GPT should work? (was Re: Dual Booting OpenBSD vs Windows7)

2015-07-03 Thread Joel Rees
On Wed, Jul 1, 2015 at 1:14 AM, Peter Kay  wrote:
> The method in the OpenBSD docs is a no extra tools required method. BCDedit
> makes it even easier.
>
> 1) Install Windows 7/8 on an MBR disk. GPT should work but requires more
> effort.

Peter, if you have done this on a GPT formatted disk, I would like some clues.

My first fumbling about a month ago couldn't find a way to get the
installer to recognize the GPT partition scheme on the drive, so I
copied out the restore DVDs and wiped the GPT and used the legacy 4
base partition MBR for the experiments I needed to do. Now I'm getting
ready to (ugh) put MSW8 back on the thing. (Trying to talk myself out
of that, but I need to be able to boot MSWindows once in a blue moon.)

> 2) As part of 1) create a partition for OpenBSD
> 3) Use OpenBSD fdisk to change partition type to A6, install on that
> 4) Do not install boot menu to MBR
> 5) Use BCDedit on Windows, add the OpenBSD partition
> 6) (optional, Windows 8) set boot menu to classic mode
>

-- 
Joel Rees



Re: Regarding the default /usr partitioning

2015-07-03 Thread Joel Rees
On Mon, Jun 29, 2015 at 7:15 AM, Carlos Fenollosa
 wrote:
> Hi,
>
> I’m a new OpenBSD user, so please forgive me if this topic has been discussed 
> thoroughly already.
>
> I installed a new box using the default partitioning (2GB for /usr) and I 
> found that it’s a bit insufficient since /usr/ports, /usr/xenocara and 
> /usr/src hang from there on the same partition, and eat up most of those 2GB. 
> I’ve searched online and some users also found the same problem
>
> Do you think it would be a good idea to increase that number to about 5GB? I 
> could try to write a simple patch for it.
>

When you're coming in from the Linux world (or from the commercial
OSses), you tend to expect guesswork to get you something close to a
useable workstation.

Actually, it does, for a wide range of definitions of "useable". But
there are surprises.

I have found myself buying a cheap (used) netbook to experiment with,
and, over the last month and a half or so, I have found some of the
reasons for the defaults being calculated as they are. Some of those
reasons have been mentioned or alluded to in this thread.

Not to say you shouldn't change them for your uses. You should. And
you should expect to learn something from the choices you make.

But, yeah, if you have enough disk space to give /usr 4G or even 8, do
so. Also, you may need to re-purpose some of the automatic partition
assignments to the other OSses you are dual-booting. (You can change
those when you need, and you probably won't want to be reading from
your Linux partition and writing to your MSWindows boot partition at
any point and saving error messages to the FAT formatted shared
partition, now, will you?)

(When/if I get good enough with the tools here, I might experiment
with options for enabling more partition names, but I'm sure I'll have
to have a pretty airtight case for the breakage that will ensue before
I can expect the developers to take it seriously.

In the meantime, an external USB3 enclosure does the job for some of
the stuff I do, including compiling the OS, etc. At least, it's not
the bottleneck on this netbook, or any other hardware I currently
have. I have fundamental disagreements with USB, but it works for
now.)

Joel Rees



Re: Why does my 5.7 laptop suspend when I close the lid?

2015-07-03 Thread Joel Rees
Not sure how much use posting the results of this will be at this
point, but, for the record --

On Fri, Jul 3, 2015 at 7:43 PM, Theo Buehler  wrote:
> On Fri, Jul 03, 2015 at 07:29:08PM +0900, Joel Rees wrote:
>> On Fri, Jul 3, 2015 at 3:05 PM, Mike Larkin  wrote:
>> > One thing is to try 'ZZZ' which will hibernate the machine and will
>> > repost video properly on resume (usually, no promises here either).
>>
>>   Cannot connect to apmd: No such file or directory.
>>
>> I don't even have /etc/apm, much less any scripts in there.
>
> You need a running apmd(8) to be able to use `zzz' or `ZZZ', as
> explained in the man page for apm(8) (zzz and ZZZ are just hard links to
> apm):
>
> ``apm communicates with the Advanced Power Management daemon, apmd(8),
> making requests of it for current power status or to place the system
> into a suspend or stand-by state.''
>
> Try again after issuing
>
> # rcctl -f start apmd
>
> or, if you want to enable apmd(8) permanently:
>
> # rcctl enable apmd
> # rcctl start apmd
>

Either way, /etc/apm and the scripts that the man pages for apm/apmd
mention under that directory remain missing in action.

However, the -f option does start the daemon without permanently
enabling it and the enable command does leave the daemon enabled.

Relative to the "unknown" hardware, ZZZ (hibernating) seems to work
fine. zzz (sleeping) does not.

Wish I had eight of me, to attack the three pressing problems getting
this netbook fully supported on openbsd, and to take care of my day
job, and to take care of the projects I need the functioning openbsd
netbook for. (Just like everyone here, I'm sure.)

I'll have to leave this one for later.

-- 
Joel Rees



Re: iked x509 negotiation problem with BlackBerry OS 10.3.1

2015-07-03 Thread Stuart Henderson
On 2015-07-03, Stuart Henderson  wrote:
> On 2015-07-02, Denis Lapshin  wrote:
>> ikev2_pld_payloads: decrypted payload CERTREQ nextpayload CP critical 
>> 0x00 length 5
>> ikev2_pld_certreq: type X509_CERT signatures length 0
>> ikev2_pld_certreq: invalid certificate request
>> ikev2_resp_recv: failed to parse message
>
> iked doesn't accept an empte certreq (which appears to be valid), this affects
> interop with Firebrick's implementation too.
>
>

Denis replied off-list but his MTA isn't answering so I'll reply here.

: connect to mindall.org[5.23.109.177]:25: Connection
refused

On 2015/07/03 11:40, Denis Lapshin wrote:
> Stuart,
> 
> What can be done to accept an empty certreq (or fill certreq) on server's
> side and/or phone's side to obtain a connection?

You could try this diff, though I'm not sure whether it is correct,
I don't have a suitable IKEv2 implementation to test against myself.

Index: ikev2_pld.c
===
RCS file: /cvs/src/sbin/iked/ikev2_pld.c,v
retrieving revision 1.50
diff -u -p -r1.50 ikev2_pld.c
--- ikev2_pld.c 26 Mar 2015 19:52:35 -  1.50
+++ ikev2_pld.c 3 Jul 2015 09:19:29 -
@@ -916,7 +916,9 @@ ikev2_pld_certreq(struct iked *env, stru
return (0);
 
if (cert.cert_type == IKEV2_CERT_X509_CERT) {
-   if (!len || (len % SHA_DIGEST_LENGTH) != 0) {
+   if (!len)
+   return (0);
+   if ((len % SHA_DIGEST_LENGTH) != 0) {
log_debug("%s: invalid certificate request", __func__);
return (-1);
}



Re: All traffic over iked VPN

2015-07-03 Thread John
On Fri, Jul 03, 2015 at 12:20:01PM -0400, trondd wrote:
> I'll jump into the current iked/ipsec/VPN discussions going on.
> 
> I have used iked to create a road warrior VPN from my OpenBSD laptop to an
> OpenBSD server in a remote data center.  All connections between the two are
> correctly going through the VPN.
> 
> What I want to do is force all traffic from the laptop through VPN and exit
> to the internet from the server.  Does that require a pseudo device tunnel?
> How do I create a tunnel through a firewall where one end point is NATed?  I
> can control the firewall on my network (also OpenBSD) but will it work from,
> say, a hotel?

My current setup does exactly what you describe with several endpoints,
iked, ospfd, gif, bridge, vether and pf.

There are a few documents available with a quick search but "man gif" is
a great place to start since it documents tunneling using etherip and
IPSec.

I use ospfd to inject multiple default gateway routes into the local
routing table.  If a given IPSec tunnel goes down the associated default
gateway is removed from the local routing table.  In this way it's self
healing since other tunnels and default gateway routes should still be
available.

There are occasional quirks with ospfd but this setup works quite well
with my use case which is also currently configured as a full-mesh vpn.
I'm fairly certain this configuration has been previously discussed on
the list.



> 
> I feel like this has to have been solved and can't be that hard.  And
> without using openVPN to do it...
> 
> Tim.



All traffic over iked VPN

2015-07-03 Thread trondd

I'll jump into the current iked/ipsec/VPN discussions going on.

I have used iked to create a road warrior VPN from my OpenBSD laptop to 
an OpenBSD server in a remote data center.  All connections between the 
two are correctly going through the VPN.


What I want to do is force all traffic from the laptop through VPN and 
exit to the internet from the server.  Does that require a pseudo device 
tunnel?  How do I create a tunnel through a firewall where one end point 
is NATed?  I can control the firewall on my network (also OpenBSD) but 
will it work from, say, a hotel?


I feel like this has to have been solved and can't be that hard.  And 
without using openVPN to do it...


Tim.



Re: cvs files from attic show up in update

2015-07-03 Thread dan mclaughlin
On Fri, 3 Jul 2015 13:37:45 +0200 (CEST) n.reu...@hxgn.net wrote:
> > dan mclaughlin  hat am 3. Juli 2015 um 13:18
> > geschrieben:
> > 
> > 
> > On Fri, 3 Jul 2015 12:34:17 +0200 (CEST) n.reu...@hxgn.net wrote:
> > > > Nigel J Taylor  hat am 3. Juli 2015 um 11:39
> > > > geschrieben:
> > > > 
> > > > 
> > > > On 07/03/15 09:33, n.reu...@hxgn.net wrote:
> > > > > Dear misc,
> > > > > 
> > > > > i have a script running every night on my openbsd 5.7 -stable box
> > > > > to
> > > > > fetch
> > > > > the latest sources from cvs. If some files changed, it will send a
> > > > > mail.
> > > > > This morning i got the following output from last nights run:
> > > > > 
> > > > > ? gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
> > > > > 
> > > > > Here is the line of code:
> > > > > 
> > > > > # update system sources
> > > > > cd /usr/src
> > > > > /usr/bin/cvs -d ${CVSROOT} -q up -rOPENBSD_5_7 -Pd \
> > > > > | /usr/bin/tee ${LOG}
> > > > > 
> > > > > As far as is understand, the testsuite was importet by mistake and
> > > > > moved
> > > > > to the attic directly after the import approx. 4 years ago:
> > > > > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu/usr.bin/binutils-2.17/gas/.
> > > > > I also don't have the testsuite-folder on my disk.
> > > > > 
> > > > > Now, is this a problem with cvs or somehow "buggy, but expected"
> > > > > behaviour? I have ever seen this message before, and i don't see
> > > > > any
> > > > > activity on binutils in -stable. Or is it safe to filter out line
> > > > > starting
> > > > > with '?' ?
> > > > > 
> > > > > Any insight is greatly appreciated. 
> > > > > 
> > > > > 
> > > > > Thanks and best regards
> > > > > Nils
> > > > > 
> > > > > 
> > > > 
> > > > From man cvs(1)
> > > > ? filefile is in your working directory, but does not correspond
> > > > to
> > > > anything in the source repository, and is not in the list of files
> > > > for
> > > > cvs to ignore (see the description of the -I option).
> > > > 
> > > > 
> > > > $ cd /usr/src/usr.bin/sed
> > > > $ cvs -R -q up -Pd
> > > > $ touch extra
> > > > $ cvs -R -q up -Pd
> > > > ? extra
> > > > $ rm extra
> > > > $ cvs -R -q up -Pd
> > > > $
> > > > 
> > > 
> > > Hi Nigel,
> > > 
> > > thanks for your mail. I should have written my initial mail more
> > > precisely; i knew that unknown files show up with a '?' (like in svn,
> > > git,
> > > ...), but my point was that the file did not exist on my disk before
> > > the
> > > update, appeared out of nowhere during the update (from the attic i
> > > guess)
> > > and disappeared again (without personally touching anything).
> > > 
> > > Nils
> > > 
> > 
> > it does seem it was removed quite a while ago (2011). it may just be a
> > stray
> > bug. what is the result of:
> > 
> > $ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
> > 
> > is it even a directory, and what is the timestamp on it?
> >
> 
> Hi Dan,
> 
> that's the funny part, the directory does not exist:
> 
> $ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
> ls: /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix: No such
> file or directory
> $ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/
> ls: /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/: No such file or
> directory
> $ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas
> drwxr-xr-x  6 root  wsrc  2048 Jul  3 10:36
> /usr/src/gnu/usr.bin/binutils-2.17/gas
> 
> Nils
> 

some strange bug then. i'm no expert on cvs, and i know that it does create
directories that it then removes, but usually it shows me the unknown files
BEFORE doing updates. sometimes these don't get fixed because they are hard
to track down. i've had my share of odd bugs in the day. nothing seems to
have gone seriously wrong, so it mostly good.



Re: SOHO IPv6 router problems

2015-07-03 Thread Patrik Lundin
On Thu, Jul 02, 2015 at 08:18:52AM +0200, Stefan Sperling wrote:
> 
> Your windows box is trying to reach address ff02:2::1:ff51:78e9, a mix of
> 'all routers' ff02::2 and em1's link local address.
> But there is no address in the ff02::/32 prefix on em1 for some reason.
> Note that em0 does have an address in this prefix: ff02::1:2%em0
>

This got me thinking. It was obvious that the ff02 entry was created by
running "autoconf" on em0. When we initially tried this on 5.6 dhcp6c
failed setting the address on em1 at all if we did not first prime the
interface with "ifconfig em1 inet6 eui64".

It turns out, if we set "autoconf" on both em0 and em1 we can get the
setup to work. This is a bit ugly though since we do not want to accept
router advertisements on the inside interface.

Below are transcripts from trying to get this to work first using
"eui64" (since I assumed this was the most minimalistic way to prime
em1). This still required the manual creation of the /64 route.
Second is the attempt using "autoconf" on the inside interface which
did not require the manual route creation, but the route still pops up
in a bit of a "strange" way. See below for details.

Before starting:
===
# ifconfig
lo0: flags=8049 mtu 32768
priority: 0
groups: lo
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff00
em0: flags=8843 mtu 1500
lladdr d0:50:99:51:78:e8
priority: 0
groups: egress
media: Ethernet autoselect (1000baseT full-duplex)
status: active
inet XX.XXX.8.17 netmask 0xff80 broadcast XX.XXX.8.127
em1: flags=8843 mtu 1500
lladdr d0:50:99:51:78:e9
priority: 0
media: Ethernet autoselect (1000baseT full-duplex,rxpause,txpause)
status: active
inet 192.168.212.254 netmask 0xff00 broadcast 192.168.212.255
enc0: flags=0<>
priority: 0
groups: enc
status: active
pflog0: flags=141 mtu 33144
priority: 0
groups: pflog

===
# netstat -rn
Routing tables

Internet:
DestinationGatewayFlags   Refs  Use   Mtu  Prio Iface
defaultXX.XXX.8.1 UGS4 2081 - 8 em0  
XX.XXX.8.0/25  XX.XXX.8.17UC 10 - 8 em0  
XX.XXX.8.1 00:0c:db:f6:1c:00  UHLc   10 - 8 em0  
XX.XXX.8.17d0:50:99:51:78:e8  UHLl   00 - 1 lo0  
XX.XXX.8.127   XX.XXX.8.17UHb00 - 1 em0  
127/8  127.0.0.1  UGRS   00 32768 8 lo0  
127.0.0.1  127.0.0.1  UHl10 32768 1 lo0  
192.168.212/24 192.168.212.254UC 60 - 8 em1  
192.168.212.1  0c:c4:7a:31:d7:38  UHLc   0   82 - 8 em1  
192.168.212.2  00:25:90:ae:ca:4a  UHLc   0  119 - 8 em1  
192.168.212.3  b8:27:eb:22:72:8b  UHLc   0  342 - 8 em1  
192.168.212.4  b8:27:eb:32:0b:66  UHLc   0  118 - 8 em1  
192.168.212.136ec:a8:6b:f9:6e:35  UHLc   0  138 - 8 em1  
192.168.212.252d0:bf:9c:45:0c:a0  UHLc   0  945 - 8 em1  
192.168.212.254d0:50:99:51:78:e9  HLl00 - 1 lo0  
192.168.212.255192.168.212.254UHb00 - 1 em1  
224/4  127.0.0.1  URS00 32768 8 lo0  

Internet6:
DestinationGatewayFlags   Refs  
Use   Mtu  Prio Iface
::/104 ::1UGRS   0  
  0 32768 8 lo0  
::/96  ::1UGRS   0  
  0 32768 8 lo0  
::1::1UHl   14  
  0 32768 1 lo0  
::127.0.0.0/104::1UGRS   0  
  0 32768 8 lo0  
::224.0.0.0/100::1UGRS   0  
  0 32768 8 lo0  
::255.0.0.0/104::1UGRS   0  
  0 32768 8 lo0  
:::0.0.0.0/96  ::1UGRS   0  
  0 32768 8 lo0  
2002::/24  ::1UGRS   0  
  0 32768 8 lo0  
2002:7f00::/24 ::1UGRS   0  
  0 32768 8 lo0  
2002:e000::/20 ::1UGRS   0  
  0 32768 8 lo0  
2002:ff00::/24 ::1UGRS   0  
  0 32768 8 lo0  
fe80::/10  ::1UGRS   0  
  0 32768 8 lo0  
fe80::%lo0/64  fe80::1%lo0U  0  
  0 32768 

Re: cvs files from attic show up in update

2015-07-03 Thread n . reusse
> dan mclaughlin  hat am 3. Juli 2015 um 13:18
> geschrieben:
> 
> 
> On Fri, 3 Jul 2015 12:34:17 +0200 (CEST) n.reu...@hxgn.net wrote:
> > > Nigel J Taylor  hat am 3. Juli 2015 um 11:39
> > > geschrieben:
> > > 
> > > 
> > > On 07/03/15 09:33, n.reu...@hxgn.net wrote:
> > > > Dear misc,
> > > > 
> > > > i have a script running every night on my openbsd 5.7 -stable box
> > > > to
> > > > fetch
> > > > the latest sources from cvs. If some files changed, it will send a
> > > > mail.
> > > > This morning i got the following output from last nights run:
> > > > 
> > > > ? gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
> > > > 
> > > > Here is the line of code:
> > > > 
> > > > # update system sources
> > > > cd /usr/src
> > > > /usr/bin/cvs -d ${CVSROOT} -q up -rOPENBSD_5_7 -Pd \
> > > > | /usr/bin/tee ${LOG}
> > > > 
> > > > As far as is understand, the testsuite was importet by mistake and
> > > > moved
> > > > to the attic directly after the import approx. 4 years ago:
> > > > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu/usr.bin/binutils-2.17/gas/.
> > > > I also don't have the testsuite-folder on my disk.
> > > > 
> > > > Now, is this a problem with cvs or somehow "buggy, but expected"
> > > > behaviour? I have ever seen this message before, and i don't see
> > > > any
> > > > activity on binutils in -stable. Or is it safe to filter out line
> > > > starting
> > > > with '?' ?
> > > > 
> > > > Any insight is greatly appreciated. 
> > > > 
> > > > 
> > > > Thanks and best regards
> > > > Nils
> > > > 
> > > > 
> > > 
> > > From man cvs(1)
> > > ? filefile is in your working directory, but does not correspond
> > > to
> > > anything in the source repository, and is not in the list of files
> > > for
> > > cvs to ignore (see the description of the -I option).
> > > 
> > > 
> > > $ cd /usr/src/usr.bin/sed
> > > $ cvs -R -q up -Pd
> > > $ touch extra
> > > $ cvs -R -q up -Pd
> > > ? extra
> > > $ rm extra
> > > $ cvs -R -q up -Pd
> > > $
> > > 
> > 
> > Hi Nigel,
> > 
> > thanks for your mail. I should have written my initial mail more
> > precisely; i knew that unknown files show up with a '?' (like in svn,
> > git,
> > ...), but my point was that the file did not exist on my disk before
> > the
> > update, appeared out of nowhere during the update (from the attic i
> > guess)
> > and disappeared again (without personally touching anything).
> > 
> > Nils
> > 
> 
> it does seem it was removed quite a while ago (2011). it may just be a
> stray
> bug. what is the result of:
> 
> $ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
> 
> is it even a directory, and what is the timestamp on it?
>

Hi Dan,

that's the funny part, the directory does not exist:

$ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
ls: /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix: No such
file or directory
$ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/
ls: /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/: No such file or
directory
$ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas
drwxr-xr-x  6 root  wsrc  2048 Jul  3 10:36
/usr/src/gnu/usr.bin/binutils-2.17/gas

Nils



Re: cvs files from attic show up in update

2015-07-03 Thread dan mclaughlin
On Fri, 3 Jul 2015 12:34:17 +0200 (CEST) n.reu...@hxgn.net wrote:
> > Nigel J Taylor  hat am 3. Juli 2015 um 11:39
> > geschrieben:
> > 
> > 
> > On 07/03/15 09:33, n.reu...@hxgn.net wrote:
> > > Dear misc,
> > > 
> > > i have a script running every night on my openbsd 5.7 -stable box to
> > > fetch
> > > the latest sources from cvs. If some files changed, it will send a
> > > mail.
> > > This morning i got the following output from last nights run:
> > > 
> > > ? gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
> > > 
> > > Here is the line of code:
> > > 
> > > # update system sources
> > > cd /usr/src
> > > /usr/bin/cvs -d ${CVSROOT} -q up -rOPENBSD_5_7 -Pd \
> > > | /usr/bin/tee ${LOG}
> > > 
> > > As far as is understand, the testsuite was importet by mistake and
> > > moved
> > > to the attic directly after the import approx. 4 years ago:
> > > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu/usr.bin/binutils-2.17/gas/.
> > > I also don't have the testsuite-folder on my disk.
> > > 
> > > Now, is this a problem with cvs or somehow "buggy, but expected"
> > > behaviour? I have ever seen this message before, and i don't see any
> > > activity on binutils in -stable. Or is it safe to filter out line
> > > starting
> > > with '?' ?
> > > 
> > > Any insight is greatly appreciated. 
> > > 
> > > 
> > > Thanks and best regards
> > > Nils
> > > 
> > > 
> > 
> > From man cvs(1)
> > ? filefile is in your working directory, but does not correspond to
> > anything in the source repository, and is not in the list of files for
> > cvs to ignore (see the description of the -I option).
> > 
> > 
> > $ cd /usr/src/usr.bin/sed
> > $ cvs -R -q up -Pd
> > $ touch extra
> > $ cvs -R -q up -Pd
> > ? extra
> > $ rm extra
> > $ cvs -R -q up -Pd
> > $
> > 
> 
> Hi Nigel,
> 
> thanks for your mail. I should have written my initial mail more
> precisely; i knew that unknown files show up with a '?' (like in svn, git,
> ...), but my point was that the file did not exist on my disk before the
> update, appeared out of nowhere during the update (from the attic i guess)
> and disappeared again (without personally touching anything).
> 
> Nils
> 

it does seem it was removed quite a while ago (2011). it may just be a stray
bug. what is the result of:

$ ls -ld /usr/src/gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix

is it even a directory, and what is the timestamp on it?



Re: Why does my 5.7 laptop suspend when I close the lid?

2015-07-03 Thread Theo Buehler
On Fri, Jul 03, 2015 at 07:29:08PM +0900, Joel Rees wrote:
> On Fri, Jul 3, 2015 at 3:05 PM, Mike Larkin  wrote:
> > One thing is to try 'ZZZ' which will hibernate the machine and will
> > repost video properly on resume (usually, no promises here either).
> 
>   Cannot connect to apmd: No such file or directory.
> 
> I don't even have /etc/apm, much less any scripts in there.

You need a running apmd(8) to be able to use `zzz' or `ZZZ', as
explained in the man page for apm(8) (zzz and ZZZ are just hard links to
apm):
 
``apm communicates with the Advanced Power Management daemon, apmd(8),
making requests of it for current power status or to place the system
into a suspend or stand-by state.''

Try again after issuing 

# rcctl -f start apmd

or, if you want to enable apmd(8) permanently:

# rcctl enable apmd
# rcctl start apmd



Re: cvs files from attic show up in update

2015-07-03 Thread n . reusse
> Nigel J Taylor  hat am 3. Juli 2015 um 11:39
> geschrieben:
> 
> 
> On 07/03/15 09:33, n.reu...@hxgn.net wrote:
> > Dear misc,
> > 
> > i have a script running every night on my openbsd 5.7 -stable box to
> > fetch
> > the latest sources from cvs. If some files changed, it will send a
> > mail.
> > This morning i got the following output from last nights run:
> > 
> > ? gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
> > 
> > Here is the line of code:
> > 
> > # update system sources
> > cd /usr/src
> > /usr/bin/cvs -d ${CVSROOT} -q up -rOPENBSD_5_7 -Pd \
> > | /usr/bin/tee ${LOG}
> > 
> > As far as is understand, the testsuite was importet by mistake and
> > moved
> > to the attic directly after the import approx. 4 years ago:
> > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu/usr.bin/binutils-2.17/gas/.
> > I also don't have the testsuite-folder on my disk.
> > 
> > Now, is this a problem with cvs or somehow "buggy, but expected"
> > behaviour? I have ever seen this message before, and i don't see any
> > activity on binutils in -stable. Or is it safe to filter out line
> > starting
> > with '?' ?
> > 
> > Any insight is greatly appreciated. 
> > 
> > 
> > Thanks and best regards
> > Nils
> > 
> > 
> 
> From man cvs(1)
> ? filefile is in your working directory, but does not correspond to
> anything in the source repository, and is not in the list of files for
> cvs to ignore (see the description of the -I option).
> 
> 
> $ cd /usr/src/usr.bin/sed
> $ cvs -R -q up -Pd
> $ touch extra
> $ cvs -R -q up -Pd
> ? extra
> $ rm extra
> $ cvs -R -q up -Pd
> $
> 

Hi Nigel,

thanks for your mail. I should have written my initial mail more
precisely; i knew that unknown files show up with a '?' (like in svn, git,
...), but my point was that the file did not exist on my disk before the
update, appeared out of nowhere during the update (from the attic i guess)
and disappeared again (without personally touching anything).

Nils



Re: Why does my 5.7 laptop suspend when I close the lid?

2015-07-03 Thread Joel Rees
On Fri, Jul 3, 2015 at 3:05 PM, Mike Larkin  wrote:
> On Fri, Jul 03, 2015 at 11:45:44AM +0900, Joel Rees wrote:
>> FWIW, I just tried shutting the lid on this netbook, to see what would 
>> happen.
>>
>> Disks went quiet quickly enough to assume it was sleep and not hibernate.
>>
>> I waited maybe a minute, then opened the lid. No response. On keyboard
>> activity, i could hear the disks spin up.
>>
>> Tried ssh from outside, but I had disabled password access and hadn't
>> copied the relevant tokens to the other box. Did get a Permission
>> denied (publickey, keyboard-interactive) response once, but a few
>> minutes later, there was no route to host. I woud guess it went back
>> to sleep and wouldn't wake up, except this time the disks did not go
>> quiet.
>>
>> Ended up with a long press on the power button.
>
> This:
>> vga1 at pci0 dev 1 function 0 vendor "ATI", unknown product 0x9839 rev 0x00
>
> ... is likely your problem. We can't resume something we don't even properly
> work with to begin with.

Sure are a lot of unknowns in this box. I guess that's where I'll
start when I get a chance to try to work on this.

> One thing is to try 'ZZZ' which will hibernate the machine and will
> repost video properly on resume (usually, no promises here either).

  Cannot connect to apmd: No such file or directory.

I don't even have /etc/apm, much less any scripts in there.

Thanks. Those are good clues for me.



Re: new httpd and cachability?

2015-07-03 Thread Craig Skinner
Hello,

On 2014-09-03 Wed 19:13 PM |, Craig R. Skinner wrote:
> For the new httpd, will there be a mechanism to set cachability?
> 
> Browser/proxy caching reduces both bandwidth costs & server load.

Would the expires header be simple to add?

Does the new patterns support help here?:

> 
> Rough nginx e.g:
> 
> http {
>   ...
>   ..
>   expires 3d;
>   add_header Pragma public;
>   add_header Cache-Control public;
> 
>   server {
>   ...
>   ..
> 
>   location ~* \.(?:jpe?g|png|gif|svg|mp3|mp4)$ {
>   expires 1y;
>   }
> 
>   location ~* \.(?:ico|js|pdf)$ {
>   expires 3M;
>   }
> 
>   }
> }
> 
> Maybe something could be done globally within the mime types???



Re: cvs files from attic show up in update

2015-07-03 Thread Nigel J Taylor
On 07/03/15 09:33, n.reu...@hxgn.net wrote:
> Dear misc,
> 
> i have a script running every night on my openbsd 5.7 -stable box to fetch
> the latest sources from cvs. If some files changed, it will send a mail.
> This morning i got the following output from last nights run:
> 
> ? gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix
> 
> Here is the line of code:
> 
> # update system sources
> cd /usr/src
> /usr/bin/cvs -d ${CVSROOT} -q up -rOPENBSD_5_7 -Pd \
> | /usr/bin/tee ${LOG}
> 
> As far as is understand, the testsuite was importet by mistake and moved
> to the attic directly after the import approx. 4 years ago:
> http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu/usr.bin/binutils-2.17/gas/.
> I also don't have the testsuite-folder on my disk.
> 
> Now, is this a problem with cvs or somehow "buggy, but expected"
> behaviour? I have ever seen this message before, and i don't see any
> activity on binutils in -stable. Or is it safe to filter out line starting
> with '?' ?
> 
> Any insight is greatly appreciated. 
> 
> 
> Thanks and best regards
> Nils
> 
> 

>From man cvs(1)
? filefile is in your working directory, but does not correspond to
anything in the source repository, and is not in the list of files for
cvs to ignore (see the description of the -I option).


$ cd /usr/src/usr.bin/sed
$ cvs -R -q up -Pd
$ touch extra
$ cvs -R -q up -Pd
? extra
$ rm extra
$ cvs -R -q up -Pd
$



cvs files from attic show up in update

2015-07-03 Thread n . reusse
Dear misc,

i have a script running every night on my openbsd 5.7 -stable box to fetch
the latest sources from cvs. If some files changed, it will send a mail.
This morning i got the following output from last nights run:

? gnu/usr.bin/binutils-2.17/gas/testsuite/gas/mmix

Here is the line of code:

# update system sources
cd /usr/src
/usr/bin/cvs -d ${CVSROOT} -q up -rOPENBSD_5_7 -Pd \
| /usr/bin/tee ${LOG}

As far as is understand, the testsuite was importet by mistake and moved
to the attic directly after the import approx. 4 years ago:
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu/usr.bin/binutils-2.17/gas/.
I also don't have the testsuite-folder on my disk.

Now, is this a problem with cvs or somehow "buggy, but expected"
behaviour? I have ever seen this message before, and i don't see any
activity on binutils in -stable. Or is it safe to filter out line starting
with '?' ?

Any insight is greatly appreciated. 


Thanks and best regards
Nils



Re: gr-osmosdr

2015-07-03 Thread David Coppa
On Fri, Jul 3, 2015 at 2:42 AM, Aaron Bieber  wrote:
> EdaSky writes:
>
>> Greetings
>>
>> I would like to expand my Hamshack on SDR receiver via GQRX
>> I would also like to analyze signals over gnuradio and build
>> port of gqrx and required dependency progs.
>>
>> I bought
>>
>> http://dxpatrol.pt/
>> ugen1 at uhub0 port 5 "Realtek RTL2838UHIDIR" rev 2.00 / 1.00 addr 2
>>
>> With ./comms/rtl-sdr works great on the FM Radio
>>
>> I built gnuradio from VIP Ports (thank you)
>> Using RTL in gnuradio and buid Gqrx requires gnuradio-osmosdr
>>
>> It is possible to build gr-osmosdr?
>>
>> build prints lot of errors on
>>
>
> I believe I had it working at one point.. For sure I got SDR# going.
>
> I will try and revive my stuff.. probably post it to wip if I get
> anything going.

The error reported by the OP is fixed now...

http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/devel/cmake/patches/patch-Modules_FindBoost_cmake

Cheers!
David



Re: Is PFSync over IPSec still broken?

2015-07-03 Thread Łukasz Czarniecki
Hi,

Pfsync + ipsec setup IS broken.

Links:
http://marc.info/?l=openbsd-misc&m=143463803906528&w=2


Patch to manual page has been applied:
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share/man/man4/pfsync.4.diff?r1=1.32&r2=1.33

Please remove example of this setup:

"2. Use the ifconfig(8) syncpeer option (see below) so that updates are
unicast directly to the peer, then configure ipsec(4) between the hosts
to secure the pfsync(4) traffic."

from webpage:

http://www.openbsd.org/faq/pf/carp.html

Thanks

Lukasz

W dniu 26.06.2015 o 09:45, Jason McIntyre pisze:
> On Fri, Jun 26, 2015 at 09:05:08AM +0200, ??ukasz Czarniecki wrote:
>> W dniu 25.06.2015 o 12:19, Jason McIntyre pisze:
>>
> Please fix this bug or remove this example from documentation.
> For me this setup is broken since 2011.
> http://marc.info/?l=openbsd-misc&m=130624207811609&w=2
>
> Nobody cares or nobody uses?

>>>
>>> i've just committed something similar to the diff below, though i
>>> commented out text rather than removing it.
>>>
>>> thanks for the diff,
>>> jmc
>>
>>
>> Thank you.
>> Please also remove this line:
>>
>> 2. Use the ifconfig(8) syncpeer option (see below) so that updates are
>> unicast directly to the peer, then configure ipsec(4) between the hosts
>> to secure the pfsync(4) traffic.
>>
>> from http://www.openbsd.org/faq/pf/carp.html
>>
> 
> i'm in less well known territory here...
> 
> cc'ing dlg again to ok, and nick to please make the change if he feels
> it's right - www pages have their own logic.
> 
> jmc



Re: iked x509 negotiation problem with BlackBerry OS 10.3.1

2015-07-03 Thread Stuart Henderson
On 2015-07-02, Denis Lapshin  wrote:
> ikev2_pld_payloads: decrypted payload CERTREQ nextpayload CP critical 
> 0x00 length 5
> ikev2_pld_certreq: type X509_CERT signatures length 0
> ikev2_pld_certreq: invalid certificate request
> ikev2_resp_recv: failed to parse message

iked doesn't accept an empte certreq (which appears to be valid), this affects
interop with Firebrick's implementation too.