Re: Cannot setup more than one WireGuard peer

2023-06-01 Thread Consus
designed that way in principle. > If this can be assigned to an option, it's a kernel question entirely > specific to wireguard implementation. > > > ____ > From: owner-m...@openbsd.org on behalf of Consus > > Sent: Thursday, June 1, 2023 15:47 &g

Cannot setup more than one WireGuard peer

2023-06-01 Thread Consus
Hi, I'm using OpenBSD 7.3 and I have the following issue with WireGuard: adding more than one peer via ifconfig breaks wgaip assignments. Initial configuration: $ doas ifconfig wg0 wg0: flags=80c3 mtu 1420 index 8 priority 0 llprio 3 wgport wgpubkey groups:

Re: pflogd write /var/run/mypflogdinstance.pid?

2020-12-13 Thread Consus
On Sun, Dec 13, 2020 at 10:42:20PM +0300, Consus wrote: On Sun, Dec 13, 2020 at 08:27:24PM +0100, Harald Dunkel wrote: At least OpenBSD is not alone with this problem. On Debian there is a tool "/bin/pidof", trying to guess the pid of a daemon to kill by looking at the process li

Re: pflogd write /var/run/mypflogdinstance.pid?

2020-12-13 Thread Consus
On Sun, Dec 13, 2020 at 08:27:24PM +0100, Harald Dunkel wrote: At least OpenBSD is not alone with this problem. On Debian there is a tool "/bin/pidof", trying to guess the pid of a daemon to kill by looking at the process list as well. Some dude from Google came up with a good solution (for

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-12 Thread Consus
On Tue, May 12, 2020 at 10:47:48AM +0200, i...@aulix.com wrote: > Sure I do not have such skills, I am a very noob trying to build a > secure console and router, but most likely IMHO the backdoors are > targeted to be used from invisible virtualization trojans on X86? I > was even suggested to

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-07 Thread Consus
On Thu, May 07, 2020 at 04:00:15PM +0200, i...@aulix.com wrote: > Dear OpenBSD fans, > > Can you please comment negative appraisal from the following website: > > https://isopenbsdsecu.re/quotes/ > > I did not want to hurt anyone, just looking for a secure OS and > OpenBSD looked very nice to

Re: The 16 partitions thread

2020-04-30 Thread Consus
On Thu, Apr 30, 2020 at 07:22:35AM -0500, Ed Ahlsen-Girard wrote: > Some people read replies in misc and say, "wow, Theo and the OBSD devs > are obnoxiously harsh.' > > I read the 16 partitions thread and think, "I marvel at their patience > with interlocutors who have not read the relevant

Re: Sound is good on OpenBSD

2020-04-28 Thread Consus
On Tue, Apr 28, 2020 at 03:01:15PM +0300, Yury Grebenkin wrote: > OpenBSD gives a better sound experience on my machine than several > Linux distributions I have used and FreeBSD. Just want to say thank > you to all the people involved and state the fact that OpenBSD does > make a difference.

Re: GNU+Linux corporate takeover, was: Wine for OpenBSD?

2020-04-14 Thread Consus
On Tue, Apr 14, 2020 at 04:15:20PM -0400, Daniel Jakots wrote: > On Tue, 14 Apr 2020 16:05:56 -0400, Raul Miller > wrote: > > > Got any good docs on how to debug (or monitor) D-Bus issues? > > You're asking help to debug D-Bus on an OpenBSD mailing list? Why don't > you bring this sooo

Re: GNU+Linux corporate takeover, was: Wine for OpenBSD?

2020-04-14 Thread Consus
On Tue, Apr 14, 2020 at 04:05:56PM -0400, Raul Miller wrote: > On Tue, Apr 14, 2020 at 3:38 PM Consus wrote: > > It is modular to a degree, but separating services requires a bit of > > work so yeah, in this area systemd sucks. Documentation is pretty good > > though. I don'

Re: GNU+Linux corporate takeover, was: Wine for OpenBSD?

2020-04-14 Thread Consus
On Tue, Apr 14, 2020 at 03:12:18PM -0400, Raul Miller wrote: > On Tue, Apr 14, 2020 at 1:37 PM Consus wrote: > > On Tue, Apr 14, 2020 at 05:10:14PM +0200, Oddmund G. wrote: > > > I know all this, Ottavio. I have been using GNU+Linux since 1994 after > > > several ye

Re: GNU+Linux corporate takeover, was: Wine for OpenBSD?

2020-04-14 Thread Consus
On Tue, Apr 14, 2020 at 05:10:14PM +0200, Oddmund G. wrote: > I know all this, Ottavio. I have been using GNU+Linux since 1994 after > several years with Ultrix/VMS/OpenVMS @DEC: Slackware in the beginning, then > Debian until the forced introduction of systemd and the rest of the crap > being

Re: openbsd.org down?

2020-04-13 Thread Consus
On Mon, Apr 13, 2020 at 04:53:22PM +0300, Gökşin Akdeniz wrote: > On the other hand, DNS works. Maybe it's related to the network? $ ping -c 5 openbsd.org PING openbsd.org (129.128.5.194) 56(84) bytes of data. >From obsd3.srv.ualberta.ca (129.128.5.194) icmp_seq=1 Destination Port >Unreachable

Re: Awaiting a diff [was: Re: File systems...]

2020-01-10 Thread Consus
On 11:28 Fri 10 Jan, Stefan Sperling wrote: > On Fri, Jan 10, 2020 at 12:52:44PM +0300, Consus wrote: > > On 20:06 Thu 09 Jan, Marc Espie wrote: > > > It's been that way for ages. But no-one volunteered > > > to work on this. > > > > Anyone even knows ab

Re: Awaiting a diff [was: Re: File systems...]

2020-01-10 Thread Consus
On 11:08 Fri 10 Jan, Janne Johansson wrote: > By using the parts that OpenBSD is made up of, and not automatically moving > to other OSes as soon as you leave the comfort zone. I'm not sure, but it seems like from a user perspective there is nothing wrong with amd(8). Only that it keeps using

Re: Awaiting a diff [was: Re: File systems...]

2020-01-10 Thread Consus
On 20:06 Thu 09 Jan, Marc Espie wrote: > It's been that way for ages. But no-one volunteered > to work on this. Anyone even knows about this? Aside from OpenBSD developers (who have their plates full already) how an average person can find out that there is rusty piece of code that should be

Re: OpenBSD's extremely poor network/disk performance?

2020-01-09 Thread Consus
On 17:22 Thu 09 Jan, Hamd wrote: > Joe, are you a joke? Please stop insulting me, this is not > my/your_personal_fancy_forum. > > This will be my last post here in misc. > > Default setups, no config. changes. > Just patches installed. > Same hardware. > > FreeBSD: > freebsd@test:~ # time sh -c

Re: Awaiting a diff [was: Re: File systems...]

2020-01-09 Thread Consus
On 10:45 Thu 09 Jan, Stefan Sperling wrote: > On Thu, Jan 09, 2020 at 11:02:17AM +0300, Consus wrote: > > On 18:15 Wed 08 Jan, Xiyue Deng wrote: > > > It would be better to point out where to start, what hard problems to > > > solve, what work has been done in this ar

Re: Awaiting a diff [was: Re: File systems...]

2020-01-09 Thread Consus
On 18:15 Wed 08 Jan, Xiyue Deng wrote: > It would be better to point out where to start, what hard problems to > solve, what work has been done in this area that people can continue > to work on. They don't remember as there is no bugtracker.

Re: sysupgrade to 6.6 failed at comp66.tgz

2019-11-24 Thread Consus
On 23:21 Sat 23 Nov, cho...@jtan.com wrote: > > You can't seriously be calling "-x* -game*" an unsupported configuration ?  > > Seems to me > > like a sensible thing to do on any box that's going to be headless for its > > entire life > > and only ever accessed via SSH (or text console at a

Re: Starting redis fails with 'Bus error (core dumped)'

2019-11-17 Thread Consus
On 22:05 Sun 17 Nov, Unicorn wrote: > On Sun, 2019-11-17 at 23:22 +0300, Consus wrote: > > On 16:25 Sun 17 Nov, Unicorn wrote: > > > After installing redis (and rspamd), before having modified any > > > part of > > > redis, starting redis with 'rcctl start redi

Re: Starting redis fails with 'Bus error (core dumped)'

2019-11-17 Thread Consus
On 16:25 Sun 17 Nov, Unicorn wrote: > Hello again, > > I am currently setting up redis with rspamd for my mail setup, but I am > encountering an issue when trying to just start redis. > For the record, I am following the guide at >

Re: new rust-libtls crates

2019-11-05 Thread Consus
On 17:33 Sat 02 Nov, Reyk Floeter wrote: > Why libtls? Because it is a sane TLS API with secure defaults. I > trust the decisions of the LibreSSL developers and libtls provides > some the best defaults. > > The code works on OpenBSD and Linux. Many distributions such as > Ubuntu don't seem to

Re: OpenBSD 6.6 amd64 iavf(4) iavf / SR-iov 40G NIC lots of Jitter

2019-10-21 Thread Consus
On 13:33 Sun 20 Oct, Joseph Mayer wrote: > Tom, is not the jitter you are experiencing totally normal overhead > for a hypervisor. Are you sure? E.g. VM (centos) on busy as hell Proxmox instance: # ping -c 5 8.8.8.8 PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes

Re: Package -stable updates

2019-08-29 Thread Consus
On 09:29 Thu 29 Aug, Florian Obser wrote: > On Thu, Aug 29, 2019 at 09:39:40AM +0300, Consus wrote: > > On 19:59 Wed 28 Aug, Steven Shockley wrote: > > > So, many thanks to everyone who put together the new -stable updates for > > > packages. Is there a comma

Re: Package -stable updates

2019-08-29 Thread Consus
On 19:59 Wed 28 Aug, Steven Shockley wrote: > So, many thanks to everyone who put together the new -stable updates for > packages. Is there a command I can put in the crontab that will only > output if there are updates? Similar to what syspatch or openup does. > I tried pkg_add -unx, but that

Re: OpenBSD -stable binary packages

2019-08-14 Thread Consus
On 15:30 Wed 14 Aug, Thomas Bohl wrote: > https://marc.info/?l=openbsd-announce=156577865917831=2 > > > We are pleased to announce that we now also provide selected binary > > packages for the most recent release. These are built from the -stable > > ports tree which receives security and a few

Re: Bluetooth support status

2019-08-07 Thread Consus
On 17:12 Tue 06 Aug, John Brahy wrote: > Hello, > > Just curious if there was any change in OpenBSD supporting bluetooth. Sadly, there is none.

Re: When will OpenBSD become a friendly place for bug reporters?

2019-07-10 Thread Consus
On 17:14 Wed 10 Jul, Juan Francisco Cantero Hurtado wrote: > On Wed, Jul 10, 2019 at 09:30:56AM +0300, Consus wrote: > > On 18:56 Tue 09 Jul, Roderick wrote: > > > > > > On Tue, 9 Jul 2019, cho...@jtan.com wrote: > > > > > > > Perhaps rather than

Re: When will OpenBSD become a friendly place for bug reporters?

2019-07-10 Thread Consus
On 18:56 Tue 09 Jul, Roderick wrote: > > On Tue, 9 Jul 2019, cho...@jtan.com wrote: > > > Perhaps rather than whining that OpenBSD lacks some specific feature, > > those who want it could write it? > > Or perhaps better not. All depends on what is a feature and for whom. > > I, as normal user,

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-07 Thread Consus
On 19:30 Tue 04 Jun, Mogens Jensen wrote: > I'm going to build a router for use in a remote location, and I have > chosen OpenBSD 6.5 for the task. Unfortunately, it's not possible to > protect the router with an UPS, so it will have to be resilient enough > to survive sudden power outages and

Re: When will be created a great desktop experience for OpenBSD?

2019-05-11 Thread Consus
On 10:29 Fri 10 May, Stuart Henderson wrote: > On 2019-05-08, Consus wrote: > > On 02:01 Tue 07 May, Clark Block wrote: > >> When will be created a great desktop experience for OpenBSD? > > > > After binary package updates will be out-of-box, without using &

Re: When will be created a great desktop experience for OpenBSD?

2019-05-08 Thread Consus
On 02:01 Tue 07 May, Clark Block wrote: > When will be created a great desktop experience for OpenBSD? After binary package updates will be out-of-box, without using third-party M:Tier.

Re: Upgrade procedure (6.4 -> 6.5)

2019-05-03 Thread Consus
On 15:08 Thu 02 May, Ingo Schwarze wrote: > Hi Nick, > > Nick Holland wrote on Thu, May 02, 2019 at 08:04:32AM -0400: > > > There is no promise that an upgraded machine will be file-for-file > > identical to a fresh install. Here is the list of problems this might > > cause you, as you can see,

Re: Upgrade procedure (6.4 -> 6.5)

2019-05-02 Thread Consus
On 09:42 Thu 02 May, Stuart Henderson wrote: > The upgrade notes only list files which are likely to cause a problem > if they're left lying around. Oh, okay.

Re: Upgrade procedure (6.4 -> 6.5)

2019-05-02 Thread Consus
On 10:27 Thu 02 May, Markus Hennecke wrote: > Am 02.05.2019 um 09:52 schrieb Consus: > > I've upgraded my systems from 6.4 to 6.5 without a glitch, but I see > > that /etc/networks and some other files (like malloc.conf.5) are still > > present, although there is no use for th

Upgrade procedure (6.4 -> 6.5)

2019-05-02 Thread Consus
Hi, I've upgraded my systems from 6.4 to 6.5 without a glitch, but I see that /etc/networks and some other files (like malloc.conf.5) are still present, although there is no use for them in the new release. Is there a reason why these files are not listed in "FIles to remove"? Is there a way to

Re: Malloc config became global sysctl in 6.5

2019-04-27 Thread Consus
On 12:43 Sat 27 Apr, Thomas Frohwein wrote: > Move along, nothing to see here. I want to see more butthurting Theo!

Re: Malloc config became global sysctl in 6.5

2019-04-27 Thread Consus
I like reading misc@ mostly due to the constanst BUTTHURT that is going on here. But seriously though, each program can change it's own malloc flags either by calling setenv(3) or just by updating static malloc_options variable. So there is really *NO* difference between your old way

Re: Request for testing

2019-01-04 Thread Consus
On 13:05 Fri 04 Jan, Otto Moerbeek wrote: > On Fri, Jan 04, 2019 at 01:05:37PM +0300, Consus wrote: > > > On 08:17 Fri 04 Jan, Otto Moerbeek wrote: > > > Hi, > > > > > > If you ever thought about getting more involved and learning a bit > > > a

Re: Request for testing

2019-01-04 Thread Consus
On 08:17 Fri 04 Jan, Otto Moerbeek wrote: > Hi, > > If you ever thought about getting more involved and learning a bit > about buikdling a current OpenBSD, there's a call for testing at > > https://marc.info/?l=openbsd-tech=154521488707434=2 > > Testing would provide me with valuable data about

Re: netstat *:* udp sockets

2018-12-17 Thread Consus
On 08:25 Mon 17 Dec, Claudio Jeker wrote: > On Sun, Dec 16, 2018 at 05:09:06PM -0500, Ted Unangst wrote: > > Claudio Jeker wrote: > > > On Fri, Dec 14, 2018 at 01:26:25PM -0500, Ted Unangst wrote: > > > > Philip Guenther wrote: > > > > > And, perhaps more directly, how would I block this in

Re: netstat *:* udp sockets

2018-12-14 Thread Consus
On 13:38 Thu 13 Dec, Ted Unangst wrote: > netstat -an tells me I am listening to all the udp. > > Active Internet connections (including servers) > Proto Recv-Q Send-Q Local Address Foreign Address(state) > udp 0 0 *.**.* >

Re: Core Dev?

2018-12-03 Thread Consus
On 00:17 Tue 04 Dec, Ahmad Bilal wrote: > Can anyone tell me, > Is Antoine Jacoutot a core openbsd developer? > > And this is his account (not a impersonator?) > https://github.com/ajacoutot/aws-openbsd > > Should I take it as a official way of running OpenBSD on AWS? A quote from the source:

Re: syntax error and doas.conf

2018-10-31 Thread Consus
On 10:42 Wed 31 Oct, Markus Rosjat wrote: > Hi all, > > just something I notice while trying out stuff with doas and my python > scripts. If you do a mistake and have a syntax error in the doas.conf file > you can easily look you self out from root privilages  :( > > consider a a case where your

Re: APU2 and Spectre

2018-09-11 Thread Consus
On 21:11 Mon 10 Sep, Zbyszek Żółkiewski wrote: > > > Wiadomość napisana przez Consus w dniu 25.08.2018, o > > godz. 17:08: > > > > Seems like APU2 board is vulnerable to Spectre: > > seems there is microcode update with mitigations but looks like none want

APU2 and Spectre

2018-08-25 Thread Consus
Hi, Seems like APU2 board is vulnerable to Spectre: $ uname -r 6.3 $ dmesg | grep cpu0 | grep AMD cpu0: AMD GX-412TC SOC, 998.27 MHz $ git clone https://github.com/crozone/SpectrePoC $ cd SpectrePoC $ gmake $ ./spectre.out 85

Re: wifi gui manager

2018-08-22 Thread Consus
On 00:22 Wed 22 Aug, Anthony J. Bentley wrote: > Consus writes: > > On 18:07 Tue 21 Aug, Stuart Henderson wrote: > > > On 2018-08-21, Consus wrote: > > > > On 15:05 Tue 21 Aug, Stuart Henderson wrote: > > > >> > Also what's wrong with gitla

Re: wifi gui manager

2018-08-21 Thread Consus
On 18:07 Tue 21 Aug, Stuart Henderson wrote: > On 2018-08-21, Consus wrote: > > On 15:05 Tue 21 Aug, Stuart Henderson wrote: > >> > Also what's wrong with gitlab/github? > >> > >> They encourage devs to be lazy and not produce proper stable release >

Re: wifi gui manager

2018-08-21 Thread Consus
On 15:05 Tue 21 Aug, Stuart Henderson wrote: > > Also what's wrong with gitlab/github? > > They encourage devs to be lazy and not produce proper stable release assets. > Lots of mess in the ports tree from people who just tag something on github, > don't produce a stable tarball, don't generate

Re: wifi gui manager

2018-08-21 Thread Consus
On 10:46 Tue 21 Aug, Stuart Henderson wrote: > On 2018-08-20, Consus wrote: > > Oh my god, why sourceforge? > > Why not? At least it's not gitlab or github! It's been known for embedding spam in zip archives. Also what's wrong with gitlab/github?

Re: wifi gui manager

2018-08-20 Thread Consus
On 22:34 Sun 19 Aug, Edgar Pettijohn III wrote: > I've written a simple gui wifi manager. It can be found at: > > https://sourceforge.net/projects/openbsd-wifi-manager/ Oh my god, why sourceforge?

Re: Status of Owncloud?

2018-07-23 Thread Consus
On 16:25 Sun 22 Jul, Rupert Gallagher wrote: > Nextcloud, a government-funded project to keep your data secure... > Hold on to your buts, here it comes. DARPA, OpenBSD... Rings a bell?

Re: Limit CPU usage of a process?

2018-05-27 Thread Consus
On 20:02 Sun 27 May, Kevin Chadwick wrote: > Umatrix is a good javascript control extension. Some websites are even > running bitcoin mining without asking your permission. Theft of > electricity in my book. Hell, javascript itself is a theft of electricity.

Re: Checking my new smtpd.conf syntax

2018-05-25 Thread Consus
On 15:20 Fri 25 May, Gilles Chehade wrote: > no matter the keywords, there's no way 100% people would be satisfied :) > > be happy, first iteration was "match [...] => foobar", now 'action' > does not look so bad hu ? Guess so :D

Re: Checking my new smtpd.conf syntax

2018-05-25 Thread Consus
On 15:14 Fri 25 May, Gilles Chehade wrote: > On Fri, May 25, 2018 at 03:58:59PM +0300, Consus wrote: > > On 14:31 Fri 25 May, Gilles Chehade wrote: > > > On Fri, May 25, 2018 at 02:20:50PM +0200, Walter Alejandro Iglesias wrote: > > > > Could someone tell

Re: Checking my new smtpd.conf syntax

2018-05-25 Thread Consus
On 14:31 Fri 25 May, Gilles Chehade wrote: > On Fri, May 25, 2018 at 02:20:50PM +0200, Walter Alejandro Iglesias wrote: > > Could someone tell me if my changes below are OK. :-) > > > > The part I'm not clear is I read in current.html remote authenticated > > users need a explicit rule. Do I

Re: opensmtpd / ldap unreliable

2018-05-24 Thread Consus
On 17:20 Wed 23 May, Allan Streib wrote: > "Paul B. Henson" writes: > > >> What you ask is a very general question: If A depends on B, and B is > >> missing, how do expect A to behave? > > > > In this specific case, I expect A to complain it was unable to contact > > B, to

Re: Viewport for man.openbsd.org -- readability on phones

2018-05-16 Thread Consus
On 00:26 Wed 16 May, Solene Rapenne wrote: > See no offence here, I wonder what is the context leading to read man > pages on a phone? Because OpenBSD distributes it's documentation in man pages. There is no standalone documentation site.

Re: NFS keeps crashing

2018-04-21 Thread Consus
On 18:38 Sat 21 Apr, IL Ka wrote: > > I mean sponsors who pay for projects and compatibility updates. I also > > mean broader user base. > > I belive NFS is rarely used nowadays, especially with Windows clients. > People use samba/smb to connect *nix to Windows in most cases. > Samba should be

Re: Virtualbox vs latest snapshot

2018-04-13 Thread Consus
On 09:30 Fri 13 Apr, Boudewijn Dijkstra wrote: > The point is not to go to court, the point is to bully people into > paying up. Well, this reminds me of Nigerian Emails. Have someone actually payed them? Cause seriously, you can just reply them with a goatse picture attached. Even goatse has

Re: Virtualbox vs latest snapshot

2018-04-12 Thread Consus
On 08:28 Thu 12 Apr, Nick Holland wrote: > Another "failure mode" of VirtualBox people should be aware of: > I understand through good sources, Oracle monitors the IP addresses that > it's downloaded from, and if they can trace it back to a commercial IP > (i.e., not a home address), and if they

Re: bug tracking system for OpenBSD

2018-04-01 Thread Consus
On 11:01 Sun 01 Apr, Stuart Henderson wrote: > Please don't. I wasn't going to. This guy jsut asked for the feedback so I wrote him.

Re: bug tracking system for OpenBSD

2018-03-31 Thread Consus
On 21:04 Sat 31 Mar, Consus wrote: > On 23:01 Fri 30 Mar, Sergey Bronnikov wrote: > > I have made a first step forward in direction to OpenBSD bugtracker > > and imported bugs@ archive to a Fossil SCM - > > https://bronevichok.ru/cgi-bin/b.cgi/rptview?rn=1 > >

Re: bug tracking system for OpenBSD

2018-03-31 Thread Consus
On 23:01 Fri 30 Mar, Sergey Bronnikov wrote: > I have made a first step forward in direction to OpenBSD bugtracker > and imported bugs@ archive to a Fossil SCM - > https://bronevichok.ru/cgi-bin/b.cgi/rptview?rn=1 > Let's discuss a next step. The first obvious problem: you've imported every

Re: Why are so many people running and writing about current snapshots

2018-03-27 Thread Consus
On 14:46 Tue 27 Mar, Niels Kobschaetzki wrote: > CentOS 5 is EOL since March 31st 2017 ;) > CentOS 6 should be on extended support now which is going EOL in > November 2020. Yep. And Centos7 will be around until 2024. So 4/5 of Linux distros in production (e.g. Alpine is different in this regard)

Re: Why are so many people running and writing about current snapshots

2018-03-27 Thread Consus
On 22:31 Mon 26 Mar, Z Ero wrote: > I just don't want OpenBSD to turn into Linux where the fixation is on > newest shiny thing rather than doing code right. Sometimes I think > people who are excessively interested in bleeding edge features more > want an OS for tinkering with than an OS for

Re: OpenBSD and IPMI

2018-03-09 Thread Consus
On 16:11 Fri 09 Mar, Denis wrote: > By reading this article > blog.rapid7.com/2013/07/02/a-penetration-testers-guide-to-ipmi/ my hair > raised. > > How to OpenBSD security withstands against IPMI holed solution from top > hardware vendors? > > Best ways to prevent potential risks for OpenBSD

Re: DNS-01 challenge in acme-client

2018-03-02 Thread Consus
On 19:27 Fri 02 Mar, Stuart Henderson wrote: > On 2018-03-01, Consus <con...@ftml.net> wrote: > > Let's Encrypt is going to support wildcard certificates soon enough, but > > only through DNS-01 challenge, but acme-client(1) does not support it. > > Have you guys

Re: DNS-01 challenge in acme-client

2018-03-02 Thread Consus
On 15:46 Fri 02 Mar, Consus wrote: > On 11:45 Fri 02 Mar, Etienne wrote: > > Well, really, what you're asking for is having acme-client offload the > > complicated stuff (set the TXT records, then check for verification) to a > > script, which to me looks pretty much the sam

Re: DNS-01 challenge in acme-client

2018-03-02 Thread Consus
On 11:45 Fri 02 Mar, Etienne wrote: > Well, really, what you're asking for is having acme-client offload the > complicated stuff (set the TXT records, then check for verification) to a > script, which to me looks pretty much the same as writing a script to do > everything. I'm not. Writing TXT

Re: DNS-01 challenge in acme-client

2018-03-01 Thread Consus
On 15:20 Thu 01 Mar, Solène Rapenne wrote: > It is not easy to implement because this requires access to your > DNS server (like nsd or bind) or your registrar admin API which would > require adding plugins for each API. Well... that's why it's called DNS challenge, right? > It is more

DNS-01 challenge in acme-client

2018-03-01 Thread Consus
Hi, Let's Encrypt is going to support wildcard certificates soon enough, but only through DNS-01 challenge, but acme-client(1) does not support it. Have you guys considered implemeting DNS challenges? Maybe someone is already working on the implementation? If not are patches welcome?

https://openbsd.org/users.html looks dated

2018-02-14 Thread Consus
Hi, If anyone cares this page contains a bunch of dead links and pr...@openbsd.org is an invalid recipient.

Re: considering a move to OpenBSD

2018-02-09 Thread Consus
On 13:02 Fri 09 Feb, Otto Moerbeek wrote: > On Fri, Feb 09, 2018 at 12:27:47PM +0300, Consus wrote: > > > On 23:12 Thu 08 Feb, Jeroen wrote: > > > I can talk hours and hours why OpenBSD is superior to Linux > > > > It is possible to list all block devi

Re: considering a move to OpenBSD

2018-02-09 Thread Consus
On 10:40 Fri 09 Feb, Philipp Buehler wrote: > Am 09.02.2018 10:27 schrieb Consus: > > It is possible to list all block devices (with type and size) with one > > command? You now, like lsblk(8) in Linux. > > You're implying.. > > # lsblk > bash: lsblk: c

Re: considering a move to OpenBSD

2018-02-09 Thread Consus
On 23:12 Thu 08 Feb, Jeroen wrote: > I can talk hours and hours why OpenBSD is superior to Linux It is possible to list all block devices (with type and size) with one command? You now, like lsblk(8) in Linux.

Re: Options for dealing with DES crypt password file

2018-01-11 Thread Consus
On 18:27 Thu 11 Jan, Jeff Zimmerman wrote: > I've got an old server (OpenBSD 4.7 old) with a mixed bag of password > hashes in master.passwd. A majority of the passwords (hundreds) are > old salted DES crypt format. > > Am I correct in my research that everything but Blowfish was removed > from

Re: OpenBSD and virtual machines

2018-01-09 Thread Consus
On 22:14 Mon 08 Jan, Sterling Archer wrote: > Trolls. High-fat food is no good for one's health!

Re: OpenBSD and virtual machines

2018-01-08 Thread Consus
On 16:37 Mon 08 Jan, Galaxy Júpiter wrote: > Why OpenBSD now have their own native virtualisation layer? > Why Theo de Raadt changed your opinion about virtual machines? > What is the current opinion of Theo de Raadt about virtual machines? What does Theo de Raadt eat for breakfast?

Re: Kindly support this initiative for a public git repository of OpenBSD source code located at Germany!

2017-12-30 Thread Consus
On 23:35 Thu 28 Dec, Dinesh Thirumurthy wrote: > Dear Everyone, > > On Thu, Dec 28, 2017 at 3:05 PM, Mikko Laine wrote: > > > You could try https://notabug.org/, which is Dutch-owned and hosted in > > Germany. Note larger repositories (>100 Mb) are accepted per-case. > > > I

Re: Read sysctl from file

2017-07-20 Thread Consus
On 07:08 Thu 20 Jul, Kai Wetlesen wrote: > > Because it's a nice way to apply configuration changes made to > > /etc/sysctl.conf without restarting the whole server? > > Systemctl doesn't offer hot reload unless the controlled daemon offers > the capability in the first place. The only thing

Re: Read sysctl from file

2017-07-20 Thread Consus
On 07:45 Thu 20 Jul, Theo de Raadt wrote: > > On 07:39 Thu 20 Jul, Theo de Raadt wrote: > > > someone in linux land went off the map here. and then another piece of > > > software started un-portably assuming that's the way to do things? > > > > Because it's a nice way to apply configuration

Re: Read sysctl from file

2017-07-20 Thread Consus
On 07:39 Thu 20 Jul, Theo de Raadt wrote: > someone in linux land went off the map here. and then another piece of > software started un-portably assuming that's the way to do things? Because it's a nice way to apply configuration changes made to /etc/sysctl.conf without restarting the whole

Re: Sad story

2017-06-05 Thread Consus
On 13:37 Mon 05 Jun, Ingo Schwarze wrote: > L. R. S. wrote on Mon, Jun 05, 2017 at 12:14:51PM +0200: > > > Forgot the passphrase of a full-disk encrypted OpenBSD system ;_; > > So many documents will be lost, like [coughs] accesses to NULL. > > Simply restore from backup. There are two types of

Re: iked(8) OpenBSD road warrior setup anybody?

2016-10-04 Thread Consus
On 09:47 Tue 04 Oct, Pavel Korovin wrote: > Discussed with Michael off-the-list and found that he has different > setup where iked(8) is not involved. > > Just in case, my question is about OpenBSD native iked(8) setup for > remote access VPN gateway to serve OpenBSD native iked(8) client. > If

Re: can't find fstab entry ?

2016-09-10 Thread Consus
On 03:09 Mon 05 Sep, Theo de Raadt wrote: > > OpenBSD 6.0 GENERIC.MP#0 amd64 > > > > My fstab entry looks like : > > > > 10.10.10.10:/srv/share /mnt/ops_test nfs defaults,noexec,nosuid,nodev,auto > > 0 0 > > > > However: > > > > $ doas mount /mnt/ops_test > > doas (m...@example.com) password:

Re: OpenBSD 6.0 release and errata60.html

2016-09-02 Thread Consus
On 11:14 Fri 02 Sep, Consus wrote: > Yeah, you probably should. Also you can use M:Tier, they ship binary > errata updates: https://stable.mtier.org There is already a full set of binary patches. These guys are so sweet.

Re: OpenBSD 6.0 release and errata60.html

2016-09-02 Thread Consus
On 15:59 Thu 01 Sep, R0me0 *** wrote: > Hello misc, > > I have a little doubt > > Today was a Official Release of 6.0 > > This release already include errata60.html patches or I need to apply ? > > Thanks in advance, Yeah, you probably should. Also you can use M:Tier, they ship binary errata

Re: LibreSSL on old OpenBSD

2016-08-12 Thread Consus
On 03:20 Fri 12 Aug, Anthony J. Bentley wrote: > Roderick writes: > > I know, you will complain, because I mention here that I still use > > OpenBSD 4.8 in a machine. > > Then why do you ask? Do you think people will happily take time to > help you debug problems on a system that has been

Re: github

2016-08-07 Thread Consus
On 18:12 Sun 07 Aug, ludovic coues wrote: > 2016-08-07 18:00 GMT+02:00 Consus <con...@gmx.com>: > > On 10:56 Sun 07 Aug, Chris Bennett wrote: > >> On Sun, Aug 07, 2016 at 06:43:02PM +0300, Consus wrote: > >> > Sign your commits with GPG. Looky, a link: > >

Re: github

2016-08-07 Thread Consus
On 10:56 Sun 07 Aug, Chris Bennett wrote: > On Sun, Aug 07, 2016 at 06:43:02PM +0300, Consus wrote: > > Sign your commits with GPG. Looky, a link: > > > > https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work > > > > Not that hard, is it? > >

Re: github

2016-08-07 Thread Consus
On 10:35 Sun 07 Aug, Chris Bennett wrote: > On Sun, Aug 07, 2016 at 11:17:21AM -0400, Donald Allen wrote: > > > Date: Sun, 7 Aug 2016 17:59:07 +0300 > > > From: con...@gmx.com > > > To: > > misc@openbsd.org > > > Subject: Re: github > > > > > > > And github offers two-factor authentication, so

Re: github

2016-08-07 Thread Consus
On 16:43 Sun 07 Aug, Ingo Schwarze wrote: > > Do you have any plans to move the OpenBSD source code repository > > to github? > > Absolutely not. The OpenBSD repository will remain secure and > will not be outsourced to a random third party. I'm sorry, are we talking about the same OpenBSD CVS

Re: tmpfs

2016-07-31 Thread Consus
On 23:02 Sun 31 Jul, mxb wrote: > Mine is sane. No, it's not. Your email contains valid UTF-8 symbols but mime states that it is in us-ascii: Content-Type: text/plain; charset="us-ascii" Really, just shut up and fix it. It's that simple :)

Re: tmpfs

2016-07-31 Thread Consus
On 20:53 Sun 31 Jul, mxb wrote: > ?? ?? ?? ??, ?? . > ?? ?? ?? ??. Also fix your goddamn mail client. Your encoding is shit.

Re: tmpfs

2016-07-31 Thread Consus
On 19:54 Sun 31 Jul, mxb wrote: > Who gives a sh*t?! > Ppl supporting OpenBSD community what matters - with userbase without users is > like masturbating. > > Ppl like me test public diffs on live equipment, donate money and buy CDs so > Theo can continue to milk this project > so he can bike in

Re: Is OpenSMTPD worthy of OpenBSD inclusion?

2015-10-06 Thread Consus
On 18:47 Mon 05 Oct , Jason A. Donenfeld wrote: > I maintain both distribution packages for it (Gentoo), as well as my > entire infrastructure, which is based on OpenSMTPD. I've "bet the > farm" on the project, so to speak. Oh, so you were that guy who released "stable" ebuild without Berkeley DB