Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-09-23 | add qr.c | glenda | |
2015-09-22 | libsec: handle missing signature case; can happen because some ciphers make ↵ | cinap_lenrek | |
it optional | |||
2015-09-22 | libsec: make sure Elem is zero initialized so freevalfields() wont cause ↵ | cinap_lenrek | |
accidents | |||
2015-09-22 | libsec: implement dh parameter signature verification, stop lying about ↵ | cinap_lenrek | |
non-rsa ciphers, fix memory leaks in X509 code actually verify the diffie hellman parameter signature, this comes in two flavours. TLS1.2 uses X509 signature with a single hash specified by the signature algorithm field in the signature itself and pre TLS1.2 where md5+sha1 hashes of the signed blob are pkcs1 padded and encrypted with the rsa private key. stop advertizing non-rsa cipher suits (DSS and ECDSA), as we have not implmenented them. fix some memory leaks in X509 code while we'r at it. | |||
2015-09-22 | libsec: fix memory leak in ecmul() | cinap_lenrek | |
2015-09-22 | scuzz: uncomment synccache command | cinap_lenrek | |
2015-09-22 | mothra: <hr> drawing | cinap_lenrek | |
<hr> is handled by drawing replicated bitmap across the with of the page. | |||
2015-09-20 | libdraw: remove unneeded check (thanks BurnZeZ) | cinap_lenrek | |
2015-09-20 | devsd: handle SYNCHRONIZE CACHE scsi commands as nops in sdfakescsi() | cinap_lenrek | |
2015-09-20 | sdmmc: handle fakescsi emulation | cinap_lenrek | |
2015-09-20 | devsd: remove unused timeout field from SDreq | cinap_lenrek | |
2015-09-20 | libdraw, screenrc: bind devdraw and devmouse in screenrc instead of handling ↵ | cinap_lenrek | |
it in libdraw libdraw was attempting to bind '#i' and '#m' to /dev when it could not find /dev/mouse or /dev/draw. a library shouldnt be that clever and do namespace manipulations on behalf of the caller. so instead, we setup the graphics environment in screenrc on boot time. | |||
2015-09-20 | pc, pc64: fix sdvirtio descriptor count when sending flush | mischief | |
2015-09-19 | ircrc: add -P option for server password (thanks, nick) | stanley lieber | |
2015-09-16 | /sys/lib/dist/ndb/common: correct authdom=inri | stanley lieber | |
2015-09-14 | igfx: fix typos (thanks qwx) | cinap_lenrek | |
2015-09-14 | libsec: save some space making weakCipher bitamp of type char[] instead of int[] | cinap_lenrek | |
2015-09-14 | libsec: add TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 and ↵ | cinap_lenrek | |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 cipher suits | |||
2015-09-13 | libfis: fix wrong shift for lba40 (thanks geoff and charles) | cinap_lenrek | |
---------- Forwarded message ---------- From: Charles Forsyth <charles.forsyth@gmail.com> Date: 13 September 2015 at 12:38 Subject: fis bug To: erik quanstrom <quanstro@quanstro.net> geoff spotted something similar in sdiahci.c, but it's in libfis as well: c[Flba24] = lba >> 24; c[Flba32] = lba >> 32; c[Flba40] = lba >> 48; >> 48?? should be >> 40, especially with drive sizes getting up there. | |||
2015-09-13 | libsec: send sigature_algoritms extension for TLS1.2, order ciphers | cinap_lenrek | |
TLS1.2 requires the client to send the list of supported signature and hash algorithm pairs. some servers will simply reject the client hello otherwise. note that we do not implement any dh/ecdh param signature verification. order the cipher list to strogest first. aes128 is actually more secure than aes256. | |||
2015-09-12 | libsec: handle TLS 1.2 changes in CertificateRequest message | cinap_lenrek | |
2015-09-12 | cwfs: initialize /env/timezone on boot so dumps are in localtime | cinap_lenrek | |
when /env/timezone file is missing (boot case), copy /adm/timezone/local to /env/timezone so localtime() can correct timezone offset. | |||
2015-09-09 | mkfile.proto: LIB should not be inherited during recursive mk | mischief | |
2015-09-08 | html2ms: bold table headings, remove wrong tag space handling | cinap_lenrek | |
2015-09-08 | mothra: make text inside <td> bold | cinap_lenrek | |
2015-09-08 | tar: remove unneccesary { } | cinap_lenrek | |
2015-09-08 | tar: make z flag work, even when no file name was provided (thanks aiju) | cinap_lenrek | |
tar used to infer compression type from the filenames extension, but when no file name is given (stdin/stdout), the -z flag was ignored and no compression filter applied. this changes tar to assume the default gzip compression method when z is given and no file name is specified. | |||
2015-09-07 | mothra: add missing initializations for plaintext html state | cinap_lenrek | |
2015-09-06 | libthread: get rid of tprivalloc()/tprivfree()/tprivdata() and _workerdata() ↵ | cinap_lenrek | |
(thanks qrstuv) these functions where undocumented and unused. especially tprivfree() was buggy missing a unlock() call. theres not much point in supporting these functions as theres threaddata() and procdata(). | |||
2015-09-06 | libc: remove privfree(), simplify privalloc() | cinap_lenrek | |
2015-09-05 | devqspi: fix qunlock error on stat() -> close() | cinap_lenrek | |
2015-09-05 | zynq: clean cache unconditionally *before* dma, invalidate cache *after* dma ↵ | cinap_lenrek | |
for read case processor might bring data speculatively into the cache, before the dma completes. | |||
2015-09-05 | usbehci: clean cache unconditionally before handing a buffer to the hardware | cinap_lenrek | |
even in the read case, we need to clean the cache so the cpu will not flush out old changes while the hardware updates the buffer. | |||
2015-09-05 | dist/mkfile: add target for the aijuboard *.zynq.img | cinap_lenrek | |
this generates a disk image (to be written to usb or sdmmc card) containing 9fat partition with kernel and a hjfs filesystem partition with the 9front distribution. this could be easily extended to generate raspberry pi images as well, but i have no hardware to test. | |||
2015-09-05 | move screen and mouse setup code to /rc/bin/screenrc | cinap_lenrek | |
2015-09-05 | merge | cinap_lenrek | |
2015-09-05 | zynq: fix cache flush bug for emmc driver (have to invalidate cache *before* ↵ | cinap_lenrek | |
read) | |||
2015-09-03 | fortunes: Please be respectful in this forum. | stanley lieber | |
2015-09-03 | html2ms: handle subscripts and superscripts | cinap_lenrek | |
2015-09-03 | mothra: subscript and superscript support | cinap_lenrek | |
2015-09-02 | auth/passwd: fix structure zeroing order | cinap_lenrek | |
2015-09-02 | libsec: add rfc5869 hmac-based key derivation function hkdf_x() | cinap_lenrek | |
2015-09-02 | libsec: generalize pbkdf2_hmac_sha1() to pbkdf2_x() passing the hmac as an ↵ | cinap_lenrek | |
argument | |||
2015-09-02 | libsec: declare aes_setupEnc static | cinap_lenrek | |
2015-09-02 | tcp: fix mtu on server sockets again (thans mycroftix) | cinap_lenrek | |
for incoming connection, we used s->laddr to lookup the interface for the incoming call, but this does not work when the announce address is tcp!*!123, then s->laddr is all zeros "::". instead, use the incoming destination address for interface mtu lookup. thanks mycroftix for troubleshooting! | |||
2015-09-01 | libsec: add curve25519 diffie hellman | cinap_lenrek | |
2015-09-01 | libsec: remove flawed aes() digest and hmac_aes() implementations (thanks aiju) | cinap_lenrek | |
2015-08-28 | libsec: work arround 8c running out of registers compiling curve25519.c | cinap_lenrek | |
2015-08-28 | libsec: add curve25519() from http://code.google.com/p/curve25519-donna/ | cinap_lenrek | |
this is a portable version of curve25519() by google. | |||
2015-08-28 | merge | cinap_lenrek | |