./wiresep -d -vv master[25128]: 25128
master[25128]: enclave 4:6 master[25128]: proxy 8:9 master[25128]: tun0 master 3:4, enclave 5:6, proxy 7:8 master[25128]: config sent to enclave 4 master[25128]: config sent to proxy 8 proxy[19229]: enclave[46390]: 1922946390 master[25128]: config sent to tun0 3 tun0[95120]: 95120 proxy[19229]: config received from 9 proxy[19229]: socket receive buffer: 524216 proxy[19229]: listening 192.168.1.110:1234 proxy[19229]: server sockets created: proxy[19229]: decreasing current data limit from 17179869184 to 2097152 proxy[19229]: decreasing maximum data limit from 17179869184 to 2097152 proxy[19229]: decreasing current fsize limit from 9223372036854775807 to 0 proxy[19229]: decreasing maximum fsize limit from 9223372036854775807 to 0 proxy[19229]: decreasing current memlock limit from 168908117 to 0 proxy[19229]: decreasing maximum memlock limit from 506724352 to 0 proxy[19229]: decreasing current nofile limit from 128 to 8 proxy[19229]: decreasing maximum nofile limit from 1024 to 8 proxy[19229]: decreasing current nproc limit from 542 to 0 proxy[19229]: decreasing maximum nproc limit from 542 to 0 proxy[19229]: decreasing current stack limit from 8388608 to 32768 proxy[19229]: decreasing maximum stack limit from 33554432 to 32768 enclave[46390]: config received from 6 enclave[46390]: decreasing current data limit from 17179869184 to 1048576 enclave[46390]: decreasing maximum data limit from 17179869184 to 1048576 enclave[46390]: decreasing current fsize limit from 9223372036854775807 to 0 enclave[46390]: decreasing maximum fsize limit from 9223372036854775807 to 0 enclave[46390]: decreasing current memlock limit from 168908117 to 0 enclave[46390]: decreasing maximum memlock limit from 506724352 to 0 enclave[46390]: decreasing current nofile limit from 128 to 7 enclave[46390]: decreasing maximum nofile limit from 1024 to 7 enclave[46390]: decreasing current nproc limit from 542 to 0 enclave[46390]: decreasing maximum nproc limit from 542 to 0 enclave[46390]: decreasing current stack limit from 8388608 to 32768 enclave[46390]: decreasing maximum stack limit from 33554432 to 32768 enclave[46390]: calloc ev: Cannot allocate memory master: child 46390 normal exit 1 proxy[19229]: received TERM, shutting down and when it works: ./wiresep -d -vv master[92457]: 92457 master[92457]: enclave 4:6 master[92457]: proxy 8:9 master[92457]: tun0 master 3:4, enclave 5:6, proxy 7:8 master[92457]: enclave[71015]: 71015 config sent to enclave 4 master[92457]: config sent to proxy 8 master[92457]: config sent to tun0 3 tun0[11040]: 11040 proxy[12374]: 12374 enclave[71015]: config received from 6 enclave[71015]: decreasing current data limit from 17179869184 to 1048576 enclave[71015]: decreasing maximum data limit from 17179869184 to 1048576 enclave[71015]: decreasing current fsize limit from 9223372036854775807 to 0 enclave[71015]: decreasing maximum fsize limit from 9223372036854775807 to 0 enclave[71015]: decreasing current memlock limit from 168908117 to 0 enclave[71015]: decreasing maximum memlock limit from 506724352 to 0 enclave[71015]: decreasing current nofile limit from 128 to 7 enclave[71015]: decreasing maximum nofile limit from 1024 to 7 enclave[71015]: decreasing current nproc limit from 542 to 0 enclave[71015]: decreasing maximum nproc limit from 542 to 0 enclave[71015]: decreasing current stack limit from 8388608 to 32768 enclave[71015]: decreasing maximum stack limit from 33554432 to 32768 proxy[12374]: config received from 9 proxy[12374]: socket receive buffer: 524216 proxy[12374]: listening 192.168.1.110:1234tun0[11040]: tun0 172.19.0.1/24 proxy[12374]: server sockets created: proxy[12374]: tun0[11040]: decreasing current data limit from 17179869184 to 2097152peer udp6 receive buffer: 524216 tun0[11040]: peer udp4 receive buffer: 524216proxy[12374]: decreasing maximum data limit from 17179869184 to 2097152 proxy[12374]: decreasing current fsize limit from 9223372036854775807 to 0 proxy[12374]: decreasing maximum fsize limit from 9223372036854775807 to 0 tun0[11040]: proxy[12374]: maclap allowedip 0.0.0.0/0decreasing current memlock limit from 168908117 to 0 proxy[12374]: decreasing maximum memlock limit from 506724352 to 0 tun0[11040]: proxy[12374]: maclap allowedip ::/0decreasing current nofile limit from 128 to 8 proxy[12374]: decreasing maximum nofile limit from 1024 to 8 tun0[11040]: proxy[12374]: config received from 4decreasing current nproc limit from 542 to 0 proxy[12374]: decreasing maximum nproc limit from 542 to 0 proxy[12374]: decreasing current stack limit from 8388608 to 32768 proxy[12374]: decreasing maximum stack limit from 33554432 to 32768 tun0[11040]: configuring tun0 tun0[11040]: tun0 created tun0[11040]: decreasing current data limit from 17179869184 to 2097152 tun0[11040]: decreasing maximum data limit from 17179869184 to 2097152 tun0[11040]: decreasing current fsize limit from 9223372036854775807 to 0 tun0[11040]: decreasing maximum fsize limit from 9223372036854775807 to 0 tun0[11040]: decreasing current memlock limit from 168908117 to 0 tun0[11040]: decreasing maximum memlock limit from 506724352 to 0 tun0[11040]: decreasing current nofile limit from 128 to 10 tun0[11040]: decreasing maximum nofile limit from 1024 to 10 tun0[11040]: decreasing current nproc limit from 542 to 0 tun0[11040]: decreasing maximum nproc limit from 542 to 0 tun0[11040]: decreasing current stack limit from 8388608 to 32768 tun0[11040]: decreasing maximum stack limit from 33554432 to 32768 tun0[11040]: could not find a suitable source address to connect to peer Den fre 15 nov. 2019 kl 02:47 skrev Stuart Henderson <s...@spacehopper.org>: > On 2019/11/15 00:39, Tim Kuijsten wrote: > > This is a new version of the port which fixes all my previous > > questions (thanks Bjorn Ketelaars for all the help). > > > > This is based on the final v0.8.2 which I released today and includes > > some additional tweaks and fixes (is the version number v0.8.2 > > semantically higher in ports compared to v0.8.2-rc.3?). > > 0.8.2 is semantically higher than 0.8.2rc3; the version number part in > ports can't have a - as that makes it treated like a flavour named > "rc.3". > > > Hope somebody can test or comment on it. > > > > For completeness a link to the homepage and a short description which I > > forgot to mention yesterday: https://github.com/timkuijsten/wiresep > > > > ============ > > WireSep is a privilege separated implementation of WireGuard for > > OpenBSD. > > > > WireGuard is a VPN that aims to be simpler and faster than IPsec > > and OpenVPN. Simpler both in configuration and in implementation. > > ============ > > - In 6.6+, PERMIT_PACKAGE_CDROM now needs to just be PERMIT_PACKAGE. > > - The example config share/examples/wiresep/wiresep.conf.example > would usually want to be followed by "@sample > ${SYSCONFDIR}/wiresep/wiresep.conf" > to copy it into the normal place - if not then there should be an > @extraunexec > to remove the file that users would create themselves. > > - pkg/README should follow the layout in templates/README.template. > > -- May the most significant bit of your life be positive.
