1. 21 Jun, 2018 1 commit
  2. 12 Jan, 2018 3 commits
  3. 30 Oct, 2017 1 commit
  4. 12 Oct, 2017 1 commit
  5. 30 Aug, 2017 2 commits
  6. 23 Aug, 2017 1 commit
  7. 21 Aug, 2017 2 commits
    • David Johnson's avatar
      Improve logging of m2crypto exceptions. · 97d9ad15
      David Johnson authored
      m2crypto's default SSLServer.handle_error function was just printing to
      stdout; that is an easy fix.  However, what is hard is associating the
      Exception with a client_address due to the
      socket/M2Crypto.SSL.Connection abstraction abuse.  Lots of stuff
      happens in Connection.accept(), and if an Exception is raised in there,
      no client_address is returned to the caller (i.e. handle_request()).
      m2crypto does a real disservice by overlaying the socket API and thus
      masking so many customization points that any real user would want to use.
      97d9ad15
    • David Johnson's avatar
      Adjust client SSL timeout and default again. · fd4dedfe
      David Johnson authored
      Bump the SSL accept phase to 3 seconds to be a tad more gracious to
      legitimately-slow clients.  Also restore the default SSL timeout to None
      (i.e. whatever the underlying default timeout is).
      fd4dedfe
  8. 19 Aug, 2017 1 commit
  9. 18 Aug, 2017 1 commit
  10. 17 Aug, 2017 1 commit
  11. 01 Jun, 2017 3 commits
  12. 17 Apr, 2017 1 commit
  13. 22 Sep, 2016 1 commit
    • Mike Hibler's avatar
      By default, print out less info in showlease. · a309b898
      Mike Hibler authored
      The name always overran its field so all of the columns were out of alignment
      and the lines too long and it was just a mess. So by default just print out
      the basic stuff. Use '-l' to get the old, complete output.
      a309b898
  14. 31 May, 2016 1 commit
  15. 19 Mar, 2016 1 commit
  16. 03 Feb, 2016 1 commit
  17. 29 Oct, 2015 1 commit
  18. 18 Aug, 2015 2 commits
  19. 17 Aug, 2015 1 commit
  20. 29 Jul, 2015 1 commit
  21. 24 Jun, 2015 1 commit
    • Mike Hibler's avatar
      Updates for new FreeBSD 10.1 based servers. · 480fdc70
      Mike Hibler authored
      Big changes a comin' to try to get us back on the supported path.
      
       * perl 5.14 -> 5.20
       * mysql 5.1 -> 5.5
       * php 5.4   -> 5.6
       * tcl 8.4   -> 8.6
       * number of vim patches up to 683.
      
      Not everything tested yet, but getting there.
      
      Specific changes:
      
       * New install/ports directory. New packages for FreeBSD 10.1 are version
         6.1. Cleaned up the ports' Makefiles getting rid of conditionals for
         all older versions. Also got rid of ports we don't use. Old ports tree
         is now install/oports.
      
       * Install script changes. Make sure /usr/bin/perl and /usr/local/bin/python
         links exist. Ports no longer make these but we use them in '#!'. Changes
         to mysql install and startup script--mysql has changed a LOT since we did
         the support in 4.x. Create syslog entry for named.log. Make sure php.conf
         loads the legacy "mysql" module rather than using "mysqli".
      
       * Elabinelab support. reflect new packages, remove all old packages
         (except perl) before installing new versions, install "extras" package,
         make sure sendmail cert get regenerated, make sure /usr/bin/perl link
         exists, make sure /usr/local/bin/python link exists.
      
       * Custom ports. otcl and xerces-c2 have both been removed from the ports
         tree as of Q2 2015. ipmitool-devel is a port for the latest version of
         ipmitool. The FreeBSD port is still a rev behind here. We need the
         newer version as it appears to make our SOL consoles more stable.
      
       * Random. Fixed prerender as neato output has changed again. Tweak to
         sslxmlrpc_server to reflect change in an underlying library. Tweak to
         db/libdb.py.in to turn on autocommit which matters now as mysql 5.5 will
         hang on a metadata lock otherwise. Remade eventsys perl/python stubs
         with SWIG 2.0. SWIG 1.3 did not produce working stubs for perl 5.20.
      
      Specific un-changes:
      
       * Apache is still at 2.2. I lack the guts and skilz to upgrade to 2.4.
      
       * Xerces library is still at (now unsupported) 2.8. Assign will need
         changes before we can move to 3.x.
      
       * Python is still 2.7.
      
      Thanks to Keith Sklower for all the work he did converting ports!
      480fdc70
  22. 27 Jan, 2015 1 commit
  23. 18 Nov, 2014 1 commit
  24. 28 Aug, 2014 1 commit
  25. 20 Aug, 2014 2 commits
  26. 28 Jul, 2014 1 commit
  27. 15 Jul, 2014 1 commit
    • Kirk Webb's avatar
      Add taint checks at various places to enforce node restrictions · 797f83dd
      Kirk Webb authored
      A bit overdue, but here they are.
      
      * Disallow image creation for any taint state on node/image
      * Disallow console access for "blackbox" and "useronly" states
      * Disallow node_admin for "blackbox" and "useronly" states
      
      TB Admins are exempt from these restrictions.
      797f83dd
  28. 10 Jul, 2014 1 commit
  29. 01 Jul, 2014 1 commit
  30. 12 Jun, 2014 1 commit
  31. 16 Apr, 2014 1 commit
  32. 30 Jan, 2014 1 commit