1
0
mirror of https://github.com/openbsd/src.git synced 2025-01-10 06:47:55 -08:00
openbsd-src/usr.sbin
reyk dbb03cc582 Disable client-initiated TLS renegotiation by default.
It is rarely needed and imposes a light DoS risk.  LibreSSL's libssl
allows to turn it off with a simple SSL_OP_NO_CLIENT_RENEGOTIATION
option instead of the complicated implementation that was used before.
It now turns it off completely instead of allowing one initial
client-initiated renegotiation.

It can still be enabled with "tls client-renegotiation".

ok benno@ beck@ jsing@
2017-02-02 08:24:16 +00:00
..
ac
accton
acme-client - -N got changed to -D 2017-01-28 17:53:17 +00:00
acpidump remove unused junk definitions 2017-01-24 00:20:28 +00:00
adduser for some time now mandoc has not required MLINKS to function 2016-03-30 06:38:40 +00:00
amd Nuke whitespace foolish enough to expose itself during the great 2017-01-21 08:33:51 +00:00
apm Retire zaurus, as it hasn't made the EABI jump and will be permanently broken 2016-09-03 13:37:39 +00:00
apmd Retire zaurus, as it hasn't made the EABI jump and will be permanently broken 2016-09-03 13:37:39 +00:00
arp Tweak output to keep it aligned when interfaces with big names, like 2016-11-29 08:55:06 +00:00
authpf for some time now mandoc has not required MLINKS to function 2016-03-30 06:38:40 +00:00
bgpctl Mission accomplished, bgpctl is now fatal free. 2017-01-23 23:38:51 +00:00
bgpd Hopefully the last of the struct rib rototilling. Peer just points to a 2017-01-25 03:21:55 +00:00
bind init a variable to address https://kb.isc.org/article/AA-01272 2016-08-18 06:36:02 +00:00
chroot
config Remove some code that was already disabled when it was committed 2016-10-27 14:33:30 +00:00
cron Document the "-q " prefix accepted in the "command" field. 2016-10-12 17:27:08 +00:00
crunchgen Copyright notices don't belong in the displayed text of manual pages, 2017-01-27 15:53:50 +00:00
dev_mkdb change Xrs from now-defunct db(3) to dbopen(3); this wasn;t a 2015-11-30 17:03:05 +00:00
dhcpd Replace bzero(3) with memset(3) 2016-11-15 10:49:37 +00:00
dhcrelay Add dhcrelay(8) command-line option for replacing Relay Agent Information 2016-12-16 18:38:39 +00:00
dvmrpctl work on making log.c similar in all daemons: 2016-09-02 16:20:47 +00:00
dvmrpd Replace hand-rolled for(;;) traversal of ctl_conns TAILQ with 2017-01-08 23:04:42 +00:00
edquota Remove needless DIAGNOSTICS sections saying only "Various messages about 2016-03-17 18:50:48 +00:00
eeprom Build on arm64. 2017-01-23 12:39:37 +00:00
eigrpctl work on making log.c similar in all daemons: 2016-09-02 18:00:07 +00:00
eigrpd Replace hand-rolled for(;;) traversal of ctl_conns TAILQ with 2017-01-08 23:04:42 +00:00
fdformat add missing .An macros 2017-01-08 01:32:02 +00:00
ftp-proxy fix typo; from semarie 2017-01-15 06:16:05 +00:00
gpioctl Build gpioctl(8) and hotplugd(8) on arm64. 2017-01-23 03:12:25 +00:00
hostapd Replace hand-rolled for(;;) emptying of 'symhead' TAILQ with more 2017-01-05 13:53:09 +00:00
hostctl Fixup a typo and provide an example for Hyper-V 2017-01-18 19:57:56 +00:00
hotplugd Build gpioctl(8) and hotplugd(8) on arm64. 2017-01-23 03:12:25 +00:00
httpd remove extra call setting OCSP staple now that it is done above 2017-01-31 20:08:13 +00:00
identd Add format attribute to logger functions. 2016-09-04 14:39:32 +00:00
ifstated Replace hand-rolled for(;;) emptying of 'symhead' TAILQ with more 2017-01-05 13:53:09 +00:00
ikectl Teach ikectl to include extensions in the CSR, rather than just adding them 2017-01-31 21:35:07 +00:00
inetd remove lint comments 2016-08-25 05:23:19 +00:00
installboot Merge identical amd64 and i386 stanzas. 2016-08-14 13:47:52 +00:00
iostat simplify argv back compat 2015-10-23 08:21:27 +00:00
iscsictl Replace hand-rolled for(;;) emptying of 'symhead' TAILQ with more 2017-01-05 13:53:09 +00:00
iscsid copy log.c/h from bgpd. 2017-01-23 08:40:07 +00:00
kgmon Document the dependency on sysctl kern.allowkmem 2016-09-25 23:31:50 +00:00
kvm_mkdb missing fclose() in an error path 2016-09-10 05:48:18 +00:00
ldapctl work on making log.c similar in all daemons: 2017-01-20 11:55:08 +00:00
ldapd unbreak tree 2017-01-20 12:08:24 +00:00
ldomctl Document the ldomctl(8) 'select' command previously not mentioned in the 2017-01-26 12:26:20 +00:00
ldomd Pull in <time.h> for tzset() 2016-08-28 00:51:48 +00:00
ldpctl work on making log.c similar in all daemons: 2017-01-20 12:19:18 +00:00
ldpd work on making log.c similar in all daemons: 2017-01-20 12:19:18 +00:00
lpr fix the remaining cases of .Xr with only one argument 2016-12-28 22:47:11 +00:00
mailwrapper Symlinks to binaries should belong to root:bin. 2016-09-11 07:06:29 +00:00
makefs Use MD disklabel position. 2017-01-21 21:58:32 +00:00
map-mbone Apply fix from mrouted 3.8 via NetBSD. Our mbone support may 2016-08-03 23:13:54 +00:00
memconfig Convert remaining calls to strtoq/strtouq in base with strtoll/strtoull. 2016-08-14 18:34:48 +00:00
mksuncd
mkuboot build mkuboot on arm64 2017-01-30 06:46:13 +00:00
mopd Nuke whitespace foolish enough to expose itself during the great 2017-01-21 08:33:51 +00:00
mrinfo
mrouted The POSIX APIs that that sockaddrs all ignore the s*_len field in the 2017-01-21 11:32:04 +00:00
mtrace Nuke whitespace foolish enough to expose itself during the great 2017-01-21 08:33:51 +00:00
mtree Nuke a bunch of whitespace nits seen while '%q' hunting. 2016-08-16 16:41:46 +00:00
ndp Tweak output to keep it aligned when interfaces with big names, like 2016-11-29 08:55:06 +00:00
netgroup_mkdb Remove NULL-checks before free(). 2015-12-19 20:37:11 +00:00
npppctl The POSIX APIs that that sockaddrs all ignore the s*_len field in the 2017-01-21 11:32:04 +00:00
npppd Replace hand-rolled for(;;) traversal of ctl_conns TAILQ with 2017-01-09 14:04:31 +00:00
nsd regen 2017-01-17 06:21:58 +00:00
ntpd add logging messages to distinguish which safty check failed 2017-01-20 01:21:18 +00:00
ocspcheck netinet/in.h should be included, and freebsd and some others 2017-02-01 18:54:37 +00:00
ospf6ctl Also print the mtu in detailed interface info. 2016-12-22 23:03:55 +00:00
ospf6d copy log.c/h from bgpd. 2017-01-23 08:41:02 +00:00
ospfctl Also print the mtu when showing interface details 2016-12-05 22:39:25 +00:00
ospfd sync log.c from relayd et al to ospfd. 2017-01-24 04:24:25 +00:00
pcidump s/Signaled/Signalled/ 2017-01-04 03:35:29 +00:00
pkg_add if the fs got badly damaged, display a decent error message instead of 2017-01-25 14:12:33 +00:00
portmap
pppd use crypt_checkpass to simplify password checking logic. 2016-06-24 17:22:56 +00:00
procmap Make a move towards ending 4 decades of kernel snooping. 2016-09-25 15:23:36 +00:00
pstat Remove leftovers of line disciplines that are no more. 2016-11-26 11:18:43 +00:00
pwd_mkdb remove reference to 6th ed. 2016-08-16 17:51:38 +00:00
quot use symbolics for flags to open 2015-11-12 22:33:07 +00:00
quotaon for some time now mandoc has not required MLINKS to function 2016-03-30 06:38:40 +00:00
radiusctl Do not mix EX_* from sysexits.h and EXIT_* from stdlib.h, just use 2015-12-31 16:22:27 +00:00
radiusd some fixes from rob pierce; ok yasuoka 2016-09-20 09:16:37 +00:00
rarpd Oops. one "error(NONFATAL,..." got flipped to "error(...)" instead 2017-01-20 06:22:38 +00:00
rbootd In "%.*s" the * takes (int). gcc whines if you try to use the result 2017-01-20 03:47:31 +00:00
rcctl improve .Bl -tag -width for -Tps mode; 2016-10-10 15:22:26 +00:00
rdate expand message between processes to 2048 bytes. Andre Smagin found 2015-12-23 19:13:52 +00:00
rebound unbreak by fixing obvious pastos 2016-10-23 17:06:40 +00:00
relayctl Replace [RELAY|SERVER]_MAXPROC with the new PROC_MAX_INSTANCES 2016-09-03 14:44:21 +00:00
relayd Disable client-initiated TLS renegotiation by default. 2017-02-02 08:24:16 +00:00
repquota Remove needless DIAGNOSTICS sections saying only "Various messages about 2016-03-17 18:50:48 +00:00
ripctl Document the -s option, descr adapted from ospfd/ospfctl 2016-10-13 15:20:40 +00:00
ripd Nuke some whitespace that keeps poking me in the eye as I try to 2017-01-17 22:10:55 +00:00
rmt Convert remaining calls to strtoq/strtouq in base with strtoll/strtoull. 2016-08-14 18:34:48 +00:00
route6d 6bone -> documentation range 2016-08-12 14:04:34 +00:00
rpc.bootparamd Rename local variable 'err' to 'error', to avoid -Wshadow conflicts with err.h 2016-10-16 10:40:58 +00:00
rpc.lockd
rpc.statd Nuke whitespace foolish enough to expose itself during the great 2017-01-21 08:33:51 +00:00
rtadvd work on making log.c similar in all daemons: 2017-01-20 23:29:58 +00:00
sa rework the end text somewhat so that the informatiom pertaining to -m 2016-12-21 07:02:05 +00:00
sasyncd Pull in <sys/select.h> for fd_set 2016-08-27 04:21:08 +00:00
sensorsd Pull in <sys/time.h> for struct timespec, timeval, or clockrate 2016-08-27 01:50:07 +00:00
slowcgi Add format attribute to logger functions. 2016-09-04 14:40:34 +00:00
smtpd Stop accessing verbose and debug variables from log.c directly. 2017-01-09 14:49:21 +00:00
snmpctl Make snmpctl compile again after the env -> snmpd_env rename in snmpd's 2016-10-28 20:49:32 +00:00
snmpd Don't include a literal "%" in the value for humidity sensorValue in 2017-01-31 21:31:04 +00:00
spamdb When action == 0 (spamdb(8) without arguments) it only reads the DB so it only 2016-11-29 17:21:52 +00:00
switchctl Use the sizeof operator on a struct not a pointer to one. 2017-01-31 05:53:08 +00:00
switchd Nuke some whitespace that keeps poking me in the eye as I try to 2017-01-17 22:10:55 +00:00
syslogc "commandline" -> "command line", since there are so few examples 2015-11-05 09:48:05 +00:00
syslogd Syslogd accepted network input only for either IPv4 or IPv6. To 2017-01-02 15:58:02 +00:00
sysmerge Instead of checking if /etc/X11 is around to know whether the xbase set 2017-01-11 08:50:11 +00:00
syspatch Drop empty line. 2017-01-30 15:36:20 +00:00
tcpdrop
tcpdump Fix tcpdump(8) display of duration values provided in 802.11 control frames. 2017-01-29 15:16:14 +00:00
tftp-proxy the pf.conf sample should refer to group _tftp_proxy, not proxy; 2016-09-19 12:52:14 +00:00
tftpd Exit early from rdaemon() is the passed fd is invalid. 2016-09-26 17:15:19 +00:00
tokenadm doesn't need to link with crypto 2016-08-16 17:52:28 +00:00
tokeninit for some time now mandoc has not required MLINKS to function 2016-03-30 06:38:40 +00:00
traceroute Tell traceroute6 to choose source address based on correct routing 2017-01-24 14:07:41 +00:00
trpt Replace the archaic n_time data type with u_int32_t. This also allows the 2016-12-23 03:08:32 +00:00
unbound Back out make(obj) hack: it doesn't solve the problem entirely and may 2017-01-28 12:38:42 +00:00
usbdevs Initialize a char* to NULL rather than 0. 2015-12-22 08:36:40 +00:00
user Since pwp->pw_gid is equal to pwp->pw_uid then use the former instead in 2016-11-30 23:58:07 +00:00
vipw - Remove -? since parameters don't make sense for this command (but still keep 2016-11-07 23:04:55 +00:00
vmctl sort previous; 2017-01-24 11:29:30 +00:00
vmd SVM: vmd(8) support for SVM 2017-01-24 09:58:00 +00:00
watchdogd
wsconscfg remove hppa64 port, which we never got going beyond broken single users. 2016-05-11 21:52:48 +00:00
wsfontload Enable building wsfontload on Loongson. 2017-01-19 08:06:27 +00:00
wsmoused remove the machine arch from Dt - this file gets installed on more 2015-11-14 01:30:11 +00:00
ypbind When making a copy of svc_pollfd, use the correct size. 2016-07-08 19:32:26 +00:00
ypldap work on making log.c similar in all daemons: 2017-01-20 12:39:36 +00:00
yppoll
ypserv include time.h for time() 2016-09-22 00:09:47 +00:00
ypset
zdump Don't warn about valid time zone abbreviations. POSIX through 2000 2016-03-15 19:50:47 +00:00
zic Don't warn about valid time zone abbreviations. POSIX through 2000 2016-03-15 19:50:47 +00:00
Makefile hook ocspcheck into the build 2017-01-24 12:14:44 +00:00
Makefile.inc build most of usr.sbin with -Werror-implicit-function-declaration 2015-12-28 13:25:45 +00:00