Re: ffmpeg6 and SSP?

2023-11-13 Thread Vitaly Shevtsov
Hello! What if you put -D_FORTIFY_SOURCE=0 into Makefile, will it help? On Tue, Nov 14, 2023 at 9:05 AM pin wrote: > > Hi all, > > I've reported off-list to wiz@ that building ffmpeg6 on current from Saturday > Nov. 11 2023 failed for me. > > The error is/was the same as reported here, >

Re: ffmpeg6 and SSP?

2023-11-13 Thread pin
Hi all, I've reported off-list to wiz@ that building ffmpeg6 on current from Saturday Nov. 11 2023 failed for me. The error is/was the same as reported here, https://mail-index.netbsd.org/pkgsrc-users/2023/11/13/msg038461.html I can now confirm that downgrading userland to Nov. 8 2023 allows

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Brian Buhrow
Hello Taylor. Just as a point of reference, smtp clients that connect to domains hosted by Microsoft, i.e. outlook.com and any other domains that use their infrastructure for e-mail, will have to present a valid SSL certificate in order to submit mail to their smtp servers. But that

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Jörg Sonnenberger
On Tuesday, November 14, 2023 3:39:53 AM CET Taylor R Campbell wrote: > Unless anything has changed in the past couple years, I don't think > there is any widespread deployment of SMTP TLS server authentication > that means anything for general MTAs -- at best, TLS in SMTP serves as >

daily CVS update output

2023-11-13 Thread NetBSD source update
Updating src tree: P src/distrib/notes/Makefile.inc P src/sys/dev/ic/dwc_eqos.c P src/sys/dev/ic/dwc_eqos_reg.h P src/sys/dev/pci/pcidevs P src/sys/dev/pci/pcidevs.h P src/sys/dev/pci/pcidevs_data.h P src/sys/dev/pci/ixgbe/ix_txrx.c P src/sys/lib/libkern/Makefile.compiler-rt Updating xsrc tree:

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Taylor R Campbell
[trimming tech-crypto from cc because this is a policy and configuration issue, not a cryptography issue] > Date: Mon, 13 Nov 2023 20:34:04 +0100 > From: Manuel Bouyer > > I'm facing an issue with postfix+openssl3 which may be critical (depending > on how it can be fixed). > > Now my postfix

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Steffen Nurpmeso
Manuel Bouyer wrote in : ... |No, I need a strong encrypted connection You surely have stripped the most relevant quote. Other than that i cannot help. --steffen | |Der Kragenbaer,The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Steffen Nurpmeso
Manuel Bouyer wrote in : |On Mon, Nov 13, 2023 at 10:24:56PM +0100, Steffen Nurpmeso wrote: |> Manuel Bouyer wrote in |> : |>|Hello |>|I'm facing an issue with postfix+openssl3 which may be critical (dependi\ |>|ng |>|on how it can be fixed). |>| |>|Now my postfix setup fails to send

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Lloyd Parkes
Maybe rebuild Postfix with the option -DSSL_SECOP_PEER ? That causes Postfix to always set security level 0 when using TLS. Cheers, Lloyd

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Manuel Bouyer
On Tue, Nov 14, 2023 at 11:10:16AM +1300, Lloyd Parkes wrote: > > > On 14/11/23 10:56, Joerg Sonnenberger wrote: > > > > NIST has been sunsetting SHA1 for a long time, 2016 in fact. In many cases, > > there is a better trust chain > > for Comodo intermediary certificates and admins should be

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Manuel Bouyer
On Mon, Nov 13, 2023 at 10:56:00PM +0100, Joerg Sonnenberger wrote: > On Monday, November 13, 2023 8:34:04 PM CET Manuel Bouyer wrote: > > Hello > > I'm facing an issue with postfix+openssl3 which may be critical (depending > > on how it can be fixed). > > > > Now my postfix setup fails to send

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Lloyd Parkes
On 14/11/23 10:56, Joerg Sonnenberger wrote: NIST has been sunsetting SHA1 for a long time, 2016 in fact. In many cases, there is a better trust chain for Comodo intermediary certificates and admins should be installing those. I'm not sure that's what Comodo has, even though it is the

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Manuel Bouyer
On Mon, Nov 13, 2023 at 10:58:38PM +0100, Steffen Nurpmeso wrote: > Manuel Bouyer wrote in > : > |On Mon, Nov 13, 2023 at 10:24:56PM +0100, Steffen Nurpmeso wrote: > |> Manuel Bouyer wrote in > |> : > |>|Hello > |>|I'm facing an issue with postfix+openssl3 which may be critical (dependi\ >

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Joerg Sonnenberger
On Monday, November 13, 2023 8:34:04 PM CET Manuel Bouyer wrote: > Hello > I'm facing an issue with postfix+openssl3 which may be critical (depending > on how it can be fixed). > > Now my postfix setup fails to send mails with > Nov 13 20:20:53 comore postfix/smtp[6449]: warning: TLS library

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Manuel Bouyer
On Mon, Nov 13, 2023 at 10:24:56PM +0100, Steffen Nurpmeso wrote: > Manuel Bouyer wrote in > : > |Hello > |I'm facing an issue with postfix+openssl3 which may be critical (depending > |on how it can be fixed). > | > |Now my postfix setup fails to send mails with > |Nov 13 20:20:53 comore

Re: openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Steffen Nurpmeso
Manuel Bouyer wrote in : |Hello |I'm facing an issue with postfix+openssl3 which may be critical (depending |on how it can be fixed). | |Now my postfix setup fails to send mails with |Nov 13 20:20:53 comore postfix/smtp[6449]: warning: TLS library problem: \ |error:0A00018E:SSL

Re: Aquantia AQC100 issues

2023-11-13 Thread Andrius V
This patch seems to work as well without any noticeable difference. NetBSD is actually reporting device like this: aq0 at pci8 dev 0 function 0: Aquantia AQC100 10 Gigabit Network Adapter (rev. 0x02) aq0: Atlantic revision B1, F/W version 3.1.58 On Sun, Nov 12, 2023 at 11:58 PM matthew green

openssl3+postfix issue (ca md too weak)

2023-11-13 Thread Manuel Bouyer
Hello I'm facing an issue with postfix+openssl3 which may be critical (depending on how it can be fixed). Now my postfix setup fails to send mails with Nov 13 20:20:53 comore postfix/smtp[6449]: warning: TLS library problem: error:0A00018E:SSL routines::ca md too

Re: sys/dev/usb/if_axen.c

2023-11-13 Thread sc . dying
hi, On 2023/11/13 12:29, Makoto Fujiwara wrote: > Hi, > I have following device: > - > axen0 at uhub3 port 1 > axen0: ASIX (0x0b95) AX88179A (0x1790), rev 2.10/2.00, addr 3 > axen0: AX88179 > ukphy0 at axen0 phy 3: OUI 0x00e038, model 0x0006, rev. 1 > ukphy0: 10baseT,

Re: sys/dev/usb/if_axen.c

2023-11-13 Thread Robert Swindells
Makoto Fujiwara wrote: > I have following device: > - > axen0 at uhub3 port 1 > axen0: ASIX (0x0b95) AX88179A (0x1790), rev 2.10/2.00, addr 3 > axen0: AX88179 > ukphy0 at axen0 phy 3: OUI 0x00e038, model 0x0006, rev. 1 > ukphy0: 10baseT, 10baseT-FDX, 100baseTX,

Re: sys/dev/usb/if_axen.c

2023-11-13 Thread Michael van Elst
mak...@ki.nu (Makoto Fujiwara) writes: >I've compared to openbsd: if_axen.c > https://raw.githubusercontent.com/openbsd/src/master/sys/dev/usb/if_axen.c >to N, and there are so many differencies. >Does this (N) if_axen.c works on any installation ? axen seems to work, but I can see that the

Re: sys/dev/usb/if_axen.c

2023-11-13 Thread Lizbeth Mutterhunt, Ph.D
I have the same problem with this Ethernet adapter! Getting a buffer problem, as notebook doesn’t have ether, I use the axen0, but still no net! Wenn einem gar niets meer einfällt, schreit man auch nix. Mijn mute reminder! > Op 13.11.2023 om 13:30 heeft Makoto Fujiwara het volgende >

sys/dev/usb/if_axen.c

2023-11-13 Thread Makoto Fujiwara
Hi, I have following device: - axen0 at uhub3 port 1 axen0: ASIX (0x0b95) AX88179A (0x1790), rev 2.10/2.00, addr 3 axen0: AX88179 ukphy0 at axen0 phy 3: OUI 0x00e038, model 0x0006, rev. 1 ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT-FDX, auto

audio issue on -current

2023-11-13 Thread Vitaly Shevtsov
Hello! I'm using the current version. When I'm listening to music I get this error after some time: audio1(hdafg1): audio_write: device timeout, seq=16987, usrbuf=60224/H60224, outbuf=8192/8192 audio1(hdafg1): audio_drain: device timeout, seq=16987, usrbuf=60224/H60224, outbuf=8192/8192 I tried