Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Simon Kelley
On 01/04/14 19:14, Nathan Dorfman wrote: > With such superior understanding, shouldn't you be adding OpenSSL support > to dnsmasq yourself? That way you can deal with their byzantine API and the > resulting bugs, and Simon can instead do something actually worthwhile. > > But don't do that before

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread /dev/rob0
On Tue, Apr 01, 2014 at 10:45:44AM -0700, Dave Taht wrote: > And thus I enthusiastically support other OSes than linux, > other dns servers besides bind, and other crypto libraries > besides openssl. One named to rule them all One named to find them One named to bring them all And in the darkness

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Nathan Dorfman
With such superior understanding, shouldn't you be adding OpenSSL support to dnsmasq yourself? That way you can deal with their byzantine API and the resulting bugs, and Simon can instead do something actually worthwhile. On Tue, Apr 1, 2014 at 2:07 PM, Brad Smith wrote: > On 01/04/14 2:02 PM,

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Brad Smith
On 01/04/14 2:02 PM, Nathan Dorfman wrote: Maybe OpenSSL is the right choice anyway, I don't know. But, I thought someone should speak up for nettle :) speaking up for nettle means nothing when you don't understand the issue at hand. -- This message has been scanned for viruses and dangerous c

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Nathan Dorfman
On Tue, Apr 1, 2014 at 12:54 PM, /dev/rob0 wrote: > a I can't speak to an actual code audit, but nettle isn't some third-rate clone. It's a mature, actively developed and (importantly) thoroughly documented project. If I were to undertake such an audit however, I would surely prefer to have t

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Brad Smith
On 01/04/14 1:45 PM, Dave Taht wrote: On Tue, Apr 1, 2014 at 9:54 AM, /dev/rob0 wrote: On Tue, Mar 25, 2014 at 07:08:44PM -0400, Alex Xu wrote: On 25/03/14 07:03 PM, sven falempin wrote: my concern of nettle vs openssl is the amount of review and testing nettle did get compared to something m

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Dave Taht
On Tue, Apr 1, 2014 at 9:54 AM, /dev/rob0 wrote: > On Tue, Mar 25, 2014 at 07:08:44PM -0400, Alex Xu wrote: >> On 25/03/14 07:03 PM, sven falempin wrote: >> > my concern of nettle vs openssl is the amount of review and >> > testing nettle did get compared to something more widely(!) >> > used >> >

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread /dev/rob0
On Tue, Mar 25, 2014 at 07:08:44PM -0400, Alex Xu wrote: > On 25/03/14 07:03 PM, sven falempin wrote: > > my concern of nettle vs openssl is the amount of review and > > testing nettle did get compared to something more widely(!) > > used > > something being used a lot != something being good Ab

Re: [Dnsmasq-discuss] ipv6 slaac with global prefixes

2014-04-01 Thread Vasiliy Tolstov
2014-04-01 12:14 GMT+04:00 Albert ARIBAUD : > DHCP and/*OR* network and/*OR* system logs... :) Nothing printed =). Sorry for noise. I'm switch to radv via bird routing daemon =). -- Vasiliy Tolstov, e-mail: v.tols...@selfip.ru jabber: v...@selfip.ru

Re: [Dnsmasq-discuss] ipv6 slaac with global prefixes

2014-04-01 Thread Albert ARIBAUD
Le 01/04/2014 09:38, Vasiliy Tolstov a écrit : 2014-04-01 11:26 GMT+04:00 Albert ARIBAUD : Ok, then, did you have a look at your router's and client's DHCP, network and/or system logs? why i need dhcp logs? i don't use it. all that i have - dnsmasq with radv enabled and nodes with slaac confi

Re: [Dnsmasq-discuss] ipv6 slaac with global prefixes

2014-04-01 Thread Vasiliy Tolstov
2014-04-01 11:26 GMT+04:00 Albert ARIBAUD : > Ok, then, did you have a look at your router's and client's DHCP, network > and/or system logs? why i need dhcp logs? i don't use it. all that i have - dnsmasq with radv enabled and nodes with slaac configured addresses. -- Vasiliy Tolstov, e-mail:

Re: [Dnsmasq-discuss] ipv6 slaac with global prefixes

2014-04-01 Thread Albert ARIBAUD
Hi again Vasiliy, Le 01/04/2014 09:20, Vasiliy Tolstov a écrit : 2014-04-01 11:12 GMT+04:00 Albert ARIBAUD : Hi Vasiliy, What is the *exact* command that you used to ping6? If you don't want to disclose the actual target, use e.g. albert.aribaud.net, which should resolve in IPv6 and answer (re

Re: [Dnsmasq-discuss] ipv6 slaac with global prefixes

2014-04-01 Thread Vasiliy Tolstov
2014-04-01 11:12 GMT+04:00 Albert ARIBAUD : > Hi Vasiliy, > > What is the *exact* command that you used to ping6? If you don't want to > disclose the actual target, use e.g. albert.aribaud.net, which should > resolve in IPv6 and answer (reasonable) IPv6 pings. > > Also, did you have a look at your

Re: [Dnsmasq-discuss] ipv6 slaac with global prefixes

2014-04-01 Thread Albert ARIBAUD
Le 01/04/2014 08:54, Vasiliy Tolstov a écrit : Hi all. I'm try to use ipv6 slaac addresses and get global routing in my simple network. What i need to specify in dnsmasq.conf to provide global prefix to nodes? Now i write dhcp-range=::1,slaac,5m dhcp-option=option6:dns-server,[::] enable-ra But

[Dnsmasq-discuss] ipv6 slaac with global prefixes

2014-04-01 Thread Vasiliy Tolstov
Hi all. I'm try to use ipv6 slaac addresses and get global routing in my simple network. What i need to specify in dnsmasq.conf to provide global prefix to nodes? Now i write dhcp-range=::1,slaac,5m dhcp-option=option6:dns-server,[::] enable-ra But when i ping6 some ipv6 addr i get error connect: