BSD Commit Log Search

   Handle the Emudhra intermediate cert compromise.
   See https://emudhra.we-have-a-problem.com/
   While likely all of Emudrha will be distrusted soon, currently
   a lot of India is using them. 8 intermediates under their CA3
   have publicly discoverable keys. the 9 others sign many sites.
   For now, remove CA3 from the trust store, thus distrusting all
   the intermediates it has signed, then add back the remaining
   9 uncompromised intermediates by "promoting" to a root, the
   usual intermediate elision technique.
   This enables real sites in india using these intermediates
   to still work. Assuming Emudhra ends up widely distrusted
   soon, we can remove these and the other roots after sites
   have had time to get new certificates.
   from beck@; OK tb@ sthen@

   dbupdate: Be consistent with name in messages.
   from dgl@; OK deraadt@

   force umask

    [45 lines not shown]

   Handle the Emudhra intermediate cert compromise.
   See https://emudhra.we-have-a-problem.com/
   While likely all of Emudrha will be distrusted soon, currently
   a lot of India is using them. 8 intermediates under their CA3
   have publicly discoverable keys. the 9 others sign many sites.
   For now, remove CA3 from the trust store, thus distrusting all
   the intermediates it has signed, then add back the remaining
   9 uncompromised intermediates by "promoting" to a root, the
   usual intermediate elision technique.
   This enables real sites in india using these intermediates
   to still work. Assuming Emudhra ends up widely distrusted
   soon, we can remove these and the other roots after sites
   have had time to get new certificates.
   from beck@; OK tb@ sthen@

   update cert.pem based on newer mozilla ca root store
   from sthen@; OK tb@

   dbupdate: Be consistent with name in messages.

    [48 lines not shown]

   Unfold short line

   Fix typo in err message

   OK tb@

   Simplify how entries in .nca_history are sorted

   "When did it break?" and "what broke?" really are the only two
   operationally relevant sorting properties for .nca_history.

   OK tb@

   Use generalized ca struct instead of ca_state for the NCA tree elements

   Suggested by claudio@

   OK tb@

   Acquire kqueue_ps_list_lock rwlock before the process search and found
   `pr' dereference. Otherwise found process can exit1() during context
   switch.

   Reported by Acts1631. ok claudio

   merge nsd 4.15.4

   import nsd 4.15.4, ok florian

   Fire window-layout-changed event when layout is changed by an option.

   Apply timeout to window size queries as well, GitHub issue 5777.

   rpki-client: report on non-canonically ordered addresses in ROAs

   This adds a warning (under verbose) if the ROAIPAddress families contain
   out of order elements. It also warns (always) if IPv6 comes before IPv4.
   The JSON output for ROAs in filemode grows a new noncanonical boolean.

   ok job

   Remove redundant evtimer_pending() and signal_pending() checks

   event_del() has no effect when an event is not pending, so there is no
   need to check its state before deleting timer and signal events in
   ldapd, radiusd, and vmd.

   These are mechanical cleanups with no change in event scheduling or
   callback behaviour.

   Reads OK florian@

   Remove redundant evtimer_pending() checks in routing daemons

   event_del() has no effect when an event is not pending, so there is no
   need to check its state before deleting timers in dvmrpd, eigrpd, ldpd,
   ospf6d, ospfd, and ripd.

   These are mechanical cleanups with no change in timer or protocol
   behaviour.

   Reads OK florian@

   Remove redundant evtimer_pending() check in tcpbench

   event_del() has no effect when an event is not pending, so there is no
   need to check its state before deleting the slice timer.

   This is a mechanical cleanup with no change in timer behaviour.

   Reads OK florian@

   Remove redundant evtimer_pending() checks before evtimer_del()

   event_del() has no effect when an event is not pending, so there is no
   need to check its state before deleting an initialized timer.

   This is a mechanical cleanup with no change in timer behaviour.

   OK florian@

   dbupdate: Be consistent with name in messages.

   ok deraadt

   When unveil was used with a chroot environment it was possible for
   unveil_find_cover to loop forever because it was missing a check for the
   rootvnode. This would only happen if references existed to directories
   outside the chroot, which correct chroot code must not do.

   ok deraadt

   httpd: only rekey TLS tickets for the first server on a socket

   With several TLS servers on the same address + port and
   "tls ticket lifetime" option set, httpd died on the first ticket rekey.

   The parent started a rekey timer for every server, but only the first
   one on a socket exists as a struct server in the server processes.
   Start the rekey timer only for that server.

   Reported by James J. Lippard on bugs@ and stsp@, thanks!

   ok stsp@, kirill@

   force umask

   comment on why cachedir is created

   manually detect if this release has no databases available (yet)
   with a nice error message compared to errexit

   Register clock interrupt with ih_number zero and remove way obsolete message
   attempting to explain why 1 had been chosen previously.

   softintr_schedule() being now a simple wrapper over send_softint(), drop it
   and rename send_softint() to softintr_schedule().

   All uses of send_softint are of the form (ih->ih_pil, ih). Drop the first
   argument since it can be easily obtained from the second one. Also drop the
   check for a NULL ih as this will never happen.

   Replace hardcoded 10 for clock interrupt level with matching symbolic constant.
   Remove dead comments.

   All the *tick_trigger() simply wrap sparc64_raise_clockintr(), invoke the
   latter directly.

   All the *tickintr() bodies are nowadays identical, keep only one.

   copyright

   must be run as root
   pointed out by florian