changelist: adds iked pub/private key ?

2016-04-19 Thread Sebastien Marie
Hi, I noted that iked(8) default key (generated at boot time by rc(8) if it doesn't exist yet) aren't present in changelist(5), whereas the same keys for isakmpd(8) are. Does adding /etc/iked/local.pub and /etc/iked/private/local.key to changelist(5) makes sens ? -- Sebastien Marie Index: cha

Re: Kill ipforward_rt

2016-04-19 Thread Claudio Jeker
On Tue, Apr 19, 2016 at 11:06:31AM +0200, Martin Pieuchot wrote: > This single cached route is a nice trick for having higher forwarding > numbers w/ benchmarks. But as soon as you start forwarding packets to > different end addresses, even using a single next hop, it becomes > useless. > > Since

Re: net.inet.tcp.baddynamic and portmap

2016-04-19 Thread Todd C. Miller
On Tue, 19 Apr 2016 22:37:34 +0100, Stuart Henderson wrote: > in_baddynamic() is being called with the port in network-order, so it > doesn't check correctly. I was nearly there, and Todd saved me from > embarassing myself by sending out a diff with ntohs(localport) in ;) This makes the in_baddyn

Re: net.inet.tcp.baddynamic and portmap

2016-04-19 Thread Stuart Henderson
On 2016/04/19 21:32, Stuart Henderson wrote: > Is net.inet.tcp.baddynamic expected to apply to programs using portmap? Answer: yes. in_baddynamic() is being called with the port in network-order, so it doesn't check correctly. I was nearly there, and Todd saved me from embarassing myself by sendi

sdio fixes

2016-04-19 Thread Mark Kettenis
The Lenovo Ideacentre Stick 300 I recently acquired has a Realtek RTL8723BS wireless chip which uses an SDIO interface. This made me look at our SDIO support code again. I noticed that reading the per-function CIS wasn't implemented, so I wrote the missing code. The diff below fixes a couple of

numerous statfs bugs

2016-04-19 Thread Martin Natano
There seem to be a number of issues with statfs related code in the kernel. The first issue is inside of the copy_statfs_info() function which is designed to be used by the filesystem's .vfs_statfs implementations to copy data from mp->mnt_stat to the target stat buffer. copy_statfs_info() always c

net.inet.tcp.baddynamic and portmap

2016-04-19 Thread Stuart Henderson
Is net.inet.tcp.baddynamic expected to apply to programs using portmap? $ sysctl net.inet.tcp.baddynamic | grep -c ,993, 1 $ fstat | grep 993 root rpc.statd 847794* internet stream tcp 0x0 *:993 $ rpcinfo -p | grep 993 1000241 tcp993 status

Re: APU1 ethernet LEDs

2016-04-19 Thread Stuart Henderson
On 2016/04/19 18:14, Stuart Henderson wrote: > On 2016/04/19 18:57, Christian Weisgerber wrote: > > Stuart Henderson: > > > > > Looking at unique "RTL8168E/8111E (0x2c00)" entries from dmesglog > > > back to Feb 2013, there are 7 APUs (=21 NICs), and 20 non-APUs. > > > Do we care if we change led

Re: ksh: \" inside double quoted `..`

2016-04-19 Thread Christian Weisgerber
On 2016-04-13, Christian Weisgerber wrote: >> I'll just quote ksh.1: >> >> o Occurrences of \" inside double quoted `..` command substitutions. >> In POSIX mode, the \" is interpreted when the command is interpreted; >> in non-POSIX mode, the backslash is stripped before the command

Re: APU1 ethernet LEDs

2016-04-19 Thread Mark Kettenis
> Date: Tue, 19 Apr 2016 18:57:47 +0200 > From: Christian Weisgerber > > Stuart Henderson: > > > Looking at unique "RTL8168E/8111E (0x2c00)" entries from dmesglog > > back to Feb 2013, there are 7 APUs (=21 NICs), and 20 non-APUs. > > Do we care if we change led state for those others too? We co

Re: APU1 ethernet LEDs

2016-04-19 Thread Theo de Raadt
> > Ideally, Pascal should fix this in the BIOS. :-( > > Ideally it would have been found/fixed during beta - I'm not sure if > I'd be massively happy about the BIOS reprogramming the eeprom (which > the user might have already modified). If I were him I wouldn't want > to do more than providing a

Re: APU1 ethernet LEDs

2016-04-19 Thread Stuart Henderson
On 2016/04/19 18:57, Christian Weisgerber wrote: > Stuart Henderson: > > > Looking at unique "RTL8168E/8111E (0x2c00)" entries from dmesglog > > back to Feb 2013, there are 7 APUs (=21 NICs), and 20 non-APUs. > > Do we care if we change led state for those others too? We could > > check the MAC ve

Re: APU1 ethernet LEDs

2016-04-19 Thread Theo de Raadt
> Ideally, Pascal should fix this in the BIOS. :-( I encourage that direction.

Re: APU1 ethernet LEDs

2016-04-19 Thread Christian Weisgerber
Stuart Henderson: > Looking at unique "RTL8168E/8111E (0x2c00)" entries from dmesglog > back to Feb 2013, there are 7 APUs (=21 NICs), and 20 non-APUs. > Do we care if we change led state for those others too? We could > check the MAC vendor for 00:0d:b9, but I think this is unnecessary > complexi

Re: patch: acpitz: active cooling and notify 0x81

2016-04-19 Thread Mike Larkin
On Tue, Apr 19, 2016 at 11:18:33AM +0200, Sebastien Marie wrote: > Hi, > > As I got some feedback for this old thread, I would like to ressurect it > and ask for wider testing: does your fans still works correctly with the > patch ? > > I personnally ran with it since September 2014. > > > The

Re: tr.1 -s wording

2016-04-19 Thread Christian Heckendorf
Martin Natano wrote: > On Mon, Apr 18, 2016 at 07:11:46PM -0400, Christian Heckendorf wrote: > > Hi, > > After reading the man page description of tr -s, I couldn't understand > > what it meant to "squeeze" characters. It could be that 'squeeze' is a > > mnemonic for '-s' but it's not helpful as a

Re: libressl cert chain problem.

2016-04-19 Thread Martijn van Duren
On 12/22/15 14:56, Stuart Henderson wrote: > Could some libressl people look at this please? We have a problem where > the chain coming from a server roots from a certificate that isn't in > the root store, but an intermediary certificate *is* in the root store. > Thanks. I also just hit this bug

Re: tr.1 -s wording

2016-04-19 Thread Jason McIntyre
On Tue, Apr 19, 2016 at 09:25:36AM +0200, Martin Natano wrote: > On Mon, Apr 18, 2016 at 07:11:46PM -0400, Christian Heckendorf wrote: > > Hi, > > After reading the man page description of tr -s, I couldn't understand > > what it meant to "squeeze" characters. It could be that 'squeeze' is a > > mn

Re: Kill ipforward_rt

2016-04-19 Thread Mike Belopuhov
On 19 April 2016 at 11:06, Martin Pieuchot wrote: > This single cached route is a nice trick for having higher forwarding > numbers w/ benchmarks. But as soon as you start forwarding packets to > different end addresses, even using a single next hop, it becomes > useless. > > Since this single ca

Duplicate route lookups

2016-04-19 Thread Martin Pieuchot
These two chunks are equivalent so let's keep one. ok? Index: netinet6/ip6_forward.c === RCS file: /cvs/src/sys/netinet6/ip6_forward.c,v retrieving revision 1.88 diff -u -p -r1.88 ip6_forward.c --- netinet6/ip6_forward.c 19 Apr

patch: acpitz: active cooling and notify 0x81

2016-04-19 Thread Sebastien Marie
Hi, As I got some feedback for this old thread, I would like to ressurect it and ask for wider testing: does your fans still works correctly with the patch ? I personnally ran with it since September 2014. The acpitz problem was with active cooling (the ACPI subsystem that plays with fans depen

Kill ipforward_rt

2016-04-19 Thread Martin Pieuchot
This single cached route is a nice trick for having higher forwarding numbers w/ benchmarks. But as soon as you start forwarding packets to different end addresses, even using a single next hop, it becomes useless. Since this single cached route won't fly with multiple forwarding paths and it als

ifa_ifwithroute() fix

2016-04-19 Thread Martin Pieuchot
Mart Tõnso reported [0] a weird case related to the use of ifa_ifwithnet(). The problem is that ifa_ifwithroute() does not always use route entries but the poor's man routing table: ifa_ifwithnet(). This is misleading because one cannot understand why "# route add" is not coherent with "# route g

Re: ipsec/ipv6 refactor

2016-04-19 Thread Martin Pieuchot
On 16/04/16(Sat) 18:41, Markus Friedl wrote: > Hi, this matches the IPsec/IPv4 change I committed back in December, but > since I don't have extensive IPv6 setups it's still not committed. Please > test, give feedback and it will finally go into the next release. I hope it will go before the next

Re: tr.1 -s wording

2016-04-19 Thread Martin Natano
On Mon, Apr 18, 2016 at 07:11:46PM -0400, Christian Heckendorf wrote: > Hi, > After reading the man page description of tr -s, I couldn't understand > what it meant to "squeeze" characters. It could be that 'squeeze' is a > mnemonic for '-s' but it's not helpful as a technical explanation. Your di

Re: hoststat & purgestat

2016-04-19 Thread Theo Buehler
On Mon, Apr 18, 2016 at 10:27:10PM -0500, Edgar Pettijohn wrote: > I noticed these stragglers today and assumed I missed a step in an > upgrade then realized this laptop never had anything older than 5.8. > > Index: upgrade57.html > =