summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2020-05-16somehow yacc pieces got missed from the "domain name" commit; add them.Stuart Henderson
ok florian@
2020-05-16list example files in FILES with a short description: generally, "ExampleJason McIntyre
configuration file.", but occasionally something else fit better; at the same time, try to make the format for FILES more consistent; original diff from clematis
2020-05-16add bcmgpio to the gpio manpage and install gpioctl manpage on arm64 tooMartin Reindl
OK kettenis@
2020-05-16When IMSG_IFADD is removed, IMSG_IFDELETE becomes uselessdenis
OK remi@
2020-05-16IMSG_IFADD is never used, wipe itdenis
OK remi@
2020-05-16Simplify: _BSDMP was only used once.Antoine Jacoutot
2020-05-15pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspacecheloha
In pf(4), the pf_status.since timestamp is set with time_uptime(9). This is a low-res snapshot of nanouptime(9). nanouptime(9) is used to implement CLOCK_BOOTTIME for clock_gettime(2). It is not used to implement CLOCK_UPTIME, though. The names are misleading. Switch to CLOCK_BOOTTIME in places in userspace where we use pf_status.since so we are working with the right clock. Technically CLOCK_MONOTONIC is equivalent, but we shouldn't use that here. CLOCK_MONOTONIC is not necessarily the "time since boot": the standard says its absolute value is meaningless. ok patrick@ bluhm@
2020-05-14be little bit more verbose what went wrong in mkostempjob
2020-05-14Enable TLSv1.3 support in relayd(8)pvk
with the help from tb@ jsing@; ok tb@
2020-05-14rpki-client no longer passes -l to rsync since it does not make sense toClaudio Jeker
preserve symbolic links in the repositories. From Robert Scheck < robert at fedoraproject.org >
2020-05-14Update to 4.3.1Florian Obser
Testing & OK sthen
2020-05-14We forgot to keep ChangeLog in sync in previous updates.Florian Obser
Bring in the mission changes up to 4.2.4. Also bring in doc/RELNOTES. Both changes ease the process of syncing with upstream. OK sthen
2020-05-12new sentence, new line;Jason McIntyre
2020-05-12Remove unused token BULK and for PREFIX and ADDRESS the table value is alwaysClaudio Jeker
NULL so there is no need to change action in those cases. This was used some time ago by the show rib code. OK kn@, sthen@, benno@, deraadt@
2020-05-11There is no reason to limit the string length of log_reason() to REASON_LENClaudio Jeker
charactars. Also fix a long line. OK benno@ deraadt@
2020-05-11Allow specifying -d multiple times. Only print the fcgi header data ifClaudio Jeker
debug > 1 (-dd) since it adds a lot of noise to the output. In syslog_debug do not check for the debug variable instead let syslog handle it. Currently syslog_debug() would never print anything since it is only called with debug = 0 (debug > 0 implies the console logger). OK florian@
2020-05-11Add support for VPNv6 in the family keyword of show ribClaudio Jeker
OK benno@ phessler@
2020-05-10In case the order fails print the human readable reason from theFlorian Obser
challenge objects that the server hopefully provides. input & OK deraadt OK beck, benno
2020-05-10remove noisy and useless debug lineFlorian Obser
2020-05-10In bgpctl argument parser, re-arrange 'reason' parsing ('nei action [reason]')Theo de Raadt
to be more generic, then change 'reload' to take take a '[reason]' also, which will be logged by bgpd. ok kn claudio
2020-05-10Allow to have multiple domain ... {} sextions with the same domainSebastian Benoit
name, by adding a new (optional) config option "domain name". This can be used to create a rsa and an ecdsa key for the same domain name. The old domain name in the 'title' line continues to be used as domain name in the abscence of the domain name argument, i.e. the change is backward compatible with current config files. tested by sthen@ ok florian@ sthen@
2020-05-08Use a union to ensure cmsg buffer is properly alignedJeremie Courreges-Anglas
Fix synced from unwind/libunbound. unwind(8) crash on landisk (strict alignement arch) reported by otto@, original diff ok deraadt@ otto@
2020-05-08Do not use string litterals in the grammar ("{") it is not POSIX compliantClaudio Jeker
and also not needed. This just needs a char lookup ('{') like it is done in all the other rules with '{'. With this parse.y can be compiled with bison. OK otto@ benno@
2020-05-08Just a bit of KNF.Claudio Jeker
OK florian@
2020-05-06Only allow forkmda() to be called from a local action dispatcher.Todd C. Miller
From gilles@, OK deraadt@ jung@
2020-05-06Same fix for ospfd lsupdate.c applies in ospf6d as well.Claudio Jeker
Do not use the pointer returned by ibuf_reserve() after calling another ibuf function. After the call the internal buffer may have moved by realloc() and so the pointer is invalid. Instead use ibuf_size() to get the current offset in the buffer and use ibuf_seek() later on to write back the updated lsa age into the buffer at the right spot. This fixes an issue seen by Richard Chivers on routers with many passive interfaces. OK stsp@ denis@ deraadt@ also tested by sthen@
2020-05-06Do not use the pointer returned by ibuf_reserve() after calling anotherClaudio Jeker
ibuf function. After the call the internal buffer may have moved by realloc() and so the pointer is invalid. Instead use ibuf_size() to get the current offset in the buffer and use ibuf_seek() later on to write back the updated lsa age into the buffer at the right spot. This fixes an issue seen by Richard Chivers on routers with many passive interfaces. OK stsp@ deraadt@
2020-05-06rpki-client is only interested in real files. Don't tell rsync toClaudio Jeker
preserve symbolic links. Instead just ignore them. OK benno@ deraadt@
2020-05-04Using int64_t together with printf %llu is not portable. Either add aClaudio Jeker
cast in the printf to unsigned long long or just use unsigned long long from the start. In this case it is better to switch the type. Similar changes had been done before. OK deraadt@
2020-05-04Partially reverse a commit from 2019/12/28denis
A large number of redistributed routes make ospf6d crash. OK remi@, sthen@
2020-05-03Use strftime() rather than ctime() to generate timestamps nicer.Theo de Raadt
ok job, input claudio benno
2020-05-03Make it clear the date is in UTC.Theo de Raadt
ok job
2020-05-03Correctly name max_out_prefix and don't clobber the max_prefix value.Claudio Jeker
Also include the group name in the general neighbor description. Both issues reported by Patrick Velder OK deraadt@
2020-05-02Repair the description of "edh [params (none|auto|legacy)]" toSebastian Benoit
configure EDH-based cipher suites with Perfect Forward Secrecy (PFS) for older clients that do not support ECDHE. Problem noticed and initial diff by Jesper Wallin, thanks! ok kn@
2020-05-02Minimal documentation of JSON output.Claudio Jeker
2020-05-02Add support to output data in JSON. This is still work in progress andClaudio Jeker
the output structures may still change but it should be a good starting point for poeple to start playing with it. OK benno@, job@, deraadt@
2020-05-02Adjust fmt_attr() to pass in -1 for flags to tell it you don't careClaudio Jeker
about the flags of the attribute. Part of the JSON output diff. OK job@, benno@, deraadt@
2020-05-02Indirect the output functions through function pointers so that theyClaudio Jeker
can be changed easily. This will be used later on to add JSON output. OK benno@, job@, deraadt@
2020-05-02If read-write is set to disabled, also disable reading with the privateMartijn van Duren
community. Issue reported by Steven Surdock ssurdock <at> engineered-net <dot> com OK deraadt@ claudio@ sthen@
2020-05-02Cleanup the output functions a bit. show_neighbor_full() should print someClaudio Jeker
values only if the session is established or show it unconditonally (for shutdown message and last notficiation error codes. Adjust show_attr() a bit, print ORIGIN as string and add support for AID_VPN_IPv6. General add some warning if length checks fail. OK job@, benno@, deraadt@ as part of a bigger diff
2020-05-02The warning "bad AGGREGATOR, AS 0 not allowed ..." is not very helpful.Claudio Jeker
Make it a log_debug() instead to reduce the noise seen on most full feeds. The DFZ is currently not clean enough to properly drop AS 0 in that case. OK job@ deraadt@
2020-04-30Reword verbose log messages to clarify what's happeningjob
OK deraadt@
2020-04-30Place elapsed, user, and system time for processing in the comment headers.Theo de Raadt
ok job benno claudio
2020-04-30vmd(8): correctly terminate vm processes after sending vmpd
Instead of a round about way of sending a message to vmm that 'send is successful' and terminating by vm_remove from vmm, we can send the imsg and exit in the vm process. The sigchld handler in vmm will vm_remove it from its structures. This is how a normal vm is terminated as well. Previously, vm_remove was called in vmm_dispatch_vm (ie. the event handler to receive messages from vm process) when hanlding the IMSG_VMDOP_SEND_VM_RESPONSE (ie. the vm process has written the vm state to the fd passed on by vmctl send). This is not how vm_remove was intented to be used as it does a free(vm). The vm struct holds the buffers for imsg and so after handling this IMSG_VMDOP_SEND_VM_RESPONSE message, vmm_dispatch_vm loops again to do imsg_get(ibuf, &imsg) to read the next message (and we had just freed this *ibuf when we freed the vm struct) causing it to segfault. reported by kn@ ok kn@
2020-04-29json should have headers in same orderTheo de Raadt
2020-04-28In virtual alias context, do not try to match catchall entries forEric Faurot
usernames, but only for email addresses. fixes an issue where usernames always expand to the @ wildcard if defined in the virtual alias file. discussed with Gilles Chehade ok millert@
2020-04-28re-organize statistics printing code, to make it less verbose andTheo de Raadt
more readable.
2020-04-28a blank line in the header is prettierTheo de Raadt
2020-04-28Print statistics as comments at the top of the files which can takeTheo de Raadt
comments. ok claudio job
2020-04-28use (long long) and %llx to satisfy both 32-bit and 64-bit systems.Theo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 19:13:44 +0000