Re: Adding encryption support to vi(1)

2014-12-26 Thread thornton . richard
I live in NJ. Should I be‎ this paranoid, that every file I edit should be 
encrypted?
Who has time for this type of craziness?


Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network.
  Original Message  
From: andrew fabbro
Sent: Friday, December 26, 2014 1:25 AM
To: misc@openbsd.org
Subject: Adding encryption support to vi(1)

vim (in ports) offers an encryption option (
http://vimdoc.sourceforge.net/htmldoc/editing.html#encryption)

Invoking vim with -x prompts for a key and then encrypts the file on save.
It appears to do the right thing as far as encrypting the .swp (temporary
recovery) file as well. If you later edit the file (without the -x option)
it will detect the file is encrypted based on a magic it prepends and
prompt for a key.

Unfortunately, by default vim uses the 'zip' algorithm which is quite
insecure, though you can optionally specify blowfish as your preferred
algorithm.

The nice thing about this versus a gpg decrypt/edit/re-encrypt cycle is
that you don't have an unencrypted file temporarily lying around (or an
unencrypted vi-recover file for that matter).

I'm wondering if there is any interest in adding this feature to vi(1)
given OpenBSD's interest in integrated crypto?

Unfortunately, as a US citizen/resident, it's not clear to me that I would
be able to contribute code (beyond an implementation that uses the zip
algorithm) so it is probably a moot point unless one of the devs is
interested but...I figured there was no harm in mentioning it.


-- 
andrew fabbro
and...@fabbro.org
blog: https://raindog308.com



Re: Upgrading issues (i386 on PPro class) 5.4-5.5 leaving system horked

2014-12-26 Thread Raf
On Thu, Dec 25, 2014 at 10:04:48PM EST, Damon Getsman wrote:

 Well, I've never cared much for the holidays...  So I figured, while
 everybody else was busy with them, what a perfect time for me to take down
 my BBS and other services and upgrade the system at least from 5.4-5.5.
 I've done multiple upgrades in a day before when I've gotten behind like
 this, and they've never been much of a problem, though I've run into an
 issue here and there before.
 
 That was before I ran into the removal of packages and reinstallation
 process that is necessary for this upgrade.
 
 [...]
 
 Does anybody have any tips?  Would an install over the top straight to 5.6
 maybe work?  I've never had the install process leave me with such a
 lobotomized system before.  Usually it's just something like mediawiki not
 working with latex math markup any more or wordpress breaking.  :(
 
 This is my primary server, and it pains me significantly to have it down,
 and I really love OpenBSD, despite the hiccups at times.  Does anybody have
 any suggestions?  Any help or pointers in the right direction would be
 greatly appreciated.

Just checking the obvious, but you have obviously followed the 5.4 -
5.5 upgrade guide[0] and removed all packages BEFORE upgrading and
installed them again AFTER you have done everything else?

[0] http://www.openbsd.org/faq/upgrade55.html

Regards,

Raf



nginx how to run first site as open , and second as basic auth .

2014-12-26 Thread Tuyosi Takesima
hi,all .

i use name based virtual host (=server block).
i want to run first site as open  and second site as ristricted (basic
auth),
but it is hard to do and there is little information on internet about this
.


it is easy to run only name based virtualhost (=server block) .
nginx.conf is next .

worker_processes  1;
worker_rlimit_nofile 1024;
events {
worker_connections  800;
}


http {
include   mime.types;
default_type  application/octet-stream;
index index.html index.htm;
keepalive_timeout  65;
server_tokens off;

   server {
listen   80;
listen   [::]:80;
server_name  a.mydns.jp;   --- 1st site
root /var/www/htdocs/d1;
}

   server {
listen   80;
listen   [::]:80;
server_name  s.sun.ddns.vc; --- 2nd site
root /var/www/htdocs/d2;
  }
}
---

give me some hints .



Re: nginx how to run first site as open , and second as basic auth .

2014-12-26 Thread Alexandr Borisenko
 i want to run first site as open  and second site as ristricted (basic
auth),
 but it is hard to do and there is little information on internet about
this

Just add
auth_basic Test site;
auth_basic_user_file  .htpasswd;
to second server { ... } block.



Re: ixgbe_tx_ctx_setup crash

2014-12-26 Thread Kapetanakis Giannis

Hi,

Any ideas on this? I'm getting at least one panic every day.

G

On 24/12/14 06:13, Kapetanakis Giannis wrote:

Today I've installed a 10Gb adapter and upgraded to latest snapshot.
I've had a crash...

Machine is a Fujitsu RX300 S6 and the adapter is an Intel X520 SR1

G

ddb{0} trace
ixgbe_tx_ctx_setup(d4164980,d919df00,f55a0e5c,f55a0e60,4) at 
ixgbe_tx_ctx_setup

+0x11a
ixgbe_encap(d4164980,d919df00,0,1000,a) at ixgbe_encap+0x16a
ixgbe_start(d4376030,d424f2c0,1,f55a0ed4,d43ac320) at ixgbe_start+0xa7
nettxintr(0,50,0,f55a0f08,d055e282) at nettxintr+0x47
softintr_dispatch(1) at softintr_dispatch+0x5a
Xsoftnet() at Xsoftnet+0x17
--- interrupt ---
cpu_idle_cycle(d0c54a00) at cpu_idle_cycle+0xf
Bad frame pointer: 0xd0d1ee58

ddb{0} ps
   PID   PPID   PGRPUID  S   FLAGS  WAIT  COMMAND
 27524  29077  29077  0  30x81  netio tcpdump
 29077   7998  29077 76  30x93  bpf   tcpdump
  7998   5475   7998  0  30x8b  pause tcsh
  5475  27931   5475  0  30x8b  pause ksh
 27931  26770  27931  0  30x92  selectsshd
 31314  1  31314  0  30x80  poll  cron
 30894  1  30894  0  30x83  ttyin getty
 18970   8424   8424 90  30x90  kqreadospf6d
 32570   8424   8424 90  30x90  kqreadospf6d
  8424  1   8424  0  30x80  kqreadospf6d
 21883   1784   1784 85  30x90  kqreadospfd
   912   1784   1784 85  30x90  kqreadospfd
  1784  1   1784  0  30x80  kqreadospfd
 12595  1  12595  0  30x83  ttyin getty
 25497  1  25497  0  30x83  ttyin getty
 12975  1  12975  0  30x83  ttyin getty
 28159  1  28159  0  30x83  ttyin getty
 32715  1  32715  0  30x83  ttyin getty
 10193   2540   2540 74  30x90  bpf   pflogd
  2540  1   2540  0  30x80  netio pflogd
  2835  1  14597  0  30x80  selectsnmpd
  7479  32707  32707 95  30x90  kqreadsmtpd
 20765  32707  32707 95  30x90  kqreadsmtpd
 28600  32707  32707 95  30x90  kqreadsmtpd
 13782  32707  32707 95  30x90  kqreadsmtpd
 12419  32707  32707 95  30x90  kqreadsmtpd
  2489  32707  32707103  30x90  kqreadsmtpd
 32707  1  32707  0  30x80  kqreadsmtpd
 26770  1  26770  0  30x80  selectsshd
  7240  19769   3791 83  30x90  poll  ntpd
 19769   3791   3791 83  30x90  poll  ntpd
  3791  1   3791  0  30x80  poll  ntpd
 11125  23743  23743 74  30x90  bpf   pflogd
 23743  1  23743  0  30x80  netio pflogd
 28337   5090   5090 73  20x90syslogd
  5090  1   5090  0  30x80  netio syslogd
 30111  0  0  0  3 0x14200  pgzero zerothread
 14175  0  0  0  3 0x14200  aiodoned  aiodoned
 14536  0  0  0  3 0x14200  syncerupdate
 26108  0  0  0  3 0x14200  cleaner   cleaner
 25408  0  0  0  3 0x14200  reaperreaper
 28179  0  0  0  3 0x14200  pgdaemon pagedaemon
  3310  0  0  0  3 0x14200  bored crypto
 26495  0  0  0  3 0x14200  pftm  pfpurge
  7600  0  0  0  3 0x14200  usbtskusbtask
 13439  0  0  0  3 0x14200  usbatsk   usbatsk
 11642  0  0  0  3 0x14200  bored sensors
 25436  0  0  0  3  0x40014200  acpi0 acpi0
 27440  0  0  0  7  0x40014200idle3
  4660  0  0  0  7  0x40014200idle2
 27534  0  0  0  7  0x40014200idle1
 25518  0  0  0  3 0x14200  bored systqmp
 24295  0  0  0  3 0x14200  bored systq
 15404  0  0  0  3 0x14200  bored syswq
* 9159  0  0  0  7  0x40014200idle0
 26863  0  0  0  3 0x14200  kmalloc   kmthread
 1  0  1  0  30x82  wait  init
 0 -1  0  0  3 0x10200  scheduler swapper

ddb{0}  dmesg
PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX 

,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,PAGE1GB,LONG,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,V 

MX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,POPCNT,AES,LAHF,PERF 


,ITSC
real mem  = 3210936320 (3062MB)
avail mem = 3146129408 (3000MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 01/19/12, 

Re: nginx how to run first site as open , and second

2014-12-26 Thread Tuyosi Takesima
thanks for kind reply .

i rewrite /etc/nginx/nginx.conf .


worker_processes  1;
worker_rlimit_nofile 1024;
events {
worker_connections  800;
}

http {
include   mime.types;
default_type  application/octet-stream;
index index.html index.htm;
keepalive_timeout  65;
server_tokens off;

   server {
listen   80;
listen   [::]:80;
server_name  aoiyuma.mydns.jp;
root /var/apache2/d1;

  }



   server {
listen   80;
listen   [::]:80;
server_name  saigyou.sun.ddns.vc;
root /var/apache2/d2;
auth_basic Test site;
auth_basic_user_file  /etc/nginx/.htpasswd;
  }

}

but by using walking telephone , internal server error happens .
about apache2 ,  ' Require user XXX ' is needed
in nginx , is it not nessesary ?
---
tuyosi



Re: nginx how to run first site as open , and second

2014-12-26 Thread Tuyosi Takesima
i think , think ,so i try archlinux's nginx .

the following /etc/nginx/nginx.conf goes well.

--
worker_processes  1;
events {
worker_connections  1024;
}


http {
include   mime.types;
default_type  application/octet-stream;
sendfileon;
keepalive_timeout  65;

server {
listen   80;
server_name  a.mydns.jp;
root   /srv/http;
index  index.html index.htm;
   }

server {
listen   80;
server_name  s.sun.ddns.vc;
  root /srv/http/Fam/;
  index  index.html index.htm;
  auth_basic Restricted; #For Basic
Auth
  auth_basic_user_file /etc/nginx/.htpasswd;   #For Basic
Auth
}
}


in archlinux
 21 nginx -V | tr -- - '\n' | grep _module is next
(see
http://serverfault.com/questions/223509/how-can-i-see-which-flags-nginx-was-compiled-with
)

imap_ssl_module
http_dav_module
http_gunzip_module
http_gzip_static_module
http_realip_module
http_spdy_module
http_ssl_module
http_stub_status_module
http_addition_module
http_degradation_module
http_flv_module
http_mp4_module
http_secure_link_module
http_sub_module

but in openbsd , there are much less modules  by security first policy .
so basic auth except ssl is ineffective in openbsd , so i think .
-
tuyosi



Re: Upgrading issues (i386 on PPro class) 5.4-5.5 leaving system horked

2014-12-26 Thread Stuart Henderson
On 2014-12-26, Damon Getsman damo.g...@gmail.com wrote:
 Right off the bat I got issues about 'Can't locate object method
 filter_obsolete via package OpenBSD::Quirks1 at
 /usr/libdata/perl5/OpenBSD/AddDelete.pm line 351'.  This was at the 'final
 step', and there had been no hiccups during the sysmerging process that I
 wasn't used to.

 After this issue, I started having packages that the system was trying to
 reinstall but totally horked on.  I'm not totally sure if this is
 comprehensive at this point, but here are the packages and what I had to do
 with them:

 * apcupsd - had to manually remove from pkg_list_manual
 * cups - ditto
 * fedora-base - ditto
 * ntop - ditto
 * hylafax  smsmail or whatever - ditto

 I then ran into a bunch that I had to install unsigned, finally just
 hitting the 'a'll so as to stop having to manually intervene and say 'y'es
 on each one.  These started with metaauto*, autoconf-2.69p0*, bash-4.2.45,
 beave, and then I lost track of the rest with the 'a'll install specified.

The 5.5 packages *are* signed.

I think you are trying to update packages from an incorrect source.
Check that PKG_PATH in the environment and/or /etc/pkg.conf are valid for 5.5
and do pkg_add -D installed -u to update everything (this will reinstall all
packages). Capture the output (e.g. with script) so if it fails you can show
the exact output.



Re: Adding encryption support to vi(1)

2014-12-26 Thread andrew fabbro
On Fri, Dec 26, 2014 at 12:02 AM, thornton.rich...@gmail.com wrote:

 I live in NJ. Should I be‎ this paranoid, that every file I edit should
be
 encrypted?
 Who has time for this type of craziness?


Well, no one.  I encrypt very few files.

But keeping one's passwords and related administrivia safe, preventing
unencrypted versions/tempfiles from accidentally being captured by running
backups, etc. is hardly a rare use case.

pwsafe (referring to the nox11 version) is a fine program but comes up a
bit short if you want to include notes that are more than a brief comment,
or what you want to save is not password/account-related. That's really all
I was describing.

On Thu, Dec 25, 2014 at 11:07 PM, Theo de Raadt dera...@cvs.openbsd.org
wrote:

 So you describe something which is shit.  Why would we want to add
 something shit to vi?  It would fool people into bad practices.  Who
 benefits?  Exactly.


Is there no middle ground between an encrypted partition and plain text?
That's an honest question.

Short of encrypting a partition, most tools (gpg, etc.) require decrypting
a file to plain text and then reencrypting.  I was just trying to avoid
having to create unencrypted temporary/intermediate/recovery copies of
files as part of the editing process.

Can I ask what kind of plant are you?


Most people have to content themselves with the I Got Flamed By Theo de
Raadt
http://www.zazzle.com/i_got_flamed_by_theo_de_raadt_t_shirt-2354533488287291
21
shirt, but I seem to have qualified for the new Theo de Raadt Asked if I
Was a Spy shirt :-)

--
andrew fabbro
and...@fabbro.org
blog: https://raindog308.com



Re: Adding encryption support to vi(1)

2014-12-26 Thread Marc Espie
There's already a kitchen sink, it's called emacs.



Re: Adding encryption support to vi(1)

2014-12-26 Thread Theo de Raadt
 Is there no middle ground between an encrypted partition and plain text?

Adding low-grade encrypt-with-password to lots of utilities like this
does not make sense.



Re: openiked status

2014-12-26 Thread jungle Boogie
Hi Theo,
On 24 December 2014 at 18:02, Theo de Raadt dera...@cvs.openbsd.org wrote:
The website for openiked[0] indicates it's under active development
but I'm just curious to know if this is still a developing project or
if it has been pretty much met all the goal?.

 Almost 10K of lines changed in the last year, so quite active.

 It is /sbin/iked


I did not think to check there! Thanks for the pointer.

 (Would be difficult to make this portable to other systems, because
 the kernel / system interfaces vary so much in the ipsec area).

Perhaps that's why the portal version hasn't been updated in awhile:
https://github.com/reyk/openiked/

-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



OpenBSD projects

2014-12-26 Thread jungle Boogie
Hello All,

Here's a list of projects that I'm aware of that openBSD created. Is
that correct? (p) is for portable. What else am I missing?
openssh (p)
opensmtpd (p)
mandoc (p)
openntpd (p)
openbgpd
libressl (p)
openiked (p?)
pf
relayd
httpd
carp

Thanks,
Jungle

-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



Re: OpenBSD projects

2014-12-26 Thread ludovic coues
2014-12-26 18:42 GMT+01:00 jungle Boogie jungleboog...@gmail.com:
 Hello All,

 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?
 openssh (p)
 opensmtpd (p)
 mandoc (p)
 openntpd (p)
 openbgpd
 libressl (p)
 openiked (p?)
 pf
 relayd
 httpd
 carp

 Thanks,
 Jungle

 --
 ---
 inum: 883510009027723
 sip: jungleboo...@sip2sip.info
 xmpp: jungle-boo...@jit.si



openiked isn't portable.



Re: OpenBSD projects

2014-12-26 Thread jungle Boogie
Hi Ludovic,
On 26 December 2014 at 09:46, ludovic coues cou...@gmail.com wrote:
 2014-12-26 18:42 GMT+01:00 jungle Boogie jungleboog...@gmail.com:
 openiked (p?)

 Thanks,
 Jungle



 openiked isn't portable.

Thanks for the confirmation, That's pretty much what Theo stated as
well but there's this page:
https://github.com/reyk/openiked/

Internet Key Exchange version 2 (IKEv2) daemon - portable version of
OpenBSD iked

-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



Re: OpenBSD projects

2014-12-26 Thread Miod Vallat
 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?

 mandoc (p)

Mandoc was not initiated by OpenBSD, although it got engulfed very
quickly thanks to Ingo's hard work.



Re: OpenBSD projects

2014-12-26 Thread jungle Boogie
Hi Miod,
On 26 December 2014 at 10:19, Miod Vallat m...@online.fr wrote:
 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?

 mandoc (p)

 Mandoc was not initiated by OpenBSD, although it got engulfed very
 quickly thanks to Ingo's hard work.

Very true!
http://mdocml.bsd.lv/porthistory.html

(2008 Nov 22): start of development
1.7.12 (2009 Apr 6): OpenBSD base (2009 Apr 6, Kristaps Dzonsons)
pkgsrc (2009 Apr 9)

So about five months after it was created, it was in base!


-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



Re: OpenBSD projects

2014-12-26 Thread Carsten Kunze
jungle Boogie jungleboog...@gmail.com wrote:

 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?

How about tmux (p)?



Re: OpenBSD projects

2014-12-26 Thread jungle Boogie
Hi Carsten,0
On 26 December 2014 at 11:11, Carsten Kunze carsten.ku...@arcor.de wrote:
 jungle Boogie jungleboog...@gmail.com wrote:

 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?

 How about tmux (p)?


Damn good one!

Apologizes to the developer for omitting that!

-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



Re: OpenBSD projects

2014-12-26 Thread Otto Moerbeek
On Fri, Dec 26, 2014 at 09:42:18AM -0800, jungle Boogie wrote:

 Hello All,
 
 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?
 openssh (p)
 opensmtpd (p)
 mandoc (p)
 openntpd (p)
 openbgpd
 libressl (p)
 openiked (p?)
 pf
 relayd
 httpd
 carp
 
 Thanks,
 Jungle
 
 -- 
 ---
 inum: 883510009027723
 sip: jungleboo...@sip2sip.info
 xmpp: jungle-boo...@jit.si

I wrote our dc(1) and bc(1) about eleven years ago, they have been
imported into freebsd at least. 


-Otto



Re: OpenBSD projects

2014-12-26 Thread Todd
Not sure, but what about cwm(1) and mg(1)?

On Fri, Dec 26, 2014 at 1:23 PM, jungle Boogie jungleboog...@gmail.com
wrote:

 Hi Carsten,0
 On 26 December 2014 at 11:11, Carsten Kunze carsten.ku...@arcor.de
 wrote:
  jungle Boogie jungleboog...@gmail.com wrote:
 
  Here's a list of projects that I'm aware of that openBSD created. Is
  that correct? (p) is for portable. What else am I missing?
 
  How about tmux (p)?
 

 Damn good one!

 Apologizes to the developer for omitting that!

 --
 ---
 inum: 883510009027723
 sip: jungleboo...@sip2sip.info
 xmpp: jungle-boo...@jit.si



Re: OpenBSD projects

2014-12-26 Thread Carsten Kunze
Todd norr...@gmail.com wrote:

 Not sure, but what about cwm(1) and mg(1)?

I think cwm had been started as evilwm elsewhere, derived as cwm from evilwm 
(outside?) OpenBSD and later imported to the OpenBSD code base.



Re: OpenBSD projects

2014-12-26 Thread Raf
On Fri, Dec 26, 2014 at 02:11:04PM EST, Carsten Kunze wrote:
 jungle Boogie jungleboog...@gmail.com wrote:
 
  Here's a list of projects that I'm aware of that openBSD created. Is
  that correct? (p) is for portable. What else am I missing?
 
 How about tmux (p)?

Nope - tmux(1), similarly to mandoc(1), has been started outside of
OpenBSD (in 2007) and hadn't made its way to the project's CVS tree
until 2009.

BTW, some think that sudo(8) is an OpenBSD creation - that's not the
case either.

Regards,

Raf



Re: OpenBSD projects

2014-12-26 Thread jungle Boogie
Hi Raf,
On 26 December 2014 at 12:13, Raf r...@devio.us wrote:
 On Fri, Dec 26, 2014 at 02:11:04PM EST, Carsten Kunze wrote:
 jungle Boogie jungleboog...@gmail.com wrote:

  Here's a list of projects that I'm aware of that openBSD created. Is
  that correct? (p) is for portable. What else am I missing?

 How about tmux (p)?

 Nope - tmux(1), similarly to mandoc(1), has been started outside of
 OpenBSD (in 2007) and hadn't made its way to the project's CVS tree
 until 2009.

 BTW, some think that sudo(8) is an OpenBSD creation - that's not the
 case either.

Was Tim Miller (guy that created sudo, right?) an openbsd developer
before/during/after/never when sudo was put in base in 2009?


 Regards,

 Raf




-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



Re: OpenBSD projects

2014-12-26 Thread Miod Vallat
 Was Tim Miller (guy that created sudo, right?) an openbsd developer
 before/during/after/never when sudo was put in base in 2009?

He's Todd Miller, he did not create sudo, and sudo was imported in 1999,
not 2009.



Re: interesting question about shells

2014-12-26 Thread Wayne Cuddy
Bash and Zsh will already handle your first example without any
tinkering.

As Christian stated the completion systems are quite mature, I tend to
prefer zsh myself.

A good book that I recommend to get started is From Bash to Zsh. I
found it easier to start with rather the supplied reference
documentation.

Hope that helps,
Wayne

On Wed, Dec 24, 2014 at 04:56:02PM +0200, Gregory Edigarov wrote:
 Hi,
 
 an interesting question has just come to my head:
 do you know of any shell that could complete from the terminal output of 
 any of the previous command?
 
 like for example:
 i want it to complete from a result of ls, so I give the ls command, 
 look at its output, then for example
 i type 'cat  some prefixTAB' and it completes from the result of ls.
 now if i want for example  ssh to any host, i give command cat 
 .ssh/config, and then ssh some prefixTAB.
 is that at all possible?
 
 --
 With best regards,
  Gregory Edigarov



Re: OpenBSD projects

2014-12-26 Thread David Coppa
On Fri, Dec 26, 2014 at 9:36 PM, jungle Boogie jungleboog...@gmail.com wrote:
 Hi Raf,
 On 26 December 2014 at 12:13, Raf r...@devio.us wrote:
 On Fri, Dec 26, 2014 at 02:11:04PM EST, Carsten Kunze wrote:
 jungle Boogie jungleboog...@gmail.com wrote:

  Here's a list of projects that I'm aware of that openBSD created. Is
  that correct? (p) is for portable. What else am I missing?

 How about tmux (p)?

 Nope - tmux(1), similarly to mandoc(1), has been started outside of
 OpenBSD (in 2007) and hadn't made its way to the project's CVS tree
 until 2009.

 BTW, some think that sudo(8) is an OpenBSD creation - that's not the
 case either.

 Was Tim Miller (guy that created sudo, right?) an openbsd developer
 before/during/after/never when sudo was put in base in 2009?

http://en.wikipedia.org/wiki/Sudo



Re: OpenBSD projects

2014-12-26 Thread Raf
On Fri, Dec 26, 2014 at 03:36:11PM EST, jungle Boogie wrote:

 Hi Raf,

Hi jungle Boogie,

 Was Tim Miller (guy that created sudo, right?) an openbsd developer
 before/during/after/never when sudo was put in base in 2009?

As already pointed out - Todd C. Miller, not Tim.

http://www.sudo.ws/sudo/history.html

Regards,

Raf

P.S. Doing your own research doesn't hurt - I promise ;^)



Re: OpenBSD projects

2014-12-26 Thread Ted Unangst
On Fri, Dec 26, 2014 at 09:42, jungle Boogie wrote:
 Hello All,
 
 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?

The now deleted gzsig!



Re: interesting question about shells

2014-12-26 Thread Jonathon Sisson
On Fri, Dec 26, 2014 at 03:48:43PM -0500, Wayne Cuddy wrote:
 A good book that I recommend to get started is From Bash to Zsh. I
 found it easier to start with rather the supplied reference
 documentation.
 
Does From Bash to Zsh cover ksh, csh, tcsh, etc...?

It sounds like a great book idea, but it looks to me like the book
literally just covers Bash and Zsh?  Is that the case?



Re: A christmassy related issue with traceroute

2014-12-26 Thread Michael
Apologies, I must've missed something that was mentioned in the man pages,
in OpenBSD it seems that addresses are printed for each attempt rather than
(the other OS' tested, Win, Debian, Android) that seem to take the first
returned name for example
It just seemed odd as both the man pages on the other os' and OpenBSD state
that three probes (by default) are sent at each ttl setting and a line is
printed showing the ttl, address of the gateway and round trip time.
It is just the first time I have seen this as other os that I have had
experience of show things differently (as below).
I don't understand why this default wrong behaviour is shown for others
but figured this may be useful in the archives for others that don't
understand the internet.

 1072 ms   162 ms   983 ms  ae53.edge2.newyork1.level3.net
[4.71.230.101]
 11  1245 ms   546 ms  2950 ms  ae-240-3616.edge6.london1.level3.net
[4.69.166.93]
 12   127 ms   151 ms   165 ms  ae-240-3616.edge6.london1.level3.net
[4.69.166.93]
 13   678 ms  2879 ms   245 ms  high-speed.edge6.london1.level3.net
[195.50.90.134]
 14  1598 ms   999 ms   140 ms  xe-3-4.core00.sov.uk.hso-group.net
[46.17.60.173]
 15   633 ms  2848 ms   140 ms  xe-4-1.core00.tch.uk.hso-group.net
[77.75.108.149]
 16  3480 ms   572 ms   441 ms  xe-4-1.core00.hex.uk.hso-group.net
[77.75.108.153]
 17  2853 ms   538 ms * xe-4-4.core00.lhc.uk.hso-group.net
[77.75.108.158]
 18   472 ms  1152 ms   569 ms  xe-4-4.core00.tut.uk.hso-group.net
[77.75.108.156]
 19  2232 ms   574 ms * xe-4-1.core00.gs1.uk.hso-group.net
[77.75.108.154]
 20   543 ms  1654 ms   562 ms  ae0-1203.edge00.sov.uk.hso-group.net
[46.17.60.117]
 21  1393 ms   198 ms   746 ms  xoxoxoxoxoxo.ho.ho.ho.xoxoxoxoxoxo
[93.89.84.75]
 22  1195 ms   441 ms   173 ms  xooxooo.v.ooxx
[82.133.91.37]
 23   475 ms   522 ms   226 ms  ooxoxo.mmm.xxoooxo
[82.133.91.18]
 24   364 ms  3218 ms   638 ms  oooxoxooo.e.oooxox
[82.133.91.63]
 25   143 ms  1862 ms   238 ms  xooxooox.rrr.ooxox
[82.133.91.56]
 26   886 ms   745 ms   567 ms  oxooxoo.r.oooxooxo
[82.133.91.55]
 27 *  431 ms * xoooxo.yyy.oooxxoo
[82.133.91.58]
 28   335 ms   118 ms   154 ms  ooxoxo.ccc.xoooxoo
[82.133.91.96]
 29  2462 ms  1113 ms   554 ms  oxooo.h.oxooox
[82.133.91.23]
 30   736 ms  1126 ms   153 ms  ooxooxoo.rrr.ooxoooxoo
[82.133.91.49]
 31   309 ms  2658 ms   850 ms  oxoooxo.i.oooxooxo
[82.133.91.60]
 32   271 ms   957 ms  3498 ms  oooxoo.sss.oox
[82.133.91.42]
 33   934 ms   561 ms  2909 ms  oooxoooxoo.ttt.xoo
[82.133.91.61]
 34 *  491 ms  2098 ms  ooxoo.mm.oooxo
[82.133.91.34]
 35   112 ms   162 ms   558 ms  xxoo..oxoo
[82.133.91.80]
 36   200 ms   343 ms  1077 ms  oxo.ss.ooo
[82.133.91.40]
 37  1835 ms   471 ms  1073 ms  ooxooo.xxx.oxo
[82.133.91.35]
 38  1418 ms   562 ms  1270 ms  ox.xxx.xxo
[82.133.91.10]
 39 *  491 ms   554 ms  oh.the.weather.outside.is.frightful
[82.133.91.41]
 40   142 ms   441 ms   551 ms  but.the.fire.is.so.delightful [82.133.91.19]
 41   561 ms *  492 ms  and.since.weve.no.place.to.go [82.133.91.77]
 42  3204 ms   558 ms   130 ms  let.it.snow.let.it.snow.let.it.snow
[82.133.91.43]
 43  3431 ms   390 ms   698 ms  xxx [82.133.91.24]
 44   171 ms  1214 ms   118 ms  it.doesnt.show.signs.of.stopping
[82.133.91.36]
 45   566 ms  3458 ms   550 ms  and.ive.bought.some.corn.for.popping
[82.133.91.73]
 46  2168 ms   741 ms   555 ms  the.lights.are.turned.way.down.low
[82.133.91.76]
 47  3315 ms   570 ms * let.it.snow.let.it.snow.let.it.snow
[82.133.91.67]
 48   124 ms   421 ms   598 ms  xxx [82.133.91.38]
 49   203 ms  1718 ms   194 ms  when.we.finally.kiss.good.night
[82.133.91.62]
 50   332 ms *  918 ms  how.ill.hate.going.out.in.the.storm
[82.133.91.45]
 51   498 ms   118 ms   116 ms  but.if.youll.really.hold.me.tight
[82.133.91.78]
 52  2269 ms   549 ms * all.the.way.home.ill.be.warm [82.133.91.17]
 53   759 ms *  496 ms  xxx [82.133.91.70]
 54  2375 ms   553 ms  1803 ms  the.fire.is.slowly.dying [82.133.91.95]
 55   555 ms   717 ms   550 ms  and.my.dear.were.still.goodbying
[82.133.91.57]
 56  1950 ms   550 ms  1898 ms  but.as.long.as.you.love.me.so [82.133.91.31]
 57  2289 ms   108 ms   122 ms  let.it.snow.let.it.snow.let.it.snow
[82.133.91.53]
 58  2782 ms   269 ms   141 ms  ooo [82.133.91.94]
 59   180 ms   150 ms   135 ms  ho.ho.ho.are.we.having.fun.yet
[82.133.91.64]
 60  2707 ms   550 ms   570 ms  m.e.r.r.y.c.h.r.i.s.t.m.a.s [82.133.91.86]
 61  1421 ms   565 ms   455 ms  ooo [82.133.91.15]
 62  2127 ms   565 ms   519 ms  dashing.through.the.snow [82.133.91.14]
 63  2969 ms   570 ms   387 ms  in.a.one-horse.open.sleigh [82.133.91.83]
 64  1181 ms   141 ms   

Re: OpenBSD projects

2014-12-26 Thread jimchoffman
npppd ?
ifstated ?

On 12/26/2014 11:42 AM, jungle Boogie wrote:
 Hello All,
 
 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?
 openssh (p)
 opensmtpd (p)
 mandoc (p)
 openntpd (p)
 openbgpd
 libressl (p)
 openiked (p?)
 pf
 relayd
 httpd
 carp
 
 Thanks,
 Jungle



Re: OpenBSD projects

2014-12-26 Thread L.R. d S.
arc4random
OpenBSD Cryptographic Framework
W^x
patch's on Xenocara... 
[?]



Re: interesting question about shells

2014-12-26 Thread Wayne Cuddy
No really.. a lot of the basics are applicable to ksh (*sh) but *csh
style shells aren't covered.

On Fri, Dec 26, 2014 at 04:54:16PM -0500, Jonathon Sisson wrote:
 On Fri, Dec 26, 2014 at 03:48:43PM -0500, Wayne Cuddy wrote:
  A good book that I recommend to get started is From Bash to Zsh. I
  found it easier to start with rather the supplied reference
  documentation.
  
 Does From Bash to Zsh cover ksh, csh, tcsh, etc...?
 
 It sounds like a great book idea, but it looks to me like the book
 literally just covers Bash and Zsh?  Is that the case?



Re: OpenBSD projects

2014-12-26 Thread jungle Boogie
Hi Raf,
On 26 December 2014 at 12:56, Raf r...@devio.us wrote:
 On Fri, Dec 26, 2014 at 03:36:11PM EST, jungle Boogie wrote:

 Hi Raf,

 Hi jungle Boogie,

 Was Tim Miller (guy that created sudo, right?) an openbsd developer
 before/during/after/never when sudo was put in base in 2009?

 As already pointed out - Todd C. Miller, not Tim.

 http://www.sudo.ws/sudo/history.html


Thanks! This looks really interesting.

 Regards,

 Raf

 P.S. Doing your own research doesn't hurt - I promise ;^)


You're right. I had his first name mixed up but I knew he is an
openbsd developer and at least maintained sudo.

-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



Re: OpenBSD projects

2014-12-26 Thread jungle Boogie
Hi Ted,
On 26 December 2014 at 13:23, Ted Unangst t...@tedunangst.com wrote:
 On Fri, Dec 26, 2014 at 09:42, jungle Boogie wrote:
 Hello All,

 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?

 The now deleted gzsig!

Your too kind way to say that I forgot signigy!

http://www.tedunangst.com/flak/post/signify


And it looks like its portable as well.


-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



Re: OpenBSD projects

2014-12-26 Thread Martin Schröder
2014-12-26 18:42 GMT+01:00, jungle Boogie jungleboog...@gmail.com:
 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?

opencvs

Best
Martin



Re: OpenBSD projects

2014-12-26 Thread Nikolai Fetissov
Looks like openospfd is missing from the list.

 On Dec 26, 2014, at 7:34 PM, jungle Boogie jungleboog...@gmail.com wrote:
 
 Hi Ted,
 On 26 December 2014 at 13:23, Ted Unangst t...@tedunangst.com wrote:
 On Fri, Dec 26, 2014 at 09:42, jungle Boogie wrote:
 Hello All,
 
 Here's a list of projects that I'm aware of that openBSD created. Is
 that correct? (p) is for portable. What else am I missing?
 
 The now deleted gzsig!
 
 Your too kind way to say that I forgot signigy!
 
 http://www.tedunangst.com/flak/post/signify
 
 
 And it looks like its portable as well.
 
 
 -- 
 ---
 inum: 883510009027723
 sip: jungleboo...@sip2sip.info
 xmpp: jungle-boo...@jit.si



Re: Adding encryption support to vi(1)

2014-12-26 Thread Joel Rees
On Sat, Dec 27, 2014 at 1:33 AM, andrew fabbro and...@fabbro.org wrote:
 On Fri, Dec 26, 2014 at 12:02 AM, thornton.rich...@gmail.com wrote:

 I live in NJ. Should I be‎ this paranoid, that every file I edit should
 be
 encrypted?
 Who has time for this type of craziness?

 Well, no one.  I encrypt very few files.

I think that's relevant.

 But keeping one's passwords and related administrivia safe, preventing
 unencrypted versions/tempfiles from accidentally being captured by running
 backups, etc. is hardly a rare use case.

Let's draw a venn diagram of uses of vi and uses of a text editor
capable of directly writing encrypted files.

(Don't get me wrong. When I first read your original question, I was
thinking, yeah, I might want one of those ./)

 pwsafe (referring to the nox11 version) is a fine program but comes up a
 bit short if you want to include notes that are more than a brief comment,
 or what you want to save is not password/account-related. That's really all
 I was describing.
 [...]

Do one thing, do it well.

Otherwise, it becomes difficult to prove correctness.

Simple text editors are not hard to write, especially if you decide to
not deal with variable width typefaces and such. I'd whip one up for
you, but right now I'd probably be writing it in forth. 8-*

Of course, gpg reads from standard input, so ...

-- 
Joel Rees

Be careful when you look at conspiracy.
Look first in your own heart,
and ask yourself if you are not your own worst enemy.
Arm yourself with knowledge of yourself, as well.



Re: Discovering the keycode of key.

2014-12-26 Thread Joel Rees
On Fri, Dec 26, 2014 at 1:58 PM, Eduardo Lopes dud...@gmail.com wrote:
 Hello folks!

 May someone point to me how do I can obtain, in the console, the keycode of
 any particular key, in OpenBSD?

 thanks

 Eduardo Lopes.


showkey doesn't seem to be on my machine, but xev is.

Is xev part of the standard X11 install?

-- 
Joel Rees

Be careful when you look at conspiracy.
Look first in your own heart,
and ask yourself if you are not your own worst enemy.
Arm yourself with knowledge of yourself, as well.



Re: OpenBSD projects

2014-12-26 Thread jungle Boogie
Hi Nikolai,
On 26 December 2014 at 16:49, Nikolai Fetissov niko...@fetissov.org wrote:
 Looks like openospfd is missing from the list.


Would you consider that a companion to openbgpd since the site says:
OpenBGPD's companions, ospfd(8), ospf6d(8), ripd(8), and dvmrpd(8) add
support for the respective protocols. ldpd(8) and mpe(4) add MPLS
support.


http://www.openbgpd.org/



-- 
---
inum: 883510009027723
sip: jungleboo...@sip2sip.info
xmpp: jungle-boo...@jit.si



Re: Discovering the keycode of key.

2014-12-26 Thread Eduardo Lopes
Joel Rees joel.rees at gmail.com writes:

 
 showkey doesn't seem to be on my machine, but xev is.
 
 Is xev part of the standard X11 install?
 

Yes, xev is part of Xenocara, but I don´t think the keycodes on X correlates 
to that on wsconsctl, do they?