenas |
| 2017-11-29 | vmd(8): fix broken IRR bit setting for the slave PIC. Noticed by claudio | Mike Larkin |
| 2017-11-29 | fix double dot; | Jason McIntyre |
| 2017-11-29 | add -i to SYNOPSIS/usage() and sundry tweaks; | Jason McIntyre |
| 2017-11-29 | Insert MPLS VPN routes with the RTF_GATEWAY flag cleared. mpe(4) is now | Claudio Jeker |
| 2017-11-29 | Don't do OCSP stapling only if the staple file is 0 length. | Bob Beck |
| 2017-11-29 | add options to specify the control socket in relayd and relayctl. | Sebastian Benoit |
| 2017-11-29 | make vmm(4) less responsible for initial register state, preferring to let | Mike Larkin |
| 2017-11-28 | fix some spelling errors in a few comments | Mike Larkin |
| 2017-11-28 | Add option -i to allow oscpcheck to be used to validate an on-disk staple | Bob Beck |
| 2017-11-28 | One less lie in comments | Claudio Jeker |
| 2017-11-28 | tweak previous; | Jason McIntyre |
| 2017-11-28 | Introduce relay_reset_event() which closes and resets a relay connection. | Claudio Jeker |
| 2017-11-28 | In TLS inspection mode we also need to keep the server tls object around. | Claudio Jeker |
| 2017-11-28 | Disable oscp stapling on invalid staple, rather than failing to start. | Bob Beck |
| 2017-11-28 | relay_load_fd() is no longer clobering errno in the error case so use | Claudio Jeker |
| 2017-11-28 | Add space between to and read like in other DPRINTFs. | Claudio Jeker |
| 2017-11-27 | Change the ecdhe curve configuration to the same way httpd is doing it. | Claudio Jeker |
| 2017-11-27 | Make ca_launch error messages unique. | Alexander Bluhm |
| 2017-11-27 | lseek/read is racy when there is multiple consumers. Use pread instead. | Claudio Jeker |
| 2017-11-27 | Add a DPRINTF() in relay_error() that helped me out way too many times. | Claudio Jeker |
| 2017-11-27 | Use file descriptor passing to load certificates into the relays. Especially | Claudio Jeker |
| 2017-11-27 | Do not rip out the output buffer of the bufferevent. Instead just use an | Claudio Jeker |
| 2017-11-27 | lenght->length, mostly in comments | Stuart Henderson |
| 2017-11-27 | rfc 7230 mandates that a "204 No Content" http status must not come with a | Sebastian Benoit |
| 2017-11-27 | Show correct command execution status by checking against update | Sunil Nimmagadda |
| 2017-11-27 | relay_tls_connected() is playing with the inner bowels of bufferevents. | Claudio Jeker |
| 2017-11-27 | Simplify relay_close_http(), make relay_httpdesc_free() accept and ignore | Claudio Jeker |
| 2017-11-27 | typo in comments "optionel" -> "optional" | Mike Larkin |
| 2017-11-27 | Deprecate agreement url config option and get the information from the | Florian Obser |
| 2017-11-24 | Revert my change to ignore EIO errors when writing to log files. | Alexander Bluhm |
| 2017-11-23 | simplify imsg handler. | Eric Faurot |
| 2017-11-21 | no need to check the sending process in imsg handlers when there is no | Eric Faurot |
| 2017-11-21 | The call to setegid(2) was replaced with setresgid(2) a while ago. | Theo Buehler |
| 2017-11-18 | merge the masquerade and missing domain header callbacks into one function. | Eric Faurot |
| 2017-11-17 | Use explicit_bzero to erase secrets | Jeremie Courreges-Anglas |
| 2017-11-16 | Check that http options are only configured in http protocols. | Alexander Bluhm |
| 2017-11-15 | make the maximum size of http headers configurable in the protocol. | Sebastian Benoit |
| 2017-11-14 | Inverse logic, issue found by henning@. MPLS VPN is still broken though. | Claudio Jeker |
| 2017-11-11 | reads better as *an* rdomain, i think; | Jason McIntyre |
| 2017-11-11 | update switch handling in vmd(8). vmd now gets switch information (rdomain, | Mike Larkin |
| 2017-11-09 | /usr/share/compile -> /usr/share/relink/kernel | Antoine Jacoutot |
| 2017-11-08 | Since r1.41 the extensions are included in the CSR. Thus ca_request() | Patrick Wildt |
