An empty file /var/account/acct in etc.tgz simplifies accounting.
OK deraadt@

Impose constraints on RPKI Trust Anchors

See https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-trust-anchors
for more information.

Tested for a few months.

OK tb@ claudio@

Hook up bgplgd. Uses _bgplgd user with id 71:71 add a rc.d script and
all the other rc plumbing.
OK deraadt@

switch(4) and switchd(8) are retiering. Unhook them from various
configuration files.
OK sthen@ kn@ patrick@

Retire OpenBSD/sgi.

OK deraadt@

descend into riscv64 dirs

ok deraadt@

install rc.d/resolvd

rc(8) bits for dhcpleased(8).
OK deraadt

Install /etc/examples/login_ldap.conf with proper mode and ownership.

tweak from deraadt@
ok martijn@ tb@

Install login_ldap.conf and register it into changelist and mtree/special.

ok tb@ (who had the same diff) & deraadt@

enter etc.powerpc64

retire rebound etc bits to the attic

a few depend:-related thingies that were still in.

okay millert@, tb@

sync names

Tweak rpki-client to create all 4 output file formats from a single
compute, based upon flags. OpenBGPD compatible format by default if
no options, to integrate with bgpd.conf and bgpctl reload. Ad

Tweak rpki-client to create all 4 output file formats from a single
compute, based upon flags. OpenBGPD compatible format by default if
no options, to integrate with bgpd.conf and bgpctl reload. Adapt
mtree and stuff. This will receive further refactoring...
ok benno job

show more ...

create a var/db/rpki-client/roa file with correct ownership so that
rpki-client(8) can deal with it (some upcoming changes...)

Nuke http captive portal detection; something better is coming.
OK otto

There is no reason why the TAL files are installed only readable by root
these are public files.
Agreed by deraadt@ (and florian@)

move tals to /etc, where they can be upgraded by a "sysupgrade" if
such a circumstance ever occurs.
ok job

socppc makes an extended visit to the bigbucket.
ok kettenis

Add an example unwind.conf.

Note that unwind(8) works without a config file in many (most?) cases.

This provides an example on how to use the captive portal detection
feature.
Input benno
Input & O

Add an example unwind.conf.

Note that unwind(8) works without a config file in many (most?) cases.

This provides an example on how to use the captive portal detection
feature.
Input benno
Input & OK sthen

show more ...

rc(8) bits for unwind(8); OK deraadt

Move acme-client.conf to examples. Since we no longer store the
agreement url in here we no longer need to updated it all the time.
OK deraadt

add rad.conf example

ok florian@

It's time to switch to rad(8); tested by many.
Unhook rtadvd from build.
OK deraadt, phessler