Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-09-02 | turn server preference for ciphers on by default | Gilles Chehade | |
ok jsing@ | |||
2016-09-01 | normalize some function names | Mike Larkin | |
2016-09-01 | fix a merge collision, and add some retval checking on various pthread_* | Mike Larkin | |
functions | |||
2016-09-01 | change some log_warn to log_warnx and convert some integer literals to | Mike Larkin | |
enumerand values | |||
2016-09-01 | The fork+exec diff broke "what?!", the ps_what field determines the | Reyk Floeter | |
configuration that has to be initialized in each process and was inherited from the parent instead of setting it everywhere. I'm surprised that it worked. OK florian | |||
2016-09-01 | Make vcpu_reset_regs use new writeregs code | Stefan Kempf | |
Makes reset code a little simpler. ok mlarkin@ | |||
2016-09-01 | forgot during previous commit, thanks stefan@ | Mike Larkin | |
2016-09-01 | zap dead code | Eric Faurot | |
ok gilles@ sunil@ | |||
2016-09-01 | Don't print "lost child" if the child process exited okay. This is | Reyk Floeter | |
the old behaviour and unbreaks the regress tests. | |||
2016-09-01 | Add a set of emulated legacy devices (PIT, PIC, RTC) | Mike Larkin | |
discussed with stefan and deraadt | |||
2016-09-01 | Get rid of the custom msgbuf_write2() function adapted from libutil. | Eric Faurot | |
It is not necessary now that the profiling code is gone. ok gilles@ sunil@ | |||
2016-09-01 | Use b64_ntop instead of adding yet another base implementation of base64 | Theo Buehler | |
encoding to base. Tweaked version of a diff by florian. ok florian | |||
2016-09-01 | update usage(); pointed out by jmc@ | Florian Obser | |
2016-09-01 | tidy up the list; | Jason McIntyre | |
2016-09-01 | no more sparc; ok tedu kettenis | Jason McIntyre | |
2016-09-01 | Fix 2 minor issues and a typo in a comment in the pci emulation subsystem. | Mike Larkin | |
The first issue caused trash to be returned from an i/o port read where that port was unclaimed by any emulated device. The second issue caused improper BAR sizes to be reported for unassigned device BARs. | |||
2016-09-01 | Implement table driven selection to which ACME authorities we can | Florian Obser | |
talk. Suggest by and OK deraadt, OK benno. (Later on deraadt and benno discussed if this should be handled with a config file. This seems to be good enough for now. We can do a config file later.) | |||
2016-09-01 | struct client starts to become the kitchen sink. Move fastcgi data to | Florian Obser | |
its own struct. Requested by and OK reyk@ | |||
2016-09-01 | spacing | Reyk Floeter | |
2016-09-01 | naming a union 'sockthing' was a bit silly. sockun will do for now. | Ted Unangst | |
2016-09-01 | Adjust log message, use process title now that it works again | Reyk Floeter | |
2016-09-01 | print regular messages to stdout, not err | Ted Unangst | |
2016-09-01 | scan responses for minimum ttl, and cache for min(ttl, 300) instead of | Ted Unangst | |
a fixed amount | |||
2016-09-01 | remove noop function | Eric Faurot | |
ok sunil@ | |||
2016-09-01 | Switch from the not really working session cache (because of the multiprocess | Claudio Jeker | |
nature of relayd) to tls session tickets to do TLS session resumption. TLS session tickets do not need to store SSL session data in the server but instead send an encrypted ticket to the clients that allows to resume the session. This is mostly stateless (apart from the encryption keys). relayd now ensures that all relay processes use the same key to encrypt the tickets. Keys are rotated every 2h and there is a primary and backup key. The tls session timeout is set to 2h to hint to the clients how long the session tickets is supposed to be alive. Input and OK benno@, reyk@ | |||
2016-09-01 | Do not busy loop in the rsa engine callback waiting for the ca. Instead use | Claudio Jeker | |
poll(2) to wait for up to 1sec for a response. This is not the nicest way to fix this issue but the smallest. Goal is to reduce the contention on the kernel big lock on busy relayd systems. reyk@ agrees (especially about the nastyness of this) | |||
2016-09-01 | make the page more neutral, as suggested by deraadt; | Jason McIntyre | |
add STANDARDS, as suggested by florian; help/ok deraadt florian | |||
2016-09-01 | remove sparc | Ted Unangst | |
2016-09-01 | get rid of the imsg buffer usage profiling code. | Eric Faurot | |
ok gilles@ jung@ sunil@ | |||
2016-09-01 | now that openprom is always 1, remove conditionals | Ted Unangst | |
2016-09-01 | remove sparc support | Ted Unangst | |
2016-09-01 | chainsaw sparc | Theo de Raadt | |
2016-09-01 | remove sparc | Ted Unangst | |
2016-09-01 | Teach httpd/proc.c how to fork+exec. | Rafael Zalamena | |
This commit implemented the basic functions to proc.c to make it not rely on global variables, malloc()ed memory and CLOEXEC pipes. Fix child proc titles from reyk@ ok reyk@, florian@ | |||
2016-09-01 | various cleanup; | Jason McIntyre | |
2016-09-01 | we don't have config.h | Florian Obser | |
2016-09-01 | line wrap usage | Theo de Raadt | |
2016-09-01 | do { } while is easier to eyeball | Theo de Raadt | |
2016-09-01 | PATH_VAR_EMPTY is not used | Theo de Raadt | |
2016-09-01 | Collapse krazy abstractions for other sandbox models, using chroot and | Theo de Raadt | |
pledge directly as needed. ok florian | |||
2016-09-01 | knf | Sebastian Benoit | |
2016-08-31 | whitespace | Sebastian Benoit | |
2016-08-31 | whitespace | Sebastian Benoit | |
2016-08-31 | whitespace | Sebastian Benoit | |
2016-08-31 | whitespace | Sebastian Benoit | |
2016-08-31 | We are past 5.8. Also gets rid of asserts as a bonus. | Florian Obser | |
OK benno@, deraadt@ | |||
2016-08-31 | Bring in license for man page Kristaps just added upstream in | Florian Obser | |
commit 33c4b38b1db65097e4301e982c9cffcb8c3e648d. | |||
2016-08-31 | whitespace | Sebastian Benoit | |
2016-08-31 | whitespace | Sebastian Benoit | |
2016-08-31 | whitespace | Sebastian Benoit | |