Commits

Commit:
4d9d3093d48025a1a66c125f7878a094cf2c9d10
From:
Omar Polo <op@omarpolo.com>
Date:
resurrect landlock support this time targetting ABI level 3; partially based on how claudio@ handled it in rpki-client. Fun how this bit of code has come full circle (gmid inspired what I wrote for got, which inspired what was written for rpki-client, which has come back.)
diff | patch | tree
Commit:
cedef5b09c13d8fac119a7ee5595ee253c2a37b4
From:
Omar Polo <op@omarpolo.com>
Date:
fix build of regress
diff | patch | tree
Commit:
01d3961d6f076d5668eac97e9d3e3d0812836730
From:
Omar Polo <op@omarpolo.com>
Date:
adding forgotten file
diff | patch | tree
Commit:
74c6900c916b368b2f88d9f28cfdb5170cee5f6c
From:
Omar Polo <op@omarpolo.com>
Date:
fix previous; check for getentropy only when arc4random is missing on macos we have the situation where we have arc4random available but no getentropy().
diff | patch | tree
Commit:
21b4a5163ce61f351f95e10eda89a312190476ce
From:
Omar Polo <op@omarpolo.com>
Date:
comment out seed_from_prngd it's not used (we define OPENSSL_PRNG_ONLY) and fails the build with -Werror. Keep the function commented instead of deleting it just in case we need to undefine OPENSSL_PRNG_ONLY in the future.
diff | patch | tree
Commit:
258131b1b60f657acfcc75d5416e859806de1415
From:
Omar Polo <op@omarpolo.com>
Date:
typo
diff | patch | tree
Commit:
8f8d721301fb5d8cf248fc89b0a74616fc1aa1ee
From:
Omar Polo <op@omarpolo.com>
Date:
enable privsep crypto on all systems now that we have a bundled libtls we can actually do this. Retain the knob to disable it "just in case".
diff | patch | tree
Commit:
f9ab77a898ec008a445b3842afc21bb4eac60657
From:
Omar Polo <op@omarpolo.com>
Date:
bundle libtls gmid (like all other daemons that want to do privsep crypto) has a very close relationship with libtls and need to stay in sync with it. OpenBSD' libtls was recently changed to use OpenSSL' EC_KEY_METHOD instead of the older ECDSA_METHOD, on the gmid side we have to do the same otherwise failures happens at runtime. In a similar manner, privsep crypto is silently broken in the current libretls (next version should fix it.) The proper solution would be to complete the signer APIs so that applications don't need to dive into the library' internals, but that's a mid-term goal, for the immediate bundling the 'little' libtls is the lesser evil. The configure script has gained a new (undocumented for the time being) flag `--with-libtls=bundled|system' to control which libtls to use. It defaults to `bundled' except for OpenBSD where it uses the `system' one. Note that OpenBSD versions before 7.3 (inclusive) ought to use --with-libtls=bundled too since they still do ECDSA_METHOD.
diff | patch | tree
Commit:
9019e55e7ef1369c37f5a7d4c7b0e441d55d6b44
From:
Omar Polo <op@omarpolo.com>
Date:
sync DISTFILES
diff | patch | tree
Commit:
7ea87255935d436ecac33d347d5a750af69c969b
From:
Omar Polo <op@omarpolo.com>
Date:
sync have/* files
diff | patch | tree
Commit:
9cd81f93d7e904e67799f3ff0b9ceb8bd23d58d8
From:
Omar Polo <op@omarpolo.com>
Date:
sync changelog
diff | patch | tree
Commit:
e872053b20d763005a398200c638c923aebd04e1
From:
Omar Polo <op@omarpolo.com>
Date:
send all the params as per RFC3875 (CGI) and sync documentation
diff | patch | tree
Commit:
f5dc7eddd7ac6cf06d7092e9526691b566850b50
From:
Omar Polo <op@omarpolo.com>
Date:
fix INSTALL handling Set a sane default for INSTALL, allow it to be changed either as environment variable or configure argument, and propagate it correctly to the generated config.mk. Issue reported by xavi, thanks!
diff | patch | tree
Commit:
81634643dbb99f7270cbb5ba5f84adc28991018d
From:
Omar Polo <op@omarpolo.com>
Date:
fix comment (ge -> gemexp)
diff | patch | tree
Commit:
07ad49102564bf72092cc8080322852308490065
From:
Omar Polo <op@omarpolo.com>
Date:
getcwd(NULL) is an extension; don't rely on it also, while here, add some error checking too
diff | patch | tree