Re: New tool to (quickly) check for available package upgrades

2020-06-16 Thread Marc Espie
On Tue, Jun 16, 2020 at 04:59:07PM -0400, Jeremy O'Brien wrote: > Hey misc@, > > I wrote a quick little tool here: > https://github.com/neutralinsomniac/obsdpkgup in Go to show available package > upgrades from your configured mirror. > > It takes no more than a few seconds (the time it takes

Re: Openbsd 6.6 amd64 stable bridge with 90 vlans does not forward packets after reboot

2020-06-16 Thread Tom Smyth
Hello, This Issue is resolved in OpenBSD6.7 Release and OpenBSD 6.7 Stable, I no longer have to manually restart the bridge interface after reboot Thanks On Fri, 20 Mar 2020 at 01:20, Tom Smyth wrote: > Hello, > > I have a box that I use to aggregate a number of vlans which are > isolated

Re: IKEv2 difference with 6.7

2020-06-16 Thread Daniel Ouellet
Hi, > What I see is that the initial message is received but ignored, so this > side here probably runs into some kind of error. > To find out what exactly causes this, a more verbose log would help. > You could manually start iked with -dvv and share the log for an > incoming IKE_SA_INIT request

Re: IKEv2 difference with 6.7

2020-06-16 Thread Tobias Heider
On Tue, Jun 16, 2020 at 05:08:47PM -0400, Daniel Ouellet wrote: > > The retransmits tell us that the peer doesn't answer. Or, to be more > > precise, it doesn't receive *any* message from the peer. Can you have > > a look at the peer's logs? Does the peer see these packets but chooses > > not

Re: IKEv2 difference with 6.7

2020-06-16 Thread Stuart Henderson
On 2020-06-12, Tobias Heider wrote: > Probably related to the following change documented in > https://www.openbsd.org/faq/upgrade67.html: > > iked(8)/isakmpd(8). The type of incoming ipsec(4) flows installed by iked(8) > or > isakmpd(8) was changed from "use" to "require". This means

Re: New tool to (quickly) check for available package upgrades

2020-06-16 Thread Stuart Henderson
On 2020-06-16, Jeremy O'Brien wrote: > On Tue, Jun 16, 2020, at 17:19, Daniel Jakots wrote: >> I think if I wanted to compare packages between a machine of mine and a >> mirror, I would compare the quirks package signature timestamps. On >> your machine you can find it with >> $ grep

Re: New tool to (quickly) check for available package upgrades

2020-06-16 Thread Jeremy O'Brien
On Tue, Jun 16, 2020, at 17:19, Daniel Jakots wrote: > I think if I wanted to compare packages between a machine of mine and a > mirror, I would compare the quirks package signature timestamps. On > your machine you can find it with > $ grep digital-signature /var/db/pkg/quirks*/+CONTENTS > and on

Re: New tool to (quickly) check for available package upgrades

2020-06-16 Thread Daniel Jakots
On Tue, 16 Jun 2020 16:59:07 -0400, "Jeremy O'Brien" wrote: > I wrote a quick little tool here: > https://github.com/neutralinsomniac/obsdpkgup in Go to show available > package upgrades from your configured mirror. > > It takes no more than a few seconds (the time it takes to download >

Re: IKEv2 difference with 6.7

2020-06-16 Thread Daniel Ouellet
> The retransmits tell us that the peer doesn't answer. Or, to be more > precise, it doesn't receive *any* message from the peer. Can you have > a look at the peer's logs? Does the peer see these packets but chooses > not to reply? Is the peer also an OpenBSD? 6.6? 6.7? Not a big deal, but

New tool to (quickly) check for available package upgrades

2020-06-16 Thread Jeremy O'Brien
Hey misc@, I wrote a quick little tool here: https://github.com/neutralinsomniac/obsdpkgup in Go to show available package upgrades from your configured mirror. It takes no more than a few seconds (the time it takes to download index.txt from the package repo) to show you all packages that

Thoughts or links on optimally secure defaults for pf.conf and fstab, whilst aiming to minimise support issues.

2020-06-16 Thread Switch 1024
> > -- Forwarded message -- > From: Kevin Chadwick > To: misc@openbsd.org > Cc: > Bcc: > Date: Sun, 14 Jun 2020 13:58:39 + > Subject: Thoughts or links on optimally secure defaults for pf.conf and > fstab, whilst aiming to minimise support issues. > We are basing the server

Re: IKEv2 difference with 6.7

2020-06-16 Thread Patrick Wildt
On Tue, Jun 16, 2020 at 02:11:21PM -0400, Daniel Ouellet wrote: > > > On 6/16/20 1:35 PM, Patrick Wildt wrote: > > On Tue, Jun 16, 2020 at 01:09:32PM -0400, Daniel Ouellet wrote: > >> Hi Tobias, > >> > >> I put below the full configuration and the flows as well with the 6.6 > >> binary and

Re: IKEv2 difference with 6.7

2020-06-16 Thread tristan
Hi guys, First of all, thanks for the amazing work you've done with 6.7! That said, I've got the same issue here after I updated to 6.7. The VPN keeps cutting off every 10 minutes or so. Is there any way I could fix that ? Here's my configuration: local_gw="203.0.113.1"

Re: IKEv2 difference with 6.7

2020-06-16 Thread Daniel Ouellet
On 6/16/20 1:35 PM, Patrick Wildt wrote: > On Tue, Jun 16, 2020 at 01:09:32PM -0400, Daniel Ouellet wrote: >> Hi Tobias, >> >> I put below the full configuration and the flows as well with the 6.6 >> binary and switch to the 6.7 binary without any other changes as well as >> the full config. >>

Re: IKEv2 difference with 6.7

2020-06-16 Thread Patrick Wildt
On Tue, Jun 16, 2020 at 01:09:32PM -0400, Daniel Ouellet wrote: > Hi Tobias, > > I put below the full configuration and the flows as well with the 6.6 > binary and switch to the 6.7 binary without any other changes as well as > the full config. > > The config may be a bit weird at first as I

Re: IKEv2 difference with 6.7

2020-06-16 Thread Daniel Ouellet
Hi Tobias, I put below the full configuration and the flows as well with the 6.6 binary and switch to the 6.7 binary without any other changes as well as the full config. The config may be a bit weird at first as I tunnel routable IP's over the iked over a Verizon Fios line. You can't get

Re: IKEv2 difference with 6.7

2020-06-16 Thread Tobias Heider
Hi, On Tue, Jun 16, 2020 at 03:25:12PM +0200, tris...@pilat.me wrote: > Hi guys, > > First of all, thanks for the amazing work you've done with 6.7! > > That said, I've got the same issue here after I updated to 6.7. The VPN > keeps cutting off every 10 minutes or so. Is there any way I could

[www] LibreSSL 3.1.3: wrong date of release

2020-06-16 Thread Alex Naumov
Hi, the date of release should be updated. Cheers, Alex Index: libressl/index.html === RCS file: /cvs/www/libressl/index.html,v retrieving revision 1.104 diff -u -p -r1.104 index.html --- libressl/index.html 16 Jun 2020 02:06:47

Re: IKEv2 difference with 6.7

2020-06-16 Thread Tobias Heider
On Fri, Jun 12, 2020 at 09:27:18PM +0200, Tobias Heider wrote: > On Fri, Jun 12, 2020 at 03:31:56PM +0200, Patrik Ragnarsson wrote: > > Hi, > > > > We have two OpenBSD machines acting as gateways for our network using > > CARP and IPsec (IKEv2). > > > > When the machines were running OpenBSD

Re: IKEv2 difference with 6.7

2020-06-16 Thread Tobias Heider
Hi Daniel, On Mon, Jun 15, 2020 at 08:04:43PM -0400, Daniel Ouellet wrote: > > Probably related to the following change documented in > > https://www.openbsd.org/faq/upgrade67.html: > > > > iked(8)/isakmpd(8). The type of incoming ipsec(4) flows installed by > > iked(8) or > > isakmpd(8) was

Re: mpd: failed to open default sndio device

2020-06-16 Thread Stuart Henderson
On 2020-06-15, James wrote: > Did you find a solution to this? Copying ~/.sndio/cookie into _mpd's > home directory did not fix this error for me. > > On Fri, Oct 18, 2019 at 02:34:48PM +0300, Кирилл wrote: >>Hello. >>After install mpd: >>$ mpc play >>Antimatter - Over Your Shoulder >>[paused]