OpenBSD CVS

CVS log for src/usr.sbin/acme-client/fileproc.c


[BACK] Up to [local] / src / usr.sbin / acme-client

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.18 / (download) - annotate - [select for diffs], Mon Jul 12 15:09:20 2021 UTC (2 years, 10 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, HEAD
Changes since 1.17: +2 -2 lines
Diff to previous 1.17 (colored)

Change the error reporting pattern throughout the tree when unveil
fails to report the path that the failure occured on. Suggested by
deraadt@ after some tech discussion.

Work done and verified by Ashton Fagg <ashton@fagg.id.au>

ok deraadt@ semarie@ claudio@

Revision 1.17 / (download) - annotate - [select for diffs], Sun Jan 3 16:32:38 2021 UTC (3 years, 4 months ago) by florian
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.16: +14 -1 lines
Diff to previous 1.16 (colored)

Create .1 backup files when acme-client is going to overwrite a
certificate file.
These files are not terribly big and they might become helpful if one
re-creates a certificate with additional or removed domains and
whishes to revoke the old cert (this part needs a bit of work to make
it convenient to do).
OK sthen

Revision 1.16 / (download) - annotate - [select for diffs], Sun Jun 16 19:49:13 2019 UTC (4 years, 11 months ago) by florian
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.15: +12 -17 lines
Diff to previous 1.15 (colored)

Trade unveil(2) for chroot(2).
This uses less code and unveil(2) seems to be the better tool here.
The directory one chroots into needs to be carefully setup (they are
not) and comon wisedom is that root can break out of chroots.
There is probably nothing wrong with the chroot code because of pledge
but it still makes me feel uneasy.
input & OK on previous version mestre
OK on previous version deraadt
bug found, input & OK benno

Revision 1.15 / (download) - annotate - [select for diffs], Sun Jul 29 20:15:23 2018 UTC (5 years, 10 months ago) by benno
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.14: +42 -53 lines
Diff to previous 1.14 (colored)

replace hand-rolled tmp files with mkstemp()
ok florian@ back in april, reminded by theo.

Revision 1.14 / (download) - annotate - [select for diffs], Tue Jan 24 13:32:55 2017 UTC (7 years, 4 months ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.13: +8 -8 lines
Diff to previous 1.13 (colored)

Make returns consistent and remove parentheses per style(9).

Transformed with coccinelle.

Requested by and ok tb@

Revision 1.13 / (download) - annotate - [select for diffs], Tue Jan 24 12:53:52 2017 UTC (7 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored)


Complete jsing's coccinelle cleanup... by hand
ok jsing

Revision 1.12 / (download) - annotate - [select for diffs], Tue Jan 24 12:05:14 2017 UTC (7 years, 4 months ago) by jsing
Branch: MAIN
Changes since 1.11: +12 -12 lines
Diff to previous 1.11 (colored)

Replace comparisons between a constant or enum and an expression, with
a comparison between the expression and the constant or enum. This
significantly improves readability.

Transformed with coccinelle.

Requested by deraadt@

Revision 1.11 / (download) - annotate - [select for diffs], Tue Jan 24 07:59:54 2017 UTC (7 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (colored)

string terminator is called a NUL

Revision 1.10 / (download) - annotate - [select for diffs], Sat Jan 21 12:54:10 2017 UTC (7 years, 4 months ago) by florian
Branch: MAIN
Changes since 1.9: +12 -8 lines
Diff to previous 1.9 (colored)

it is ok to only specify a full chain certificate
OK benno

Revision 1.9 / (download) - annotate - [select for diffs], Sat Jan 21 08:54:26 2017 UTC (7 years, 4 months ago) by florian
Branch: MAIN
Changes since 1.8: +63 -28 lines
Diff to previous 1.8 (colored)

Split certificate file from config file into certdir and certfile.
This way we can still chroot to certdir but the the certificate file
is not fixed to "cert.pem".

Writing of chain.pem and fullchain.pem is currently broken with this.

OK benno

Revision 1.8 / (download) - annotate - [select for diffs], Sat Jan 21 08:53:10 2017 UTC (7 years, 4 months ago) by florian
Branch: MAIN
Changes since 1.7: +1 -4 lines
Diff to previous 1.7 (colored)

remove unused vars; OK benno

Revision 1.7 / (download) - annotate - [select for diffs], Sat Jan 21 08:52:30 2017 UTC (7 years, 4 months ago) by florian
Branch: MAIN
Changes since 1.6: +2 -38 lines
Diff to previous 1.6 (colored)

Remove backup option. This is not acme-client's business; also it gets
in the way.
OK benno

Revision 1.6 / (download) - annotate - [select for diffs], Tue Sep 13 17:13:37 2016 UTC (7 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.5: +7 -10 lines
Diff to previous 1.5 (colored)

A small amount more KNF to make this easier on our eyes.  Not going further
than this.
ok florian

Revision 1.5 / (download) - annotate - [select for diffs], Tue Sep 13 16:49:28 2016 UTC (7 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.4: +5 -9 lines
Diff to previous 1.4 (colored)

hoist local variable initialization directly into the definitions,
rather than doing it right afterwards.
ok florian

Revision 1.4 / (download) - annotate - [select for diffs], Thu Sep 1 00:35:21 2016 UTC (7 years, 9 months ago) by florian
Branch: MAIN
Changes since 1.3: +1 -4 lines
Diff to previous 1.3 (colored)

we don't have config.h

Revision 1.3 / (download) - annotate - [select for diffs], Thu Sep 1 00:21:36 2016 UTC (7 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +15 -4 lines
Diff to previous 1.2 (colored)

Collapse krazy abstractions for other sandbox models, using chroot and
pledge directly as needed.
ok florian

Revision 1.2 / (download) - annotate - [select for diffs], Wed Aug 31 23:00:17 2016 UTC (7 years, 9 months ago) by benno
Branch: MAIN
Changes since 1.1: +19 -19 lines
Diff to previous 1.1 (colored)

whitespace

Revision 1.1 / (download) - annotate - [select for diffs], Wed Aug 31 22:01:42 2016 UTC (7 years, 9 months ago) by florian
Branch: MAIN

Import Kristaps' letskencrypt and call it acme-client in tree.
OK to get it in deraadt@ (and probably beck@)

At least deraadt@, beck@ and otto@ are fine with the name and the
disagreements stopped.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.