Re: LibreSSL 2.0.1 released - installation extra_mode

2014-07-14 Thread Toni Mueller
Hi Jan, On Sun, Jul 13, 2014 at 08:30:38PM +0200, Jan Engelhardt wrote: > On Sunday 2014-07-13 13:07, Bob Beck wrote: > >We have released an update, LibreSSL 2.0.1 > >As noted before, we welcome feedback from the broader community. > > Something that I have noticed is that the shared libraries

Re: First release of LibreSSL portable is available.

2014-07-11 Thread Toni Mueller
Hi, On Fri, Jul 11, 2014 at 12:21:12PM -0600, Bob Beck wrote: > The first release of LibreSSL portable has been released. LibreSSL > can be found in the LibreSSL directory of your favorite OpenBSD mirror. > > http://ftp.openbsd.org/pub/OpenBSD/LibreSSL has it, and other mirrors sounds great! W

Re: pxeboot hd0a:/bsd tries to nfs_boot...

2010-07-03 Thread Toni Mueller
Hi, On Mon, 28.06.2010 at 13:52:45 -0600, Nick Bender wrote: > First the problem. Once a machine is automatically installed we want to > change things so that it will boot from the hard drive. We have two > possibilities. ;} > The first is to arrange so that the machine will boot first from th

+ papers?

2010-04-29 Thread Toni Mueller
Hi, imho, the 'papers' collection has valuable information, and users are often enough referred to them for a better understanding about where the project is headed. But they are not very visible. The following patch is intended to give them better visibility: --- index.html.orig 2010-03-14

Re: problem understanding install.md and the shell in general [SOLVED]

2010-04-28 Thread Toni Mueller
Hi, thanks to all who pointed out that this was a classical PEBKAC. :| And sorry for the noise. -- Kind regards, --Toni++

problem understanding install.md and the shell in general

2010-04-27 Thread Toni Mueller
Hi, while playing with Nick Bender's auto-install stuff, I hit a problem: In src/distrib/i386/common/install.md, I see this code: NCPU=$(sysctl -n hw.ncpufound) ((NCPU > 1)) && { DEFAULTSETS="bsd bsd.rd bsd.mp" ; SANESETS="bsd bsd.mp" ; } Executing this during insta

Re: [patch] Re: hacking pfkey: a few questions

2010-04-15 Thread Toni Mueller
On Wed, 14.04.2010 at 16:14:32 +0200, Markus Friedl wrote: > yes, just writing an appropriate isakmpd.policy file should work:: > > Authorizer: "POLICY" > Conditions: app_domain == "IPsec policy" && > ( remote_filter != "000.000.000.000-255.255.255.255" ) -> "true"; I had configured this

Re: isakmpd & policy questions

2010-04-14 Thread Toni Mueller
Hi, On Tue, 13.04.2010 at 17:42:52 +0200, Toni Mueller wrote: > Authorizer: "mobile-certs" > Comment: need to list all certificates for mobile users in the licensees > section > Licensees: "DN:/Cert/Of/User1" || > "DN:/Cert/Of/User2&qu

isakmpd & policy, was: Re: [patch] Re: hacking pfkey: a few questions

2010-04-13 Thread Toni Mueller
Hi, [ still appropriate for tech@ ? ] [ Cc: list clipped - we are all on tech@, anyway, aren't we? ] On Tue, 13.04.2010 at 11:10:00 +0100, Stuart Henderson wrote: > flow esp in from 0.0.0.0/0 to somenetwork/24 type bypass > flow esp out from somenetwork/24 to 0.0.0.0/0 type bypass > flow esp in

Re: isakmpd: tiny patch

2010-04-13 Thread Toni Mueller
On Thu, 08.04.2010 at 08:52:12 +0100, Mark Lumsden wrote: > You want a yay? Give me a yay: > > http://marc.info/?l=openbsd-tech&m=127071264614038&w=2 > > aka: disklabel - 'P' option Ok, here you are: "yay"... > fairs fair. ?? Kind regards, --Toni++

Re: [patch] Re: hacking pfkey: a few questions

2010-04-13 Thread Toni Mueller
Hi Damien, On Tue, 13.04.2010 at 12:10:27 +1000, Damien Miller wrote: > On Mon, 12 Apr 2010, Toni Mueller wrote: > > with your comments, I have produceds a second version of the patch, > > which includes the following changes: > > IPsec isn't really my area, but some

Re: [patch] Re: hacking pfkey: a few questions

2010-04-12 Thread Toni Mueller
Hi, On Mon, 12.04.2010 at 09:37:18 +0200, Toni Mueller wrote: > On Mon, 12.04.2010 at 06:54:31 +0200, Bret S. Lambert > wrote: > > $ man 9 inet_ntoa > > man: no entry for inet_ntoa in section 9 of the manual. > > Patrick is right, though. I have to retract this sta

Re: [patch] Re: hacking pfkey: a few questions

2010-04-12 Thread Toni Mueller
Hi, with your comments, I have produceds a second version of the patch, which includes the following changes: On Sun, 11.04.2010 at 20:47:38 +0200, Toni Mueller wrote: > * No IPv6 support (I have no clue). * tried to add IPv6 support * Logging is still not very useful, but at least it d

Re: [patch] Re: hacking pfkey: a few questions

2010-04-12 Thread Toni Mueller
Hi, On Mon, 12.04.2010 at 06:54:31 +0200, Bret S. Lambert wrote: > On Sun, Apr 11, 2010 at 01:43:11PM -0700, patrick keshishian wrote: > > On Sun, Apr 11, 2010 at 09:40:45PM +0200, Toni Mueller wrote: > > > I already suspected something like this, but this behaviour is not &

Re: [patch] Re: hacking pfkey: a few questions

2010-04-11 Thread Toni Mueller
Hi Patrick, On Sun, 11.04.2010 at 11:58:54 -0700, patrick keshishian wrote: > inet_ntoa will return pointer to a static buffer. Each call > TO IT Will override thsi buffer with the new IP info. I already suspected something like this, but this behaviour is not documented in the man page. :( I

[patch] Re: hacking pfkey: a few questions

2010-04-11 Thread Toni Mueller
Hi, I've created a rough patch that should fix the immediate problem, but is certainly far from perfect (yet). Things to note: * No IPv6 support (I have no clue). * No useful error messages - I want to log data about the offending site, so admins can go after them. * For some reason I don't yet

Re: isakmpd: tiny patch

2010-04-08 Thread Toni Mueller
Hi, On Thu, 08.04.2010 at 07:24:26 +0100, Mark Lumsden wrote: > The behaviour your diff introduces isn't without precedence. I'm sorry, but I don't understand what you want to say. > Some daemons do this when starting, some don't. The patch will make isakmpd generate a log entry when it starts

isakmpd: tiny patch

2010-04-07 Thread Toni Mueller
Hello, while playing with isakmpd, I found that it would be nice to have a complement for the "isakmpd: exiting" log entry. Index: isakmpd.c === RCS file: /cvs/src/sbin/isakmpd/isakmpd.c,v retrieving revision 1.97 diff -u -r1.97 isak

hacking pfkey: a few questions

2010-04-02 Thread Toni Mueller
Hello, I'm currently hacking on /usr/src/sys/net/pfkey* because I urgently need to prevent the kernel from installing SAs with the value "default" for both sides. In case I got the terminology wrong, I need to prevent this situation, as it brings down networking completely: > 0/00

Re: uvm_map improvements

2010-04-01 Thread Toni Mueller
Hi, On Fri, 26.02.2010 at 00:31:35 -0700, Theo de Raadt wrote: > space when it is under high contention. But there is a massively > understated benefit that comes from filling the address space with > unallocated gaps. The gaps, though only on a page boundary, are > finding a lot of bugs. LOT

Re: suggested patch to httpd.conf in base

2010-03-13 Thread Toni Mueller
On Fri, 12.03.2010 at 13:28:07 -0700, kj...@pintday.org wrote: > > Very good suggestion, indeed. -20 I'm impartial, though, as I don't use the default configuration, anyway. I think it's rather a non-issue. > > Especially, if someone has a 'dangerous' file, a PHP Shell for instance, > > (a per

bsd.dep.mk: suggested change

2010-03-12 Thread Toni Mueller
Hello, I'd like "make tags" to be more verbose. Esp. I'd like to see data structures and macros being included: Index: bsd.dep.mk === RCS file: /cvs/src/share/mk/bsd.dep.mk,v retrieving revision 1.8 diff -u -r1.8 bsd.dep.mk --- bsd.

Re: UTF-8 and locale support

2010-01-18 Thread Toni Mueller
Hello, On Thu, 17.12.2009 at 12:43:33 +0100, Artur Litwinowicz wrote: >I would like to ask about potential plans regarding UTF-8 in locales > support. ;} >The problem starts when I am trying to create PostgreSQL cluster The problem manifests itself on many other occasions as well. >

4.6 compile messages: Do I have to worry?

2009-10-24 Thread Toni Mueller
Hi, today I compiled 4.6-stable from source on an amd64 machine, and got a lot of error messages like this (sample): About 20 or so of these: lint -hx -I/usr/src/lib/libm/arch/amd64 -I/usr/src/lib/libm/src -I/usr/src/lib/libm/src/ld80 -i /usr/src/lib/libm/src/s_conj.c /usr/include/complex.h:43

Re: Fully Automated OpenBSD Installation (Version 2)

2009-09-09 Thread Toni Mueller
Hi, On Wed, 09.09.2009 at 11:29:28 +0100, Stuart Henderson wrote: > On 2009/09/09 12:22, Toni Mueller wrote: > > On Tue, 30.09.2008 at 09:04:37 +0100, Stuart Henderson > > wrote: > > > On 2008/09/29 22:18, Nick Bender wrote: > > > > + export DONEPR

Re: Fully Automated OpenBSD Installation (Version 2)

2009-09-09 Thread Toni Mueller
On Tue, 30.09.2008 at 09:04:37 +0100, Stuart Henderson wrote: > On 2008/09/29 22:18, Nick Bender wrote: > > + export DONEPROFILE > + export DONEPROFILE=YES > there's 13 bytes, > + [ -f /install.netboot ] && . /install.netboot > and another 12. Does it really matter, or is CD space that