mischief/openbsd-src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2025-01-10 06:47:55 -08:00
Code
891d6bce9c
openbsd-src/usr.sbin
History
job 891d6bce9c Allow imposing constraints on RPKI trust anchors 
The ability to constrain a RPKI Trust Anchor's effective signing
authority to a limited set of Internet Number Resources allows
Relying Parties to enjoy the potential benefits of assuming trust,
within a bounded scope.

Some examples: ARIN does not support inter-RIR IPv6 transfers, so
it wouldn't make any sense to see a ROA subordinate to ARIN's trust
anchor covering RIPE-managed IPv6 space. Conversely, it wouldn't
make sense to observe a ROA covering ARIN-managed IPv6 space under
APNIC's, LACNIC's, or RIPE's trust anchor - even if a derived trust
arc (a cryptographically valid certificate path) existed. Along these
same lines, AFRINIC doesn't support inter-RIR transfers of any kind,
and none of the RIRs have authority over private resources like
10.0.0.0/8 and 2001:db8::/32.

For more background see:
https://datatracker.ietf.org/doc/draft-snijders-constraining-rpki-trust-anchors/
https://mailman.nanog.org/pipermail/nanog/2023-September/223354.html

With and OK tb@, OK claudio@
2023-10-13 12:06:49 +00:00
..
ac spelling fixes; from paul tagliamonte 2022-12-28 21:30:15 +00:00
accton accton.c: add missing $OpenBSD$ tag 2022-12-30 18:47:45 +00:00
acme-client acme-client: drop ecdsa.h, fix spacing and a typo in error message 2023-08-29 14:44:53 +00:00
acpidump When looking up a symble using kvm_nlist(3), we need to prepend an 2022-09-11 10:40:35 +00:00
adduser Avoid gendered language in man pages when not referring to a specific 2022-02-18 23:17:13 +00:00
amd It isn't portable to use stderr (or std{in,out}) in file-scope 2023-07-05 18:45:14 +00:00
apm In do_zzz a garbage stack value could be accessed in case a read 2022-11-09 18:48:11 +00:00
apmd zap APM_CANCEL, dead since import; OK tb 2023-04-27 10:51:27 +00:00
arp Remove stylistic differences between arp(8) and ndp(8) delete() 2023-04-04 21:18:04 +00:00
authpf Avoid gendered language in man pages when not referring to a specific 2022-02-18 23:17:13 +00:00
bgpctl Add missing <sys/time.h> include for timespecsub() 2023-09-06 09:52:26 +00:00
bgpd Add missing Ns in argument list of announce (IPv4|IPv6) ... 2023-10-13 07:37:35 +00:00
bgplgd Adjust bgplgd after renaming of the invalid option in bgpctl. 2023-05-09 14:35:45 +00:00
btrace bt(5), btrace(8): add support for binary modulo operator ('%') 2023-10-12 15:16:44 +00:00
chroot
config remove unused variable 2023-09-06 05:00:37 +00:00
cron Fix skipping of white space after the username in /etc/crontab. 2023-07-19 21:26:02 +00:00
crunchgen Instead of ld -dc use ld -d, supported by both ld.bfd and ld.lld >= 15 2023-09-14 16:39:00 +00:00
dev_mkdb userspace: remove vestigial '?' cases from top-level getopt(3) loops 2022-12-04 23:50:45 +00:00
dhcpd add -v to usage(); 2023-10-06 05:31:54 +00:00
dhcpleasectl improve the Nd lines such that the format is consistent for the 2023-03-02 17:09:52 +00:00
dhcrelay improve the Nd lines such that the format is consistent for the 2023-03-02 17:09:52 +00:00
dhcrelay6 Do not ignore the AF_LINK entries of carp(4) interfaces. 2023-07-14 07:09:00 +00:00
dvmrpctl improve the Nd lines such that the format is consistent for the 2023-03-02 17:09:52 +00:00
dvmrpd Update and refactor dvrmpd to use the new ibu API. 2023-06-26 10:08:56 +00:00
edquota man pages: add missing commas between subordinate and main clauses 2022-03-31 17:27:13 +00:00
eeprom Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
eigrpctl improve the Nd lines such that the format is consistent for the 2023-03-02 17:09:52 +00:00
eigrpd Use ibuf_data() and ibuf_size() instead of accessing struct ibuf. 2023-07-03 10:34:31 +00:00
fdformat userspace: remove vestigial '?' cases from top-level getopt(3) loops 2022-12-04 23:50:45 +00:00
ftp-proxy man pages: add missing commas between subordinate and main clauses 2022-03-31 17:27:13 +00:00
fw_update Don't register firmware already in /var/db/pkg 2023-09-28 01:18:52 +00:00
gpioctl Build gpioctl(8) on riscv64. 2022-02-18 10:52:32 +00:00
hostapd Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
hostctl The maximum length of the value is extended to 64k bytes. 2023-01-07 06:40:21 +00:00
hotplugd Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
httpd Use EVBUFFER_DATA instead of reaching into struct evbuffer. ok tb 2023-09-03 10:18:18 +00:00
identd
ifstated spelling fixes; from paul tagliamonte 2022-12-28 21:30:15 +00:00
ikectl Rename sun to s_un for portability. 2022-12-04 11:54:31 +00:00
inetd Allow UDP for built-in inetd(8) services on 127.0.0.1. 2023-09-03 22:01:00 +00:00
installboot No need to check for DTYPE_FLOPPY. If there is neither a GPT nor 2023-06-11 14:00:04 +00:00
iostat Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
iscsictl spelling. 2023-02-21 15:45:40 +00:00
iscsid Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
kgmon
kvm_mkdb we mention interim BSD releases so change some 4.4BSD use to 4.3BSD-Reno 2022-07-30 07:19:30 +00:00
ldapctl improve the Nd lines such that the format is consistent for the 2023-03-02 17:09:52 +00:00
ldapd Improve the conn_err() bufferevent error callback. To better report errors. 2023-06-26 10:28:12 +00:00
ldomctl Make stopped ldom utilization appear as zero 2023-08-10 07:50:45 +00:00
ldomd Print poll(2) errno 2022-07-27 19:42:22 +00:00
ldpctl improve the Nd lines such that the format is consistent for the 2023-03-02 17:09:52 +00:00
ldpd Use new ibuf API. Use ibuf_data() and ibuf_size() instead of direct 2023-07-03 11:51:27 +00:00
lpd spelling fixes; from paul tagliamonte 2022-12-28 21:30:15 +00:00
lpr "d" is the key character for DVI files, not "r"; 2023-06-17 15:35:08 +00:00
mailwrapper
makefs function definitions without prototypes are deprecated, so shut clang16 up 2023-09-05 15:33:40 +00:00
map-mbone delete extra explanations in the usage: messages which are described 2021-06-26 15:42:58 +00:00
memconfig
mksuncd fix off by one in bounds test 2021-12-23 09:17:19 +00:00
mkuboot reduce verbosity of usage(), making it match SYNOPSIS; 2021-06-22 14:52:33 +00:00
mopd use ansi function decls 2023-09-06 11:03:30 +00:00
mrinfo
mrouted use ansi function decls 2023-09-06 11:08:00 +00:00
mtrace
mtree Stop down-converting to a timeval when comparing and setting times. 2023-08-11 05:07:28 +00:00
ndp If ndp -d did not find a neigbor entry, it removed the cloning route 2023-04-05 13:56:41 +00:00
netgroup_mkdb Christos Zoulas agreed to rescind clause 3 and 4 in 2023-01-04 13:00:11 +00:00
npppctl spelling. 2023-02-21 15:45:40 +00:00
npppd Check if the avp->length is not broken. Also make sure that 2023-09-11 07:33:07 +00:00
nsd Update to nsd 4.7.0 2023-06-29 19:38:49 +00:00
ntpd remove duplicate includes 2023-04-19 12:58:15 +00:00
ocspcheck remove duplicate includes 2023-04-19 12:58:15 +00:00
ospf6ctl add "fib reload" support to ospf6d/ospf6ctl, and trigger it 2023-06-21 09:47:03 +00:00
ospf6d a little knf, no functional change 2023-07-04 02:56:11 +00:00
ospfctl improve the Nd lines such that the format is consistent for the 2023-03-02 17:09:52 +00:00
ospfd Use ibuf_data() instead of directly accessing ibuf->buf. 2023-07-03 09:40:47 +00:00
pcidump Fix (and simplify) link speed reporting. 2023-04-16 17:26:14 +00:00
pkg_add put "stub" within grasp of -DREGRESSION_TESTING. 2023-10-11 13:54:43 +00:00
portmap Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
pppd In 2016, chat changed its syslog output for hidden strings. 2023-08-07 06:21:53 +00:00
procmap change default output to -a format; ok tb 2022-11-10 08:17:53 +00:00
pstat MAXCOMLEN is no longer needed in these programs, so remove the annotation 2022-02-22 17:35:01 +00:00
pwd_mkdb remove duplicate includes 2023-04-19 12:58:15 +00:00
quot
quotaon No need to declare optind, optarg or opterr; unistd.h does this for us. 2021-11-15 15:14:24 +00:00
ractl
rad RFC 9096 changes the default timers for prefix preferred and valid lifetimes, 2023-04-27 16:56:52 +00:00
radiusctl Sync EVP_MD_CTX to heap switch from npppd. 2022-01-07 07:34:34 +00:00
radiusd Clarify the interval after 30sec. 2023-09-14 09:55:28 +00:00
rarpd Remove REQUIRE_TFTPBOOT left-over 2022-10-04 23:58:09 +00:00
rbootd For open/openat, if the flags parameter does not contain O_CREAT, the 2021-10-24 21:24:15 +00:00
rcctl Check input before trying to disable a non-existing daemon to prevent parsing 2023-07-13 13:54:27 +00:00
rdate Christos Zoulas agreed to rescind clause 3 and 4 in 2023-01-04 13:00:11 +00:00
rdsetroot Add '-s' option to simply display the number of bytes available for the rdroot 2023-04-24 14:06:01 +00:00
relayctl
relayd Revert the previous. It was committed by my mistake. 2023-09-14 09:54:31 +00:00
repquota No need to declare optind, optarg or opterr; unistd.h does this for us. 2021-11-15 15:14:24 +00:00
ripctl improve the Nd lines such that the format is consistent for the 2023-03-02 17:09:52 +00:00
ripd Use ibuf_data() and ibuf_size() instead of accessing struct ibuf. 2023-07-03 10:34:08 +00:00
rmt
route6d expand Nd (missed in previous); ok claudio 2023-03-04 12:02:07 +00:00
rpc.bootparamd complete bootparamd -> rpc.bootparamd 2022-09-27 13:30:36 +00:00
rpc.lockd Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
rpc.statd Christos Zoulas removed his name from advertising clauses and copyrights 2023-01-04 14:42:46 +00:00
rpki-client Allow imposing constraints on RPKI trust anchors 2023-10-13 12:06:49 +00:00
sa userspace: remove vestigial '?' cases from top-level getopt(3) loops 2022-12-04 23:50:45 +00:00
sasyncd usr.sbin: missing void to appease clang 15's -Wstrict-prototype. 2023-02-08 08:20:53 +00:00
sensorsd Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
slaacctl remove duplicate includes 2023-04-19 12:58:15 +00:00
slowcgi zap extra space in usage added by mistake in last commit. 2022-08-07 07:43:53 +00:00
smtpd Add Message-Id as needed for messages received on the submission port. 2023-10-09 20:55:32 +00:00
snmpd Fix a potential mem-leak in usm_decrypt(). 2023-05-08 12:25:23 +00:00
spamdb
syslogc man pages: add missing commas between subordinate and main clauses 2022-03-31 17:27:13 +00:00
syslogd Retry DNS lookup for remote loghost. 2023-10-12 22:36:54 +00:00
sysmerge
syspatch
sysupgrade Remove default sets answer 2023-10-12 12:31:15 +00:00
tcpdrop Accept netstat-style address.port syntax too. 2023-02-06 18:14:10 +00:00
tcpdump use ansi function decls 2023-09-06 05:54:07 +00:00
tftp-proxy man pages: add missing commas between subordinate and main clauses 2022-03-31 17:27:13 +00:00
tftpd Drop fattr promise unless file creation is allowed 2022-10-09 23:04:57 +00:00
tokenadm man pages: add missing commas between subordinate and main clauses 2022-03-31 17:27:13 +00:00
tokeninit remove outdated contact details for ActivCard and CRYPTOCard 2022-02-19 10:17:39 +00:00
traceroute point readers, where relevant, to route(8) rather than netstat(1) or route(4); 2022-12-23 07:16:54 +00:00
trpt Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
unbound satisfy non-c99 compilers 2023-09-14 23:42:56 +00:00
unwindctl do not mention dhclient as a dhcp route message sender 2023-01-03 20:58:05 +00:00
usbdevs spelling fixes; from paul tagliamonte 2022-12-28 21:30:15 +00:00
user user: handle paths with whitespace / metacharacters 2023-05-18 18:29:28 +00:00
vipw Replace use of the old BSD st_*timespec members in struct stat with 2023-08-11 04:45:05 +00:00
vmctl free the correct pointer. Missed in rev 1.16. 2023-05-02 13:02:51 +00:00
vmd vmd(8): disambiguate log messages per vm and device. 2023-09-26 01:53:54 +00:00
watchdogd Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
wsconscfg userspace: remove vestigial '?' cases from top-level getopt(3) loops 2022-12-04 23:50:45 +00:00
wsfontload userspace: remove vestigial '?' cases from top-level getopt(3) loops 2022-12-04 23:50:45 +00:00
wsmoused spelling fixes; from paul tagliamonte 2022-12-28 21:30:15 +00:00
ypbind Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
ypldap Do not duplicate prototypes of log.h in ypldap.h (without the extra 2023-07-18 13:06:33 +00:00
yppoll
ypserv Delete obsolete /* ARGSUSED */ lint comments. 2023-03-08 04:43:04 +00:00
ypset
zdump .Li -> .Vt where appropriate; 2022-09-11 06:38:10 +00:00
zic man pages: add missing commas between subordinate and main clauses 2022-03-31 17:27:13 +00:00
Makefile Hook up bgplgd into the build 2022-06-28 18:47:54 +00:00
Makefile.inc