summaryrefslogtreecommitdiffstats
path: root/usr.bin (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Factor out setup_up / destroy_ui functions.bcook2015-09-134-58/+58
| | | | | | | | | This pulls out and renames setup_ui/destroy_ui so we have something that can be replaced as-needed, moving the the console setup code for Windows to app_win.c in -portable, instead of needing a local patch to enable binary console mode ui_read/write are also simplified.
* document extra algorithms available with openssl speed commandbcook2015-09-131-1/+4
| | | | ok jmc@
* display negotiated TLS version and cipher suite in verbose mode.beck2015-09-131-2/+3
| | | | ok jsing@
* Set woken flag when flushing so that the channel is freed, while herenicm2015-09-131-3/+3
| | | | use the same loop construct for both loops.
* tweak STANDARDS;jmc2015-09-131-3/+3
|
* Adapt to just committed libtls api changebeck2015-09-121-21/+14
|
* Nuke SSLEAY_CONF -- a backwards compatibility environment variable thatlteo2015-09-124-14/+5
| | | | | | | | | | has been superseded by OPENSSL_CONF and discouraged from use for almost 16 years. "Definately ok" jsing@ "burn it" deraadt@ "Kill it with fire" miod@ "KILL IT WITH FIRE!!! BURN!!!!" beck@
* drop useless .Li macrosschwarze2015-09-121-5/+5
|
* ouch, sorry, fix previousschwarze2015-09-121-2/+3
|
* use .Cm rather than .Li for fixed string arguments, andschwarze2015-09-121-6/+9
| | | | don't manually add blank characters inside .Sm off
* use sysctl() to get FSCALE value; ok guentherderaadt2015-09-121-12/+10
|
* Add openssl(1) speed support for AEAD algorithms.bcook2015-09-121-17/+96
| | | | | | | This adds aes-128-gcm aes-256-gcm chacha20-poly1305 from Adam Langley's original patch for OpenSSL ok beck@ jsing@
* don't use literal brackets to indicate optional syntax elements,schwarze2015-09-121-4/+4
| | | | use the .Op macro (or in this case, .Oo/.Oc)
* Fix the openssl(1) prime command: When checking a decimal number forlteo2015-09-121-3/+2
| | | | | | | | | primality, do not unnecessarily convert the original decimal number to hex in the output. Hex numbers explicitly specified with -hex remain unchanged. ok beck@ deraadt@ jsing@ miod@
* Old diff found in my tree: Add HISTORY; info from the CSRG CDs.schwarze2015-09-121-2/+7
|
* use SOCK_CLOEXEC instead of fnctl; ok guenther beck jsingderaadt2015-09-121-12/+16
|
* fix previous;jmc2015-09-122-31/+48
|
* Update sqlite3 to 3.8.11.1. Bump major, regen .pc and header. Changesjturner2015-09-121-94/+205
| | | | | | | available here: http://sqlite.org/changes.html Tested in bulk by aja@. ok landry@ "Please crank sqlite when you get this mail." deraadt@
* spaces found during a readderaadt2015-09-111-19/+18
|
* add some missing .Cm macros and drop some redundant .Bk while hereschwarze2015-09-111-6/+4
|
* Add TLS suppport to nc. Provides a useful little test and script tool.beck2015-09-113-45/+346
| | | | ok jsing@ bluhm@
* unifdef -DOPENSSL_NO_RC5jsing2015-09-112-42/+2
|
* Remove XRESOLVE support.mpi2015-09-112-5/+3
| | | | | dlg@ is sad because we won't be able to implement arpd(8) the way people intended it in the 80s.
* The -D option requires an argument, and the argument must followschwarze2015-09-111-6/+6
| | | | | without intervening whitespace. Documentation bug found because the SYNOPSIS markup was technically incomplete.
* kill evil commentbeck2015-09-111-3/+1
| | | | ok deraadt@
* Remove never called functions to dump per-ifp IPv6 statistics now thatmpi2015-09-112-129/+2
| | | | | | the kernel buffers are gone. ok claudio@
* avoid gratuitious use of the low-level .br requestschwarze2015-09-111-7/+3
|
* delete bogus escaping from ellipsis to forestall cargo cult effectsschwarze2015-09-111-3/+3
|
* fix unchecked mallocs - coverity 130454 and 130455beck2015-09-111-6/+15
| | | | ok jsing@
* "Shutdown" should be "Shut down" in the usage for s_time's -no_shutdownlteo2015-09-111-2/+2
| | | | flag. Pointed out by jmc@'s commit to the openssl(1) man page.
* Merge delete-buffer into cmd-set-buffer.c and change the paste buffernicm2015-09-116-127/+41
| | | | | API so it has one paste_free() rather than free_top and free_name (everywhere that uses it already has the right pointer).
* Remove engine command and parameters from openssl(1).bcook2015-09-1140-1726/+184
| | | | | | | We do not have any builtin or dynamic engines, meaning openssl(1) has no way to use the engine command or parameters at all. ok jsing@
* remove stupid castsderaadt2015-09-111-4/+4
|
* Use explicit_bzero() when zeroing before free()guenther2015-09-111-1/+1
| | | | | from Michael McConville (mmcconv1 (at) sccs.swarthmore.edu) ok millert@ djm@
* sync -Q in usage() to SYNOPSIS; since it's drastically shorter,jmc2015-09-111-6/+4
| | | | | i've reformatted the block to sync with the man (80 cols) and saved a line;
* tweak previous;jmc2015-09-111-3/+4
|
* shutdown (n.) -> shut down (v.);jmc2015-09-111-2/+2
|
* Update usage to match man page.dtucker2015-09-111-2/+2
|
* expand %i in ControlPath to UID; bz#2449djm2015-09-112-6/+9
| | | | patch from Christian Hesse w/ feedback from dtucker@
* mention -Q key-plain and -Q key-cert;djm2015-09-111-5/+9
| | | | bz#2455 pointed out by Jakub Jelen
* more clarity on what AuthorizedKeysFile=none does;djm2015-09-112-5/+8
| | | | based on diff by Thiebaud Weksteen
* Change the default behavior of the s_time command so that it willlteo2015-09-111-2/+7
| | | | | | | | | | | | | | | | perform a proper shutdown by sending a "close notify" alert to the server. This allows s_time to benchmark a full TLS connection more accurately. Introduce a new flag called -no_shutdown to make s_time adopt the previous behavior (i.e. shut down the connection without notifying the server) so that comparisons can still be made with OpenSSL's version. The idea of using a flag (which replaces a #define) was suggested by bcook@. Thanks to millert@ and miod@ as well for their feedback on an earlier diff which resulted in this change. ok bcook@ beck@
* *** empty log message ***lteo2015-09-111-19/+24
|
* Nuke references to DTLS1_BAD_VER and unbreak the tree.jsing2015-09-101-5/+2
|
* Remove call to CRYPTO_malloc_init(), which does nothing.jsing2015-09-101-2/+1
|
* Correct spelling of OPENSSL_cleanse.jsing2015-09-106-17/+17
|
* reduce .Nd to one line and kill .Tn while hereschwarze2015-09-102-10/+6
|
* Unbreak ftp(1) after tls_read()/tls_write() change.jsing2015-09-101-8/+8
| | | | | | Found the hard way by naddy@ Joint work with beck@
* fix after libtls api changesbeck2015-09-101-14/+10
| | | | ok jsing@
* Add session_last_attached time and format, from Sina Siadat.nicm2015-09-107-8/+23
|