summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2016-09-02turn server preference for ciphers on by defaultGilles Chehade
ok jsing@
2016-09-01normalize some function namesMike Larkin
2016-09-01fix a merge collision, and add some retval checking on various pthread_*Mike Larkin
functions
2016-09-01change some log_warn to log_warnx and convert some integer literals toMike Larkin
enumerand values
2016-09-01The fork+exec diff broke "what?!", the ps_what field determines theReyk Floeter
configuration that has to be initialized in each process and was inherited from the parent instead of setting it everywhere. I'm surprised that it worked. OK florian
2016-09-01Make vcpu_reset_regs use new writeregs codeStefan Kempf
Makes reset code a little simpler. ok mlarkin@
2016-09-01forgot during previous commit, thanks stefan@Mike Larkin
2016-09-01zap dead codeEric Faurot
ok gilles@ sunil@
2016-09-01Don't print "lost child" if the child process exited okay. This isReyk Floeter
the old behaviour and unbreaks the regress tests.
2016-09-01Add a set of emulated legacy devices (PIT, PIC, RTC)Mike Larkin
discussed with stefan and deraadt
2016-09-01Get rid of the custom msgbuf_write2() function adapted from libutil.Eric Faurot
It is not necessary now that the profiling code is gone. ok gilles@ sunil@
2016-09-01Use b64_ntop instead of adding yet another base implementation of base64Theo Buehler
encoding to base. Tweaked version of a diff by florian. ok florian
2016-09-01update usage(); pointed out by jmc@Florian Obser
2016-09-01tidy up the list;Jason McIntyre
2016-09-01no more sparc; ok tedu kettenisJason McIntyre
2016-09-01Fix 2 minor issues and a typo in a comment in the pci emulation subsystem.Mike Larkin
The first issue caused trash to be returned from an i/o port read where that port was unclaimed by any emulated device. The second issue caused improper BAR sizes to be reported for unassigned device BARs.
2016-09-01Implement table driven selection to which ACME authorities we canFlorian Obser
talk. Suggest by and OK deraadt, OK benno. (Later on deraadt and benno discussed if this should be handled with a config file. This seems to be good enough for now. We can do a config file later.)
2016-09-01struct client starts to become the kitchen sink. Move fastcgi data toFlorian Obser
its own struct. Requested by and OK reyk@
2016-09-01spacingReyk Floeter
2016-09-01naming a union 'sockthing' was a bit silly. sockun will do for now.Ted Unangst
2016-09-01Adjust log message, use process title now that it works againReyk Floeter
2016-09-01print regular messages to stdout, not errTed Unangst
2016-09-01scan responses for minimum ttl, and cache for min(ttl, 300) instead ofTed Unangst
a fixed amount
2016-09-01remove noop functionEric Faurot
ok sunil@
2016-09-01Switch from the not really working session cache (because of the multiprocessClaudio Jeker
nature of relayd) to tls session tickets to do TLS session resumption. TLS session tickets do not need to store SSL session data in the server but instead send an encrypted ticket to the clients that allows to resume the session. This is mostly stateless (apart from the encryption keys). relayd now ensures that all relay processes use the same key to encrypt the tickets. Keys are rotated every 2h and there is a primary and backup key. The tls session timeout is set to 2h to hint to the clients how long the session tickets is supposed to be alive. Input and OK benno@, reyk@
2016-09-01Do not busy loop in the rsa engine callback waiting for the ca. Instead useClaudio Jeker
poll(2) to wait for up to 1sec for a response. This is not the nicest way to fix this issue but the smallest. Goal is to reduce the contention on the kernel big lock on busy relayd systems. reyk@ agrees (especially about the nastyness of this)
2016-09-01make the page more neutral, as suggested by deraadt;Jason McIntyre
add STANDARDS, as suggested by florian; help/ok deraadt florian
2016-09-01remove sparcTed Unangst
2016-09-01get rid of the imsg buffer usage profiling code.Eric Faurot
ok gilles@ jung@ sunil@
2016-09-01now that openprom is always 1, remove conditionalsTed Unangst
2016-09-01remove sparc supportTed Unangst
2016-09-01chainsaw sparcTheo de Raadt
2016-09-01remove sparcTed Unangst
2016-09-01Teach httpd/proc.c how to fork+exec.Rafael Zalamena
This commit implemented the basic functions to proc.c to make it not rely on global variables, malloc()ed memory and CLOEXEC pipes. Fix child proc titles from reyk@ ok reyk@, florian@
2016-09-01various cleanup;Jason McIntyre
2016-09-01we don't have config.hFlorian Obser
2016-09-01line wrap usageTheo de Raadt
2016-09-01do { } while is easier to eyeballTheo de Raadt
2016-09-01PATH_VAR_EMPTY is not usedTheo de Raadt
2016-09-01Collapse krazy abstractions for other sandbox models, using chroot andTheo de Raadt
pledge directly as needed. ok florian
2016-09-01knfSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31We are past 5.8. Also gets rid of asserts as a bonus.Florian Obser
OK benno@, deraadt@
2016-08-31Bring in license for man page Kristaps just added upstream inFlorian Obser
commit 33c4b38b1db65097e4301e982c9cffcb8c3e648d.
2016-08-31whitespaceSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31whitespaceSebastian Benoit