Re: Subpixel / RGB antialiasing

[Amit Kulkarni]

On Thu, Apr 14, 2016 at 7:04 PM, Simon McFarlane  wrote:

> On 04/14/16 12:23, Matej Nanut wrote:
> > Hello,
> >
> > OpenBSD's freetype library is built without the feature.
> >
> > If you have your source trees set up, you can rebuild it after
> > uncommenting FT_CONFIG_OPTION_SUBPIXEL_RENDERING in
> > /usr/xenocara/lib/freetype/include/freetype/config/ftoption.h.
> >
>
> Wow, That did the trick! I was afraid I'd never see beautiful fonts on
> OpenBSD.
>
> The comment above says the feature is covered by Microsoft patents, and
> is why it isn't enabled by default. Didn't those patents expire in 2010?
> http://www.freetype.org/patents.html
>
> Thanks,
> Simon
>
> That web-page says at the bottom, that it is updated on 25 August 2015,
yet this option is not enabled yet in freetype's upstream git repo. I
imagine the xenocara guys dcoppa@/mathhieu@/shadchin@ follows upstream.

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/include/freetype/config/ftoption.h

Re: L2TP/IPSec via npppd won't work with Android 5.x

[johnw]

Hi Renaud and the lists,

Did you tried to use iked/ikev2 for android (+5.x) client?
I checked my note3 is support ikev2 psk/rsa,
I want to setup my home OpenBSD router act as vpn/nat router for my note3,
Thanks.

Renaud Allard  allard.it> writes:

>
>
> I can't get android to connect with modp > 1024, but settings like this
> work:
> ike passive esp transport \
> proto udp from A.B.C.D to any port l2tp \
> main auth "hmac-sha2-256" enc "aes-256" group modp1024 \
> quick auth "hmac-sha2-256" enc "aes-256" \
> psk "mysharedsecret"

Re: Subpixel / RGB antialiasing

[Paolo Aglialoro]

I know nothing about Canadian law, but here in EU software patents, after
multiple fierce battles in European parliament, have never been recognised.

This said, afaik, SW patents are just a US hassle. Does it make sense
considering them problematic if the OS is "made in Canada"?

Il 15/apr/2016 02:17, "Simon McFarlane"  ha scritto:
>
> On 04/14/16 12:23, Matej Nanut wrote:
> > Hello,
> >
> > OpenBSD's freetype library is built without the feature.
> >
> > If you have your source trees set up, you can rebuild it after
> > uncommenting FT_CONFIG_OPTION_SUBPIXEL_RENDERING in
> > /usr/xenocara/lib/freetype/include/freetype/config/ftoption.h.
> >
>
> Wow, That did the trick! I was afraid I'd never see beautiful fonts on
> OpenBSD.
>
> The comment above says the feature is covered by Microsoft patents, and
> is why it isn't enabled by default. Didn't those patents expire in 2010?
> http://www.freetype.org/patents.html
>
> Thanks,
> Simon

Re: Subpixel / RGB antialiasing

[Simon McFarlane]

On 04/14/16 12:23, Matej Nanut wrote:
> Hello,
> 
> OpenBSD's freetype library is built without the feature.
> 
> If you have your source trees set up, you can rebuild it after
> uncommenting FT_CONFIG_OPTION_SUBPIXEL_RENDERING in
> /usr/xenocara/lib/freetype/include/freetype/config/ftoption.h.
> 

Wow, That did the trick! I was afraid I'd never see beautiful fonts on
OpenBSD.

The comment above says the feature is covered by Microsoft patents, and
is why it isn't enabled by default. Didn't those patents expire in 2010?
http://www.freetype.org/patents.html

Thanks,
Simon

Re: X crashes since ~1 week on -current/amd64 with radeon

[Mattieu Baptiste]

On Thu, Apr 14, 2016 at 10:47 PM, Mattieu Baptiste  wrote:
> On Wed, Apr 13, 2016 at 2:47 AM, Jonathan Gray  wrote:
>> On Tue, Apr 12, 2016 at 10:49:57PM +0200, Mattieu Baptiste wrote:
>>> Hi,
>>>
>>> Since about ~1 week I encounter X crashes on my main desktop running
>>> -current/amd64 with a radeon hd 4670.
>>> It's not very frequent (one or two times a day).
>>>
>>> Nothing particular appears on the console.
>>>
>>> How can I help debug this ?
>>
>> If you can get a core dump and a trace that would help, see
>> "How to get a core file out of the X server?" in
>> http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/xenocara/README?rev=1.36=text/plain
>
> I managed to get a core dump.
> You can get it here : http://www.brimbelle.org/mattieu/stuff/Xorg.core

... and here is the backtrace, sorry.

$ gdb /usr/X11R6/bin/Xorg /var/crash/Xorg.core
GNU gdb 6.3
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-unknown-openbsd5.9"...
Core was generated by `Xorg'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libpthread.so.21.0...done.
Loaded symbols for /usr/lib/libpthread.so.21.0
Loaded symbols for /usr/X11R6/bin/Xorg
Symbols already loaded for /usr/lib/libpthread.so.21.0
Reading symbols from /usr/X11R6/lib/libpciaccess.so.2.0...done.
Loaded symbols for /usr/X11R6/lib/libpciaccess.so.2.0
Reading symbols from /usr/X11R6/lib/libdrm.so.7.1...done.
Loaded symbols for /usr/X11R6/lib/libdrm.so.7.1
Reading symbols from /usr/X11R6/lib/libpixman-1.so.32.6...done.
Loaded symbols for /usr/X11R6/lib/libpixman-1.so.32.6
Reading symbols from /usr/X11R6/lib/libpthread-stubs.so.2.0...done.
Loaded symbols for /usr/X11R6/lib/libpthread-stubs.so.2.0
Reading symbols from /usr/X11R6/lib/libXfont.so.12.0...done.
Loaded symbols for /usr/X11R6/lib/libXfont.so.12.0
Reading symbols from /usr/X11R6/lib/libfreetype.so.24.1...done.
Loaded symbols for /usr/X11R6/lib/libfreetype.so.24.1
Reading symbols from /usr/X11R6/lib/libfontenc.so.4.0...done.
Loaded symbols for /usr/X11R6/lib/libfontenc.so.4.0
Reading symbols from /usr/lib/libz.so.5.0...done.
Loaded symbols for /usr/lib/libz.so.5.0
Reading symbols from /usr/X11R6/lib/libXau.so.10.0...done.
Loaded symbols for /usr/X11R6/lib/libXau.so.10.0
Reading symbols from /usr/X11R6/lib/libXdmcp.so.11.0...done.
Loaded symbols for /usr/X11R6/lib/libXdmcp.so.11.0
Reading symbols from /usr/lib/libkvm.so.16.1...done.
Loaded symbols for /usr/lib/libkvm.so.16.1
Reading symbols from /usr/lib/libm.so.9.0...done.
Loaded symbols for /usr/lib/libm.so.9.0
Reading symbols from /usr/lib/libc.so.86.0...done.
Loaded symbols for /usr/lib/libc.so.86.0
Reading symbols from /usr/libexec/ld.so...done.
Loaded symbols for /usr/libexec/ld.so
Reading symbols from /usr/X11R6/lib/modules/extensions/libglx.so...done.
Loaded symbols for /usr/X11R6/lib/modules/extensions/libglx.so
Reading symbols from /usr/X11R6/lib/libGL.so.16.0...done.
Loaded symbols for /usr/X11R6/lib/libGL.so.16.0
Reading symbols from /usr/lib/libexpat.so.11.0...done.
Loaded symbols for /usr/lib/libexpat.so.11.0
Reading symbols from /usr/X11R6/lib/libglapi.so.0.1...done.
Loaded symbols for /usr/X11R6/lib/libglapi.so.0.1
Reading symbols from /usr/X11R6/lib/libXdamage.so.4.0...done.
Loaded symbols for /usr/X11R6/lib/libXdamage.so.4.0
Reading symbols from /usr/X11R6/lib/libXfixes.so.6.0...done.
Loaded symbols for /usr/X11R6/lib/libXfixes.so.6.0
Reading symbols from /usr/X11R6/lib/libX11-xcb.so.2.0...done.
Loaded symbols for /usr/X11R6/lib/libX11-xcb.so.2.0
Reading symbols from /usr/X11R6/lib/libxcb-glx.so.1.0...done.
Loaded symbols for /usr/X11R6/lib/libxcb-glx.so.1.0
Reading symbols from /usr/X11R6/lib/libxcb-dri2.so.1.1...done.
Loaded symbols for /usr/X11R6/lib/libxcb-dri2.so.1.1
Reading symbols from /usr/X11R6/lib/libXxf86vm.so.6.0...done.
Loaded symbols for /usr/X11R6/lib/libXxf86vm.so.6.0
Reading symbols from /usr/X11R6/lib/libXext.so.13.0...done.
Loaded symbols for /usr/X11R6/lib/libXext.so.13.0
Reading symbols from /usr/X11R6/lib/libX11.so.16.1...done.
Loaded symbols for /usr/X11R6/lib/libX11.so.16.1
Reading symbols from /usr/X11R6/lib/libxcb.so.3.2...done.
Loaded symbols for /usr/X11R6/lib/libxcb.so.3.2
Reading symbols from /usr/X11R6/lib/modules/drivers/ati_drv.so...done.
Loaded symbols for /usr/X11R6/lib/modules/drivers/ati_drv.so
Reading symbols from /usr/X11R6/lib/modules/drivers/radeon_drv.so...done.
Loaded symbols for /usr/X11R6/lib/modules/drivers/radeon_drv.so
Reading symbols from /usr/X11R6/lib/libdrm_radeon.so.4.0...done.
Loaded symbols for /usr/X11R6/lib/libdrm_radeon.so.4.0
Reading symbols from /usr/X11R6/lib/modules/libexa.so...done.
Loaded symbols for 

Re: X crashes since ~1 week on -current/amd64 with radeon

[Mattieu Baptiste]

On Wed, Apr 13, 2016 at 2:47 AM, Jonathan Gray  wrote:
> On Tue, Apr 12, 2016 at 10:49:57PM +0200, Mattieu Baptiste wrote:
>> Hi,
>>
>> Since about ~1 week I encounter X crashes on my main desktop running
>> -current/amd64 with a radeon hd 4670.
>> It's not very frequent (one or two times a day).
>>
>> Nothing particular appears on the console.
>>
>> How can I help debug this ?
>
> If you can get a core dump and a trace that would help, see
> "How to get a core file out of the X server?" in
> http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/xenocara/README?rev=1.36=text/plain

I managed to get a core dump.
You can get it here : http://www.brimbelle.org/mattieu/stuff/Xorg.core

--
Mattieu Baptiste
"/earth is 102% full ... please delete anyone you can."

Re: Subpixel / RGB antialiasing

[Matej Nanut]

Hello,

OpenBSD's freetype library is built without the feature.

If you have your source trees set up, you can rebuild it after
uncommenting FT_CONFIG_OPTION_SUBPIXEL_RENDERING in
/usr/xenocara/lib/freetype/include/freetype/config/ftoption.h.

Can't build X

[Stefan Wollny]

Hi there!

Today I fetched the latest sources from http://ftp.hostserver.de and
rebuild GENERIC.MP (dmesg at the end) and userland. Then moved on for X.

I followed the instructions on "5.4 - Building X"
(http://www.openbsd.org/faq/faq5.html#Xbld):

$ doas rm -rf /usr/xobj/*
$ cd /usr/xenocara/
$ doas make bootstrap
$ doas make obj
$ doas make build

And this is what happend:

[ ... ]
libtool: link: ar cru .libs/libXpm.a  Attrib.o CrBufFrI.o CrBufFrP.o
CrDatFrI.o CrDatFrP.o CrIFrBuf.o CrIFrDat.o CrIFrP.o CrPFrBuf.o
CrPFrDat.o CrPFrI.o Image.o Info.o RdFToBuf.o RdFToDat.o RdFToI.o
RdFToP.o WrFFrBuf.o WrFFrDat.o WrFFrI.o WrFFrP.o create.o data.o
hashtab.o misc.o parse.o rgb.o scan.o
libtool: link: ranlib .libs/libXpm.a
libtool: link: ( cd ".libs" && rm -f "libXpm.la" && ln -s "../libXpm.la"
"libXpm.la" )
Making all in sxpm
gcc -std=gnu99 -DHAVE_CONFIG_H -I. -I/usr/xenocara/lib/libXpm/sxpm -I..
 -I/usr/xenocara/lib/libXpm/include   -Wall -Wpointer-arith
-Wmissing-declarations -Wformat=2 -Wstrict-prototypes
-Wmissing-prototypes -Wnested-externs -Wbad-function-cast
-Wold-style-definition -Wdeclaration-after-statement -Wunused
-Wuninitialized -Wshadow -Wcast-qual -Wmissing-noreturn
-Wmissing-format-attribute -Werror=implicit -Werror=nonnull
-Werror=init-self -Werror=main -Werror=missing-braces
-Werror=sequence-point -Werror=return-type -Werror=trigraphs
-Werror=write-strings -Werror=address -Werror=int-to-pointer-cast
-Werror=pointer-to-int-cast -fno-strict-aliasing -I/usr/X11R6/include
-O2 -pipe -MT sxpm.o -MD -MP -MF .deps/sxpm.Tpo -c -o sxpm.o
/usr/xenocara/lib/libXpm/sxpm/sxpm.c
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:55:21: error: libintl.h: No such
file or directory
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:64: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:66: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:67: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:68: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:69: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:71: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:72: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:73: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:74: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:75: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:76: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:77: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:78: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:79: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:80: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:81: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:82: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:83: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:84: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:85: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:86: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:87: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:88: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:89: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:90: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:91: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:92: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:93: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:94: warning: initialization
discards qualifiers from pointer target type
/usr/xenocara/lib/libXpm/sxpm/sxpm.c:95: warning: initialization
discards qualifiers from pointer target type

Subpixel / RGB antialiasing

[Simon McFarlane]

Hi,

I've been having some trouble enabling subpixel smoothing on my
system. There have been a couple mailing list threads about this, but
none seem to have any resolution:

https://marc.info/?l=openbsd-misc=145815835126687=2
https://marc.info/?l=openbsd-misc=130565999007881=2
https://marc.info/?l=openbsd-ports=129870303523612=2

I have a fonts.conf that reduces the hinting to hintslight, and produces
a noticeable difference, so I know it's being read. This is also the
same fonts.conf I use on Linux and FreeBSD, where it works as expected.
But subpixel smoothing does not seem to want to turn on on OpenBSD, on
any of my systems.

Has OpenBSD deliberately disabled this feature?

Thanks,
Simon

contents of /etc/fonts/conf.d:
lrwxr-xr-x  1 root  wheel   40 Mar  6 18:43 10-scale-bitmap-fonts.conf -> 
../conf.avail/10-scale-bitmap-fonts.conf
lrwxr-xr-x  1 root  wheel   35 Apr 14 10:37 10-sub-pixel-rgb.conf -> 
../conf.avail/10-sub-pixel-rgb.conf
lrwxr-xr-x  1 root  wheel   51 Mar  6 18:55 
20-unhint-small-dejavu-sans-mono.conf -> 
../conf.avail/20-unhint-small-dejavu-sans-mono.conf
lrwxr-xr-x  1 root  wheel   46 Mar  6 18:55 20-unhint-small-dejavu-sans.conf -> 
../conf.avail/20-unhint-small-dejavu-sans.conf
lrwxr-xr-x  1 root  wheel   47 Mar  6 18:55 20-unhint-small-dejavu-serif.conf 
-> ../conf.avail/20-unhint-small-dejavu-serif.conf
lrwxr-xr-x  1 root  wheel   39 Mar  6 18:43 20-unhint-small-vera.conf -> 
../conf.avail/20-unhint-small-vera.conf
lrwxr-xr-x  1 root  wheel   36 Mar  6 18:43 30-lucida-aliases.conf -> 
../conf.avail/30-lucida-aliases.conf
lrwxr-xr-x  1 root  wheel   36 Mar  6 18:43 30-metric-aliases.conf -> 
../conf.avail/30-metric-aliases.conf
lrwxr-xr-x  1 root  wheel   33 Mar  6 18:43 30-urw-aliases.conf -> 
../conf.avail/30-urw-aliases.conf
lrwxr-xr-x  1 root  wheel   28 Mar  6 18:43 31-nonmst.conf -> 
../conf.avail/31-nonmst.conf
lrwxr-xr-x  1 root  wheel   30 Mar  6 18:43 40-nonlatin.conf -> 
../conf.avail/40-nonlatin.conf
lrwxr-xr-x  1 root  wheel   31 Mar  6 18:55 42-luxi-mono.conf -> 
../conf.avail/42-luxi-mono.conf
lrwxr-xr-x  1 root  wheel   27 Mar  6 18:43 45-latin.conf -> 
../conf.avail/45-latin.conf
lrwxr-xr-x  1 root  wheel   31 Mar  6 18:43 49-sansserif.conf -> 
../conf.avail/49-sansserif.conf
lrwxr-xr-x  1 root  wheel   26 Mar  6 18:43 50-user.conf -> 
../conf.avail/50-user.conf
lrwxr-xr-x  1 root  wheel   27 Mar  6 18:43 51-local.conf -> 
../conf.avail/51-local.conf
lrwxr-xr-x  1 root  wheel   27 Mar  6 18:43 60-latin.conf -> 
../conf.avail/60-latin.conf
lrwxr-xr-x  1 root  wheel   35 Mar  6 18:43 65-fonts-persian.conf -> 
../conf.avail/65-fonts-persian.conf
lrwxr-xr-x  1 root  wheel   30 Mar  6 18:43 65-nonlatin.conf -> 
../conf.avail/65-nonlatin.conf
lrwxr-xr-x  1 root  wheel   29 Mar  6 18:43 69-unifont.conf -> 
../conf.avail/69-unifont.conf
lrwxr-xr-x  1 root  wheel   31 Mar  6 18:43 80-delicious.conf -> 
../conf.avail/80-delicious.conf
lrwxr-xr-x  1 root  wheel   31 Mar  6 18:43 90-synthetic.conf -> 
../conf.avail/90-synthetic.conf

My ~/.config/fontconfig/fonts.conf:



 
  
   rgb
  
 
 
  
   true
  
 
 
  
   hintslight
  
 
 
  
   true
  
 
  

  lcddefault

  

  
Calibri
  
  false


Helvetica

Arial





Nimbus Sans L




Nimbus Roman No9 L




Nimbus Mono L





and a dmesg:
(kernel is -current with mlarkin's keyboard resume patch applied.
I've seen this problem on snapshots as long as I've been using OpenBSD, 
including the latest April 4th snapshot)

OpenBSD 5.9-current (GENERIC.MP) #0: Mon Apr 11 10:43:31 PDT 2016
simon@simonmcfar-laptop:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 7945580544 (7577MB)
avail mem = 7700533248 (7343MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0x8be3f000 (32 entries)
bios0: vendor Hewlett-Packard version "M85 Ver. 01.32" date 07/20/2015
bios0: Hewlett-Packard HP EliteBook Folio 9480m
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET APIC MCFG SSDT SSDT SLIC MSDM FPDT BGRT SSDT SSDT 
SSDT SSDT ASF! DMAR
acpi0: wakeup devices LANC(S5) EHC1(S3) XHC_(S3) PCIB(S5) RP03(S5) NIC_(S5) 
RP04(S5) WNIC(S5) HST1(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i7-4600U CPU @ 2.10GHz, 1995.71 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var 

Re: Getting started with an OpenBSD Desktop...

[gsowww]

A GUI reduces the learning curve needed, however would not the traditional *nix 
command line card index updated to the modern desktop do the job just as well. 

rebound suffers a segfault if sent packets by rdr-to or divert-to

[Kevin Chadwick]

Just an FYI as I am most likely simply abusing rebound as it's config
is so simple I just tried it and should probably use relayd for this
atleast at the moment but perhaps it is a corner case that *may* be
desired to be handled somehow differently?

rebound appears to be working fine locally but I decided to enable it
on my WIFI access point when switched to gaming mode by diverting all
packets to port 53 to 127.0.0.1 as in this mode machines don't get DNS
ID randomisation and also I guessed it would reduce the attack surface a
little too.

It seemed to work for one or a few requests but crash with "child died
without HUP" and under debug mode I got a segfault line. I tried with a
recent snapshot too in case it may have been the pledge bug and it
crashed then too though I didn't try it in debug mode.

I can run any tests on the access point machine quite easily, if it *is*
of any help.

-- 

KISSIS - Keep It Simple So It's Securable

Re: Getting started with an OpenBSD Desktop...

[Mariano Baragiola]

On 04/14/16 11:50, Chris Bennett wrote:


Personally, I hate GUI crap. But there are people who actually NEED it.
He is as firmly dedicated to using OpenBSD as I am.



And this is why my 62-year-old mother has Debian installed on her
laptop instead of OpenBSD. She travels a lot, too. And I am not around
to "fix" her wifi.

I don't think people refusing to use a shell is an OpenBSD problem, but
I see your point and I think a GUI for managing wifi connections would
be useful.

Re: Redirect SMTP traffic

[b . gruel]

Le 14.04.2016 15:26, Boudewijn Dijkstra a écrit :

Op Thu, 14 Apr 2016 11:51:25 +0200 schreef :

Hello the list,


I trying to put SPAMD in front of an Exchange Server but i think doing 
 it in the wrong way.


My Lab is like this :

   FW
|
 SPAMD--Exchange

SPAMD and Exchange are in separate LAN. Routing is done via the FW


I'm just running smtpd on the spamd box with:

listen on egress
accept from any for any relay via smtp://Exchange \
hostname spamd.example.com


I would think about doing something in like this (thank's to share your 
setup).


Maybe i'm obstinate (and i should not) but can we put spamd on a server 
and the MTA on another Server other LAN.


I will test your setup tonight.


best regards

Re: Getting started with an OpenBSD Desktop...

[Chris Bennett]

On Wed, Apr 13, 2016 at 07:20:24PM +0300, Mihai Popescu wrote:
> > Maybe it could evolve into a port/package?
> 
> So, what is the benefit of typing a text in a text box GUI rather than
> a terminal?
> Again, what is the benefit of displaying a list of wifi networks with
> funny beam sign (which tell you nothing, bytheway) rather that read a
> dBm result from scan option in terminal?
> 
> That so called GUI will bring you nothing different from a general
> confusion. WiFi connect is an utility not a graphical application.
> 

I'm going to answer that based on my extremely frustrating experiences
with my father who no longer has decent short-term memory.

I can explain to him, show him, write down for him, etc. how to use
dhclient and ifconfig. Over and over. He just can't get that or mounting
a flash drive.

This is a never ending problem. For example, we travel a lot. What do
you do at a hotel with six wifi hotspots with wpa and they are all crap?

ifconfig is great. A little too great and informative for him. At this
point, he refuses to read manual pages. Too confusing.

Perhaps a diff for ifconfig would be helpful.

-W wifi only
-s simple output (nwid, bssid, almost nothing else)

# ifconfig  

lo0: flags=8049 mtu 32768
priority: 0
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff00
xl0: flags=8843 mtu 1500
lladdr 00:08:74:96:ba:e5
priority: 0
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet 192.168.44.111 netmask 0xff00 broadcast 192.168.44.255
enc0: flags=0<>
priority: 0
groups: enc
status: active
pflog0: flags=141 mtu 33192
priority: 0
groups: pflog
bwi0: flags=8843 mtu 1500
lladdr 00:16:01:18:d1:9e
priority: 4
groups: wlan egress
media: IEEE802.11 autoselect (OFDM36 mode 11g)
status: active
ieee80211: nwid IliumLT500 chan 6 bssid bc:44:34:1e:51:52 40dBm
wpakey 0xeb192b9fce29f97cc5c1d9c614ecf663a7370cd655b76e82b01c9111738d1dae
wpaprotos wpa1,wpa2 wpaakms psk wpaciphers tkip,ccmp wpagroupcipher tkip
inet 192.168.43.71 netmask 0xff00 broadcast 192.168.43.255


This is just too much for someone like him too make any sense of.


Personally, I hate GUI crap. But there are people who actually NEED it.
He is as firmly dedicated to using OpenBSD as I am.

I bought a second hand computer that has windows 7 on it.
If we bring that up while any USB OpenBSD drives are plugged in,
the first thing to appear on the screen is that we need to format those disks!
Disturbing.

Chris Bennett

Re: Recording computer sound.

[Vijay Sankar]

  Quoting li...@wrant.com:

> Wed, 13 Apr 2016 10:07:01 +0200 Alexandre Ratchov 
>> On Tue, Apr 12, 2016 at 08:22:40AM +0300, li...@wrant.com wrote:
>> Mon, 11 Apr 2016 19:17:31 +0200 Alexandre Ratchov 
>>> On Sun, Apr 10, 2016 at 12:16:42PM +0300, li...@wrant.com wrote:
>>> >
>>> > Just an idea, before providing a diff, does it look like a good
>>> > candidate to go into FAQ13.4?  Thank you for your consideration.
>>>
>>> Yes, this would be good candidate (for the FAQ 13.5), as this is
>>> not the first time this is being discussed.
>>
>> Same observation here.  I was suggesting it could be a continuation of
>> the record audio sub-section 13.4, now doing it for 13.5 in accordance
>> with your recommendation and renumbering below (and the index page).
>>
>> Thank you for clarifying the numbering point, mailing the diff shortly.
>>
>>> Basically this proves that the code is not simple enough and
>>> usability needs to be improved.
>>
>> And additionally shows an important feature either not directly obvious
>> from the manual, or merely frequently used enough to need a FAQ mention.
>>
>> I use it all the time, others seem to use it as well; we should
>> enable it by default
>
> Thank you for considering these improvements worthwhile.  And much more
> enjoying the sndiod(8) man page [http://man.openbsd.org/?query=sndiod]
>
> While relevant, the quick idea to jot down the in flight tip at the
> original query for other viewers, now thanks to ratchov@ tj@ tb@ got
> FAQ section 13.5 [http://www.openbsd.org/faq/faq13.html#recordmon]

Tried and it works for me! Thank you very much it is a very nice addition
to the FAQ

Vijay
-- 
Vijay Sankar, M.Eng., P.Eng.
ForeTell Technologies Limited
vsan...@foretell.ca

Re: Redirect SMTP traffic

[Boudewijn Dijkstra]

Op Thu, 14 Apr 2016 11:51:25 +0200 schreef :

Hello the list,


I trying to put SPAMD in front of an Exchange Server but i think doing  
it in the wrong way.


My Lab is like this :

   FW
|
 SPAMD--Exchange

SPAMD and Exchange are in separate LAN. Routing is done via the FW


I'm just running smtpd on the spamd box with:

listen on egress
accept from any for any relay via smtp://Exchange \
hostname spamd.example.com




--
Gemaakt met Opera's e-mailprogramma: http://www.opera.com/mail/

Re: NFS daemon is very slow in server-to-client direction in TCP mode

[Brian Conway]

I ran into that same behavior with a Debian client before lowering the
readsize and writesize in the NFS mount options (they defaulted to 64K I
believe). Try starting at 8096 and working your way up until you find the
failure point.

Brian Conway
Software Engineer, Owner
RCE Software, LLC

I was using nfs service on OpenBSD (amd64) since version 5.6.

The whole setup process repeats the steps in official FAQ on the OpenBSD's
homepage.
The problem was and remains (now in version 5.9 amd64):
in TCP mode the upload speed is about 20-30MB/s
which is quite acceptable for my needs, but the download speed is about
32Kb/s.

As a workaround I had set up the debain client to connect to my NFS-server
in UDP mode.
In that mode the speed was good in both directions.

In recent versions of debian OS the UDP option for NFS-client disappeared.
The question is: is it possible to fix TCP mode in NFS server or is it
still the problem of the NFS client?

Best Regards
Rodin Maxim

Re: L2TP/IPSec via npppd won't work with Android 5.x

[Renaud Allard]

On 03/25/2016 04:27 PM, Sly Midnight wrote:
> Hello,
>
> I don't mean to bring up an old thread, but I was wondering if anyone
> else was experiencing issues with OpenBSD 5.8 and Android 6.0.1
> (preferably the version on the Nexus line of devices) connecting to
> ipsec/l2tp.
>
> I had this working late last year some time and hadn't used it in a few
> months.  When I went to use it again a few days ago it didn't work at
> all.  After rebooting my phone and even trying it on my tablet that
> coincidentally runs the exact same version of stock Android 6.0.1, it
> too didn't work there.
>
> I have confirmed some interesting behavior.
>
> First if I tweak the ipsec.conf stanza to something like:
>
>> ike passive esp transport \
>> proto udp from X.X.X.X to any port 1701 \
>> main auth "hmac-sha2-256" enc "aes-256" group "modp1024" \
>> quick auth "hmac-sha2-s256" enc "aes-256" group "modp1024" \
>> psk "redacted"
> It creates an IPSEC SA and flow as shown by ipsecctl -s all, but npppd
> never sees a connection attempt and tcpdumping enc0 shows no traffic and
> ultimately the connection fails.
>
> If I modify it to hmac-md5, aes, modp2048 I can get my Chromebook with
> latest updates to connect successfully.
> If I modify it to hmac-sha2-256, aes-256, modp2048 I can get an iPhone
> with iOS 9.3 to connect successfully.
> If I modify it to hmac-sha, aes, modp2048 I can get a Windows 10 box to
> connect successfully.
>
> If I restore it to hmac-sha1, aes, modp1024 I can get an older Android
> tablet (one of my kid's) to connect successfully.
>
> What else can I do to troubleshoot this?  Because I signed up to a free
> 1 day trial of some Internet based VPN provider and successfully was
> able to connect to their IPSEC/L2TP VPN using my Android phone so I know
> it works.  It must just be a recent change in Android (or during the
> OpenBSD 5.7->5.8) update that is causing this incompatibility that makes
> it almost work.  Any help would be greatly appreciated.
>

I can't get android to connect with modp > 1024, but settings like this
work:
ike passive esp transport \
proto udp from A.B.C.D to any port l2tp \
main auth "hmac-sha2-256" enc "aes-256" group modp1024 \
quick auth "hmac-sha2-256" enc "aes-256" \
psk "mysharedsecret"

[demime 1.01d removed an attachment of type application/pkcs7-signature which 
had a name of smime.p7s]

Redirect SMTP traffic

[b . gruel]

Hello the list,


I trying to put SPAMD in front of an Exchange Server but i think doing 
it in the wrong way.


My Lab is like this :

  FW
   |
SPAMD--Exchange

SPAMD and Exchange are in separate LAN. Routing is done via the FW

Step 1 : Is to test if my spamdserver can just forward connexions to the 
Exchange Server


My first idea was using rdr-to in a pass rule like this
pass in log on $int_if proto tcp from any to 'spamd_ip' port smtp keep 
state rdr-to 'exchange_ip' port smtp


But i'm don't seeing the packet go out from spamd server

I'm tried with a match rule with the same result. I see the packet IN 
but never see it OUT.


Maybe my setup is wrong or i'm not using the good PF feature.

Best regards.

Bruno.

Re: Redirect SMTP traffic

[b . gruel]

Le 14.04.2016 11:51, b.gr...@sdnet.info a écrit :

Hello the list,


I trying to put SPAMD in front of an Exchange Server but i think doing
it in the wrong way.

My Lab is like this :

  FW
   |
SPAMD--Exchange

SPAMD and Exchange are in separate LAN. Routing is done via the FW

Step 1 : Is to test if my spamdserver can just forward connexions to
the Exchange Server

My first idea was using rdr-to in a pass rule like this
pass in log on $int_if proto tcp from any to 'spamd_ip' port smtp keep
state rdr-to 'exchange_ip' port smtp

But i'm don't seeing the packet go out from spamd server

I'm tried with a match rule with the same result. I see the packet IN
but never see it OUT.

Maybe my setup is wrong or i'm not using the good PF feature.

Best regards.

Bruno.


Re,

By writing the previous mail i thought about this.. It's a new server i 
maybe need to activate forwading . if its this sorry for the noise.


I will test this tonight.

But if you will doing it n a different way let me know.

Best regard

Donation of machines

[Guillaume Muller]

Hi all,

My (French) company has 2 Dell servers it does not use anymore (one
PowerEdge T310 and one PowerEdge T610, one of them filled with RAM, I
think up to 32GB). I convinced my boss to donate them to an
association rather that just trash them. As a fan (but user-only :[)
of OpenBSD, I wanted the machines to help the project. Unfortunately,
the 3 associations I knew in France:
http://openbsd-france.org/
http://www.bsdfrance.fr/
http://www.gcu-squad.org/
are dead or almost dead...

As anyone here any idea to which association we could give machines?

Thanks in advance

GM
PS1: According to the French law, there might be some papers to fill
(because of the disposal of non-ecological devices), so the donation
preferably has to go to a legal entity.
PS2: We have no way of transporting the machines ourselves, so people
that want them will have to come get them in Palaiseau :)

NFS daemon is very slow in server-to-client direction in TCP mode

[Максим]

I was using nfs service on OpenBSD (amd64) since version 5.6.

The whole setup process repeats the steps in official FAQ on the OpenBSD's 
homepage.
The problem was and remains (now in version 5.9 amd64): 
in TCP mode the upload speed is about 20-30MB/s
which is quite acceptable for my needs, but the download speed is about 32Kb/s.

As a workaround I had set up the debain client to connect to my NFS-server in 
UDP mode.
In that mode the speed was good in both directions.

In recent versions of debian OS the UDP option for NFS-client disappeared.
The question is: is it possible to fix TCP mode in NFS server or is it still 
the problem of the NFS client?

Best Regards
Rodin Maxim

Re: Xeon-D 10GE nics

[Jonathan Gray]

On Tue, Apr 12, 2016 at 01:15:49PM +, Stuart Henderson wrote:
> Does anyone know if the 10GE NICs on Xeon-D SoCs work on OpenBSD yet?
> e.g. "Dual 10G SFP+ from D-1500 SoC" on Supermicro SYS-5018D-FN8T.
> 

The windows driver has:

0x10a6 "Intel(R) X552 Multi-Function Network Device"
0x15ad "Intel(R) Ethernet Connection X552/X557-AT 10GBASE-T"

0x15ad is IXGBE_DEV_ID_X550EM_X_10G_T in FreeBSD.

So someone needs to do another merge of the Intel code in FreeBSD for it
to work with ix(4).

Re: Belkin PCMCIA wifi

[Stefan Sperling]

On Wed, Apr 13, 2016 at 11:56:46PM +0200, hans wrote:
> I have this Belkin card (model F5D8010)
> which reports on current/amd64 as
> 
> unknown vendor 0x17cb product 0x0001 (class network subclass ethernet, rev 
> 0x01) at cardbus1 dev 0 function 0 not configured
> 
> but does not show up as an interface.

This seems to be using a chipset called "Airgo".

There is a Linux driver for it called agnx.
http://git.sipsolutions.net/?p=agnx.git

It seems like this wasn't merged into mainline, even though it was
submitted here: http://lkml.iu.edu/hypermail/linux/kernel/0810.3/2330.html

> What can I do to help make it supported?

Write a BSD-licensed driver for it.