summaryrefslogtreecommitdiffstats
path: root/usr.sbin/nginx/src (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-08-25Base system special services have no flags, so move the test for themschwarze1-9/+13
up front in add_flags(). This avoids unnecessary work, avoids setting bogus variables, and reduces the risk of screwing up things when changing the code. No functional change right now. ok ajacoutot@
2014-08-25get rid of the tempfile in svc_default_enabled_flags();schwarze1-6/+4
feedback and ok ajacoutot@
2014-08-25rc.d scripts are shell scripts and need to be sourced in svc_get_flags().ajacoutot1-2/+9
It's the only way to get daemon_flags in case it contains line continuation... We only need to do that for enable package scripts. original idea from Sebastien Marie discussed with, input from and ok schwarze@
2014-08-25Document the IPv4/IPv6 command line switches and protocol loghostbluhm2-5/+15
prefixes. OK jmc@ henning@
2014-08-25Call check_tty_name() and check_log_name() with the string size andbluhm1-9/+9
don't access memory beyond. Make sure that the complete string "/dev/null" can be copied. OK henning@
2014-08-25Add tests where the IP address family has been chosen by -4 or -6bluhm14-0/+336
command line switch and udp4:// or udp6:// loghost prefix.
2014-08-25Inspired by the previous brainpool addition, copy isakmpd's dh test toreyk3-0/+104
iked. Both daemons share the same dh implementation, but this makes it easier to test iked directly.
2014-08-25No more /etc/X11/fsmatthieu1-3/+1
2014-08-25For functions that take args, return immediately if no args is passed.ajacoutot1-7/+6
Add/drop missing/unused local variables. no functionnal change
2014-08-25Cope with some weird rc.conf.local file like "foobar" in pkg_scriptsajacoutot1-31/+47
while "foobar_flags" is set to "NO"... Reparse deamon_flags at the end of add_flags() since they may have been modified by the function.
2014-08-25Allow to restrict syslogd to a protocol family with -4 and -6 commandbluhm3-22/+91
line switches. If the log server is an FQDN, DNS chooses wether to take the IPv4 or IPv6 route. Allow to prefix the log host with udp4:// or udp6:// to choose a protocol. OK henning@
2014-08-25Fix the gcc compiler warnings "comparison between signed andbluhm3-24/+31
unsigned". Some checks got stricter. The (size_t) cast is only done, if the argument is not negative. OK henning@
2014-08-25Add tests for syslogd sending and receiving over IPv6 sockets.bluhm12-6/+212
2014-08-25you broke the ramdisk builds...deraadt1-1/+3
2014-08-25add an example vmx config linejsg1-2/+10
ok dlg@
2014-08-25Sync dh.[ch] from iked. The files are identical, so any change inreyk2-8/+39
either iked or isakmpd should be synced to the other daemon. The previous changes from iked include: plug two memory leaks, verify EC points and add the Brainpool curves. All tests in regress/sbin/isakmpd/dh passed OKAY. ok markus@ mikeb@
2014-08-25Add support for DH groups 27-30 using the Brainpool curves which havereyk3-6/+22
previously been added to LibreSSL's libcrypto. ok markus@ mikeb@
2014-08-25Previosuly forgot the Makefile bit: add mime.typesreyk1-2/+2
2014-08-25Simplify rm_from_pkg_scripts(); minus ten lines; no functional change;schwarze1-14/+4
ok ajacoutot@. For non-trivial automated text editing in sh(1), thou shalt use sed(1).
2014-08-25Add a generic system-wide /usr/share/misc/mime.types file that can bereyk4-17/+143
included in httpd.conf. httpd(8) now supports both mime.types flavours with or without semicolon at the end of the line (nginx- or apache-style). Discussed with many, with input from halex@ OK halex@
2014-08-25We have never limited the definition of "supported SPF modules"mikeb4-32/+10
to the vendor/make whitelist maintained by Intel so there's no reason to start doing it now. When syncing the driver to the FreeBSD codebase I have decided to take this chunk as is but it appears that it breaks cheap chinese SFP+ fiber optics modules that we all love. And while there's still a lot of places where we check for the vendor OUI, most of these checks are not necessary. Issue reported and fix tested by Tony Sarendal. Thanks!
2014-08-25Move sending of router solicitations to the kernel; receiving andflorian7-7/+199
processing of router advertisements was already in the kernel. With this rtsol{,d}(8) is no longer necessary. The kernel starts sending solicitations with # ifconfig $IF inet6 autoconf or inet6 autoconf in /etc/hostname.$IF. input stsp@ much help & OK mpi@ tweaks & OK bluhm@
2014-08-25Don't allow pasting into input-disabled panes, from Anish R Athalye.nicm1-1/+4
2014-08-25snmpd cannot reloadhalex1-1/+2
ok reyk@
2014-08-25When using a proxy for an https connection, validate the cert hostnamejca1-2/+7
against the target hostname, not the proxy hostname. Issue reported by dlg@, fix by Alex Wilson on tech@, tweaks by me. No reply from tech@
2014-08-25Fix a few fd leaks in isakmpd.doug1-1/+3
The latter close is from a sweep of the tree looking for fdopen problems. While reviewing the patch, gerhard@ fixed another leak. ok gerhard@
2014-08-25Delete secret or secret-derived data with explicit_bzero.doug14-40/+40
concept ok deraadt@ diff looks ok tedu@
2014-08-25Display usage on 2 lines.ajacoutot1-2/+3
reworked from an original diff by schwarze@
2014-08-25Put _rc_err argument under quotes to respect the syntax we are passing.ajacoutot1-2/+2
2014-08-25Start removing unused documentation and the server and related binaries sourcebrad213-101009/+0
code.
2014-08-24Oops. Garbage collect unused variable.schwarze1-2/+2
2014-08-24When support for bold italic font was added to the parsers and to theschwarze1-35/+139
generic parts of the formatters some time ago, the PostScript- and PDF-specific part of the formatters was neglected. Now pascal@ reports that mandoc -Tps throws an assertion on perl(1), apparently because that manual actually uses bold italic font. So here is an overdue implementation of bold italic font support for PostScript and PDF output.
2014-08-24socketvar.h instead of socket.h, oopsderaadt1-2/+2
2014-08-24more NO_CROSSderaadt1-4/+1
2014-08-24Delete the function svc_get_all().schwarze1-23/+11
In svc_is_avail(), this simplifies the code by getting rid of the loop. When running "rcctl status", this allows to not run svc_is_special() - which spawns a grep - for each and every service, resulting in a 20% speedup. As a bonus, we get the special services listed at the end, where they are easier to see than mixed in with the daemons. ok ajacoutot@ jasper@
2014-08-24Whitelisting allowed services is safer and less confusing thanschwarze1-4/+7
blacklisting auxiliary variables, and it makes the coupling to rc.subr(8) less tight. Feedback and OK ajacoutot@.
2014-08-24Start all error messages with "rcctl: " such that it is clear whereschwarze1-6/+6
they come from. While here, there is no need to check the argument of needs_root() before displaying it, it is always provided. ok ajacoutot@ jasper@
2014-08-24Fix wrong IEEE 802.11 ioctl's:zhuk3-12/+12
* SIOCG80211ALLNODES operates on struct ieee80211_nodereq_all, not struct ieee80211_nodereq. * Six SIOC* from wi(4) were using same codes with generic parts of IEEE 802.11 framework. Things worked due to the fact that size of data struct being passed is encoded in actual SIOC*, too. This commit means that ifconfig and some ports will need to be rebuilt, if any of affected SIOC* codes is used. Port bumps to follow. First part okay reyk@, whole diff okay mpi@ Heavy prodding to commit now from deraadt@
2014-08-24remove trailing whitespacesf1-9/+9
2014-08-24Add a comment to unconfuse Ingo :-)ajacoutot1-1/+2
2014-08-24Fix reversed logic.ajacoutot1-2/+2
ok schwarze@
2014-08-24Drop obvious comments.ajacoutot1-5/+1
2014-08-24constify strerror return valuebcook2-4/+4
There is no intention to modify the string returned by strerror and doing so is forbidden by the standard. from Jonas 'Sortie' Termansen ok tedu@ deraadt@
2014-08-24Include <sys/time.h> to get struct timevalbcook2-2/+4
The crypto/bio/bss_dgram.c file assumes that another file indirectly includes <stdlib.h> that includes <sys/time.h>. from Jonas 'Sortie' Termansen ok deraadt@ tedu@
2014-08-24Include <sys/select.h> to get selectbcook4-4/+9
These files currently depends on the wrapper <stdlib.h> file indirectly including a header that provides select(). from Jonas 'Sortie' Termansen ok deraadt@ tedu@
2014-08-24Let SSL_CIPHER_description() allocate the buffer for the description,jsing1-4/+6
rather than passing in a fixed size buffer. This is yet another example of a horribly designed API - if the given buffer is NULL then SSL_CIPHER_description() allocates one for us (great!), which we then need to free (no problem). However, if this allocation fails it returns a pointer to a static string "OPENSSL_malloc Error" - obviously bad things happen if we call free() with this pointer. Unfortunately, there is no way of knowing that the function failed, other than comparing the returned string against the string literal - so do that before calling free()... Joint work with beck@ during g2k14.
2014-08-24Remove imaginary non-reserved port support from mountd.doug2-20/+17
This bug was reported by Julian Hsiao. ok concept deraadt@, miod@ mountd.8 diff is from jmc@. ok doug@ mountd.c diff is from me. ok miod@
2014-08-24Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and ajsing10-58/+38
ssl3_cipher_get_value() helper function, which returns the cipher suite value for the given cipher. ok miod@
2014-08-24reduce indentation of main program by one tab, no functional changeschwarze1-48/+48
ok ajacoutot@
2014-08-24Drop uneeded parenthesis in usage().ajacoutot1-2/+2
ok schwarze@
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.