summaryrefslogtreecommitdiff
path: root/src/usr.sbin (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Print size_t's correctly.beck2017-05-081-3/+3
| | | | Fix from Jonas 'Sortie' Termansen <sortie@maxsi.org>
* Limit -Werror to gcc4 as was done in libcrypto/libssl/libtls to avoidjsg2017-05-071-3/+7
| | | | | | failed builds with different compilers. ok jsing@
* repair knf & whitespace that jumped out of the screen during reviewderaadt2017-03-271-23/+18
| | | | ok beck
* use a path of "/" if the URL does not include a trailing / - sincebeck2017-03-271-2/+5
| | | | | | the web server probably doesn't like it, even though you published the url without the trailing / in the certificate. (hello digicert!) ok claudio@
* Fail early if an ocep server returns a non-200 http response, there is nobeck2017-03-271-1/+4
| | | | point in trying to parse error pages as an ocsp response.
* recallocarray() for data buffer from the net.deraadt2017-03-261-3/+5
| | | | ok beck
* pledge stdio before parsing the http responsebeck2017-02-251-9/+11
| | | | ok tb@
* Add missing $OpenBSD$beck2017-02-201-0/+1
|
* Don't use <sys/param.h> from userland without cause. Sort <sys/*>guenther2017-02-031-3/+4
| | | | | | before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@
* netinet/in.h should be included, and freebsd and some othersbeck2017-02-012-2/+6
| | | | | don't have EAI_NODATA, so make this easier for people from bernard spill
* oscp -> ocsp;jmc2017-01-262-4/+4
| | | | from holger mikolon, plus one more in nc;
* Use numeric exit codes consistently rather than a mixbeck2017-01-261-11/+11
| | | | ok jsing@
* stylebeck2017-01-261-1/+1
|
* Fix the structure initialzation to compile. bad inioguchi and millert :)beck2017-01-261-1/+1
| | | | ok jsing@ rpe@
* Fix array initialization syntax for ocspcheck.cinoguchi2017-01-251-1/+1
| | | | | Conformance to C99, and avoiding build break on VisualStudio and HP-UX. OK millert@
* remove __BEGIN_DECLS and __END_DECLS from http.hinoguchi2017-01-251-5/+1
| | | | | sync with ocspcheck and acme-client ok benno@
* bring changes from acme-client over here.benno2017-01-251-56/+54
| | | | ok beck@
* correct usage format; ok beck claudio bennoderaadt2017-01-241-2/+3
|
* fix mode on open() and ftruncate(), noticed bybeck2017-01-241-2/+4
| | | | bcook@
* Say no to two line error messages on failurebeck2017-01-241-4/+3
|
* s/returns/exits/beck2017-01-241-2/+2
|
* Break run-on sentence into two.beck2017-01-241-3/+4
|
* string terminator is called a NULderaadt2017-01-242-5/+5
|
* Actually load the cafile when providede, and error message cleanupbeck2017-01-241-4/+4
|
* use warn, I have errno here. noticed by theobeck2017-01-241-1/+1
|
* Yes the "if (const == val" idiom provides some safety, but it grates onderaadt2017-01-241-58/+58
| | | | | us too much. ok beck jsing
* knfbeck2017-01-241-1/+2
|
* revert accidental commit of theo diffbeck2017-01-241-58/+58
|
* Just don't bother with OpenSSL error strings, they are mostlybeck2017-01-242-77/+71
| | | | irrelevant and look gross here anyway.. we don't need them
* various cleanup;jmc2017-01-242-29/+28
|
* slight cleanupsderaadt2017-01-241-4/+3
|
* s/exit/exist/ typobeck2017-01-241-2/+2
|
* New ocspcheck utility to validate a certificate against its ocsp responderbeck2017-01-245-0/+1634
| | | | | | and save the reply for stapling ok deraadt@ jsing@
* Move openssl(1) from /usr/sbin/openssl to /usr/bin/openssl, since it is notjsing2014-08-262-10438/+0
| | | | | | | | a system/superuser binary. At the same time, move the source code from its current lib/libssl/src/apps location to a more appropriate home under usr.bin/openssl. ok deraadt@ miod@
* Link dependencies on libssl and libcrypto were missing.guenther2014-07-271-2/+3
| | | | | | OPENSSL_NO_RC5 is #defined in the #includes, so it's not needed here. ok deraadt@
* Use Cm instead of Li for 'MASK:'guenther2014-07-221-2/+2
| | | | (Overlooked among jmc@'s other suggestions)
* Rewrite the description of the string_mask config file option to matchguenther2014-07-221-34/+30
| | | | | | reality, and reformatting to be readable. formatting and wording suggestions miod@ jmc@
* Warnings. I haz them.miod2014-07-021-2/+11
|
* Alexander Schrijver posted a diff to remove references to the c_rehash script,jmc2014-06-251-6/+5
| | | | | | which we don;t have in base. after some discussion with jca, i've not removed these references, but tried to make it clearer it's distributed with openssl and not included in base;
* Remove references to RANDFILE.jsing2014-06-021-19/+2
|
* Remove details regarding -rand from the openssl man page.jsing2014-06-021-123/+3
|
* define -DLIBRESSL_INTERNAL in here so we don't use nastiesbeck2014-05-291-2/+2
| | | | ok deraadt@
* sync openssl(1) with changes already made in src/lib/libssl/doc, reminded bysthen2014-05-181-5/+5
| | | | jmc: move from 1024 to 2048 bit key defaults; see genrsa.c 1.26 et al.
* Remove defined varibles that no longer do anything.jsing2014-04-251-3/+2
| | | | ok miod@
* no app_rand.ctedu2014-04-181-2/+2
|
* since e_os.h is dead, and e_os2.h is installed, we can fetch from there.deraadt2014-04-181-8/+2
| | | | This means we don't need the reach-around anymore.
* Make MONOLITH the default and only optionmatthew2014-04-171-2/+2
| | | | ok deraadt
* -Walltedu2014-04-171-1/+2
|
* Remove workarounds for ld reaching MAXDSIZ on vax, now that MAXDSIZ ismiod2014-04-151-5/+1
| | | | | more comfortable. Reminded by brad@
* Unhook httpd(8) from build; man page bitsflorian2014-03-131-10/+3
| | | | | | | tweaks jmc@ OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@ "The time is right." and much help getting the show on the road deraadt@