validating the syntax of base system manual pages

Hi, this mail is a heads-up regarding some changes to the syntax validation of base system manual pages. It is relevant to people who sometimes edit manuals or often run builds. Yesterday, i fixed the last handful of cases where mandoc(1) used to throw FATAL errors. That is, since today, if man

Re: syslog over TLS

On Fri, Jan 16, 2015 at 01:46, Alexander Bluhm wrote: > Hi, > > This diff enables sending syslog messages over TLS. > > To implement the buffer layer, I have copied evbuffer.c from libevent > and changed TCP to TLS where necessary. This way I made a buffertls > wrapper around bufferevent. This

syslog over TLS

Hi, This diff enables sending syslog messages over TLS. To implement the buffer layer, I have copied evbuffer.c from libevent and changed TCP to TLS where necessary. This way I made a buffertls wrapper around bufferevent. This might be integrated into libevent later. It still has some limitati

Re: cleanup sys/crypto/des.h

On Thu, Jan 15, 2015 at 15:11, Ted Unangst wrote: > Almost of the entirety of des.h is useless userland prototypes (some for > perl5!). There's also some junk that can be excised from des_locl.h. > Then the two or three things that matter can simply be put in > des_locl.h and we're one header light

Re: Clarification on bgpd behaviour

That is correct, all routers share a /28 segment, r1 talks with upstream1 and upstream2, r2 talks with upstream1 and upstream2 each with its own private AS. Tomorrow i'll try your suggestions and report back. Thank you, Pedro Caetano On Thu, Jan 15, 2015 at 11:12 PM, Claudio Jeker wrote: > On

Re: Clarification on bgpd behaviour

On Thu, Jan 15, 2015 at 10:38:50PM +, Pedro Caetano wrote: > Hi I have setup openbsd routers running dual homed with another pair of > upstream routers announcing a default route. > Each router has two interfaces, egress and ingress. > r1 - openbsd1 > r2 - openbsd2 > r3 - upstream1 > r4 - upstr

no errata for 2015-01-08 openssl advisory

After some review of the issues fixed in the latest OpenSSL release, we will not be publishing errata for them. Referring to: https://www.openssl.org/news/secadv_20150108.txt Several of the reported issues are in code removed from 5.6, and the remainder appear to be low impact. They will of cours

Clarification on bgpd behaviour

Hi I have setup openbsd routers running dual homed with another pair of upstream routers announcing a default route. Each router has two interfaces, egress and ingress. r1 - openbsd1 r2 - openbsd2 r3 - upstream1 r4 - upstream2 vio0 is the external interface uses a /28 network to talk ibgp with two

remove include/des.h

Nothing uses it, apart from a false positive in pppd. I can imagine some ports still include this header, although I'm not sure what good it does. None of the symbols declared exists anywhere. I suspect they were all fixed to use libcrypto EVP interfaces, but maybe a straggler include "des.h" was

cleanup sys/crypto/des.h

Almost of the entirety of des.h is useless userland prototypes (some for perl5!). There's also some junk that can be excised from des_locl.h. Then the two or three things that matter can simply be put in des_locl.h and we're one header lighter. Index: des.h

remove disabled chapms from pppd

This code doesn't build (CHAPMS not defined), and it contains unspeakable DES horrors, so I'd like to remove it entirely. Index: chap.c === RCS file: /cvs/src/usr.sbin/pppd/chap.c,v retrieving revision 1.17 diff -u -p -r1.17 chap.c --

Re: Remove more .Tn markup from manpages

Hi Jan, Jan Stary wrote on Thu, Jan 15, 2015 at 10:31:54AM +0100: > The following diff removes .Tn from bin, games, libm, libexec, > and a few assorted places; replaces some .Tn with .Dv if they are. Committed, thanks. Ingo

Re: ASLR bypass on OpenBSD-5.6

On Wed, Jan 14, 2015 at 5:52 PM, Theo de Raadt wrote: > And what breaks? > > Did you do an assessment? > > Hypothetically, if we do this and it improves security but breaks > mplayer or firefox and people are forced to run some other system > instead, is it then a security improvement? Indeed.

PATCH: NAT on IPSec

Hello folks, This patch brings nat capabilites into iked, the same way that mpf@ did with isakmpd about 6 years ago. Comments ? Tested with the following setup, with icmp, udp and tcp: >> Local pf.conf: table { 172.23.0.0/23 } set skip on lo match out on enc0 from ! to nat-to 172.23.50.1

Re: libpcap use after free

On 15 January 2015 at 03:53, Lawrence Teo wrote: > libpcap has a use after free (found via LLVM). > > pcap_close() currently looks like this: > > void > pcap_close(pcap_t *p) > { > if (p->opt.source != NULL) > free(p->opt.source); > pcap_cleanup_bpf(p); > fr

axen(4): two small changes

Hi, 1) axen_cmd() returns int instead of usbd_status. 2) the ifp variable in axen_tick_task() is not used so delete it. Cheers, Fabian Index: if_axen.c === RCS file: /cvs/src/sys/dev/usb/if_axen.c,v retrieving revision 1.10 diff -u

Remove more .Tn markup from manpages

Ingo, recently you removed .Tn from stdio: On Jan 13 07:02:30, schwa...@cvs.openbsd.org wrote: > Modified files: > lib/libc/stdio : fgetln.3 fgetwln.3 fopen.3 fputs.3 funopen.3 >printf.3 tmpnam.3 > Log message: > remove .Tn from stdio manuals; Kaspars Bankovskis fou