tap-and-drag on ALPS touchpads

The tap-and-drag gesture doesn't work reliably with the ALPS touchpads supported by pms. To make it work, it is necessary to start dragging immediately with the second touch, which doesn't always succeed. Increasing the tap timeout helps, but doesn't change the principle. The patch below solves t

Re: [Patch] smtpd.conf - change 'priorly' to 'beforehand'

On 2015-08-14, Gilles Chehade wrote: > On Thu, Aug 13, 2015 at 09:06:00AM +0100, Jason McIntyre wrote: >> On Thu, Aug 13, 2015 at 03:21:56AM +0100, Larry Hynes wrote: >> > This is a minor quibble, and possibly a purely personal one, but >> > 'priorly' is not really in common usage. >> > >> > Inde

ntpd: avoid useless clock_gettime() calls

The loop in ntp_main() calls getmonotime() and hence clock_gettime() more than it needs to. Since we only have second granularity there's no point in checking the time repeatedly. We could reduce the calls further by setting the value of "now" outside some of the TAILQ_FOREACH peer loop but since

binutils fix for Secure-PLT on powerpc

Turns out our binutils configuration for OpenBSD/powerpc is missing some bits that are needed for Secure-PLT support. Without this, ld is likely to crash if it sees an object file compiled with -msecure-plt. This also nails down the way the sections are laid out in the final executable and shared

Re: Update starttls(8) to use RSA examples

On Fri, 14 Aug 2015 22:10:20 +0200, Gilles Chehade wrote: > I don't think removing the compiled-in value is a good idea. I agree. > People can already load their own DH parameters from a file and having > safely generated compiled parameters as default fallback doesn't hurt. Aha, I missed the "

Re: Update starttls(8) to use RSA examples

On Fri, Aug 14, 2015 at 06:23:11AM -0600, Todd C. Miller wrote: > > Related to this: smtpd(8) has compiled-in 1024-bit DH parameters. > > This probably wants at least bumping to 2048 though I wonder if it > > might be better to remove the compiled-in value completely and > > require it to be read f

Secure-PLT ABI support for powerpc

The diff below adds support for the Secure-PLT ABI to ld.so. This is in addition to the support for the traditional BSS-PLT. Both are supported at the same time and executables that use the BSS-PLT can use shared libraries that use the Secure-PLT ABI and vice versa. I had to make a small functio

Re: [PATCH] pkg-config compare() fails for libevent (at least)

attila writes: > Jasper Lievisse Adriaanse writes: > >> On Thu, Aug 13, 2015 at 04:09:02PM -0500, attila wrote: >>> >>> Jasper Lievisse Adriaanse writes: >>> >>> > On Tue, Aug 11, 2015 at 01:20:24PM -0500, attila wrote: >>> >> Hello tech@, >>> >> >>> >> On the 6 Aug snap I ran into this iss

Re: [PATCH] pkg-config compare() fails for libevent (at least)

Jasper Lievisse Adriaanse writes: > On Thu, Aug 13, 2015 at 04:09:02PM -0500, attila wrote: >> >> Jasper Lievisse Adriaanse writes: >> >> > On Tue, Aug 11, 2015 at 01:20:24PM -0500, attila wrote: >> >> Hello tech@, >> >> >> >> On the 6 Aug snap I ran into this issue: >> >> >> >> $ pkg_inf

Re: cast -> satosin diff

On Fri, Aug 14, 2015 at 10:49:50AM -0400, David Hill wrote: > This replaces casts with the proper satosin/satosin6 calls. > with bluhm@ commited, thanks bluhm

Re: [Patch] smtpd.conf - change 'priorly' to 'beforehand'

On Thu, Aug 13, 2015 at 09:06:00AM +0100, Jason McIntyre wrote: > On Thu, Aug 13, 2015 at 03:21:56AM +0100, Larry Hynes wrote: > > This is a minor quibble, and possibly a purely personal one, but > > 'priorly' is not really in common usage. > > > > Index: smtpd.conf.5 > > =

Re: cast -> satosin diff

On 14/08/15(Fri) 10:49, David Hill wrote: > Hello - > > This replaces casts with the proper satosin/satosin6 calls. > with bluhm@ ok mpi@ > > Index: netinet/in_gif.c > === > RCS file: /cvs/src/sys/netinet/in_gif.c,v > retrieving re

Re: cast -> satosin diff

On Fri, Aug 14, 2015 at 10:49:50AM -0400, David Hill wrote: > Hello - > > This replaces casts with the proper satosin/satosin6 calls. > with bluhm@ OK bluhm@ > > Index: netinet/in_gif.c > === > RCS file: /cvs/src/sys/netinet/in_gif

pkg_add bugs fixed

I think I finally found the bug that was triggering on cups updates (the infamous +REQUIRED_BY not found error). I got a fix in -current (commit to Dependencies.pm), e.g., post 5.8. So if you still run into that issue on a -current system, I would really love to hear about that.

Re: ssh_config.5 sshd_config.5 - update cipher order

On Mon, Aug 10, 2015 at 10:10:18PM -0500, Brian Conway wrote: > This matches the current myproposal.h ordering with > chacha20-poly1305's promotion (and referenced in various release > notes). Please correct if I've misunderstood or misformatted. Thanks. > fixed, thanks. jmc > Index: usr.bin/ssh

cast -> satosin diff

Hello - This replaces casts with the proper satosin/satosin6 calls. with bluhm@ Index: netinet/in_gif.c === RCS file: /cvs/src/sys/netinet/in_gif.c,v retrieving revision 1.45 diff -u -p -r1.45 in_gif.c --- netinet/in_gif.c16 Jun

Re: Update starttls(8) to use RSA examples

On Fri, 14 Aug 2015 11:07:17 +0100, Stuart Henderson wrote: > Generally looks good but one thing I'm wondering about. > > > +.Dl # openssl genrsa -out /etc/ssl/private/mail.example.com.key 4096 > > +.Pp > > +This would generate a 4096-bit > > Is 4096-bit overkill? When we updated ssl(8) we settl

Re: Update starttls(8) to use RSA examples

Am Freitag, den 14.08.2015, 11:07 +0100 schrieb Stuart Henderson: > Is 4096-bit overkill? When we updated ssl(8) we settled on 2048-bit > though > that's more aimed at https where response time is more important. http://www.keylength.com/en/ gives an overview about the keylength recommendations o

Re: Update starttls(8) to use RSA examples

On 2015/08/13 17:20, Todd C. Miller wrote: > Some mail servers (notably gmail) have stoppped supporting TLS using > DSA keys. I've adapted the bits in smtpd.conf(5) to fit. Generally looks good but one thing I'm wondering about. > +.Dl # openssl genrsa -out /etc/ssl/private/mail.example.com.key