CVS: cvs.openbsd.org: src

2024-06-12 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2024/06/12 06:54:54 Modified files: sys/arch/amd64/amd64: conf.c sys/conf : files sys/dev/ic : ccp.c ccpvar.h sys/dev/pci: ccp_pci.c Log message: Add support for the

CVS: cvs.openbsd.org: src

2024-06-12 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/12 04:03:09 Modified files: usr.sbin/rpki-client: cert.c crl.c filemode.c parser.c validate.c Log message: rpki-client: avoid hard error when hitting the maximum cert

CVS: cvs.openbsd.org: src

2024-06-12 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2024/06/12 03:08:43 Modified files: share/man/man4 : rktemp.4 Log message: Update

CVS: cvs.openbsd.org: src

2024-06-12 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2024/06/12 03:06:15 Modified files: sys/dev/fdt: rktemp.c Log message: Add RK3588 support. ok mlarkin@, kurt@

CVS: cvs.openbsd.org: src

2024-06-11 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/11 22:25:00 Modified files: usr.sbin/rpki-client: rpki-client.8 Log message: rpki-client: mention same-origin policy draft in STANDARDS ok job

CVS: cvs.openbsd.org: src

2024-06-11 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/11 22:11:19 Modified files: usr.sbin/rpki-client: version.h Log message: rpki-client: bump version It's been a few months with lots of changes. We should release soon-ish. discussed with job

CVS: cvs.openbsd.org: src

2024-06-11 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/11 22:01:20 Modified files: usr.sbin/rpki-client: cert.c Log message: rpki-client: use better variable names for issuer and subject UID piuid and psuid annoy me every time I see them. no

CVS: cvs.openbsd.org: src

2024-06-11 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/11 21:55:46 Modified files: lib/libcrypto/x509: x509.h Log message: piuid, psuid -> issuerUID, subjectUID

CVS: cvs.openbsd.org: src

2024-06-11 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/11 17:35:27 Modified files: lib/libc/gen : syslog.3 Log message: reentrant functions were not in 386BSD spotted by and ok deraadt@

CVS: cvs.openbsd.org: src

2024-06-11 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2024/06/11 11:35:26 Modified files: sys/dev/acpi : acpi.c Log message: Avoid powering down PCI devices if we're rebooting. This makes some machines (e.g. the t410) unhappy. ok mglocker@

CVS: cvs.openbsd.org: src

2024-06-11 Thread Omar Polo
CVSROOT:/cvs Module name:src Changes by: o...@cvs.openbsd.org2024/06/11 10:35:25 Modified files: lib/libtls : tls_signer.c Log message: sync includes in tls_signer.c pthread -> mutex stdint -> uint8_t stdio.h -> asprintf stdlib.h -> calloc string.h -> memcpy

CVS: cvs.openbsd.org: src

2024-06-11 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/11 10:30:07 Modified files: usr.sbin/smtpd : lka.c Log message: smtpd: fix indent ok op

CVS: cvs.openbsd.org: src

2024-06-11 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2024/06/11 09:44:55 Modified files: sys/arch/arm/arm: cpu.c sys/arch/arm64/arm64: cpu.c sys/arch/riscv64/riscv64: cpu.c Log message: Clamp CPU clock frequencies to [min, max] range

CVS: cvs.openbsd.org: src

2024-06-11 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/11 09:33:46 Modified files: usr.sbin/rpki-client: crl.c Log message: rpki-client: add link to rpki-rs PR that supposedly fixes this bug https://github.com/NLnetLabs/rpki-rs/pull/295

CVS: cvs.openbsd.org: src

2024-06-11 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/11 04:38:40 Modified files: usr.sbin/rpki-client: mft.c rsc.c Log message: rpki-client: fix incorrect use of ASN1_tag2str() This goes back to the initial import in mft.c and was then copied to

CVS: cvs.openbsd.org: src

2024-06-11 Thread Stefan Sperling
CVSROOT:/cvs Module name:src Changes by: s...@cvs.openbsd.org2024/06/11 04:06:35 Modified files: sys/dev/ic : qwx.c sys/dev/pci: if_qwx_pci.c Log message: Make sure qwx(4) always calls refcnt_init() before other refcnt functions. I recently enabled

CVS: cvs.openbsd.org: src

2024-06-11 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/11 03:55:38 Modified files: sys/arch/landisk/include: conf.h Log message: remove prototypes and defines for drivers landisk doesn't use build test and ok miod@

CVS: cvs.openbsd.org: src

2024-06-11 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/11 03:21:32 Modified files: sys/arch/amd64/amd64: conf.c sys/arch/arm64/arm64: conf.c sys/arch/i386/i386: conf.c sys/arch/loongson/loongson: conf.c

CVS: cvs.openbsd.org: src

2024-06-11 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2024/06/11 03:15:33 Modified files: sys/dev/fdt: rkclock.c rkclock_clocks.h Log message: Add RK3588 TSADC clocks and resets. ok patrick@, dlg@

CVS: cvs.openbsd.org: src

2024-06-11 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/11 01:27:14 Modified files: usr.sbin/rpki-client: cert.c crl.c Log message: rpki-client: simplify signature type checking for certs/CRLs The OpenSSL 1.1 get_signature_nid() API is available for all

CVS: cvs.openbsd.org: src

2024-06-11 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/11 00:11:50 Modified files: sys/arch/macppc/macppc: conf.c Log message: remove kbd/ms prototypes with no matching functions

CVS: cvs.openbsd.org: src

2024-06-10 Thread Jason McIntyre
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/10 23:24:39 Modified files: usr.bin/ssh: sshd_config.5 Log message: do not mark up "(default: 20ms)";

CVS: cvs.openbsd.org: src

2024-06-10 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/10 21:28:42 Modified files: sys/arch/i386/include: conf.h sys/arch/i386/i386: conf.c sys/arch/amd64/amd64: conf.c Log message: remove prototypes for pre-wscons mouse drivers

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 20:54:51 Modified files: usr.bin/ssh: monitor_wrap.c Log message: reap preauth net child if it hangs up during privsep message send, not just message receive

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 20:00:30 Modified files: usr.bin/ssh: monitor_wrap.c Log message: reap the pre-auth [net] child if it hangs up during privsep message sending, not just receiving

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 19:58:27 Modified files: regress/usr.bin/ssh: test-exec.sh Log message: fix PIDFILE handling, broken for SUDO=doas in last commit here

CVS: cvs.openbsd.org: src

2024-06-10 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/10 19:49:17 Modified files: sys/sys: conf.h Log message: remove cdev_decl(ses), none of the prototypes have matching functions

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 19:23:25 Modified files: usr.bin/ssh: srclimit.c Log message: a little more RB_TREE paranoia

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 19:22:25 Modified files: usr.bin/ssh: srclimit.c Log message: fix off-by-one comparison for PerSourcePenalty overflow:deny-all mode

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 19:21:41 Modified files: usr.bin/ssh: srclimit.c Log message: move tree init before possible early return

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 19:07:35 Modified files: usr.bin/ssh: sshd_config.5 Log message: update to mention that PerSourcePenalties default to being enabled and document the default values for each parameter.

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 18:44:52 Modified files: usr.bin/ssh: monitor_wrap.c Log message: reap the [net] child if it hangs up while writing privsep message payloads, not just the message header

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 18:40:21 Modified files: usr.bin/ssh: monitor_wrap.c Log message: log waitpid() status for abnormal exits

CVS: cvs.openbsd.org: src

2024-06-10 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/10 18:36:20 Modified files: usr.bin/ssh: servconf.c Log message: correct error message

CVS: cvs.openbsd.org: src

2024-06-10 Thread Jan Klemkow
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/10 13:26:18 Modified files: sys/dev/pv : if_vio.c Log message: Use TCP Large Receive Offload in vio(4). Also introduce the guest offload feature to turn LRO off/on. Tested by Mark Patruck, sf@

CVS: cvs.openbsd.org: src

2024-06-10 Thread Jan Klemkow
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/10 12:21:59 Modified files: sys/dev/pv : if_vio.c Log message: Clarify panic strings in vio(4) suggested by bluhm ok bluhm

CVS: cvs.openbsd.org: src

2024-06-10 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2024/06/10 06:51:25 Modified files: usr.sbin/bgpd : session.c Log message: In get_alternate_addr() consider sessions to IPv6 link-local addresses as connected (they are so by definition). Issue reported

CVS: cvs.openbsd.org: src

2024-06-10 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/10 06:44:06 Modified files: usr.sbin/rpki-client: x509.c Log message: rpki-client: allow multiple EKU OIDs for BGPsec certs Nothing says there may be only one purpose. We only need to find

CVS: cvs.openbsd.org: src

2024-06-10 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/10 05:49:29 Modified files: usr.sbin/rpki-client: parser.c Log message: rpki-client: zap outdated comment. The valid_x509() in proc_parser_gbr() was initially left unchecked but has been checked

CVS: cvs.openbsd.org: src

2024-06-10 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/10 04:50:13 Modified files: usr.sbin/rpki-client: cert.c x509.c Log message: rpki-client: fix and move more KU/EKU to x509_get_purpose() Now all key usage and extended key usage handling is at the

CVS: cvs.openbsd.org: src

2024-06-09 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/09 22:59:15 Modified files: sys/sys: conf.h Log message: remove decls for removed gpr(4) and urio(4)

CVS: cvs.openbsd.org: src

2024-06-09 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/09 22:10:25 Modified files: sys/sys: msg.h Log message: Remove struct mymsg. An example from SVID, not intended for a header. ok millert@ miod@ jca@

CVS: cvs.openbsd.org: src

2024-06-09 Thread Andrew Fresh
CVSROOT:/cvs Module name:src Changes by: afre...@cvs.openbsd.org 2024/06/09 12:31:17 Modified files: libexec/security: security Log message: Silently ignore setuid changes in relinked binaries If these files are being relinked at reboot, this causes false positives and

CVS: cvs.openbsd.org: src

2024-06-09 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2024/06/09 11:24:19 Modified files: distrib/alpha/iso: Makefile distrib/amd64/iso: Makefile distrib/arm64/iso: Makefile distrib/hppa/iso: Makefile distrib/i386/iso:

CVS: cvs.openbsd.org: src

2024-06-09 Thread Jan Klemkow
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/09 10:25:28 Modified files: sbin/ifconfig : ifconfig.8 ifconfig.c sys/dev/pv : if_vio.c sys/net: if.h if_vlan.c Log message: Introduce IFCAP_VLAN_HWOFFLOAD for vio(4).

CVS: cvs.openbsd.org: src

2024-06-09 Thread Gilles Chehade
CVSROOT:/cvs Module name:src Changes by: gil...@cvs.openbsd.org 2024/06/09 04:13:05 Modified files: usr.sbin/smtpd : lka.c smtpd-api.h smtpd-tables.7 table.c Log message: introduce a new K_AUTH service to allow offloading the credentials to a table for non-crypt(3)

CVS: cvs.openbsd.org: src

2024-06-08 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/08 23:18:12 Modified files: sys/dev/pci: fms.c if_em_hw.h igc_api.h igc_mac.h igc_nvm.h igc_phy.h ixgbe.h Log message: remove prototypes with no matching function

CVS: cvs.openbsd.org: src

2024-06-08 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/08 21:21:54 Modified files: sys/dev/ic : ufshci.c Log message: remove prototypes for functions removed in rev 1.34

CVS: cvs.openbsd.org: src

2024-06-08 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2024/06/08 16:50:40 Modified files: regress/sys/net/pf_divert: LICENSE remote.pl Log message: Perl 5.38 permanently stops reading a file after it has seen EOF. Call clearerr() to continously receive log

CVS: cvs.openbsd.org: src

2024-06-08 Thread Marcus Glocker
CVSROOT:/cvs Module name:src Changes by: mgloc...@cvs.openbsd.org2024/06/08 10:05:23 Modified files: gnu/llvm/llvm/lib/Target/X86: X86RetClean.cpp Log message: Fix typo in last commits comment.

CVS: cvs.openbsd.org: src

2024-06-08 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/08 07:34:59 Modified files: usr.sbin/rpki-client: filemode.c Log message: Improve the check for is_ta in filemode Instead of checking for EXFLAG_SS use the more accurate information we already

CVS: cvs.openbsd.org: src

2024-06-08 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/08 07:33:49 Modified files: usr.sbin/rpki-client: cert.c Log message: Tigthen cert_parse_ee_cert() and ta_parse() Require that a cert fed to cert_parse_ee_cert() have an EE cert purpose. Instead of

CVS: cvs.openbsd.org: src

2024-06-08 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/08 07:32:30 Modified files: usr.sbin/rpki-client: x509.c Log message: Add a TODO item for BGPsec router certs It is currently assumed that there is only one extended key usage OID. RFC 8209 allows

CVS: cvs.openbsd.org: src

2024-06-08 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/08 07:31:38 Modified files: usr.sbin/rpki-client: cert.c filemode.c main.c x509.c Log message: Improve x509_get_purpose() Instead of only differentiating between CA and BGPsec Router certs, make it

CVS: cvs.openbsd.org: src

2024-06-08 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/08 07:30:35 Modified files: usr.sbin/rpki-client: extern.h print.c Log message: Helper to convert purpose into a printable string ok job

CVS: cvs.openbsd.org: src

2024-06-08 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/08 07:29:54 Modified files: usr.sbin/rpki-client: extern.h Log message: Extend the cert_purpose enum This adds a TA and an EE purpose to be used in upcoming commits. ok job

CVS: cvs.openbsd.org: src

2024-06-08 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/08 00:05:40 Modified files: usr.sbin/sysupgrade: sysupgrade.sh Log message: Do not enforce the next version key if installing a snapshot. Developers sometimes have dev machines with an older

CVS: cvs.openbsd.org: src

2024-06-07 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2024/06/07 12:24:16 Modified files: sys/net: pf.c sys/netinet: ip_icmp.c ip_input.c ip_output.c ip_var.h sys/netinet6 : ip6_forward.c Log message: Read IP forwarding

CVS: cvs.openbsd.org: src

2024-06-07 Thread Jason McIntyre
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/07 11:38:22 Modified files: usr.sbin/dhcpleasectl: dhcpleasectl.8 usr.sbin/dhcp6leasectl: dhcp6leasectl.8 Log message: trim the -w text: it's obvious -l is a different case, so no need to

CVS: cvs.openbsd.org: src

2024-06-07 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2024/06/07 10:53:35 Modified files: sys/arch/amd64/amd64: cpu.c ipifuncs.c machdep.c sys/arch/amd64/include: cpu.h sys/arch/i386/i386: machdep.c sys/arch/i386/include: cpu.h

CVS: cvs.openbsd.org: src

2024-06-07 Thread Job Snijders
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/07 08:00:09 Modified files: lib/libcrypto/man: X509_cmp.3 Log message: Align documentation with reality OK tb@

CVS: cvs.openbsd.org: src

2024-06-07 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/07 07:43:21 Modified files: sys/net: pipex.c Log message: remove ph_ppp_proto define, unused since rev 1.123

CVS: cvs.openbsd.org: src

2024-06-07 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/07 07:24:35 Modified files: usr.sbin/rpki-client: parser.c Log message: rpki-client: if anything changed, choose the freshly-fetched TA Instead of just looking at the serial number it's easier to

CVS: cvs.openbsd.org: src

2024-06-07 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2024/06/07 07:23:30 Modified files: usr.bin/ssh: srclimit.c Log message: avoid shadowing issues which some compilers won't accept ok djm

CVS: cvs.openbsd.org: src

2024-06-07 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/07 07:15:25 Modified files: sys/netinet: ip_esp.c Log message: remove MAXBUFSIZ define, unused since rev 1.33

CVS: cvs.openbsd.org: src

2024-06-07 Thread Job Snijders
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/07 05:48:05 Modified files: usr.sbin/rpki-client: parser.c Log message: Fine-tune the TA tiebreaker logic Additional tiebreaker: prefer TA certificates with the narrower validity window OK tb@

CVS: cvs.openbsd.org: src

2024-06-07 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/07 03:48:19 Modified files: sys/netinet6 : in6.c Log message: Fix slaac on P2P interfaces slaacd(8) can work on P2P interfaces, it will just never configure the destination address. But this

CVS: cvs.openbsd.org: src

2024-06-07 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/07 03:26:37 Modified files: sys/ufs/ext2fs : ext2fs_vfsops.c Log message: remove unused ROOTNAME define and part of a comment matches part of cd9660_vfsops.c rev 1.11 and ffs_vfsops.c rev 1.12

CVS: cvs.openbsd.org: src

2024-06-07 Thread Jan Klemkow
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/07 02:44:25 Modified files: sys/dev/pci: if_vmx.c if_vmxreg.h Log message: Use TCP Large Receive Offload in vmx(4). tested by Hrvoje Popovski and bluhm@ ok bluhm@

CVS: cvs.openbsd.org: src

2024-06-07 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/07 02:36:54 Modified files: usr.sbin/rpki-client: cert.c x509.c Log message: Add two related todo items for purpose handling BGPsec certs are a bit weird and checks for them are all over the place,

CVS: cvs.openbsd.org: src

2024-06-07 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/07 02:33:12 Modified files: usr.sbin/rpki-client: parser.c Log message: Rework trust anchor handling Mimick the approach already taken from manifests and compare the trust anchor fetched from the

CVS: cvs.openbsd.org: src

2024-06-07 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2024/06/07 02:22:53 Modified files: usr.sbin/rpki-client: main.c repo.c Log message: Download new TA files into a temporary place (.ta/) so that the parser can decide which of the two files to use. With and

CVS: cvs.openbsd.org: src

2024-06-07 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/07 00:21:40 Modified files: lib/libcrypto/x509: x509_verify.c Log message: Fix non-xsc path in x509_verify_potential_parent() The combination of two bugs made this unexpectedly work as intended. To

CVS: cvs.openbsd.org: src

2024-06-07 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/07 00:04:43 Modified files: sys/uvm: uvm_addr.c Log message: remove UADDR_HINT_MAXGAP, missed when uaddr_hint allocator was removed

CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/06 23:51:39 Modified files: lib/libcrypto/man: X509_STORE_CTX_set_verify.3 Log message: Call out argument reversal between check_issued() and X509_check_issued() It's a trap!

CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2024/06/06 23:17:34 Modified files: sys/arch/amd64/conf: Makefile.amd64 Log message: ret-clean is compatible with unhibernate again, due to a fix in LLVM X86RetClean.cpp issue observed by mglocker,

CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2024/06/06 23:16:32 Modified files: gnu/llvm/llvm/lib/Target/X86: X86RetClean.cpp Log message: Inside LLVM, Functions become marked with exposesReturnsTwice() if they call a setjmp-type function (protyped

CVS: cvs.openbsd.org: src

2024-06-06 Thread Jason McIntyre
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2024/06/06 15:14:49 Modified files: usr.bin/ssh: sshd_config.5 Log message: escape the final dot at eol in "e.g." to avoid double spacing;

CVS: cvs.openbsd.org: src

2024-06-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/06 14:25:48 Modified files: usr.bin/ssh: servconf.c Log message: enable PerSourcePenalties by default. ok markus NB. if you run a sshd that accepts connections from behind large NAT blocks,

CVS: cvs.openbsd.org: src

2024-06-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/06 14:20:43 Modified files: usr.bin/ssh: sshd_config.5 Log message: mention that PerSourcePenalties don't affect concurrent in-progress connections.

CVS: cvs.openbsd.org: src

2024-06-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/06 13:50:02 Modified files: usr.bin/ssh: sshd.c Log message: disable stderr redirection before closing fds

CVS: cvs.openbsd.org: src

2024-06-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/06 13:49:25 Modified files: regress/usr.bin/ssh: Makefile Added files: regress/usr.bin/ssh: penalty.sh Log message: regress test for PerSourcePenalties

CVS: cvs.openbsd.org: src

2024-06-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/06 13:48:40 Modified files: regress/usr.bin/ssh: test-exec.sh Log message: make sure logs are saved from sshd run via start_sshd

CVS: cvs.openbsd.org: src

2024-06-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/06 13:47:48 Modified files: regress/usr.bin/ssh: test-exec.sh Log message: simplify

CVS: cvs.openbsd.org: src

2024-06-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/06 12:48:13 Modified files: regress/usr.bin/ssh: test-exec.sh Log message: prepare for PerSourcePenalties being enabled by default in future

CVS: cvs.openbsd.org: src

2024-06-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2024/06/06 11:15:26 Modified files: usr.bin/ssh: misc.c misc.h monitor.c monitor_wrap.c servconf.c servconf.h srclimit.c srclimit.h sshd-session.c

CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/06 10:13:12 Modified files: lib/libssl : ssl_tlsext.c Log message: ssl_tlsext: fix uninitialized variable warning with gcc This is a false positive but as is well-known, gcc is terrible at

CVS: cvs.openbsd.org: src

2024-06-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/06 09:24:46 Modified files: distrib/sets/lists/base: mi distrib/sets/lists/man: mi Log message: sync

CVS: cvs.openbsd.org: src

2024-06-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/06 09:21:01 Modified files: usr.sbin : Makefile Log message: hook dhcp6leasectl to the built

CVS: cvs.openbsd.org: src

2024-06-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/06 09:16:57 Added files: usr.sbin/dhcp6leasectl: Makefile dhcp6leasectl.8 dhcp6leasectl.c Log message: dhcp6leasectl

CVS: cvs.openbsd.org: src

2024-06-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/06 09:16:11 src/usr.sbin/dhcp6leasectl Update of /cvs/src/usr.sbin/dhcp6leasectl In directory cvs.openbsd.org:/tmp/cvs-serv65376/dhcp6leasectl Log Message: Directory /cvs/src/usr.sbin/dhcp6leasectl added to

CVS: cvs.openbsd.org: src

2024-06-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/06 09:15:44 Modified files: sbin/dhcp6leased: dhcp6leased.h engine.c Log message: hand PD_IAs to dhcp6leasectl

CVS: cvs.openbsd.org: src

2024-06-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/06 09:07:46 Modified files: usr.sbin/dhcpleasectl: dhcpleasectl.c Log message: Correct plural form usage.

CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/06 06:38:02 Modified files: usr.sbin/rpki-client: cert.c Log message: Tell my future self why I don't want to change this check

CVS: cvs.openbsd.org: src

2024-06-06 Thread Alexander Bluhm
CVSROOT:/cvs Module name:src Changes by: bl...@cvs.openbsd.org 2024/06/06 06:36:41 Modified files: sys/arch/amd64/amd64: db_disasm.c Log message: Fix call instruction disassembler in ddb. Disassembling the amd64 call instruction in ddb produced wrong output. The

CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/06 05:53:09 Modified files: usr.sbin/rpki-client: cert.c Log message: Check that TA certs are correctly signed We know the pubkey from the TAL, so check that the signature is right as required by

CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/06 01:20:15 Modified files: usr.sbin/rpki-client: cert.c Log message: rpki-client: fix RFC section references in ta_parse() ok claudio

CVS: cvs.openbsd.org: src

2024-06-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/06 01:19:10 Modified files: usr.sbin/rpki-client: filemode.c Log message: rpki-client: fix a crash in filemode For an expired TA, cert is freed and zeroed in file mode and cert_print() crashes. For

CVS: cvs.openbsd.org: src

2024-06-06 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2024/06/06 00:26:14 Modified files: sbin/dhcp6leased: parse.y Log message: Accept more compact forms of prefix delegation requests. For example, these are now valid, too: request prefix delegation on vio1

CVS: cvs.openbsd.org: src

2024-06-05 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2024/06/05 21:29:52 Modified files: usr.sbin/rpki-client: cert.c Log message: rpki-client: simplify ta_parse() Since this is always called after cert_parse_pre(), notBefore and notAfter are available in

  1   2   3   4   5   6   7   8   9   10   >