CVS: cvs.openbsd.org: src

2022-01-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2022/01/07 00:34:34 Modified files: usr.sbin/radiusctl: chap_ms.c Log message: Sync EVP_MD_CTX to heap switch from npppd. ok millert

CVS: cvs.openbsd.org: src

2022-01-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2022/01/07 00:33:35 Modified files: usr.sbin/npppd/npppd: chap_ms.c Log message: npppd: convert to EVP_MD_CTX on heap In the upcoming libcrypto bump, EVP_MD_CTX will become opaque, so all EVP_MD_CTX

CVS: cvs.openbsd.org: www

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:www Changes by: d...@cvs.openbsd.org2022/01/06 20:07:49 Modified files: openssh: agent-restrict.html Log message: typos; from Ángel

CVS: cvs.openbsd.org: www

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:www Changes by: d...@cvs.openbsd.org2022/01/06 19:58:01 Modified files: openssh: agent-restrict.html Log message: clarify

CVS: cvs.openbsd.org: src

2022-01-06 Thread Philip Guenther
CVSROOT:/cvs Module name:src Changes by: guent...@cvs.openbsd.org2022/01/06 19:47:07 Modified files: sys/sys: hibernate.h sys/kern : subr_hibernate.c Log message: hibernate_clear_signature() is only used by hibernate_resume(), so pass in

CVS: cvs.openbsd.org: www

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:www Changes by: d...@cvs.openbsd.org2022/01/06 19:33:42 Modified files: openssh: agent-restrict.html Log message: mention proxyjump

CVS: cvs.openbsd.org: src

2022-01-06 Thread Philip Guenther
CVSROOT:/cvs Module name:src Changes by: guent...@cvs.openbsd.org2022/01/06 19:26:53 Modified files: sys/kern : subr_hibernate.c Log message: Extract the slice from the zeroth swap device instead of assuming it's the 'b' slice and (sanity) check against the

CVS: cvs.openbsd.org: src

2022-01-06 Thread Andrew Fresh
CVSROOT:/cvs Module name:src Changes by: afre...@cvs.openbsd.org 2022/01/06 19:25:40 Modified files: usr.sbin/fw_update: fw_update.sh Log message: whitespace

CVS: cvs.openbsd.org: src

2022-01-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2022/01/06 18:16:27 Modified files: etc/etc.amd64 : MAKEDEV etc/etc.arm64 : MAKEDEV etc/etc.i386 : MAKEDEV etc/etc.loongson: MAKEDEV etc/etc.macppc : MAKEDEV

CVS: cvs.openbsd.org: src

2022-01-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2022/01/06 18:13:15 Modified files: etc: MAKEDEV.common etc/etc.amd64 : MAKEDEV.md etc/etc.arm64 : MAKEDEV.md etc/etc.i386 : MAKEDEV.md etc/etc.loongson:

CVS: cvs.openbsd.org: src

2022-01-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2022/01/06 17:44:17 Modified files: share/man/man4 : drm.4 Log message: mention radeondrm on riscv64

CVS: cvs.openbsd.org: src

2022-01-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2022/01/06 16:44:21 Modified files: etc/etc.amd64 : fbtab etc/etc.arm64 : fbtab etc/etc.i386 : fbtab etc/etc.loongson: fbtab etc/etc.macppc : fbtab

CVS: cvs.openbsd.org: xenocara

2022-01-06 Thread Jonathan Gray
CVSROOT:/cvs Module name:xenocara Changes by: j...@cvs.openbsd.org2022/01/06 16:35:41 Modified files: app/xenodm/config: GiveConsole.in TakeConsole.in Log message: stop chowning old drm device nodes

CVS: cvs.openbsd.org: src

2022-01-06 Thread Darren Tucker
CVSROOT:/cvs Module name:src Changes by: dtuc...@cvs.openbsd.org 2022/01/06 15:14:25 Modified files: regress/usr.bin/ssh: test-exec.sh Log message: Don't explicitly set HostbasedAuthentication in sshd_config. It defaults to "no", and not explicitly setting it allows us

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 15:06:51 Modified files: usr.bin/ssh: sshconnect2.c Log message: allow hostbased auth to select RSA keys when only RSA/SHA2 are configured (this is the default case); ok markus@

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 15:05:42 Modified files: usr.bin/ssh: sshkey.c sshkey.h Log message: add a helper function to match a key type to a list of signature algorithms. RSA keys can make signatures with multiple

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 15:04:20 Modified files: usr.bin/ssh: ssh.c Log message: log some details on hostkeys that ssh loads for hostbased authn ok markus@

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 15:03:59 Modified files: usr.bin/ssh: monitor.c Log message: log signature algorithm during verification by monitor; ok markus

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 15:02:52 Modified files: usr.bin/ssh: hostfile.c Log message: piece of UpdateHostkeys client strictification: when updating known_hosts with new keys, ignore NULL keys (forgot to include in

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 15:01:14 Modified files: usr.bin/ssh: auth2-hostbased.c Log message: include rejected signature algorithm in error message and not the (useless) key type; ok markus

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 15:00:18 Modified files: usr.bin/ssh: ssh-keysign.c Log message: make ssh-keysign use the requested signature algorithm and not the default for the keytype. Part of unbreaking hostbased auth

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 14:57:28 Modified files: usr.bin/ssh: clientloop.c Log message: stricter UpdateHostkey signature verification logic on the client- side. Require RSA/SHA2 signatures for RSA hostkeys except

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 14:55:23 Modified files: usr.bin/ssh: kex.c kex.h serverloop.c Log message: Fix signature algorithm selection logic for UpdateHostkeys on the server side. The previous code tried to prefer

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 14:48:38 Modified files: usr.bin/ssh: channels.c channels.h clientloop.c serverloop.c Log message: convert ssh, sshd mainloops from select() to poll(); feedback & ok deraadt@ and markus@ has

CVS: cvs.openbsd.org: src

2022-01-06 Thread Darren Tucker
CVSROOT:/cvs Module name:src Changes by: dtuc...@cvs.openbsd.org 2022/01/06 14:46:56 Modified files: regress/usr.bin/ssh: Makefile Added files: regress/usr.bin/ssh: hostbased.sh Log message: Add test for hostbased auth. It requires some external setup (see

CVS: cvs.openbsd.org: src

2022-01-06 Thread Damien Miller
CVSROOT:/cvs Module name:src Changes by: d...@cvs.openbsd.org2022/01/06 14:46:23 Modified files: usr.bin/ssh: channels.c channels.h Log message: prepare for conversion of ssh, sshd mainloop from select() to poll() by moving FD_SET construction out of channel

CVS: cvs.openbsd.org: src

2022-01-06 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2022/01/06 13:15:54 Modified files: usr.sbin/fw_update: fw_update.sh Log message: repair usage

CVS: cvs.openbsd.org: src

2022-01-06 Thread Andrew Fresh
CVSROOT:/cvs Module name:src Changes by: afre...@cvs.openbsd.org 2022/01/06 12:27:01 Modified files: usr.sbin/fw_update: fw_update.8 fw_update.sh Log message: Switch fw_update -D to instead -F The perl version of fw_update used -D for something else and although the

CVS: cvs.openbsd.org: src

2022-01-06 Thread Jason McIntyre
CVSROOT:/cvs Module name:src Changes by: j...@cvs.openbsd.org2022/01/06 11:58:24 Modified files: lib/libc/stdlib: getopt_long.3 Log message: refer to longindex as an argument, not a field; from uwe@netbsd -r1.22 ok millert

CVS: cvs.openbsd.org: src

2022-01-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2022/01/06 11:27:32 Modified files: regress/lib/libssl/tlsext: tlsexttest.c Log message: Revise for change to tls_key_share_peer_public()

CVS: cvs.openbsd.org: src

2022-01-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2022/01/06 11:23:56 Modified files: lib/libssl : s3_lib.c ssl_cert.c ssl_clnt.c ssl_locl.h ssl_tlsext.c tls_internal.h tls_key_share.c Log message: Convert legacy TLS client to

CVS: cvs.openbsd.org: src

2022-01-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2022/01/06 11:18:13 Modified files: lib/libssl : tls13_record_layer.c Log message: Allocate and free the EVP_AEAD_CTX struct in tls13_record_protection. This brings the code more in line with the

CVS: cvs.openbsd.org: src

2022-01-06 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2022/01/06 09:06:30 Modified files: usr.sbin/rpki-client: main.c mft.c Log message: Cleanup mft file handling, especially the stale mft bits. Move staleness check up into mft_parse_econtent() to simplify

CVS: cvs.openbsd.org: src

2022-01-06 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2022/01/06 08:41:53 Modified files: sys/arch/octeon/include: pci_machdep.h Log message: Use a 64-bit integer for pcitag_t and define PCITAG_NODE and PCITAG_OFFSET macros to make kernel build again, same

CVS: cvs.openbsd.org: src

2022-01-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2022/01/06 08:21:33 Modified files: regress/lib/libcrypto/asn1: asn1basic.c Log message: Add regress tests for ASN1_BIT_STRING.

CVS: cvs.openbsd.org: src

2022-01-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2022/01/06 07:55:52 Modified files: regress/lib/libcrypto/x509/rfc3779: Makefile rfc3779.c Log message: Add a comment that explains why build_addr_block_tests isn't const

CVS: cvs.openbsd.org: src

2022-01-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2022/01/06 07:34:40 Modified files: lib/libcrypto/ct: ct_vfy.c Log message: Convert SCT verification to CBB. ok inoguchi@ tb@

CVS: cvs.openbsd.org: src

2022-01-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2022/01/06 07:32:55 Modified files: lib/libcrypto/bytestring: bs_cbb.c bytestring.h Log message: Sync from libssl.

CVS: cvs.openbsd.org: src

2022-01-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2022/01/06 07:31:03 Modified files: regress/lib/libssl/bytestring: bytestringtest.c Log message: Test CBB_add_u64()

CVS: cvs.openbsd.org: src

2022-01-06 Thread Joel Sing
CVSROOT:/cvs Module name:src Changes by: js...@cvs.openbsd.org 2022/01/06 07:30:30 Modified files: lib/libssl : bytestring.h bs_cbb.c Log message: Provide CBB_add_u64() Prompted by and ok tb@

CVS: cvs.openbsd.org: src

2022-01-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2022/01/06 07:08:15 Modified files: lib/libcrypto/x509: x509_addr.c Log message: minor tweaks, no code change Adjust a comment to reality, zap a stray empty line and fix whitespace before comment after

CVS: cvs.openbsd.org: src

2022-01-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2022/01/06 06:36:56 Modified files: regress/lib/libssl/openssl-ruby: Makefile Log message: With openssl-ruby-tests 20220105, test_post_connection_check_wildcard_san is now an unexpected pass, so remove it

CVS: cvs.openbsd.org: src

2022-01-06 Thread Anton Lindqvist
CVSROOT:/cvs Module name:src Changes by: an...@cvs.openbsd.org 2022/01/06 06:18:36 Modified files: usr.sbin/fw_update: Makefile Log message: Make it possible to compile the patterns utility with the source tree checked out anywhere. While here, tidy up the Makefile a

CVS: cvs.openbsd.org: src

2022-01-06 Thread Inoguchi Kinichiro
CVSROOT:/cvs Module name:src Changes by: inogu...@cvs.openbsd.org2022/01/06 05:54:51 Modified files: usr.bin/openssl: cms.c Log message: Free memory before assign to avoid leak CID 313263 313301 313322

CVS: cvs.openbsd.org: src

2022-01-06 Thread Inoguchi Kinichiro
CVSROOT:/cvs Module name:src Changes by: inogu...@cvs.openbsd.org2022/01/06 04:46:05 Modified files: usr.bin/openssl: cms.c Log message: Free memory if error occurred

CVS: cvs.openbsd.org: src

2022-01-06 Thread Inoguchi Kinichiro
CVSROOT:/cvs Module name:src Changes by: inogu...@cvs.openbsd.org2022/01/06 04:37:29 Modified files: usr.bin/openssl: cms.c Log message: Remove NULL check before free

CVS: cvs.openbsd.org: src

2022-01-06 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2022/01/06 02:46:05 Modified files: regress/lib/libcrypto/x509/rfc3779: rfc3779.c Log message: Fix a copy-paste error that led to an out-of-bounds access. Found via a crash on bluhm's i386 regress test box

CVS: cvs.openbsd.org: src

2022-01-06 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2022/01/06 01:46:50 Modified files: sys/arch/arm/include: pci_machdep.h Log message: Use a 64-bit integer for pcitag_t and define PCITAG_NODE and PCITAG_OFFSET macros to make armv7 build again. ok

CVS: cvs.openbsd.org: src

2022-01-06 Thread Nicholas Marriott
CVSROOT:/cvs Module name:src Changes by: n...@cvs.openbsd.org2022/01/06 01:20:00 Modified files: usr.bin/tmux : resize.c Log message: Ignore windows without a size set (may be used for pane only), from Anindya Mukherjee.