openbsd, branch OPENBSD_4_8

MFC:

2011-02-11T03:24:29+00:00

---------------------------- revision 1.8 date: 2011/02/10 22:40:27; author: djm; state: Exp; lines: +7 -1 fix for CVE-2011-0014 "OCSP stapling vulnerability"; ok markus@ jasper@ miod@ AFAIK nothing in base uses this, though apache2 from ports may be affected. ----------------------------

Security fix for CVE-2010-4180 as mentioned in http://www.openssl.org/news/secadv_20101202.txt.

2010-12-15T09:43:55+00:00

where clients could modify the stored session cache ciphersuite and in some cases even downgrade the suite to weaker ones. This code is not enabled by default. ok djm@

- Apply security fix for CVE-2010-3864.

2010-11-17T19:12:57+00:00

ok djm@ deraadt@

This commit was manufactured by cvs2git to create branch 'OPENBSD_4_8'.

2010-07-28T09:00:22+00:00

Sync hcreate(3) with NetBSD, adding some caveats.

2010-07-28T09:00:20+00:00

OK jmc

echo behaves differently in sh and csh, only handling C-style escapes

2010-07-25T07:51:39+00:00

in the former, so switch an example that needs them to use printf instead. From bcr at freebsd.org. ok halex@

getopt_long.c replaced getopt.c 6+ years ago; we can retire

2010-07-22T19:31:53+00:00

the REPLACE_GETOPT macro, at long last ok millert@

Document new unsetenv() error returns.

2010-07-06T20:52:00+00:00

From Nicolas Legrand ; ok jmc@

Fix the naming of interfaces and variables for rdomains and rtables

2010-07-03T04:44:51+00:00

and make it possible to bind sockets (including listening sockets!) to rtables and not just rdomains. This changes the name of the system calls, socket option, and ioctl. After building with this you should remove the files /usr/share/man/cat2/[gs]etrdomain.0. Since this removes the existing [gs]etrdomain() system calls, the libc major is bumped. Written by claudio@, criticized^Wcritiqued by me

getpeereid() can now be a library routine using getsockopt() with

2010-07-01T19:15:30+00:00

SOL_SOCKET and SO_PEERCRED, only issue being that it cannot return EFAULT for a page fault. The kernel code will soon be put into compat, and then in 10 years or so tedu will delete it. ok guenther millert