summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2020-12-19remove extra sTheo Buehler
2020-12-18In io_str_read() return 0-length strings as NULL pointers instead ofClaudio Jeker
empty strings. There are no empty strings being passed around but a fair amount of optional strings and this will simplify this code. OK tb@
2020-12-18Add details to -F flagsolene
If you add alternatives domain names to acme-client.conf, using -F is required to renew the certificate with the new names. ok jmc@
2020-12-18Use asprintf with %.*s to construct the path based on the mft fileClaudio Jeker
location and the filename of the referenced file. Use the same method both in main.c and mft.c which is a fair bit simpler than using calloc and strlcpy/strlcat to build the string by hand. OK tb@
2020-12-17Log reason a request is NAK'ed, as well as any problems sending theKenneth R Westerback
NAK. Suggestion & ok dlg@
2020-12-11Make the timer code independent of struct peer this way it can be usedClaudio Jeker
in other places as well. ok procter@
2020-12-11Tracing syscalls which conflict with reserved bt(5) keywords currentlyanton
causes btrace to reject such programs. An example is exit which is both a syscall and a builtin btrace function. Pointed out by bluhm@ To resolve the conflict, make use of a lexer backdoor. A concept described in the original yacc paper and also found in other yacc parsers in our tree. ok bluhm@ mpi@
2020-12-10merge unbound 1.13.0Stuart Henderson
2020-12-10import unbound 1.13.0, heavy lifting done by florian@Stuart Henderson
2020-12-10update to nsd 4.3.4Florian Obser
2020-12-10De-daddr32_t.Kenneth R Westerback
ok mlarkin@ tb@
2020-12-09Lets claim RFC6493 support.Claudio Jeker
2020-12-09Validate ghostbuster records (RFC 6493) but for now do nothing with theClaudio Jeker
provided vcard payload. This change verifies the certificate of the .gbr file and makes sure it is valid (like we do for e.g. .roa files). OK job@
2020-12-09All files provided in a manifest needs to be checked against the providedClaudio Jeker
hash even if rpki-client ignores this file later on. OK job@
2020-12-07When asking to install patches and none are available, return 2.Antoine Jacoutot
man page and inputs from schwarze@ ok sthen@
2020-12-07In revision 1.18 of bt_parse.y, I missed the fact that the print()anton
function accepts an optional argument representing the number of map entries to print. ok bluhm@ mpi@
2020-12-07In btrace(8) handle snprintf(3) errors correctly. If snprintfAlexander Bluhm
fails, buffer is unchanged; initialize it with empty string. snprintf may return negative value or the length that would have been written; check and calculate remaining size. snprintf writes size - 1 characters; pass buffer size as length. OK mpi@
2020-12-07Limit the URL embedded in .cer files to only consist out of isalnum orClaudio Jeker
ispunct characters. Everything else is fishy and so block those early on. OK millert@ job@
2020-12-04Reference count prefixes added to a pftable. This allows to exportClaudio Jeker
prefixes from multiple sessions into the same table. Before a prefix was removed from the table on the first withdraw (even though there was an alternative around). Requested by, tested and OK dlg@
2020-12-04Don't link tcpdump(8) with libl and remove reference to `yydebug'.mvs
From Martin Vahlensieck.
2020-12-03grammar fixes from Varik "The Genuine Article!!!" Valefor;Jason McIntyre
2020-12-03Make sure that the strcasecmp for .tal is only done if dlen is large enough.Claudio Jeker
Found by naddy@
2020-12-03Use strndup() instead of hand rolling our own version.Claudio Jeker
OK naddy@
2020-12-03rework the overflow checks for the various relative metric adjustments.Claudio Jeker
This test no longer depends on specific overflow behaviour. OK millert@
2020-12-03Kill unused `ch' variable within safeputs routine. Also use putchar(3)mvs
instead of printf(3) to output printable characters. Pointed by Martin Vahlensieck. ok gnezdo@
2020-12-02Remove the last users of io_*_write functions that call io_simple_write()Claudio Jeker
internally. This is a step in direction of more async aware io in rpki-client. Now everything uses a buffer which is then written. OK tb@
2020-12-01The print() function only accepts a single argument.anton
ok mpi@
2020-12-01Remove useless void cast annotation.Florian Obser
2020-12-01Let rad(8) handle all rdomains in a single daemon, similar to previousFlorian Obser
work in slaacd. Suggested / requested by tb who showed me previous work by reyk which unfortunately predated my work in slaacd and followed a different pattern to that done in slaacd. Testing & OK tb
2020-11-29Sync bsnprintf() with ldapd/util.c r1.13Theo Buehler
Pointed out by jmatthew and requested by florian.
2020-11-29Silence -Wsign-compare whining in bsnprintf()Theo Buehler
This warning was present since an incorrect cast was removed in r1.11. Add the cast to the correct place, i.e., cast to the wider type. ok florian martijn
2020-11-29Fix cert and key path inference for absolute pathsTheo Buehler
ldapd infers certificate and key paths from the configured certificate string. It appends ".crt" and ".key", respectively, and in the case of a relative path it also prepends "/etc/ldap/certs/". A logic error results in prepending "/etc/ldap/certs/" also for absolute paths. Avoid this by making the whole thing readable at the cost of a bit of verbosity. Problem reported by Maksim Rodin on misc@, thanks! Initial fix from me, committing an improved version on behalf of martijn. ok jmatthew, tb
2020-11-27Check if the interface has an IPv6 link-local address before using it.Florian Obser
Problem noted by & OK tb
2020-11-24Kill connection if rsync server stallsjob
OK deraadt@
2020-11-24Pid files? Where we're going, we don't need pid files.Florian Obser
OK sthen
2020-11-22add a comma;Jason McIntyre
2020-11-20remove an unused structJoerg Jung
from Edgar Pettijohn ok kn
2020-11-20partially revert revision 1.423 which went a bit too farJoerg Jung
slightly relax the ORCPT check by not enforcing that a domain is required, allowing e.g.: ORCPT=rfc822;root originally reported via github issue #1084 by Leo Gaspard with input from gilles ok kn
2020-11-18Do not check the list of SAN's in the cert when -F is specified to force renewalBob Beck
This allows you to add a SAN DNS name to a cert, and request a forced renewal to get the new name added immediately ok florian@
2020-11-16zap trailing whitespace;Jason McIntyre
2020-11-11remove reference to non-existent pidfile;Jason McIntyre
issue raised by martin vahlensieck discussed with and ok sthen
2020-11-10Remove prototypes for functions removed 10+ years ago. Return types should be onKenneth R Westerback
their own lines. Diffs from Martin Vahlensiech via tech@. Thanks!
2020-11-09blurb about @tag being recorded as wellMarc Espie
2020-11-09speed up the dependency check pass significantly:Marc Espie
first pass will read packing-lists fully, use that to cache along dependency information, so we don't have to read packing-list again during second pass. we do not cache full plists for the file checks, because 1/ that is significantly larger 2/ that pass is disk io bound anyway
2020-11-09fix indirect dependencies bug: match what pkg_add does by adding tagMarc Espie
definitions to the list of RequiredBy. requires passing the pkgname around for the special case where tag and define-tag are in the same location, so use that info for better diagnostics Note that this loses the optimization where we only need read DependsOnly this can be addressed later by storing stub packing-lists with only relevant info during the first pass, so that we don't have to read them again
2020-11-09reword confusing messageMarc Espie
2020-11-06Explain vcpu strides, provide examplekn
Quite a few users and developers (including me) were confused by how virtual CPU strides would work. Initial diff together with stsp, final feedback from kettenis
2020-11-06mention that acme-client generates a 4096-bit or secp384r1 key if the keyStuart Henderson
file doesn't exist; ok florian jmc
2020-11-068 spaces -> tabTheo Buehler
2020-11-06Treat stale manifests as such, not as 'failed to parse'Theo Buehler
There is currently dead code in mft_parse() that handles stale manifests by setting the stale flag and removing all files they reference. This code was made unreachable in a refactor that fixed a logic error that made mft_parse() succeed despite its error handling. check_validity() returns three possible values. Report failures and stale mfts back immediately via rc. Success needs to reset rc to -1, so subsequent errors are reported as such. This is mostly cosmetic and only changes the rpki-client output in that the comment at the top of the config now actually shows stale manifests. This makes regress pass again. ok claudio job
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 03:27:14 +0000