| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2018-01-27 | upas/fs: try to deal with nil mail body (can happen when fetch fails) | cinap_lenrek | |
| 2018-01-25 | upas/fs: deal with imap returning more uid's than allocated from previus ↵ | cinap_lenrek | |
| "messages" command | |||
| 2018-01-22 | ip/pptpd: don't mess with ipifc (handled by ppp), slay note gorup on exit | cinap_lenrek | |
| 2018-01-22 | ip: make pkt interfaces unbind on close (from inferno) | cinap_lenrek | |
| 2018-01-21 | ppp: remove left over debug print | cinap_lenrek | |
| 2018-01-21 | ppp: mschapv2 support | cinap_lenrek | |
| 2018-01-21 | libauth: add auth_respondAI() function to get AuthInfo for mschap/mschapv2 | cinap_lenrek | |
| 2018-01-21 | factotum: implement mschapv2 role=server authentication (for ppp) | cinap_lenrek | |
| this implements the server part of mschapv2 with the new authserver changes. we also provide AuthInfo for the client now with the MPPE secret and the authenticator. | |||
| 2018-01-21 | authsrv: implement mschapv2 authentication, include MPPE secret in the ticket | cinap_lenrek | |
| this adds new rpc for mschapv2 authentication (21) deliver the MPPE secret not after the ticket/authenticator response as cheartext, but include it in the first 128 bit of the ticket key. and the authenticator in the first 160 bit of the authenticator random field. | |||
| 2018-01-20 | gre: don't drop pptp packets when smaller than v4 header | cinap_lenrek | |
| 2018-01-16 | ip/ipconfig: use 2000::/3 instead of ::/0 for v6 default route | cinap_lenrek | |
| the ::/0 route has the bad side effect of breaking v4 connections when theres no default route due to v6 mapped v4 addresses. this might be temporary measure. | |||
| 2018-01-16 | p/ipconfig: don't put automatic link-local address configuration in /net/ndb | cinap_lenrek | |
| 2018-01-16 | set router R-flag when sendra is active for neighbor advertisement | cinap_lenrek | |
| windows 7 just drops the default router when it tries to probe for router reachability but gets a neighbor avertisement from the router with the router bit clear. so set the R-flag when sendra is active, which implies that we are a router. | |||
| 2018-01-15 | authsrv: fix chap | cinap_lenrek | |
| use OCHAPREPLYLEN instead of sizeof(reply) (no padding). exit after sending ticket response to force eof as factotum unconditionally reads tailing secret hash (as of mschap). | |||
| 2018-01-14 | ip/ipconfig: add v6 deault route from router advertisements | cinap_lenrek | |
| 2018-01-14 | listen(8): add -a option to restrict announce address, document tcp17019 and ↵ | cinap_lenrek | |
| tcp17020 | |||
| 2018-01-13 | ether79c970: dont disable promisc mode when multicast table is not empty | cinap_lenrek | |
| 2018-01-13 | ether82557: don't turn off promisc mode when mcast table is not empty | cinap_lenrek | |
| the driver doesnt implement multicast filter, but just turns on promiscuous mode when a multicast address is added. but this breaks when one actually enables and then disables promiscuous mode with say, running snoopy. we have to keep promisc mode active as long as multicast table is not empty. | |||
| 2018-01-12 | wifi: learn target ip address from neighbor advertisements in dmat proxy | cinap_lenrek | |
| 2018-01-12 | wifi: filter out loopback traffic from myself | cinap_lenrek | |
| broadcast traffic was received back on the wire causing duplicate address detection to break with dmat proy as the rewritten broadcasts where observable. the fix is to just ignore packets from ourselfs received from the air. devether already handles loopback. | |||
| 2018-01-10 | ip/ipconfig: set on-link flag in router advertisement prefix info (fixes ↵ | cinap_lenrek | |
| windows7) | |||
| 2018-01-08 | ether8169: deal with kernel memory exhaution | cinap_lenrek | |
| when kernel memory is exhausted, rtl8169replenish() can fail to plant more receive descriptors and rtl8169receive() would run over the receive tail and crash on the nil ctlr->rb[x]. rtl8169receive() is called on "Receive Descriptor Unavailable" and "Packet Underrun" so we will try to replenish descriptors in the beginning first in case memory was exhausted and memory is available again and make sure not to run over the tail. | |||
| 2018-01-07 | forgot to commit asn1dump.c... | cinap_lenrek | |
| 2018-01-06 | venti: fix wrong channel element size for amd64 (thanks mycroftiv) | cinap_lenrek | |
| 2018-01-06 | tlssrv: remove usage reference to lost auth/secretpem | cinap_lenrek | |
| 2018-01-06 | factotum: remove unused sshrsa.c | cinap_lenrek | |
| 2018-01-06 | libsec: remove asn1toDSApriv() | cinap_lenrek | |
| 2018-01-06 | remove asn12dsa, dsa2pub, dsa2ssh and dsagen | cinap_lenrek | |
| was mostly usefull for old ssh. | |||
| 2018-01-06 | auth/asn1dump: include in mkfile | cinap_lenrek | |
| 2018-01-06 | tlsclient: allow dumping the server's certificate with new -d flag | cinap_lenrek | |
| usefull for debugging, like: ./8.tlsclient -d /fd/3 tcp!code.9front.org!https |[0=3] auth/asn1dump | |||
| 2018-01-06 | tlsclient: remove X509dump() call, writes to fd 1 | cinap_lenrek | |
| 2018-01-05 | stats: show amount of reclaimable pages (add -r flag) | cinap_lenrek | |
| reclaimable pages are user pages that are used for caches like the image cache, mount cache and swap cache. | |||
| 2018-01-04 | pc kernel: fix wrong simd exception mask (fixes go bootstrap) | cinap_lenrek | |
| 2018-01-02 | ape/libauth: remove auth_wep.$O from mkfile | cinap_lenrek | |
| 2018-01-02 | libauth: simplify _attrfmt() using fmtprint() avoiding stack buffer | cinap_lenrek | |
| 2018-01-02 | libauth: remove auth_wep() function, and non-existing httpauth() declaration | cinap_lenrek | |
| 2018-01-02 | factotum: remove legacy wep protocol | cinap_lenrek | |
| 2018-01-01 | libauth: fix out of bounds memory access in _parseattr() | cinap_lenrek | |
| empty token would read ""[-1] accidentally in the AttrQuery case. | |||
| 2018-01-01 | factotum: replace custom hex parsing code with dec16() avoding timing side ↵ | cinap_lenrek | |
| channels | |||
| 2017-12-31 | libmp: use constant time encode(2) routines instead of lookup tables | cinap_lenrek | |
| the encode(2) routines are constant time now, so use them instead of using lookup table that can leak information through cache timing side channel. | |||
| 2017-12-31 | ape: make encXchr()/decXchr() functions available | cinap_lenrek | |
| 2017-12-31 | libc: constant time implementation for encode(2) routines, fix base32 | cinap_lenrek | |
| the string encoding functions touch secret key material in a bunch of places (devtls, devcap), so make sure we do not leak information by cache timing side channels, making the encoding and decoding routines constant time. we also expose the alphabets through encXchr()/decXchr() functions so caller can find the end of a encoded string before calling decode function (for libmp). the base32 encoding was broken in several ways. inputs lengths of len%5 == [2,3,4] had output truncated and it was using non-standard alphabet. documenting the alphabet change in the manpage. | |||
| 2017-12-31 | wifi: get rid of custom hextob() routine, use dec16(), avoid copies in ↵ | cinap_lenrek | |
| parsekey() | |||
| 2017-12-31 | aux/wpa: get rid of custom Hfmt() routine, just use encodefmt. use %E for ↵ | cinap_lenrek | |
| mac addresses | |||
| 2017-12-30 | libsec: implement SPKI fingerprinting for okCertificate() | cinap_lenrek | |
| Instead of only using a hash over the whole certificate for white/black-listing, now we can also use a hash over the Subject Public Key Info (SPKI) field of the certificate which contians the public key algorithm and the public key itself. This allows certificates to be renewed independendtly of the public key. X509dump() now prints the public key thumbprint in addition to the certificate thumbprint. tlsclient will print the certificate when run with -D flag. okCertificate() will print the public key thumbprint in its error string when no match has been found. | |||
| 2017-12-30 | libsec: fix mistake: strnchr -> strchr | cinap_lenrek | |
| 2017-12-30 | libsec: avoid unneccesary memory copies and redundant code in x509 | cinap_lenrek | |
| getting rid of some functions that take Byte* and instead pass uchar* and length. keeping the signature and public key fields in CertX509 as Bits* allows ownership transfer by swapping pointers. use common code to copy CN from subject field. | |||
| 2017-12-29 | libsec: get rid of dummy data[1] in Bytes and Ints types (thanks pr) | cinap_lenrek | |
| 2017-12-29 | usbxhci: add missing pexit() in xhcirecover proc (thanks sam-d) | cinap_lenrek | |
| 2017-12-29 | wifi: revert rate adoption divider, breaks arpunks wifi | cinap_lenrek | |
 |
index : plan9front.git | |
| Unnamed repository; edit this file 'description' to name the repository. |
| summaryrefslogtreecommitdiff |