summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-09-23add qr.cglenda
2015-09-22libsec: handle missing signature case; can happen because some ciphers make ↵cinap_lenrek
it optional
2015-09-22libsec: make sure Elem is zero initialized so freevalfields() wont cause ↵cinap_lenrek
accidents
2015-09-22libsec: implement dh parameter signature verification, stop lying about ↵cinap_lenrek
non-rsa ciphers, fix memory leaks in X509 code actually verify the diffie hellman parameter signature, this comes in two flavours. TLS1.2 uses X509 signature with a single hash specified by the signature algorithm field in the signature itself and pre TLS1.2 where md5+sha1 hashes of the signed blob are pkcs1 padded and encrypted with the rsa private key. stop advertizing non-rsa cipher suits (DSS and ECDSA), as we have not implmenented them. fix some memory leaks in X509 code while we'r at it.
2015-09-22libsec: fix memory leak in ecmul()cinap_lenrek
2015-09-22scuzz: uncomment synccache commandcinap_lenrek
2015-09-22mothra: <hr> drawingcinap_lenrek
<hr> is handled by drawing replicated bitmap across the with of the page.
2015-09-20libdraw: remove unneeded check (thanks BurnZeZ)cinap_lenrek
2015-09-20devsd: handle SYNCHRONIZE CACHE scsi commands as nops in sdfakescsi()cinap_lenrek
2015-09-20sdmmc: handle fakescsi emulationcinap_lenrek
2015-09-20devsd: remove unused timeout field from SDreqcinap_lenrek
2015-09-20libdraw, screenrc: bind devdraw and devmouse in screenrc instead of handling ↵cinap_lenrek
it in libdraw libdraw was attempting to bind '#i' and '#m' to /dev when it could not find /dev/mouse or /dev/draw. a library shouldnt be that clever and do namespace manipulations on behalf of the caller. so instead, we setup the graphics environment in screenrc on boot time.
2015-09-20pc, pc64: fix sdvirtio descriptor count when sending flushmischief
2015-09-19ircrc: add -P option for server password (thanks, nick)stanley lieber
2015-09-16/sys/lib/dist/ndb/common: correct authdom=inristanley lieber
2015-09-14igfx: fix typos (thanks qwx)cinap_lenrek
2015-09-14libsec: save some space making weakCipher bitamp of type char[] instead of int[]cinap_lenrek
2015-09-14libsec: add TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 and ↵cinap_lenrek
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 cipher suits
2015-09-13libfis: fix wrong shift for lba40 (thanks geoff and charles)cinap_lenrek
---------- Forwarded message ---------- From: Charles Forsyth <charles.forsyth@gmail.com> Date: 13 September 2015 at 12:38 Subject: fis bug To: erik quanstrom <quanstro@quanstro.net> geoff spotted something similar in sdiahci.c, but it's in libfis as well: c[Flba24] = lba >> 24; c[Flba32] = lba >> 32; c[Flba40] = lba >> 48; >> 48?? should be >> 40, especially with drive sizes getting up there.
2015-09-13libsec: send sigature_algoritms extension for TLS1.2, order cipherscinap_lenrek
TLS1.2 requires the client to send the list of supported signature and hash algorithm pairs. some servers will simply reject the client hello otherwise. note that we do not implement any dh/ecdh param signature verification. order the cipher list to strogest first. aes128 is actually more secure than aes256.
2015-09-12libsec: handle TLS 1.2 changes in CertificateRequest messagecinap_lenrek
2015-09-12cwfs: initialize /env/timezone on boot so dumps are in localtimecinap_lenrek
when /env/timezone file is missing (boot case), copy /adm/timezone/local to /env/timezone so localtime() can correct timezone offset.
2015-09-09mkfile.proto: LIB should not be inherited during recursive mkmischief
2015-09-08html2ms: bold table headings, remove wrong tag space handlingcinap_lenrek
2015-09-08mothra: make text inside <td> boldcinap_lenrek
2015-09-08tar: remove unneccesary { }cinap_lenrek
2015-09-08tar: make z flag work, even when no file name was provided (thanks aiju)cinap_lenrek
tar used to infer compression type from the filenames extension, but when no file name is given (stdin/stdout), the -z flag was ignored and no compression filter applied. this changes tar to assume the default gzip compression method when z is given and no file name is specified.
2015-09-07mothra: add missing initializations for plaintext html statecinap_lenrek
2015-09-06libthread: get rid of tprivalloc()/tprivfree()/tprivdata() and _workerdata() ↵cinap_lenrek
(thanks qrstuv) these functions where undocumented and unused. especially tprivfree() was buggy missing a unlock() call. theres not much point in supporting these functions as theres threaddata() and procdata().
2015-09-06libc: remove privfree(), simplify privalloc()cinap_lenrek
2015-09-05devqspi: fix qunlock error on stat() -> close()cinap_lenrek
2015-09-05zynq: clean cache unconditionally *before* dma, invalidate cache *after* dma ↵cinap_lenrek
for read case processor might bring data speculatively into the cache, before the dma completes.
2015-09-05usbehci: clean cache unconditionally before handing a buffer to the hardwarecinap_lenrek
even in the read case, we need to clean the cache so the cpu will not flush out old changes while the hardware updates the buffer.
2015-09-05dist/mkfile: add target for the aijuboard *.zynq.imgcinap_lenrek
this generates a disk image (to be written to usb or sdmmc card) containing 9fat partition with kernel and a hjfs filesystem partition with the 9front distribution. this could be easily extended to generate raspberry pi images as well, but i have no hardware to test.
2015-09-05move screen and mouse setup code to /rc/bin/screenrccinap_lenrek
2015-09-05mergecinap_lenrek
2015-09-05zynq: fix cache flush bug for emmc driver (have to invalidate cache *before* ↵cinap_lenrek
read)
2015-09-03fortunes: Please be respectful in this forum.stanley lieber
2015-09-03html2ms: handle subscripts and superscriptscinap_lenrek
2015-09-03mothra: subscript and superscript supportcinap_lenrek
2015-09-02auth/passwd: fix structure zeroing ordercinap_lenrek
2015-09-02libsec: add rfc5869 hmac-based key derivation function hkdf_x()cinap_lenrek
2015-09-02libsec: generalize pbkdf2_hmac_sha1() to pbkdf2_x() passing the hmac as an ↵cinap_lenrek
argument
2015-09-02libsec: declare aes_setupEnc staticcinap_lenrek
2015-09-02tcp: fix mtu on server sockets again (thans mycroftix)cinap_lenrek
for incoming connection, we used s->laddr to lookup the interface for the incoming call, but this does not work when the announce address is tcp!*!123, then s->laddr is all zeros "::". instead, use the incoming destination address for interface mtu lookup. thanks mycroftix for troubleshooting!
2015-09-01libsec: add curve25519 diffie hellmancinap_lenrek
2015-09-01libsec: remove flawed aes() digest and hmac_aes() implementations (thanks aiju)cinap_lenrek
2015-08-28libsec: work arround 8c running out of registers compiling curve25519.ccinap_lenrek
2015-08-28libsec: add curve25519() from http://code.google.com/p/curve25519-donna/cinap_lenrek
this is a portable version of curve25519() by google.
2015-08-28mergecinap_lenrek