1
0
mirror of https://github.com/openbsd/src.git synced 2025-01-10 06:47:55 -08:00
OpenBSD
Go to file
reyk dbb03cc582 Disable client-initiated TLS renegotiation by default.
It is rarely needed and imposes a light DoS risk.  LibreSSL's libssl
allows to turn it off with a simple SSL_OP_NO_CLIENT_RENEGOTIATION
option instead of the complicated implementation that was used before.
It now turns it off completely instead of allowing one initial
client-initiated renegotiation.

It can still be enabled with "tls client-renegotiation".

ok benno@ beck@ jsing@
2017-02-02 08:24:16 +00:00
bin do not need sys/proc.h 2017-01-24 22:40:09 +00:00
distrib sync 2017-02-01 01:05:01 +00:00
etc +arm64 2017-01-25 03:24:52 +00:00
games Nuke whitespace foolish enough to expose itself during the great 2017-01-21 08:22:57 +00:00
gnu fix format string 2017-02-01 23:08:27 +00:00
include install libcxxabi and libcxx headers when COMPILER_VERSION is clang 2017-01-27 13:30:39 +00:00
lib Let realloc handle and produce moved pointers for allocations between 2017-02-01 06:17:42 +00:00
libexec Fix ELF64_R_TYPE(reloc->r_info) to have the same type on mips64le 2017-01-30 05:00:31 +00:00
regress SUDO is doas 2017-02-01 10:44:13 +00:00
sbin one more fix i requested for previous; 2017-01-26 18:45:12 +00:00
share Mention MODGO_LDFLAGS. 2017-01-30 16:58:31 +00:00
sys When dumping core, skip pages marked as unreadable instead of aborting 2017-02-02 06:23:58 +00:00
usr.bin Add a missing sizeof(*lines) factor to previous commit to ensure we zero 2017-02-01 20:21:19 +00:00
usr.sbin Disable client-initiated TLS renegotiation by default. 2017-02-02 08:24:16 +00:00
Makefile Ensure the build user can write to the GLOBAL_AUTOCONF_CACHE file by 2017-01-29 17:06:56 +00:00
Makefile.cross We can now build parts of binutils on aarch64 so enable cross-binutils 2017-01-27 13:38:40 +00:00