Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-07-27 | checking for firmware works better if I pass thru all options | Marc Espie | |
2016-07-27 | don't include firmwares in the fuzzy auto-reinstall list | Marc Espie | |
2016-07-27 | hunting around for some sporadic error message. Removing the hash entry | Marc Espie | |
entirely is slightly better. noticed by sthen@ | |||
2016-07-27 | According to RFC 7231 4.3.7, OPTIONS may have body. "Although this | Reyk Floeter | |
specification does not define any use for such a payload, future extensions to HTTP might use the OPTIONS body to make more detailed queries about the target resource." The future has arrived. Found and tested by Michael Lechtermann OK benno@ | |||
2016-07-27 | Improve parsing of the Host by following RFC 7230 Section 5.4 more strictly: | Reyk Floeter | |
- Respond with a 400 (Bad Request) if there is more than one Host: header to prevent ambiguities. - Make sure that the host in the optional absolute form of request-target (eg. GET http://www.target.com/ HTTP/1.1) matches the Host: value. Proxies are supposed to ignore the Host: value if the request-target exists, but relayd used to ignore the absolute request-target form instead. In HTTP terminology, relayd is a gateway and not a proxy, but it has to make sure that the host is validated consistently. OK benno@ bluhm@ | |||
2016-07-25 | Fix rarpd hang. The receive buffer of a route socket can become full | Visa Hankala | |
while rarpd process is idle. To avoid getting stuck in rtmsg(), the process has to clear the buffer and retry. ok benno@ deraadt@ millert@ | |||
2016-07-25 | Initialize the log subsytem in the SE like it is done in the RDE. Without | Claudio Jeker | |
this all logging is going via stderr to /dev/null which is not helpful. OK deraadt@ phessler@ | |||
2016-07-25 | err() instead of errx(); noted by tim | Theo de Raadt | |
2016-07-24 | Split the root vs not-root cases better with regards to chroot setup. | Theo de Raadt | |
ok kettenis benno tedu canacar | |||
2016-07-24 | bump version | Gilles Chehade | |
ok deraadt@ | |||
2016-07-23 | no quirks in FwUpdate. | Marc Espie | |
okay theo | |||
2016-07-22 | Create a smtp transaction context on a session only for the duration of | Eric Faurot | |
that transaction. ok gilles@ | |||
2016-07-22 | "wpath" is needed in the parent pledge when using the /dev/switch0 device. | Reyk Floeter | |
2016-07-22 | fix some cases where we relay_abort_http() the connection too soon. | Sebastian Benoit | |
instead, pass a more specific error back and handle the errors in relay_test() instead. reported by Arto Jonsson and Hiltjo Posthuma, thanks! ok bluhm@ reyk@ | |||
2016-07-21 | Add basic support for OpenFlow 1.3 PACKET_IN+PACKET_OUT, | Reyk Floeter | |
no FLOW_MOD yet. | |||
2016-07-21 | Remove a fatal() in peer_up when the local addrs of a peer can't be figured out. | Claudio Jeker | |
Instead bring the session down and wait for admin help. OK henning@, benno@, phessler@ | |||
2016-07-21 | long to uint32_t port | Reyk Floeter | |
2016-07-21 | With uint32_t ports, we cannot sneak the port into an int anymore | Reyk Floeter | |
2016-07-21 | Turn ofp*_debug functions into ofp*_validate functions to follow a | Reyk Floeter | |
similar approach like iked: first validate the packet, then parse it, and execute actions. debug logging is a side effect of validation. | |||
2016-07-21 | 2004 privsep caused "tcpdump -r" to became a priviledged operation because | Theo de Raadt | |
we felt chroot-containment was also necessary for off-line analysis. Today use of pledge "stdio" for the packet parser acts as an even better sandbox. We can therefore silently ignore chroot setup failure, and regain tcpdump -r support. Result of a discussion with tedu -- which probably happened because we became aware of the laughable retarded -Z option in upstream tcpdump. ok tedu sthen guenther stsp | |||
2016-07-20 | fix typos in comments | Reyk Floeter | |
2016-07-20 | pledge switchctl | Reyk Floeter | |
2016-07-20 | pledge(2) all the switchd processes. | Reyk Floeter | |
2016-07-20 | Handle ports as uint32_t instead of in_port_t: OpenFlow 1.0 used 16bit | Reyk Floeter | |
ports, but later versions switched to 32bit ports (for the case that a virtual switch has more than 65535 switch ports, of course). | |||
2016-07-20 | Parse and print OpenFlow 1.3 PACKET_IN and OXM (Openflow eXtended Match) - | Reyk Floeter | |
no action yet. | |||
2016-07-20 | Use more compact idiom to select architecture dependent files to compile. No | Kenneth R Westerback | |
intentional functional change. Diff from Miod. ok millert@ deraadt@ | |||
2016-07-20 | Update OpenFlow 1.3 stub based on the 1.0 code. | Reyk Floeter | |
2016-07-20 | Fix dependencies of generated map files. | Reyk Floeter | |
2016-07-20 | Add a -n flag to check the configuration and exit. Matches what almost | Jonathan Gray | |
all the other daemons do. ok reyk@ | |||
2016-07-20 | Fix typo | YASUOKA Masahiko | |
from Atzm Watanabe | |||
2016-07-19 | The -DNAME=switch flag is an artifact from the PoC when I couldn't | Reyk Floeter | |
decide on a name. Remove it and fix the name to switchd now. | |||
2016-07-19 | Correctly use ssize_t instead of size_t for read/write return values. | Reyk Floeter | |
Pointed out by David Hill and clang. | |||
2016-07-19 | Remove unused variable | Reyk Floeter | |
2016-07-19 | A bit of cleanup and style changes. ofcconn needs more work. | Reyk Floeter | |
2016-07-19 | L2 tun is tap now | Reyk Floeter | |
2016-07-19 | Don't use .p_shutdown in the proc struct | Reyk Floeter | |
2016-07-19 | Comment out device/switch(4) for now | Reyk Floeter | |
2016-07-19 | Import switchd(8), a basic WIP OpenFlow implementation for OpenBSD. | Reyk Floeter | |
switchd consists of two parts: 1. switchd(8) and switchctl(8), an OpenFlow controller or "vswitch". 2. switch(4), an OpenFlow-aware kernel "bridge". This the 1st part, the driver will be imported later. The code will remain disabled for a while, but it helps development to have it in the tree. switchd currently supports partial OpenFlow 1.0, but the goal is to use OpenFlow 1.3.5 instead (switch(4) already does 1.3.5). For more background information see: http://www.openbsd.org/papers/bsdcan2016-switchd.pdf https://youtu.be/Cuo0qT-lqig With help from yasuoka@ goda@ Import discussed with deraadt@ | |||
2016-07-19 | Replace malloc() + memset() with calloc(). | Martin Natano | |
ok mlarkin | |||
2016-07-19 | In rcctl ls, skip all files with a '.' in the name, not just rc.subr; | Stuart Henderson | |
pkg_add renames files in this way when the checksums don't match at update or removal time. [[ ]] suggestion from guenther@ to avoid the messy "case" that I had in my first diff. Other feedback/suggestions from halex aja millert, ok halex@ aja@. | |||
2016-07-19 | remove bogus attributes from ifstated, spooted by guenther@ | Sebastian Benoit | |
2016-07-19 | remove bogus attributes on fatal* spotted by guenther@ | Sebastian Benoit | |
2016-07-18 | add format attributes to log functions and fix some errors | Sebastian Benoit | |
ok claudio@ florian@ | |||
2016-07-18 | add format attributes to log functions | Sebastian Benoit | |
ok florian@ claudio@ | |||
2016-07-18 | add format attributes to log functions | Sebastian Benoit | |
ok claudio@ | |||
2016-07-18 | add format attributes to log functions | Sebastian Benoit | |
ok stsp@ claudio@ florian@ | |||
2016-07-18 | add format attributes to log functions and fix two errors | Sebastian Benoit | |
ok renato@ | |||
2016-07-18 | add format attributes to log functions and fix am error when using | Sebastian Benoit | |
log_warnx() ok renato@ claudio@ | |||
2016-07-18 | Fix VFLAG formatting | Philip Guenther | |
ok bluhm@ | |||
2016-07-18 | Linking against libkvm is unnecessary here | Philip Guenther | |
ok mlarkin@ |