summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2020-09-14Relax parsing of pem files a bit. Apparently there are CAs that useFlorian Obser
\r\n line endings. From Bartosz Kuzma (bartosz.kuzma AT release11.com) as part of a larger diff. OK beck
2020-09-14Report what's wrong when account creation fails instead of a genericFlorian Obser
http error. OK beck
2020-09-14Document "pki" option for relay delivery too; from Nick GassonTodd C. Miller
OK jmc@ martijn@
2020-09-14Rewrite the agentx code of relayd. This new framework should allow usMartijn van Duren
to add new objects easier if so desired and should handle a lot more corner-cases. This commit should also fix the following: - On most (all) tables it omits the *Entry elements, making it not map to OPENBSD-RELAYD-MIB.txt. - sstolen returns the size of the sockaddr_in{,6}, instead of the sin{,6}_addr resulting in garbage data to be put in the ip-field. - relaydSessionPortIn and relaydSessionPortOut are swapped - relaydSessions only uses relaydSessionIndex, while OPENBSD-RELAYD-MIB.txt says it should have 2 indices - miscellaneous minor things related to the AGENTX-protocol, like wonky index handeling and returning NOSUCHINSTANCE where NOSUCHOBJECT should be returned, etc. This commit does remove traps, but it's large enough as is and I intent on adding it soon(tm). It also deprecates the snmp keyword in favour of an agentx keyword. The snmp keyword is still available, but will be removed in the future. Tweaks and OK denis@ on the relayd parts Tweaks and OK claudio@ on the agentx parts "Get it in" deraadt@
2020-09-14All buffers are in rw-memory, but lookup_record has it defined asMartijn van Duren
const char *. Remove the const so things compile a little cleaner. Pointer out by Mark Patruck <mark <at> wrapped <dot> cx>. Thanks
2020-09-14Make "spf walk" report if an spf-record has macro's and can't be resolved.Martijn van Duren
Originally reported by and OK on earlier version giovanni@ Looks good to deraadt@ feedback and OK jmc@ feedback semarie@ OK sthen@
2020-09-14Document the fact that the maximum size of a font is currently 512 KiB.Frederic Cambus
The limit is set by the WSDISPLAY_MAXFONTSZ macro.
2020-09-14Let slaacd handle all rdomains in a single daemon.Florian Obser
Suggested by claudio and matthieu Testing matthieu Putting it in now to get enough testing before release so that there is enough time to back it out, suggested by deraadt
2020-09-12link btrace(8) to the buildSebastien Marie
Please note that dt(4) still need manual enabling in the kernel. ok deraadt@ sthen@ mpi@
2020-09-12Include openssl/x509.h in extern.h since it uses a few of the typedefs fromClaudio Jeker
there in structs and prototypes. Remove the openssl/ssl.h and other strange openssl includes in the .c files that don't use openssl specific functions. OK beck@ and tb@
2020-09-12Remove last two arguments from repo_lookup() since they are unused.Claudio Jeker
2020-09-12Move the proc_rsync and with that the rsync processing into rsync.cClaudio Jeker
main.c is too crowded OK deraadt@
2020-09-12Delete unused strdup().tobhe
ok claudio@
2020-09-12Change the noop (-n) behaviour. When no network fetch is done thereClaudio Jeker
is no reason to run the rsync subprocess. Just immediatly make the repo valid when inserting it to the repo_list. OK benno@ (some time ago)
2020-09-12Use the original requested URI for REQUEST_URI.YASUOKA Masahiko
ok millert florian
2020-09-11Support '-p' a flag to filter all actions by PID.Martin Pieuchot
2020-09-11If we get messages but they are not ntp replies (e.g. caused byOtto Moerbeek
incoming icmp) do not register them as replies. Also, fix a bug introduced in the previous commit: first recompute scale, then recompute interval, so that when the offset increases and thus the scale is lowered both the poll interval and the check interval use the same scale. First issue spotted by naddy@ second one by and ok semarie@
2020-09-10Move the tcp/udp keyword before <address>. This allows for easier addingMartijn van Duren
of different protocols in the future. The old syntax is still supported for for now, but will generate a deprecation warning and will be removed in a future release. While here add support for specifying a tcp/udp port. This will be used for snmp services, "trap handle" will still only run on port 162. Feedback and OK denis@
2020-09-10Use the ROUTE_FLAGFILTER setsockopt to filter out routing socket messagesJonathan Matthew
for L2 and broadcast routes, since we don't need them at all. ok remi@ sthen@
2020-09-08Fix PCI config space union such that the register state is properlyMark Kettenis
separated from the non-register state. Committed on behalf of jordan@
2020-09-06Remove snmpe_dispatch_parent.Martijn van Duren
It's an empty stub and proc.c will put implement proc_dispatch_null if not set, which does the exact same thing. OK denis@
2020-09-06replace duplicated sizeofa marco with predefined nitemsjan
OK martijn@
2020-09-06Split "trap receiver" into its own trap_address struct and clean up theMartijn van Duren
code surrounding this struct and struct address. No functional change intended, except that trap receiver's source-address may now be a resolvable hostname. Tweaks and OK jan@
2020-09-05Use SETSDIR consistently.Florian Obser
From Alex Holst, thanks! OK kn
2020-09-05httpd(8) uses TLSv1.3 and TLSv1.2 by defaultTheo Buehler
Update the httpd.conf(5) manual to reflect this. Initially prompted by a question from tj and reminded by a diff from Navan Carson. ok kn
2020-09-04Replace TAILQ concatenation loop with TAILQ_CONCATbket
OK millert@, florian@
2020-09-04Ignore ftruncate failure with errno == EAGAINTheo Buehler
This makes piping the OCSP response to other programs with -o - work. input and r+ guenther
2020-09-03No need for a private #define for the INQUIRY response_format value '2'. JustKenneth R Westerback
use the new SID_SCSI2_RESPONSE.
2020-09-02Fix clang warning in vmctl(8)Theo Buehler
If the path to a tty doesn't contain a '/' or ends in a '/' use the full path. (The intent is to chop off the leading "/dev/") ok deraadt (who had the same diff) martijn millert
2020-09-01Rename [READ|WRITE]_BIG to [READ|WRITE]_10. Rename struct scsi_rw_big toKenneth R Westerback
struct scsi_rw_10. ok gnezdo@ jmatthew@ (who also did sparc64 compile test)
2020-08-30If no replies are received for a while due to connectivity issuesOtto Moerbeek
go into unsynced mode. The existing code to check if we're unsycned is only done on receiving an ntp packet which does not happen if there are connectivity issues. Prodded by naddy@ ok @florian
2020-08-29typo; pointed out by Matthias (mpfr AT fn.de), thanks!Florian Obser
2020-08-27add missing "regex" keyword; from heddi nabbisenJason McIntyre
ok martijn
2020-08-26Set fastcgi socket default on server and location.Florian Obser
This allows "fastcgi" directly inside of a server directive without giving specifying socket. OK tracey
2020-08-25check that fcgiport string value is within rangetracey
remove redundant error message tweaks and ok florian@
2020-08-24Add support for non-localhost fastcgi sockets.tracey
Lots of review time kn@ Lots of review time, tweaks, and ok florian@
2020-08-24The kernel provides sufficiently randomised ports.Florian Obser
OK sthen
2020-08-24merge unbound 1.11.0Stuart Henderson
2020-08-24update to unbound 1.11.0, tests tb@ dtucker@, ok tb@Stuart Henderson
2020-08-23Merge listen_sock into address, since there's a 1:1 correlation. Save someMartijn van Duren
overhead and 18LoC. OK jan@
2020-08-21Fix wrong fall through. The IMSG_CTL_SHOW_DB_INTRA case should onlyjan
send back LSA with type LSA_TYPE_INTRA_A_PREFIX. LSA_TYPE_INTER_A_PREFIX should not be included there. OK claudio@
2020-08-21Remove redundent code.jan
OK claudio@, looks fine from tb@
2020-08-21Fix column spacing for disk transfer speedskn
"IO rates above 100 MB/s are common with SSD; this patch expands the column so it stays neatly printed." - report and initial diff from John Carmack, Refinements and adjustment of missing views from me, OK benno
2020-08-20Use the ROUTE_FLAGFILTER setsockopt to filter out routing socket messagesJonathan Matthew
for L2 and broadcast routes, since we don't need them at all. ok kn@ remi@ dlg@
2020-08-19add unveil(2) againRicardo Mestre
this allows reading from anywhere in the filesystem (in order to read the config file and those ones included from it), but also executing, which I missed from my last attempt, because it's required for "check script(s)". even though it's a broad permission, and the main proc cannot be pledged due to forbidden ioctls, then this at least prevents it from creating/writing/deleting files which is not required here. OK benno@ a long time ago
2020-08-17Previous commit broke two things:Martijn van Duren
1) Bulkget broke because mps_getbulkreq doesn't exactly do what it says on the tin, so use it how it works for now. 2) A break statement got left behind resulting in only a single varbind being answered. Reported and tested by sthen@
2020-08-17add geneve option printing.David Gwynne
mostly modelled on the nsh md2 printing.
2020-08-17don't need to shift the vxlan vni twice.David Gwynne
2020-08-17add initial support for handling geneve packets.David Gwynne
it's like vxlan, but different. the most interesting difference to vxlan is that the protocol adds support for adding optional metadata to packets (like nsh). this diff currently just skips that stuff and just handles the payload. for now.
2020-08-16Reflect recent wsfontload(8) changes in the man page.Frederic Cambus
We are now getting the default values for font height and width using the WSDISPLAYIO_GETSCREENTYPE ioctl, so they always match the currently loaded font metrics.