Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Clifton Royston
On Fri, Dec 18, 2009 at 05:32:41PM -0800, Chris H wrote: Greetings, A recent (cvs checkout of src/ports on 2009-12-09) install of 8 seems to indicate that changes in SSL have made it virtually unusable. I've spent the past 3 days attempting to (re)create an SSL enabled virtual host that

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Matthew Seaman
Chris H wrote: Greetings, A recent (cvs checkout of src/ports on 2009-12-09) install of 8 seems to indicate that changes in SSL have made it virtually unusable. I've spent the past 3 days attempting to (re)create an SSL enabled virtual host that serves web based access to local mail. Since

SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread H. Ingow
First my apologies for breaking the thread. We also had this issue and tried to find an acceptable solution. To make a long story short: Please try to compile your application against the version of openssl available in the ports tree. As you already mentioned (SA-09:15) breaks renegotiation

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Maxim Dounin
Hello! On Fri, Dec 18, 2009 at 05:32:41PM -0800, Chris H wrote: Greetings, A recent (cvs checkout of src/ports on 2009-12-09) install of 8 seems to indicate that changes in SSL have made it virtually unusable. I've spent the past 3 days attempting to (re)create an SSL enabled virtual

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Chris H
Greetings Clifton, and thank you for your reply. On Sat, December 19, 2009 12:16 am, Clifton Royston wrote: On Fri, Dec 18, 2009 at 05:32:41PM -0800, Chris H wrote: Greetings, A recent (cvs checkout of src/ports on 2009-12-09) install of 8 seems to indicate that changes in SSL have made it

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Chris H
Greetings Matthew, and thank you very much for your reply. On Sat, December 19, 2009 12:33 am, Matthew Seaman wrote: Chris H wrote: Greetings, A recent (cvs checkout of src/ports on 2009-12-09) install of 8 seems to indicate that changes in SSL have made it virtually unusable. I've spent the

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Chris H
Greetings, and thank you for taking the time to respond. On Sat, December 19, 2009 12:58 am, H. Ingow wrote: First my apologies for breaking the thread. We also had this issue and tried to find an acceptable solution. To make a long story short: Please try to compile your application against

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Maxim Dounin
Hello! On Sat, Dec 19, 2009 at 09:58:49AM +0100, H. Ingow wrote: [...] Please try to compile your application against the version of openssl available in the ports tree. As you already mentioned (SA-09:15) breaks renegotiation with base system's openssl by fixing a security issue ( it

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Chris H
Hello Maxim, and thank you for taking the time to reply. On Sat, December 19, 2009 2:14 am, Maxim Dounin wrote: Hello! On Fri, Dec 18, 2009 at 05:32:41PM -0800, Chris H wrote: Greetings, A recent (cvs checkout of src/ports on 2009-12-09) install of 8 seems to indicate that changes in SSL

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Chris H
On Sat, December 19, 2009 3:13 am, Maxim Dounin wrote: Hello! On Sat, Dec 19, 2009 at 09:58:49AM +0100, H. Ingow wrote: [...] Please try to compile your application against the version of openssl available in the ports tree. As you already mentioned (SA-09:15) breaks renegotiation

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Maxim Dounin
Hello! On Sat, Dec 19, 2009 at 03:18:21AM -0800, Chris H wrote: Hello Maxim, and thank you for taking the time to reply. On Sat, December 19, 2009 2:14 am, Maxim Dounin wrote: Hello! On Fri, Dec 18, 2009 at 05:32:41PM -0800, Chris H wrote: Greetings, A recent (cvs checkout of

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Maxim Dounin
Hello! On Sat, Dec 19, 2009 at 03:23:57AM -0800, Chris H wrote: On Sat, December 19, 2009 3:13 am, Maxim Dounin wrote: Hello! On Sat, Dec 19, 2009 at 09:58:49AM +0100, H. Ingow wrote: [...] Please try to compile your application against the version of openssl available in

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread H. Ingow
Sorry if my proposal won't fit in this case and thanks, Maxim for clearing out what exactly to be aware of to have applications run with openssl .0.9.8l But for the sake of completeness /usr/ports/security/tor-devel is very well capable of handling re-negotiation. see src/common/tortls.c and

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Sean
On 19/12/2009, at 11:29 PM, Maxim Dounin wrote: No, my previous suggestion is unrelated. Additionally, to re-enable renegotiation in openssl 0.9.8l you need an application which is able to set SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION in s-s3-flags. I haven't seen any yet, and

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Chris H
Hello Maxim, and thank you again for your reply. On Sat, December 19, 2009 3:54 am, Maxim Dounin wrote: Hello! On Sat, Dec 19, 2009 at 03:18:21AM -0800, Chris H wrote: Hello Maxim, and thank you for taking the time to reply. On Sat, December 19, 2009 2:14 am, Maxim Dounin wrote: Hello!

Failure during GENERIC (i386) kernel build at r200721

2009-12-19 Thread David Wolfskill
Attempted clean kernel build, running FreeBSD freebeast.catwhisker.org 7.2-STABLE FreeBSD 7.2-STABLE #11 r200664: Fri Dec 18 05:18:46 PST 2009 r...@freebeast.catwhisker.org:/common/S2/obj/usr/src/sys/GENERIC i386 [Immediately following a make buldworld...] Kernel build for GENERIC

Re: Failure during GENERIC (i386) kernel build at r200721

2009-12-19 Thread David Wolfskill
I looked in my stbale/8 sources for comparison and found the definition of CPUID_TO_FAMILY in sys/i386/include/specialreg.h. Here's a diff comparing the stable/7 vs. the stable/8 versions of that file: --- /usr/src/sys/i386/include/specialreg.h 2009-12-09 04:36:55.0 -0800 +++

Re: Failure during GENERIC (i386) kernel build at r200721

2009-12-19 Thread Chris H
On Sat, December 19, 2009 5:35 am, David Wolfskill wrote: Attempted clean kernel build, running FreeBSD freebeast.catwhisker.org 7.2-STABLE FreeBSD 7.2-STABLE #11 r200664: Fri Dec 18 05:18:46 PST 2009 r...@freebeast.catwhisker.org:/common/S2/obj/usr/src/sys/GENERIC i386 [Immediately

Re: Failure during GENERIC (i386) kernel build at r200721

2009-12-19 Thread Chris H
On Sat, December 19, 2009 5:54 am, Chris H wrote: On Sat, December 19, 2009 5:35 am, David Wolfskill wrote: Attempted clean kernel build, running FreeBSD freebeast.catwhisker.org 7.2-STABLE FreeBSD 7.2-STABLE #11 r200664: Fri Dec 18 05:18:46 PST 2009

ET.UTF-8.out: Inappropriate ioctl for device (buildworld RELENG8)

2009-12-19 Thread Jeronimo Calvo
Hi folks, Im getting the following error when building world for RELENG_8 using GENERIC. Any ideas on how to skip that? === share/mklocale (all) mklocale -o UTF-8.out /usr/src/share/mklocale/UTF-8.src mklocale -o am_ET.UTF-8.out /usr/src/share/mklocale/am_ET.UTF-8.src am_ET.UTF-8.out:

Re: Failure during GENERIC (i386) kernel build at r200721

2009-12-19 Thread David Wolfskill
On Sat, Dec 19, 2009 at 06:05:33AM -0800, Chris H wrote: ... Greetings, What are the chances you made no declaration as to your CPU type in your KERNCONF? eg; 1386 Just for clarity; from /usr/src/sys/i386/conf/GENERIC: machine i386 With respect, that is not

Re: SSL appears to be broken in 8-STABLE/RELEASE

2009-12-19 Thread Maxim Dounin
Hello! On Sat, Dec 19, 2009 at 05:23:53AM -0800, Chris H wrote: [...] Indeed. I understand that. In fact my OP (original post) indicated my use was in a vhost - eg; NameVirtualHost host.ip.add.ress:443 VirtualHost host.ip.add.ress:443 SSLEnable SSLVerifyClient (options 0-3;none work)

Re: ET.UTF-8.out: Inappropriate ioctl for device (buildworld RELENG8)

2009-12-19 Thread Dimitry Andric
On 2009-12-19 15:42, Jeronimo Calvo wrote: Hi folks, Im getting the following error when building world for RELENG_8 using GENERIC. Any ideas on how to skip that? === share/mklocale (all) mklocale -o UTF-8.out /usr/src/share/mklocale/UTF-8.src mklocale -o am_ET.UTF-8.out

Re: em interface slow down on 8.0R

2009-12-19 Thread Hiroki Sato
Jack Vogel jfvo...@gmail.com wrote in 2a41acea0912052327t7830f85aw5b4b581ab3f09...@mail.gmail.com: jf The 82573, when onboard (LOM) is usually special, it is used by system jf management jf firmware. Go to the system BIOS and turn off management, see if that jf eliminates the jf periodic hang.

[releng_7 tinderbox] failure on amd64/amd64

2009-12-19 Thread FreeBSD Tinderbox
TB --- 2009-12-19 19:03:58 - tinderbox 2.6 running on freebsd-stable.sentex.ca TB --- 2009-12-19 19:03:58 - starting RELENG_7 tinderbox run for amd64/amd64 TB --- 2009-12-19 19:03:58 - cleaning the object tree TB --- 2009-12-19 19:04:35 - cvsupping the source tree TB --- 2009-12-19 19:04:35 -

[releng_7 tinderbox] failure on i386/i386

2009-12-19 Thread FreeBSD Tinderbox
TB --- 2009-12-19 20:07:19 - tinderbox 2.6 running on freebsd-stable.sentex.ca TB --- 2009-12-19 20:07:19 - starting RELENG_7 tinderbox run for i386/i386 TB --- 2009-12-19 20:07:19 - cleaning the object tree TB --- 2009-12-19 20:07:49 - cvsupping the source tree TB --- 2009-12-19 20:07:49 -

[releng_7 tinderbox] failure on i386/pc98

2009-12-19 Thread FreeBSD Tinderbox
TB --- 2009-12-19 20:49:50 - tinderbox 2.6 running on freebsd-stable.sentex.ca TB --- 2009-12-19 20:49:50 - starting RELENG_7 tinderbox run for i386/pc98 TB --- 2009-12-19 20:49:51 - cleaning the object tree TB --- 2009-12-19 20:50:09 - cvsupping the source tree TB --- 2009-12-19 20:50:09 -

Re: Failure during GENERIC (i386) kernel build at r200721

2009-12-19 Thread Chris H
On Sat, December 19, 2009 9:31 am, David Wolfskill wrote: On Sat, Dec 19, 2009 at 06:05:33AM -0800, Chris H wrote: ... Greetings, What are the chances you made no declaration as to your CPU type in your KERNCONF? eg; 1386 Just for clarity; from /usr/src/sys/i386/conf/GENERIC:

Re: Failure during GENERIC (i386) kernel build at r200721

2009-12-19 Thread Michael Butler
On 12/19/09 08:35, David Wolfskill wrote: Attempted clean kernel build, running [ .. snip .. ] /usr/src/sys/i386/i386/mca.c:510: warning: implicit declaration of function 'CPUID_TO_FAMILY' /usr/src/sys/i386/i386/mca.c:510: warning: nested extern declaration of 'CPUID_TO_FAMILY'

HEADSUP: Call for FreeBSD Status Reports (Oct - Dec 2009)

2009-12-19 Thread Daniel Gerzo
Dear all, Another quarter is soon to be finished and as such, I would like to remind you to submit your status reports as soon as possible, because the submissions for this quarter (covering period of Oct - Dec 2009) are due by Janurary 15th, 2010. I believe a lot of things have happened in

Re: problems with SATA controller after recent RELENG_8 upgrade

2009-12-19 Thread Garance A Drosehn
At 9:41 PM +0200 12/15/09, Alexander Motin wrote: Looks like it was working first, until something happened. I've reread all Promise related changes and don't see problem there. The only idea I have is that it could be larger transfer, which was not used before. Try to apply this patch to get