summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2017-02-14fix man page, diff from jmc@Gilles Chehade
2017-02-14add standalone maildir MDA (work in progress) which will soon obsolete theGilles Chehade
builtin delivery_maildir backend, + makefiles, not linked to build yet ok eric@, sunil@
2017-02-14add standalone mda for file delivery which will later obsoleteGilles Chehade
builtin delivery_file + set of makefiles, not linked to build ok sunil@, eric@
2017-02-14prepare Makefiles but don't link to the build yetGilles Chehade
2017-02-14add new implementation of a standalone LMTP client which will deprecate theGilles Chehade
builtin delivery_lmtp.c ok sunil@, jung@
2017-02-14fix a crash when parsing large community given on the command lineSebastian Benoit
found by jsg@, fixed by phessler@ and strsep() by me. fix memory leak jsg@ ok jsg@ phessler@
2017-02-13Eliminate pointless'%m' (a.k.a. hand rolled strerror()) by using fatal() andKenneth R Westerback
log_warn(). Zap a couple of explicit 'syslog()' calls.
2017-02-13Eliminate pointless'%m' (a.k.a. hand rolled strerror()) by using fatal() andKenneth R Westerback
log_warn(). Zap a couple of explicit 'syslog()' calls.
2017-02-13Adjust some long lines.Kenneth R Westerback
2017-02-13Adjust some long lines.Kenneth R Westerback
2017-02-13Do the strerror() elimination dance with a log_warnx() -> log_warn().Kenneth R Westerback
2017-02-13Do the strerror() elimination dance with log_warnx() -> log_warn(),Kenneth R Westerback
fatalx() -> fatal() and even a couple of fprintf(stderr) -> log_warn().
2017-02-13Banished to the attic.Kenneth R Westerback
2017-02-13Switch from old errwarn.c logging to shiny new log.[ch].Kenneth R Westerback
ok benno@
2017-02-13Switch from old errwarn.c logging to shiny new log.[ch].Kenneth R Westerback
ok benno@
2017-02-13Fix powerdown with vmmci(4) VMs using a shutdown and no reset.Reyk Floeter
vmm VMs don't support powerdown - no ACPI or power management - so we use a trick to issue a reboot and just don't reset after the triple fault. This worked before but was broken with the previous fix to pvbus_shutdown() - move the trick to vmd instead. OK mlarkin@
2017-02-13Reverse output when installing a patch; it's more logical (first get, thenAntoine Jacoutot
install). While here, match the installer output a bit more: Get/Verify ... Installing ... prodded by a mail exchange with "bytevolcano" discussed with robert@ sthen@ ok robert@
2017-02-13draft-ietf-idr-shutdown extends to support a message on either ofPeter Hessler
"Administrative Shutdown" or "Administrative Reset" patch submitted by Job Snijders, thanks!
2017-02-13fix incoming tls-require regression, introduced with last parse.y cleanupGilles Chehade
causing the flag not to be propagated down to the listener ok eric@
2017-02-13allow negation of authenticated keyword:Gilles Chehade
accept ! authenticated [...] ok sunil@, jung@
2017-02-11Correct handling of requests to delete individual attribute values.Philip Guenther
reported by ZHANG Huangbin (zhb (at) iredmail.org) fix by Robert Klein (roklein (at) roklein.de)
2017-02-11Move parse_warning() into parse.c to prepare to replace errwarn.cKenneth R Westerback
with standard daemon log.[ch]. ok mpi@
2017-02-10add glue to be able to ask "give me the highest number shared library withMarc Espie
that stem". needed later for new fancy stuff in check-lib-depends okay sthen@
2017-02-09Teach pstat -d to also print untyped kernel symbols.Jeremie Courreges-Anglas
Storage defined in assembly code often doesn't define its type and size, thus the nlist interface can't present it as N_DATA. Instead of fixing all the assembly by adding .type pseudo ops, work around the problem in pstat. Let's hope that allowing N_COMM is sufficient. This makes ''pstat -d u cpuid_level'' useful. Reported by mikeb@, "looks sane" mikeb@ guenther@
2017-02-09Do not loose the send/expect validation error on timeout.Reyk Floeter
When a read timeout is reached, the code also has to check if there is already anything in the input buffer and verify it again. This fixes relayd and relayctl to show "send/expect failed" instead of "tcp read timeout". Found by Michael W. Lucas (while working on the Relayd Mastery book). Thanks. OK benno@
2017-02-07Ox on its own line;Jason McIntyre
2017-02-07/tmp/cvsspEkokReyk Floeter
2017-02-07Improve parsing of the HTTP request lineReyk Floeter
Make sure that the beginning of a new request starts with an alphabetic character. This is a quick way to detect non-ASCII requests (eg. TLS on port 80). The full validation of the request method is done once the input line is read. Make sure that non-terminated lines do not exceed the SERVER_MAXHEADERLENGTH which is 8k. As the current read watermark is set to 64k, this means that the limit check is triggered after max. 64k of input, depending on the TCP read buffer. OK benno@ jsing@
2017-02-07Add installurl to FILES and SEE ALSO.Antoine Jacoutot
2017-02-06amend the "unsigned package" message, commenting that signify(1) doesn'tMarc Espie
see old-style signatures. Clue for people trying pkg_add -current against 6.0 or earlier.
2017-02-06basic installurl support, get installpath from it (appending the requisiteMarc Espie
magic for packages location...). Fairly straightforward if pkg.conf defines installpath=, it takes precedence (manual trumps automatic) to be fully documented once the dust settles. okay aja@
2017-02-06Bump bcrypt version to $2b$ and increase number of rounds in two examples.Theo Buehler
2017-02-06Use quotes to protect the password hash from shell expansion. Update hashTheo Buehler
to the new bcrypt version $2b$ and use more rounds. Prof. Falken's password is much safer now. Found thanks to a problem report by John McGuigan. ok beck
2017-02-05The installer does not create pkg.conf during installation and doesRobert Peichaer
not update it during upgrades anymore. pkg_add(1) will soon use the installurl file as primary source to find the package repository. OK espie@, tb@
2017-02-05Use a non-greedy regular expression for the installpath url.Robert Peichaer
This ensures, that a trailing whitespace does not break pkg_add. OK espie@
2017-02-04Appropriately replace "domain name" with "hostname"; less misleadingJeremie Courreges-Anglas
tb@ was initially concerned about next-server but there were more similar occurrences. Simple solution - "hostname" - proposed by jmc@ ok from both
2017-02-04Cast char to unsigned char for isspace()Philip Guenther
ok gilles@
2017-02-04missing function prototypeMike Larkin
2017-02-03Stop assuming that in_{addr,port}_t are typedefed in <sys/types.h> andPhilip Guenther
instead pull in <netinet/in.h> or <arpa/inet.h> when those are needed. ok florian@ beck@ millert@
2017-02-03Don't use <sys/param.h> from userland without cause. Sort <sys/*>Philip Guenther
before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@
2017-02-02Fix support for HTTP pipelining by handling all requests in the buffer.Reyk Floeter
Tested & OK jung@
2017-02-02Disable client-initiated TLS renegotiation by default.Reyk Floeter
It is rarely needed and imposes a light DoS risk. LibreSSL's libssl allows to turn it off with a simple SSL_OP_NO_CLIENT_RENEGOTIATION option instead of the complicated implementation that was used before. It now turns it off completely instead of allowing one initial client-initiated renegotiation. It can still be enabled with "tls client-renegotiation". ok benno@ beck@ jsing@
2017-02-01netinet/in.h should be included, and freebsd and some othersBob Beck
don't have EAI_NODATA, so make this easier for people from bernard spill
2017-01-31Teach ikectl to include extensions in the CSR, rather than just adding themStuart Henderson
when signing the certificates by the local CA. This can make things easier if you want to take a CSR from ikectl to another CA for signing, they often copy extensions from the request. ok reyk@
2017-01-31Don't include a literal "%" in the value for humidity sensorValue inStuart Henderson
OPENBSD-SENSORS-MIB, % is the unit for this value and is already present in sensorUnits, and it's harder for NMS to parse "100.00%" as a number. From Joel Knight.
2017-01-31remove extra call setting OCSP staple now that it is done aboveBob Beck
using keypair_ocsp.. ok reyk@
2017-01-31Correct mistake I made when converting this to new funcitonBob Beck
2017-01-31Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may beBob Beck
added associated to a keypair used for SNI, and are usable for more than just the "main" certificate. Modify httpd to use this. Bump libtls minor. ok jsing@
2017-01-31Reimplement httpd's support for byte ranges.Reyk Floeter
The previous implementation loaded all the output into a single output buffer and used its size to determine the Content-Length of the body. The new implementation calculates the body length first and writes the individual ranges in an async way using the bufferevent mechanism. This prevents httpd from using too much memory and applies the watermark and throttling mechanisms to range requests. Problem reported by Pierre Kim (pierre.kim.sec at gmail.com) OK benno@ sunil@
2017-01-31The variable clt_done is used in too many places.Reyk Floeter
Introduce a new variable clt_headersdone in the async HTTP parser. OK sunil@ benno@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-19 07:05:39 +0000