CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/12/12 14:41:30
Modified files:
regress/sbin/pfctl: pf1.loaded pf10.loaded pf100.loaded
pf101.loaded pf11.loaded pf12.loaded
pf13.loaded pf14.loade
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/12/12 14:30:28
Modified files:
sys/net: pf.c pf_ioctl.c pfvar.h
sbin/pfctl : parse.y pfctl_parser.c
Log message:
fixup af-to regression with match rules
pfctl should not infer the
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/12/12 13:45:30
Modified files:
sys/dev/pci: if_ix.c
Log message:
add missing m_freem's into the error code paths. there's no change
in behavior since we don't do split headers; ok dlg, kettenis
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/12/09 04:43:41
Modified files:
sys/dev/pci: if_ix.c
Log message:
we need to always schedule another rx ring refill callout
in case we fail to do it at the spot. prevents rx ring
lockups under high
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/12/09 04:41:55
Modified files:
sys/dev/pci: ixgbe_type.h
Log message:
we don't do intel i/oat and don't set up parameters for the
tcp timer interrupts, therefore there's no reason we should
enable t
CVSROOT:/cvs
Module name:www
Changes by: mi...@cvs.openbsd.org 2011/12/02 10:53:41
Modified files:
. : users.html
Log message:
add vantronix
CVSROOT:/cvs
Module name:www
Changes by: mi...@cvs.openbsd.org 2011/12/01 08:33:16
Modified files:
. : support.html
Log message:
update...
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/27 09:14:31
Modified files:
sys/dev/pci: if_ix.c ixgbe_type.h
Log message:
Bring back low latency interrupt moderation for 82599
lost during update. Originally from claudio, rev1.46.
ok claudio
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/27 09:10:23
Modified files:
sys/dev/pci: if_ix.c
Log message:
Checksum fix from reyk (rev1.31) that was lost during update:
Fix the IP ckecksum offloading logic that disables and breaks offloadi
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/27 09:06:30
Modified files:
sys/net: if_pfsync.c
Log message:
Protect more operations in the pfsync_clone_destroy to prevent
accidental race conditions. From Erik Lax, thanks! ok dlg
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/19 06:54:53
Modified files:
sys/netinet: ip_carp.c
Log message:
Select a routing table according to the rdomain. Allows one
to connect to the carp address when the carpdev interface has
an ip ad
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/19 06:33:57
Modified files:
share/man/man4 : umsm.4
Log message:
Add ZTE MF190 (O2 Germany surf stick); ok jsg
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/19 06:29:51
Modified files:
sys/dev/usb: umsm.c
Log message:
Add ZTE MF190; ok jsg
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/19 05:14:21
Modified files:
sys/dev/usb: usbdevs.h usbdevs_data.h
Log message:
regen
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/19 05:13:52
Modified files:
sys/dev/usb: usbdevs
Log message:
Add ZTE MF190 installer ID
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/16 04:59:28
Modified files:
sys/net: if_pfsync.c
Log message:
Improve flag setting ioctl so that bulk updates are requested
only when we're going up, not when we set PROMISC or any other
flag
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/08 12:17:07
Modified files:
sbin/pfctl : pfctl.c
Log message:
Fixup skip step printout: rdomains come after direction; ok mcbride, henning
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/07 10:40:47
Modified files:
share/man/man4 : se.4
Log message:
seN -> se%d to be consistent with other man pages; ok miod jmc
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/04 16:11:11
Modified files:
sys/net: if_pfsync.c
Log message:
Select a correct protocol for a stack side state key when importing
an icmp<->icmp6 state (nat64); ok henning, mcbride, dlg
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/03 14:08:50
Modified files:
sys/dev/pci: mpii.c
Log message:
Backout last change that broke the driver. There's no hardware at hand
to debug it further and it's not nice to have a driver broken
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/01 11:30:04
Modified files:
usr.bin/netstat: main.c netstat.1 netstat.h show.c
Log message:
Do some cleanup and improve the manpage. From Andreas Bartelt; ok henning, jmc
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/11/01 04:14:06
Modified files:
usr.bin/netstat: main.c
Log message:
Fixup previous: don't forget to actually get the current rtable;
reminded by Andreas Bartelt.
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/10/31 18:00:01
Modified files:
usr.bin/netstat: inet.c main.c netstat.h
Log message:
List sockets existing only in the specified or current routing domain.
Prompted by the mail from Andreas Bartelt, tes
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/10/31 16:02:52
Modified files:
sys/net: if_pfsync.c
Log message:
Don't forget to cancel bulk update failure timeout when destroying an
interface. Problem report and fix from Erik Lax, thanks!
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/10/31 15:44:54
Modified files:
sys/dev/pci: ppb.c
Log message:
Save and restore MSI configuration on PCI-Express bridges during
the suspend/resume cycle the same way it's done in pci_suspend
and pci
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/10/30 17:04:38
Modified files:
sys/net: if_pfsync.c
Log message:
Allow setting big MTU values on the pfsync interface but not larger
than the syncdev MTU. Prompted by the discussion with and te
CVSROOT:/cvs
Module name:www
Changes by: mi...@cvs.openbsd.org 2011/10/23 04:26:03
Modified files:
. : want.html
Log message:
ipsec/ikev2 equipment is needed in aachen
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/10/21 09:45:55
Modified files:
sys/net: if_pflog.c
Log message:
strengthen some checks to prevent m_copy* routines from operating
on mbuf chains of insufficient length; prevents crashes seen by
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/10/21 03:21:44
Modified files:
sys/net: pf.c
Log message:
add forgotten fixup for icmp6 id's when translating; ok henning
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/10/20 02:57:26
Modified files:
sys/net: if_pfsync.c
Log message:
remove a bogus chunk accidentally introduced by mcbride in rev1.141;
mcbride agrees, ok mpf, dlg
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/10/06 03:14:35
Modified files:
sys/kern : tty_tty.c
sys/sys: conf.h
Log message:
Introduce a kqfilter wrapper for the controlling tty device entry
which allows a correct registrat
or CHANGES.ru (-;
On Mon, Oct 3, 2011 at 7:38 PM, Robert Nagy wrote:
> CVSROOT:/cvs
> Module name:src
> Changes by: rob...@cvs.openbsd.org 2011/10/03 11:38:55
>
> Log message:
> update to nginx-1.0.8 which includes many bugfixes
> for a complete list please check the CHANGES fil
On Mon, Sep 12, 2011 at 2:44 PM, Gregory Edigarov
wrote:
> On Mon, 12 Sep 2011 06:33:26 -0600 (MDT)
> Mike Belopuhov wrote:
>
>> CVSROOT: /cvs
>> Module name: src
>> Changes by: mi...@cvs.openbsd.org 2011/09/12 06:33:26
>>
>> Modified files:
>
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/09/12 06:33:26
Modified files:
sys/dev/pci: mpii.c
Log message:
Clamp a maximum number of outstanding requests at 40 as it was
figured out the hard way by senior Pedro. Performance decreased
severe
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/29 18:47:16
Modified files:
share/man/man5 : pf.conf.5
Log message:
Document a "once" filter option used to create one shot rules.
ok henning, mcbride, jmc
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/29 18:43:57
Modified files:
sbin/pfctl : parse.y pfctl_parser.c
Log message:
One shot rules can be used in pf.conf by specifying a "once" filter option.
ok henning, mcbride
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/29 18:40:47
Modified files:
sys/net: pf.c pf_ioctl.c pfvar.h
Log message:
Add support for one shot rules that remove themselves from an active
ruleset after match. In case this is the only r
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/29 04:51:18
Modified files:
sys/dev/usb: usbdevs
Log message:
add gpsmap 62s
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/29 04:51:41
Modified files:
sys/dev/usb: usbdevs.h usbdevs_data.h
Log message:
regen
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/27 10:29:20
Modified files:
sbin/iked : crypto.c
Log message:
Under certain circumstances iked can be tricked to bypass a signature
verification caused by the incorrect check of the EVP_VerifyFi
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/17 11:00:35
Modified files:
sys/arch/amd64/amd64: aes_intel.S aesni.c
Log message:
Assembler implementation of the GCM mode using the Carry-less
Multiplication (CLMUL) instruction found in the new In
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/16 08:48:39
Modified files:
share/man/man5 : pf.conf.5
Log message:
Sync documentation with code on the matter of max state limit behavior.
When one of the state limits is reached, further packets th
On Sun, Aug 07, 2011 at 12:49 -0600, Mike Belopuhov wrote:
> CVSROOT: /cvs
> Module name: src
> Changes by: mi...@cvs.openbsd.org 2011/08/07 12:49:50
>
> Modified files:
> sys/netinet6 : in6_src.c
>
> Log message:
> Several fixes for the IPV6_PKTI
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/08/07 12:49:50
Modified files:
sys/netinet6 : in6_src.c
Log message:
Several fixes for the IPV6_PKTINFO handling with sendmsg(2)
Verify that the address in the in6_pktinfo structure included
in the c
CVSROOT:/cvs
Module name:www
Changes by: mi...@cvs.openbsd.org 2011/08/04 04:19:31
Modified files:
. : want.html
Log message:
help out sebastia@ a bit by telling where to send rockets^Wlaptops to
CVSROOT:/cvs
Module name:www
Changes by: mi...@cvs.openbsd.org 2011/08/04 03:32:16
Modified files:
. : want.html
Log message:
I can make use of Cisco ASA 5505 or any other IPsec/IKEv2 capable equipment
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/19 12:24:40
Modified files:
lib/libc/sys : recv.2
Log message:
no need to mention xerox network stack here; ok claudio
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/18 15:03:10
Modified files:
sys/net: pf_norm.c
Log message:
unbreak set-tos for ipv6; reported by babut at yandex dot ru,
with input and ok from bluhm and claudio
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/08 16:11:17
Modified files:
sys/net: pf_table.c
Log message:
ensure that we won't enter an endless loop while iterating over
an address pool. problem found and solution tested by claudio.
ok
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/08 14:09:38
Modified files:
sys/sys: socket.h
Log message:
surround splice structure with __BSD_VISIBLE (the right one, noticed by
bluhm, jasper and millert -- an epic fail on my side), style
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/05 13:53:44
Modified files:
sys/net: pf.c pf_norm.c
Log message:
add missing ifdefs for INET6; diff from form, ok henning, bluhm, claudio
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/04 19:28:06
Modified files:
sbin/iked : ikev2.c
Log message:
Fix IKEV2_N_NO_ADDITIONAL_SAS notification by including the SPI
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/03 18:34:43
Modified files:
lib/libc/sys : getsockopt.2
share/man/man9 : sosplice.9
Log message:
Implement an idle timeout for the socket splicing. A new `sp_idle'
field of the `splice' s
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/03 18:33:36
Modified files:
sys/sys: socketvar.h socket.h
sys/kern : uipc_socket.c
Log message:
Implement an idle timeout for the socket splicing. A new `sp_idle'
field of the
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/07/03 14:20:23
Modified files:
sbin/iked : dh.c
Log message:
iked requires the same dh diff as isakmpd:
When BN_bn2bin converts a bignum to the binary representation
it skips leading zeroes if the
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/06/21 11:31:07
Modified files:
sbin/ping : ping.c
usr.bin/nc : netcat.c
usr.bin/tcpbench: tcpbench.c
usr.bin/telnet : commands.c
usr.sbin/dhcrelay: dhcrelay.c
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/06/15 07:28:03
Modified files:
share/man/man4 : ip.4
Log message:
oops. some unrelated junk has slipped in
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/06/15 04:35:47
Modified files:
sbin/isakmpd : dh.c
Log message:
When BN_bn2bin converts a bignum to the binary representation
it skips leading zeroes if there are any. To accommodate the
difference w
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/06/15 03:13:32
Modified files:
share/man/man4 : ip.4
Log message:
Document IP_RECVRTABLE
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/06/15 03:11:02
Modified files:
sys/netinet: in.h in_pcb.h ip_input.c ip_output.c
Log message:
Add IP_RECVRTABLE socket option to be used with a IPPROTO_IP
level that allows one to retrieve the origi
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/05/20 13:37:58
Modified files:
sys/dev: softraid_crypto.c
Log message:
sr_scsi_cmd copes with failed i/o just fine so there's no need
to panic if we couldn't allocate memory for crypto descripto
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/05/17 06:44:05
Modified files:
sys/net: pf_lb.c pf_table.c pfvar.h
Log message:
exclude link local address from the dynamic interface address pool
so that rules like "pass out on vr1 inet6 nat-t
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/05/06 11:55:00
Modified files:
sys/dev/pci: ubsec.c
Log message:
acknowledge only those interrupts that we can process;
with suggestions and ok oga
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/05/06 11:31:16
Modified files:
sys/arch/amd64/amd64: aesni.c
Log message:
session id is only in the lower 32 bits of crp_sid
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/05/02 10:45:29
Modified files:
lib/libc/sys : getsockopt.2
Log message:
document SO_RTABLE; with suggestions and ok jmc, claudio
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/05/02 07:48:38
Modified files:
sys/kern : uipc_socket.c
sys/netinet: in.h ip_output.c
sys/netinet6 : in6.h
Log message:
recognize SO_RTABLE socket option at the SOL_SOCKET
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/05/02 06:39:18
Modified files:
sbin/iked : iked.h ikev2.c policy.c
Log message:
store the peer address as it was specified in the policy in the
tree that is used to figure out whether the policy is
On Wed, Apr 27, 2011 at 18:17 -0600, Mike Belopuhov wrote:
> CVSROOT: /cvs
> Module name: src
> Changes by: mi...@cvs.openbsd.org 2011/04/27 18:17:28
>
> Modified files:
> usr.sbin/ftp-proxy: filter.c filter.h ftp-proxy.8 ftp-proxy.c
>
> Log message:
&g
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/04/27 18:21:33
Modified files:
usr.sbin/ftp-proxy: ftp-proxy.8
Log message:
divert-to is picky about the address family so adjust the rule
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/04/27 18:19:42
Modified files:
etc: pf.conf
Log message:
ftp-proxy(8) now requires a divert-to rule
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/04/27 18:17:28
Modified files:
usr.sbin/ftp-proxy: filter.c filter.h ftp-proxy.8 ftp-proxy.c
Log message:
switch ftp-proxy over to divert-to instead of rdr-to. this avoids
an expensive state lookup (vi
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/04/25 15:00:08
Modified files:
sys/arch/i386/i386: autoconf.c
Log message:
garbage collect biomask printf; ok deraadt kettenis
CVSROOT:/cvs
Module name:www
Changes by: mi...@cvs.openbsd.org 2011/04/25 11:44:07
Modified files:
. : 49.html
Log message:
add a new section about the ipsec stack audit. please feel free to add
more information on the subject or reword it.
CVSROOT:/cvs
Module name:www
Changes by: mi...@cvs.openbsd.org 2011/04/25 11:06:55
Modified files:
. : 49.html
Log message:
skipjack and libdes were removed from the system,
cast-128 was ditched from the libc
CVSROOT:/cvs
Module name:www
Changes by: mi...@cvs.openbsd.org 2011/04/25 10:52:12
Modified files:
. : 49.html
Log message:
correct aes-gmac to aes-gcm and add a note about iked improvements
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/04/12 04:47:29
Modified files:
sys/netinet: tcp_input.c
sys/net: pf.c pfvar.h
Log message:
put the accepted socket of a diverted connection into the routing domain
of a connection o
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/04/05 07:48:18
Modified files:
sys/net: pf.c pfvar.h
sbin/pfctl : parse.y pfctl_parser.c
Log message:
ditch fastroute, an ipf feature that made its way into pf before
route-to and f
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/04/04 08:25:16
Modified files:
sys/netinet: ip_carp.c
Log message:
install an additional bpf hook in the carp_input so that multicast
and broadcast packets will be caught too; also we need to increm
On Fri, Mar 04, 2011 at 08:44 -0700, Mike Belopuhov wrote:
> CVSROOT: /cvs
> Module name: src
> Changes by: mi...@cvs.openbsd.org 2011/03/04 08:44:39
>
> Modified files:
> sys/dev/ic : mpi.c
>
> Log message:
> Peek at the interrupt status regi
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/03/04 08:44:39
Modified files:
sys/dev/ic : mpi.c
Log message:
Peek at the interrupt status register before poking with the reply post
queue. In some situations this prevents us from reading a garb
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/03/02 17:30:31
Modified files:
sbin/ping6 : ping6.c
Log message:
This change makes ping compare minimum amount of bytes between what
was received and what was sent out and print additional informati
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/02/24 10:20:09
Modified files:
lib/libc/sys : socket.2
Log message:
SOCK_SEQPACKET is only valid for the AF_BLUETOOTH now, and
SOCK_RDM is a dead SysV compatibility option that is not
described anywhe
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/02/23 08:46:14
Modified files:
sys/net: pf.c
Log message:
fixup source address rewriting for the icmp errors with the rdr-to setup.
problem was reported by babut at yandex dot ru in the pr 6564,
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/02/18 10:20:15
Modified files:
sys/dev/pci: if_alc.c
Log message:
alc_newbuf is always called from the interrupt context so it can't sleep;
tested by Gabriel Linder, ok kevlo, miod
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/02/16 03:37:45
Modified files:
etc: sysctl.conf
sys/kern : kern_sysctl.c
Log message:
allow users to enable access to the /dev/crypto, but keep it turned off
by default, adjus
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/28 11:21:37
Modified files:
sbin/iked : ikev2.c
Log message:
improve behavior of drop_sa: always negotiating a new child sa; ok reyk
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/26 09:59:24
Modified files:
sbin/iked : config.c iked.h ikev2.c ikev2_pld.c pfkey.c
policy.c
Log message:
get rid of acquire flows completely, as they tend to pass traf
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/26 09:35:17
Modified files:
sbin/iked : ikev2.c
Log message:
enable child sas and do sa and flow transfer after succeeding with
all the preparation steps. don't forget to change {flow,csa}_ikes
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/25 03:58:41
Modified files:
sbin/iked : ikev2.c
Log message:
fixup child sa deletion in drop_sa; ok reyk
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/24 10:44:28
Modified files:
sbin/iked : ikev2.c
Log message:
fixup previous for the responder mode
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/21 11:02:53
Modified files:
sbin/iked : ikev2.c
Log message:
repair rekeying by sending appropriate traffic selector; ok reyk
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/21 10:42:57
Modified files:
sys/net: if_mpe.c
sys/netmpls: mpls_input.c mpls_output.c
Log message:
make mpls compile w/o errors when inet6 is not defined
diff from form@ who's t
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/18 04:34:44
Modified files:
sbin/iked : policy.c
Log message:
reyk noticed that my rb-tree-fu is not that great. fixup compare function
to do exact matches; ok reyk
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/17 11:49:35
Modified files:
sbin/iked : iked.h ikev2.c ikev2_pld.c pfkey.c policy.c
types.h
Log message:
Add initial acquire mode support and use it whenever Windows pe
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/17 10:16:43
Modified files:
sbin/iked : iked.h parse.y util.c
Log message:
move mask2prefixlen functions to the util module; ok reyk
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/13 13:34:04
Modified files:
sys/arch/amd64/amd64: machdep.c
Log message:
set lkm_end to the end of the jumpable virtual space; tested by me and marco
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/12 11:49:21
Modified files:
sys/net: pfkeyv2.c
Log message:
Never include SADB_X_EXT_REMOTE_AUTH (which is either a
passphrase or an RSA key) in the reply message. There's
nothing that justi
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/12 09:58:23
Modified files:
sys/crypto : xform.c
Log message:
cleanup aes-ctr keystream after use; ok deraadt
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/12 07:35:45
Modified files:
sbin/iked : config.c iked.h pfkey.c
Log message:
postpone processing of pfkey messages received in pfkey_reply instead of
just dropping them; ok reyk
CVSROOT:/cvs
Module name:src
Changes by: mi...@cvs.openbsd.org 2011/01/12 07:26:26
Modified files:
sbin/iked : iked.h ikev2.c ikev2_pld.c
Log message:
decouple flow deletion from the ikev2_childsa_delete; ok reyk
1101 - 1200 of 1277 matches
Mail list logo
