CVS: cvs.openbsd.org: src

2020-01-22 Thread Damien Miller
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/23 00:54:04

Modified files:
usr.bin/ssh: ssh-keygen.c 

Log message:
remove trailing period characters from pub/priv key pathnames -
they make them needlessly more difficult to cut and paste without
error; ok markus@ & dtucker@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Kenneth R Westerback
CVSROOT:/cvs
Module name:src
Changes by: k...@cvs.openbsd.org2020/01/23 00:53:01

Modified files:
sys/arch/luna88k/dev: spc.c 
sys/arch/macppc/dev: mesh.c 
sys/arch/sgi/hpc: wdsc.c 
sys/dev: vscsi.c 
sys/dev/ata: atascsi.c 
sys/dev/atapiscsi: atapiscsi.c 
sys/dev/ic : aac.c adv.c aic6250.c aic6360.c 
 aic79xx_openbsd.c aic7xxx_openbsd.c ami.c cac.c 
 gdt_common.c iha.c mfi.c mpi.c ncr53c9x.c 
 nvme.c oosiop.c osiop.c qla.c qlw.c siop.c 
 trm.c twe.c uha.c 
sys/dev/isa: wds.c 
sys/dev/pci: ips.c mfii.c mpii.c qle.c vmwpvs.c 
sys/dev/pv : vioscsi.c 
sys/dev/usb: umass_scsi.c 
sys/scsi   : mpath.c 

Log message:
Use a consistant idiom/format when declaring scsi_adapter structures
in drivers. Terse one liners, NULLs instead of 0's, explicitly specify
all members, etc.

Nuke #ifdef notyet blocks related to the scsi_adapter in aic.

No intentional functional change.

ok tedu@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2020/01/23 00:46:27

Modified files:
usr.sbin/bind/lib/dns: Makefile.in 
usr.sbin/bind/lib/dns/include/dns: Makefile.in 
Removed files:
usr.sbin/bind/lib/dns: tsec.c 
usr.sbin/bind/lib/dns/include/dns: tsec.h 

Log message:
unused



CVS: cvs.openbsd.org: src

2020-01-22 Thread Bob Beck
CVSROOT:/cvs
Module name:src
Changes by: b...@cvs.openbsd.org2020/01/23 00:30:55

Modified files:
lib/libssl : tls13_client.c tls13_internal.h tls13_lib.c 

Log message:
Add checking int the client to check the magic values which are
set by a 1.3 server when it downgrades to tls 1.2 or 1.1 as per
RFC 8446 section 4.1.3

ok jsing@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Jason McIntyre
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2020/01/23 00:18:36

Modified files:
usr.sbin/npppd/npppd: npppd.conf.5 

Log message:
do not Xr both pppx and pppac in SEE ALSO, since they are the same page;



CVS: cvs.openbsd.org: src

2020-01-22 Thread Jason McIntyre
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2020/01/23 00:16:38

Modified files:
usr.bin/ssh: ssh-keygen.1 

Log message:
new sentence, new line;



CVS: cvs.openbsd.org: src

2020-01-22 Thread Jason McIntyre
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2020/01/23 00:12:42

Modified files:
share/man/man9 : ml_init.9 mq_init.9 

Log message:
punctuation fixes;



CVS: cvs.openbsd.org: src

2020-01-22 Thread Darren Tucker
CVSROOT:/cvs
Module name:src
Changes by: dtuc...@cvs.openbsd.org 2020/01/23 00:10:23

Modified files:
usr.bin/ssh: auth.c auth2-pubkey.c clientloop.c misc.c 
 misc.h monitor.c mux.c progressmeter.c 
 readconf.c readpass.c scp.c serverloop.c 
 session.c sftp.c ssh-agent.c ssh-sk-client.c 
 ssh.c sshbuf.c sshconnect.c sshconnect2.c 
 sshd.c 

Log message:
Replace all calls to signal(2) with a wrapper around sigaction(2).
This wrapper blocks all other signals during the handler preventing
races between handlers, and sets SA_RESTART which should reduce the
potential for short read/write operations.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Bob Beck
CVSROOT:/cvs
Module name:src
Changes by: b...@cvs.openbsd.org2020/01/22 23:59:11

Modified files:
lib/libssl : tls13_server.c 

Log message:
Add code to build and send a server hello for tls 1.3

ok jsing@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Bob Beck
CVSROOT:/cvs
Module name:src
Changes by: b...@cvs.openbsd.org2020/01/22 23:15:44

Modified files:
lib/libssl : ssl_locl.h tls13_client.c 

Log message:
Save the legacy session id in the client, and enforce that it is returned
the same from the server.

ok jsing@ tb@



Re: CVS: cvs.openbsd.org: src

2020-01-22 Thread Ted Unangst
Ted Unangst wrote:
> CVSROOT:  /cvs
> Module name:  src
> Changes by:   t...@cvs.openbsd.org2020/01/22 22:46:44
> 
> Modified files:
>   sys/dev/ata: wd.c 
> 
> Log message:
> we've been using LBA48 for < 137GB drives for 17 years, so perhaps
> we can remove the XXX now.

btw, for the curious, we actually only use LBA48 when needed to do the i/o.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Ted Unangst
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 22:46:44

Modified files:
sys/dev/ata: wd.c 

Log message:
we've been using LBA48 for < 137GB drives for 17 years, so perhaps
we can remove the XXX now.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Alexandre Ratchov
CVSROOT:/cvs
Module name:src
Changes by: ratc...@cvs.openbsd.org 2020/01/22 22:40:09

Modified files:
usr.bin/sndiod : fdpass.c fdpass.h miofile.c siofile.c utils.c 
 utils.h 

Log message:
When opening a device, loop over the alternate devices list in the
worker process instead of the helper process. It is simpler this way
and allows the worker to properly log which device is being used.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Alexandre Ratchov
CVSROOT:/cvs
Module name:src
Changes by: ratc...@cvs.openbsd.org 2020/01/22 22:27:18

Modified files:
usr.bin/sndiod : midi.c midi.h 

Log message:
Accept MIDI clients that don't reset status during sysex messages.

The MIDI protocol requires the status byte to be resent after common
messages, including system exclusive messages. But, some MIDI clients
forget to resend it; we workaround this restoring the status byte
after sysex messages.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 22:08:30

Modified files:
lib/libssl : ssl_methods.c tls13_internal.h tls13_lib.c 
 tls13_record_layer.c 

Log message:
Implement pending for TLSv1.3.

Makes `openssl s_client -peekaboo` work with TLSv1.3.

ok beck@ tb@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Damien Miller
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 21:54:34

Modified files:
usr.bin/ssh: sshsig.h 

Log message:
missing header change from previous; spotted by dtucker@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Jonathan Gray
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2020/01/22 21:33:54

Modified files:
sys/dev/pci: pcidevs 

Log message:
add ids for coffee lake and comet lake graphics with known marketing names



CVS: cvs.openbsd.org: src

2020-01-22 Thread Jonathan Gray
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2020/01/22 21:34:36

Modified files:
sys/dev/pci: pcidevs.h pcidevs_data.h 

Log message:
regen



CVS: cvs.openbsd.org: src

2020-01-22 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 20:53:39

Modified files:
usr.sbin/ocspcheck: ocspcheck.c 

Log message:
The X509_LOOKUP code tries to grope around in /etc/ssl/cert/ to find
CA certs it couldn't find otherwise. This may lead to a pledge rpath
violation reported by Kor, son of Rynar.  Unfortunately, providing certs
inside a directory is common in linuxes, so we need to keep this
functionality for portable.

Check if /etc/ssl/cert.pem and /etc/ssl/cert exist and pledge
accordingly. Add unveils to restrict this program further on a
default OpenBSD install. Fix -C to look only inside the provided
root bundle.

Input from jsing and sthen, tests by sthen and Kor

ok beck, jsing, sthen (after much back and forth)



CVS: cvs.openbsd.org: src

2020-01-22 Thread Darren Tucker
CVSROOT:/cvs
Module name:src
Changes by: dtuc...@cvs.openbsd.org 2020/01/22 20:42:41

Modified files:
regress/usr.bin/ssh: test-exec.sh 

Log message:
Check for and warn about StrictModes permission problems.  ok tb@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Bob Beck
CVSROOT:/cvs
Module name:src
Changes by: b...@cvs.openbsd.org2020/01/22 20:40:18

Modified files:
lib/libssl/man : SSL_pending.3 

Log message:
Remove lies from the SSL_pending man page, Our implementation never
advances the record layer, it only reports internal state.

ok jsing@ tb@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Bob Beck
CVSROOT:/cvs
Module name:src
Changes by: b...@cvs.openbsd.org2020/01/22 20:35:54

Modified files:
usr.bin/openssl: s_client.c 

Log message:
Make -peekaboo mode also use SSL_pending after peeking, to ensure
SSL_pending implementation is correct.

annoying jsing@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Darren Tucker
CVSROOT:/cvs
Module name:src
Changes by: dtuc...@cvs.openbsd.org 2020/01/22 20:35:07

Modified files:
regress/usr.bin/ssh: putty-ciphers.sh 

Log message:
Also test PuTTY chacha20.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Mark Kettenis
CVSROOT:/cvs
Module name:src
Changes by: kette...@cvs.openbsd.org2020/01/22 20:27:56

Modified files:
sys/dev/fdt: sxisid.c 

Log message:
Hook sxisid(4) up to the nvmem "framework".

ok patrick@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Darren Tucker
CVSROOT:/cvs
Module name:src
Changes by: dtuc...@cvs.openbsd.org 2020/01/22 20:24:38

Modified files:
regress/usr.bin/ssh: putty-kex.sh 

Log message:
Also test PuTTY ecdh kex methods.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 20:17:40

Modified files:
lib/libssl : ssl_lib.c ssl_locl.h ssl_methods.c 

Log message:
Switch back to a function pointer for ssl_pending.

This will allow the TLSv1.3 stack to provide its own implementation. Nuke
a completely bogus comment from SSL_pending() whilst here.

ok beck@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 20:10:18

Modified files:
sys/net: if_tun.c 

Log message:
remove PIPEX from tun(4) now that pppac(4) should be used instead.

ok claudio@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 20:01:22

Modified files:
usr.sbin/npppd/npppd: npppd.conf npppd.conf.5 

Log message:
use pppac(4) instead of tun(4)



CVS: cvs.openbsd.org: src

2020-01-22 Thread Mark Kettenis
CVSROOT:/cvs
Module name:src
Changes by: kette...@cvs.openbsd.org2020/01/22 20:00:00

Modified files:
sys/dev/fdt: sxitemp.c 

Log message:
Use information from nvmem (provided by sxisid(4)) to calibrate the
temperature sensors.

ok patrick@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 19:59:25

Modified files:
share/man/man8/man8.alpha: MAKEDEV.8 
share/man/man8/man8.amd64: MAKEDEV.8 
share/man/man8/man8.arm64: MAKEDEV.8 
share/man/man8/man8.armv7: MAKEDEV.8 
share/man/man8/man8.hppa: MAKEDEV.8 
share/man/man8/man8.i386: MAKEDEV.8 
share/man/man8/man8.landisk: MAKEDEV.8 
share/man/man8/man8.loongson: MAKEDEV.8 
share/man/man8/man8.luna88k: MAKEDEV.8 
share/man/man8/man8.macppc: MAKEDEV.8 
share/man/man8/man8.octeon: MAKEDEV.8 
share/man/man8/man8.sgi: MAKEDEV.8 
share/man/man8/man8.sparc64: MAKEDEV.8 

Log message:
regen for pppac(4)

pointed out by deraadt@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Mark Kettenis
CVSROOT:/cvs
Module name:src
Changes by: kette...@cvs.openbsd.org2020/01/22 19:57:10

Modified files:
sys/dev/ofw: ofw_misc.c ofw_misc.h 

Log message:
Add an interface to read an nvmem "cell".

ok patrick@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 19:52:16

Modified files:
etc/etc.alpha  : MAKEDEV 
etc/etc.amd64  : MAKEDEV 
etc/etc.arm64  : MAKEDEV 
etc/etc.armv7  : MAKEDEV 
etc/etc.hppa   : MAKEDEV 
etc/etc.i386   : MAKEDEV 
etc/etc.landisk: MAKEDEV 
etc/etc.loongson: MAKEDEV 
etc/etc.luna88k: MAKEDEV 
etc/etc.macppc : MAKEDEV 
etc/etc.octeon : MAKEDEV 
etc/etc.sgi: MAKEDEV 
etc/etc.sparc64: MAKEDEV 

Log message:
regen after adding pppac



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 19:49:38

Modified files:
lib/libssl : tls13_internal.h tls13_lib.c 
 tls13_record_layer.c 

Log message:
Add a TLS13_IO_ALERT return value so that we can explicitly signal when
we sent or received a fatal alert.

Pull the fatal_alert check up into tls13_legacy_error(). Also, if sending
an alert resulted in EOF, do not propagate this back since we do not want
to signal EOF to the caller (rather we want to indicate failure).

ok beck@ tb@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Darren Tucker
CVSROOT:/cvs
Module name:src
Changes by: dtuc...@cvs.openbsd.org 2020/01/22 19:46:49

Modified files:
usr.bin/ssh: clientloop.c myproposal.h readconf.c readconf.h 
 servconf.c sshconnect2.c 

Log message:
Remove unsupported algorithms from list of defaults at run time and
remove ifdef and distinct settings for OPENSSL=no case.

This will make things much simpler for -portable where the exact set
of algos depends on the configuration of both OpenSSH and the libcrypto
it's linked against (if any).  ok djm@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 19:47:29

Modified files:
etc/etc.alpha  : MAKEDEV.md 
etc/etc.amd64  : MAKEDEV.md 
etc/etc.arm64  : MAKEDEV.md 
etc/etc.armv7  : MAKEDEV.md 
etc/etc.hppa   : MAKEDEV.md 
etc/etc.i386   : MAKEDEV.md 
etc/etc.landisk: MAKEDEV.md 
etc/etc.loongson: MAKEDEV.md 
etc/etc.luna88k: MAKEDEV.md 
etc/etc.macppc : MAKEDEV.md 
etc/etc.octeon : MAKEDEV.md 
etc/etc.sgi: MAKEDEV.md 
etc/etc.sparc64: MAKEDEV.md 
etc: MAKEDEV.common 

Log message:
wire up pppac(4).

with help from claudio@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Damien Miller
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 19:43:48

Modified files:
usr.bin/ssh: ssh-keygen.1 ssh-keygen.c sshsig.c 

Log message:
add a new signature operations "find-principal" to look up the
principal associated with a signature from an allowed-signers
file. Work by Sebastian Kinne; ok dtucker@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 19:40:22

Modified files:
sys/arch/alpha/alpha: conf.c 
sys/arch/amd64/amd64: conf.c 
sys/arch/arm/arm: conf.c 
sys/arch/arm64/arm64: conf.c 
sys/arch/hppa/hppa: conf.c 
sys/arch/i386/i386: conf.c 
sys/arch/landisk/landisk: conf.c 
sys/arch/loongson/loongson: conf.c 
sys/arch/luna88k/luna88k: conf.c 
sys/arch/macppc/macppc: conf.c 
sys/arch/octeon/octeon: conf.c 
sys/arch/sgi/sgi: conf.c 
sys/arch/sparc64/sparc64: conf.c 

Log message:
wire up pppac(4) to some majors on each arch.

i was lazy and just put them at the end of the existing set. fyi,
i think major 51 is free on all archs if anyone is looking for
another one.

ok claudio@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 19:24:38

Modified files:
lib/libssl : tls13_client.c tls13_handshake.c 
 tls13_internal.h tls13_server.c 

Log message:
Pass a CBB to TLSv1.3 send handlers.

This avoids the need for each send handler to call
tls13_handshake_msg_start() and tls13_handshake_msg_finish().

ok beck@ tb@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Scott Soule Cheloha
CVSROOT:/cvs
Module name:src
Changes by: chel...@cvs.openbsd.org 2020/01/22 18:43:17

Modified files:
sys/dev/ic : ciss.c 

Log message:
ciss(4): tsleep(9) -> tsleep_nsec(9)

"i" is a count of milliseconds.  We convert it to a starting interval
"ts" and determine our absolute timeout "end".  Then we loop through
until the poll is successful or "end" elapses.

This could be simplified with an absolute timeout interface for
tsleep(9) but alas, we don't have one yet.

ok krw@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 18:22:59

Modified files:
sys/net: if_pppx.c 

Log message:
fix some ioctl/kq weirdness in the pppx(4) side of things.

- pppx does not support FIOASYNC, so don't pretend it's fine.
- have FIONREAD return the number of bytes that will be read.
- have kevent data return the number of bytes to read instead of
the number of packets on the svcq to read.



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 18:02:34

Modified files:
sys/kern   : kern_pledge.c 

Log message:
add /etc/protocols to the magic unveil whitelist that the dns pledge has

"i get it" deraadt@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 17:31:40

Modified files:
share/man/man4 : pppx.4 

Log message:
the pppx(4) driver also provides pppac(4) interfaces



CVS: cvs.openbsd.org: src

2020-01-22 Thread Scott Soule Cheloha
CVSROOT:/cvs
Module name:src
Changes by: chel...@cvs.openbsd.org 2020/01/22 17:30:59

Modified files:
sys/dev/ic : ciss.c 

Log message:
ciss(4): ciss_cmd: split polling loop into two loops

There are really two loops here.  One for SCSI_NOSLEEP and delay(9),
the other for tsleep(9).  The paths share a loop in the code but they
shouldn't.  They have different termination conditions and share little
code.

If we pull the conditional clause out of the for-loop and then give each
path its own polling loop the logic should be easier to follow.

ok krw@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 17:17:27

Modified files:
usr.sbin/npppd/npppd: privsep.c 

Log message:
allow npppd to use pppac(4) (once i wire it up)



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 16:06:05

Modified files:
sys/net: if_pppx.c 
sys/sys: conf.h 

Log message:
add pppac(4) code for a dedicated PPP Access Concentrator interface.

this is so we can pull the PIPEX code out of tun(4), which in turn
will let us lock down tun(4) functionality and start moving the
code around.

ok claudio@ yasuoka@



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 15:57:42

Modified files:
share/man/man9 : ml_init.9 mq_init.9 

Log message:
document ml_hdatalen and mq_hdatalen



CVS: cvs.openbsd.org: src

2020-01-22 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 15:56:07

Modified files:
lib/libcrypto/man: EVP_EncryptInit.3 

Log message:
The length of the IV of EVP_chacha20 is currently 64 bits, not 96.

ok beck



CVS: cvs.openbsd.org: src

2020-01-22 Thread David Gwynne
CVSROOT:/cvs
Module name:src
Changes by: d...@cvs.openbsd.org2020/01/22 15:56:35

Modified files:
sys/sys: mbuf.h 
sys/kern   : uipc_mbuf.c 

Log message:
add ml_hdatalen and mq_hdatalen as workalikes of ifq_hdatalen.

this is so pppx(4) and the upcoming pppac(4) can give kq read data
dn FIONREAD values that makes sense like the ones tun(4) and tap(4)
provide with ifq_hdatalen.



Re: CVS: cvs.openbsd.org: src

2020-01-22 Thread Antoine Jacoutot
On Wed, Jan 22, 2020 at 06:14:51AM -0700, Stuart Henderson wrote:
> CVSROOT:  /cvs
> Module name:  src
> Changes by:   st...@cvs.openbsd.org   2020/01/22 06:14:51
> 
> Modified files:
>   etc/rc.d   : sshd 
> 
> Log message:
> update pexp in rc.d/sshd to match the new setproctitle ('sshd: [listener]
> 1 of 10-100 startups').  "makes sense" deraadt@
> 
> Beware if you have multiple sshd processes (e.g. on different ports) and
> want to restart/stop just one - with the current proctitle there's no way
> to distinguish between these so rc.d/rcctl will match all of them.

Oh :-(
Can we put the previous information back alongside the new one?

-- 
Antoine



CVS: cvs.openbsd.org: src

2020-01-22 Thread Ted Unangst
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 15:25:22

Modified files:
usr.sbin/acme-client: json.c 

Log message:
use the correct length to allocate the right amount, broken by previous.
noticed by Matthew Martin
ok deraadt



CVS: cvs.openbsd.org: xenocara

2020-01-22 Thread Okan Demirmen
CVSROOT:/cvs
Module name:xenocara
Changes by: o...@cvs.openbsd.org2020/01/22 12:58:35

Modified files:
app/cwm: calmwm.h screen.c xmalloc.c 

Log message:
add, then use, xvasprintf, checking for appropriate return.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 08:47:22

Modified files:
lib/libssl : ssl_locl.h ssl_methods.c tls13_server.c 

Log message:
Wire up the TLSv1.3 server.

This currently only has enough code to handle fallback to the legacy TLS
stack for TLSv1.2 or earlier, however allows for further development and
testing.

ok beck@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Martin Pieuchot
CVSROOT:/cvs
Module name:src
Changes by: m...@cvs.openbsd.org2020/01/22 07:52:14

Modified files:
sys/dev/pckbc  : pms.c 

Log message:
Unbreak !DIAGNOSTIC build.

>From Andrius V vezhlys (at) gmail, on bugs@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Theo de Raadt
CVSROOT:/cvs
Module name:src
Changes by: dera...@cvs.openbsd.org 2020/01/22 06:20:17

Modified files:
distrib/sets/lists/man: mi 

Log message:
sync



CVS: cvs.openbsd.org: src

2020-01-22 Thread Stuart Henderson
CVSROOT:/cvs
Module name:src
Changes by: st...@cvs.openbsd.org   2020/01/22 06:14:51

Modified files:
etc/rc.d   : sshd 

Log message:
update pexp in rc.d/sshd to match the new setproctitle ('sshd: [listener]
1 of 10-100 startups').  "makes sense" deraadt@

Beware if you have multiple sshd processes (e.g. on different ports) and
want to restart/stop just one - with the current proctitle there's no way
to distinguish between these so rc.d/rcctl will match all of them.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 06:10:51

Modified files:
lib/libssl : tls13_client.c tls13_handshake.c 
 tls13_internal.h tls13_lib.c tls13_server.c 

Log message:
Pass a handshake message content CBS to TLSv1.3 receive handlers.

This avoids every receive handler from having to get the handshake message
content itself. Additionally, pull the trailing data check up so that each
receive handler does not have to implement it. This makes the code more
readable and reduces duplication.

ok beck@ tb@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 06:06:20

Modified files:
lib/libssl : ssl_locl.h 

Log message:
Fix things so that `make -DTLS1_3` works again.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2020/01/22 06:02:10

Modified files:
usr.sbin/bind  : configure configure.in 
usr.sbin/bind/bin/dig: dig.c dighost.c host.c nslookup.c 
usr.sbin/bind/lib/dns: byaddr.c callbacks.c compress.c dnssec.c 
   ds.c dst_api.c dst_parse.c dst_result.c 
   hmac_link.c key.c keydata.c lib.c log.c 
   master.c masterdump.c message.c name.c 
   ncache.c nsec.c nsec3.c openssl_link.c 
   openssldh_link.c openssldsa_link.c 
   opensslecdsa_link.c opensslrsa_link.c 
   rcode.c rdata.c rdatalist.c rdataset.c 
   result.c soa.c time.c tsec.c tsig.c ttl.c 
usr.sbin/bind/lib/isc: aes.c app_api.c assertions.c base32.c 
   base64.c bitstring.c buffer.c 
   bufferlist.c commandline.c error.c 
   event.c hash.c heap.c hex.c hmacmd5.c 
   hmacsha.c inet_aton.c iterated_hash.c 
   lex.c log.c md5.c netaddr.c netscope.c 
   parseint.c refcount.c regex.c region.c 
   result.c rwlock.c safe.c serial.c sha1.c 
   sha2.c sockaddr.c socket_api.c symtab.c 
   task.c timer.c 
usr.sbin/bind/lib/isc/include/isc: Makefile.in aes.h 
   assertions.h bind9.h 
   commandline.h error.h 
   hmacsha.h ipv6.h log.h 
   refcount.h rwlock.h sha1.h 
   sha2.h 
usr.sbin/bind/lib/isc/nothreads: condition.c thread.c 
usr.sbin/bind/lib/isc/unix: app.c dir.c errno.c errno2result.c 
file.c fsaccess.c ipv6.c net.c 
socket.c stdio.c stdtime.c 
strerror.c syslog.c time.c 
usr.sbin/bind/lib/isc/unix/include/isc: net.h 
usr.sbin/bind/lib/isccfg: dnsconf.c namedconf.c parser.c 
usr.sbin/bind/lib/lwres: lwconfig.c 
Removed files:
usr.sbin/bind  : acconfig.h config.h.in 
usr.sbin/bind/lib/isc/include/isc: platform.h.in 

Log message:
config.h and platform.h are unused now



CVS: cvs.openbsd.org: src

2020-01-22 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2020/01/22 05:58:35

Modified files:
usr.sbin/bind/bin/dig: dighost.c host.c 
usr.sbin/bind/lib/dns: gen-unix.h message.c 
usr.sbin/bind/lib/dns/include/dns: message.h 
usr.sbin/bind/lib/isc: lex.c 
usr.sbin/bind/lib/isc/unix: app.c net.c socket.c 
usr.sbin/bind/lib/isccfg: namedconf.c 
usr.sbin/bind/lib/lwres: lwconfig.c 

Log message:
unifdef the last config.h bits
OK millert



CVS: cvs.openbsd.org: src

2020-01-22 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2020/01/22 05:57:22

Modified files:
usr.sbin/bind  : config.h.in 
usr.sbin/bind/lib/dns: message.c name.c 
usr.sbin/bind/lib/isc: hash.c safe.c 
usr.sbin/bind/lib/isc/include/isc: assertions.h error.h magic.h 
   util.h 
Removed files:
usr.sbin/bind/lib/isc/include/isc: likely.h 

Log message:
get rid if ISC_{UN,}LIKELY it's in the way and not useful.
OK millert



CVS: cvs.openbsd.org: src

2020-01-22 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2020/01/22 05:56:14

Modified files:
usr.sbin/bind  : config.h.in 
usr.sbin/bind/lib/isc/unix: net.c socket.c 

Log message:
Spell out PORT_NONBLOCK as O_NONBLOCK and ISC_SOCKADDR_LEN_T as
socklen_t.
OK millert



CVS: cvs.openbsd.org: src

2020-01-22 Thread Martin Pieuchot
CVSROOT:/cvs
Module name:src
Changes by: m...@cvs.openbsd.org2020/01/22 05:38:39

Modified files:
share/man/man8/man8.amd64: MAKEDEV.8 
share/man/man8/man8.arm64: MAKEDEV.8 
share/man/man8/man8.armv7: MAKEDEV.8 
share/man/man8/man8.i386: MAKEDEV.8 
share/man/man8/man8.landisk: MAKEDEV.8 
share/man/man8/man8.loongson: MAKEDEV.8 
share/man/man8/man8.luna88k: MAKEDEV.8 
share/man/man8/man8.macppc: MAKEDEV.8 
share/man/man8/man8.octeon: MAKEDEV.8 
share/man/man8/man8.sgi: MAKEDEV.8 
share/man/man8/man8.sparc64: MAKEDEV.8 

Log message:
regen



CVS: cvs.openbsd.org: src

2020-01-22 Thread Patrick Wildt
CVSROOT:/cvs
Module name:src
Changes by: patr...@cvs.openbsd.org 2020/01/22 05:08:55

Modified files:
sys/dev/sdmmc  : if_bwfm_sdio.c 

Log message:
Recognize BCM4345 rev 9, which requires a different firmware,
as shipped with the Pinebook Pro as an AMPAK AP6256 module.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Patrick Wildt
CVSROOT:/cvs
Module name:src
Changes by: patr...@cvs.openbsd.org 2020/01/22 04:56:41

Modified files:
sys/dev/fdt: dwmmc.c 

Log message:
Ack SDIO interrupts earlier on dwmmc(4).  While handling an SDIO
interrupt it is possible that the card immediately raises another
one.  Since the interrupt seems to be edge triggered, and we only
acked it after said handling, it was possible we lose the next one.
This heavily improves bwfm(4) on the Pinebook Pro.

ok kettenis@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Bob Beck
CVSROOT:/cvs
Module name:src
Changes by: b...@cvs.openbsd.org2020/01/22 04:26:47

Modified files:
lib/libssl : tls13_client.c 

Log message:
Send alerts on certificate verification failures of server certs

ok tb@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 03:38:11

Modified files:
lib/libssl : ssl_tlsext.c 

Log message:
Rename failure into alert_desc in tlsext_ocsp_server_parse().



CVS: cvs.openbsd.org: src

2020-01-22 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 03:36:57

Modified files:
lib/libssl : ssl_tlsext.c 

Log message:
fix previous: alert_desc needs to be an int.



CVS: cvs.openbsd.org: src

2020-01-22 Thread Theo Buehler
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 03:28:49

Modified files:
lib/libssl : ssl_tlsext.c 

Log message:
Avoid modifying alert in the success path.

ok beck jsing



CVS: cvs.openbsd.org: src

2020-01-22 Thread Ted Unangst
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 02:29:50

Modified files:
usr.sbin/bind/lib/isc/unix: app.c socket.c 

Log message:
eliminate many other possibilities in favor of just using select() here.
ok florian



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 01:24:25

Modified files:
lib/libssl : ssl_locl.h 

Log message:
Enable the TLSv1.3 client in libssl.

This also makes it available to clients that use libtls, including ftp(1)
and nc(1).

Note that this does not expose additional defines via public headers, which
means that any code conditioning on defines like TLS1_3_VERSION or
SSL_OP_NO_TLSv1_3 will not enable or use TLSv1.3. This approach is
necessary since too many pieces of software assume that if TLS1_3_VERSION
is available, other OpenSSL 1.1 API will also be available, which is not
necessarily the case.

ok beck@ tb@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Ted Unangst
CVSROOT:/cvs
Module name:src
Changes by: t...@cvs.openbsd.org2020/01/22 01:17:01

Modified files:
usr.sbin/bind/lib/isc: safe.c 
usr.sbin/bind/lib/isc/unix: stdio.c file.c 

Log message:
unifdef a few features we have. ok florian



CVS: cvs.openbsd.org: src

2020-01-22 Thread Florian Obser
CVSROOT:/cvs
Module name:src
Changes by: flor...@cvs.openbsd.org 2020/01/22 01:14:10

Modified files:
usr.sbin/bind  : config.h.in 

Log message:
remove defines from config.h.in that are no longer checked in the code
hilarious deraadt@



CVS: cvs.openbsd.org: src

2020-01-22 Thread Joel Sing
CVSROOT:/cvs
Module name:src
Changes by: js...@cvs.openbsd.org   2020/01/22 01:00:46

Modified files:
lib/libtls : Makefile 

Log message:
Correct includes check for libtls.