improve the gotd-secrets.conf syntax don't reuse the username as the label since it makes impossible to have multiple entries with the same username. ok stsp@

fix some typos with codespell(1); ok/tweaks tb@ and stsp@

sync files from diff.git edc37d001aae9784c6d575f08850d49139adf02f

in gotd.8, mention the need for gotd-secrets.conf more clearly

typo fix

require root-ownership of gotd-secrets.conf

apply realpath() to the gotd -s argument

allow gotd_secrets_free() to be called with NULL pointer; fixes gotd regress ok op@

gitwrapper: add dummy gotd_secrets_get() to satisfy the linker This function is the only reason we had to pull in secrets.c in gitwrapper, because it's needed for parse.y (even if it's never called.) ok stsp@

initial gotd-secrets.conf implementation This moves the handling of the secrets outside gotd.conf. There will be a few changes to this, committing it as-is to continue hacking in tree. ok stsp@

style

rename ibuf -> imsgbuf

gotd: unset notify user/pass too for symmetry

trailing whitespaces

gotwebd: unbreak tags rendering if qs->commit is set got_get_repo_tags interprets it as an index for the tags, i.e. to skip tags until one with that id is found. So we can't set qs->commit (intended to unbreak the README links) before it, we have to do it afterwards. ok stsp@

gotwebd: centralize the skip tag logic No need to do it twice, just make sure the tailq has the correct entries where it's generated, so in the render code we don't have to duplicate the logic. ok stsp@

set pointers to NULL after freeing in tog's view_close()

changing the strategy for casts ok stsp@

gotd: group the flags for re-exec under -T ok stsp@

portable: check for libcrypto unconditionally Don't exclude OpenBSD from checking for libcrypto; gotd still needs this.

portable: add check for libcrypto This is needed for gotd's got-notify-http libexec helper.

restore abort() calls in lib/hash.c In the spirit of commit b808e01085d775b284878dfeea5c06339a9f2ec2, restore the abort() call in got_hash_final_object_id() and add additional ones to cover other functions in this file. ok op@

insert wait instruction in tog log mark keymap test On slower machines, the test may fail due to capturing the screendump before the base commit marker is drawn. ok op@

quote the hmac secret in test script

make hmac failures detectable by regression tests