OpenNTPd hanging when https constraints servers aren't reachable
Hi there, With a standard 5.9 release machine syncing from neighbour OpenBSD OpenNTPd server on the same network; when the Internet is disconnected & an /etc/rc.d/ntpd restart is issued, it seems to hang. ntpd syslogs 'engine ready', but not 'peer a.b.c.d now valid' 'ntpctl -s status' constantly shows (even after I make the Internet available again): '0/1 peers valid, clock unsynced' After the Internet is reconnected and then ntpd restarted, all is well. On http://www.OpenBSD.Org/60.html I see: 'o Fixed high CPU usage when the network is down.' Cheers, -- Craig Skinner | http://linkd.in/yGqkv7
Apple security bounties
https://techcrunch.com/2016/08/04/apple-announces-long-awaited-bug-bounty-program/ Any security researchers on the list? If you're interested in supporting OpenBSD, Apple might match the bug bounty toward a certain Canadian not-for-profit foundation.
Re: OpenBSD Songs - License
Edit: The website I was referring to is https://www.openbsd.org/lyrics.html > Hi all, > > I've just discovered the OpenBSD Songs, but unfortunately I can't > tell under which license they've been released. It would be really helpful > if > you could update your website with this information > > - license of audio files > - license of the lyric texts > > Thank you in advance! Sent using GuerrillaMail.com Block or report abuse: https://www.guerrillamail.com/abuse/?a=TEhnBi0PU7Ebih2wvnENdQ%3D%3D
OpenBSD Songs - License
Hi all, I've just discovered the OpenBSD Songs, but unfortunately I can't tell under which license they've been released. It would be really helpful if you could update your website with this information - license of audio files - license of the lyric texts Thank you in advance! Sent using GuerrillaMail.com Block or report abuse: https://www.guerrillamail.com/abuse/?a=TEhnBi0PU7Ebih2wvnENdQ%3D%3D
Re: A request for assistance with a project I started for OpenBSD
On Fri, Aug 05, 2016 at 04:45:04PM +0200, ludovic coues wrote: > Hi, > > I would be happy to help with testing. > I'm ok with my email being public > Great! What architecture(s) are you running? What are you using for printers? Are you running off of a print server machine or just a single machine(s) connected to printer(s)? Are you using lpd now or CUPS or a direct print to a port? Any problems right now? Are you using any ports or self-written filters? What do you want changed or improved or unbroken? USB, serial, lpt, WiFi? Do you have to get any firmware like some HP printers? Does your printer itself have a broken set-up straight from the factory, I.E. they manufactured it wrong for all OS's? Going to post this to misc@ One concern I have with the OpenBSD mailing lists is the sheer volume of messages is enormous, which is great, but I find myself a little lost in finding threads about something specific, like this, very difficult. If anyone has suggestions about that, I would welcome it. Thanks, Chris Bennett
A request for assistance with a project I started for OpenBSD
There are a number of systems in OpenBSD that work essentially independently of the main flow. I decided, enthusiastically, to tackle the LPD/LPR system, which is outdated but essential. It needs new code or throw away the existing code and start fresh. It needs proper security. It needs to have IPP, Internet Printing Protocol. It will also need many other things I haven't even thought of. Although many use CUPS instead, LPD is essential. Read the Licenses of CUPS and be appalled. I spent a ton of time studying this whole problem and realized I cannot tackle this big of a project alone. This is a project that can be worked on without interfering with anything else. So I am asking for any NON-developers if they would like to help me with this project. I don't care how this works. I don't need to be in charge, there really are too many areas that need extensive work. And there is a critical need for people in a variety of environments and systems to DO TESTING. There are printers that do not respond properly to IPP or LPD. I have a hunch that this project will need a core that is written in C, but will also need something like Perl to rapidly add new changes that pop up in the future. It is essential that LPD continue to support old equipment. There is a lot of that being used and it must be supported. The developers are busy juggling 15 balls in the air at once and really can't get involved in this project because of the great amount of work AND time this will take. So I am asking for anyone that can code. Anyone that can test. You may reply to me on-list or off-list. If you reply off-list, please tell me if you want your email private or if it can be made public to others. Thanks to anyone who would like to help, Chris Bennett
Output Errors on VLAN interfaces
Hi guys, Has anyone else seen issues with "output errors" occurring on only VLAN interfaces since upgrading to 5.9? (and after using openup to get latest kernel). It does not happen on all VLAN interfaces, only ones under load. The underlying trunk does not report any Rx or Tx errors at all. And the VLAN interfaces do not report any receive errors, only low rate transmit errors. Also as a thought exercise, could anyone kindly explain/discuss how an output error might even occur or be valid? You would think that if the packet has been through the whole OpenBSD stack that it should not have an error on output (input errors, yes, definitely possible). But if the packet was/is in error, why is it transmitting it at all, or not being dropped before the output stage? Thanks, Andy.
Re: tp-link tl-wn722n athn0: could not load firmware
Mihai Popescu wrote: Had anyone any success with this usb wireless in recent snapshots. Following some hints that this chip is not properly powered from USB port, I hardwired it to the power supply of the computer, but the result is the same: it fails to load the firmware. Nevertheless I had some interesting results using some custom usb cable prepared for some measurements. After a few plug-in actions, the 500mA fuse of my multimeter was destroyed. It looks like there is a current spike at plug-in time, greater thatn 500mA. But, switching to a bigger scale and moving the usb wireless module on another OS, I got aprox. 130mA current draw in a working state. I tried to recompile the 5.9 release kernel with some added delays in the code, but I got some errors like syscal 114 and another numbers at boot time. It sounds more like a capacitor charging up within the device. Seems a bit weird for a wireless module, but I guess this could be a decoupling cap. If your 500mA fuse blew the first time you plugged it in but not the second time, it was just drawing the current to charge some capacitor up. Then when you plugged it into another OS, the cap was already (partially) charged, so the current spike was not as large, or as long. A spike that is too short will not blow a fuse, even if it is a fast-blow one, unless the current is much higher than the fuse itself. A fuse is really designed to protect against situations which could result in overheating of the conducting paths (wires, PCB tracks, etc). Maybe try again after shorting the power pins on the USB plug on the wireless adapter for a few seconds (or better yet, instead of a short, use a bleed resistor of something like 10ohms to discharge the cap). An oscilloscope is great for picking up such transients, since a multimeter typically has a latency for registering these kinds of transients. Something like: +--[scope]-+ GND-> | | <- Probe | | (-) --+--[1R0]---+-[LOAD] (+)
Re: tp-link tl-wn722n athn0: could not load firmware
Had anyone any success with this usb wireless in recent snapshots. Following some hints that this chip is not properly powered from USB port, I hardwired it to the power supply of the computer, but the result is the same: it fails to load the firmware. Nevertheless I had some interesting results using some custom usb cable prepared for some measurements. After a few plug-in actions, the 500mA fuse of my multimeter was destroyed. It looks like there is a current spike at plug-in time, greater thatn 500mA. But, switching to a bigger scale and moving the usb wireless module on another OS, I got aprox. 130mA current draw in a working state. I tried to recompile the 5.9 release kernel with some added delays in the code, but I got some errors like syscal 114 and another numbers at boot time.
Re: Install OpenBSD on disks larger than 2TB
Am 08/05/16 um 11:36 schrieb Leo Unglaub: > Hey, > > did you do anything special during the installation? Or did you simply > follow the installer? > dropped to a shell, created the raid by hand. followed the installer but fixed the boundaries for disklabel as mentioned in an earlier version of the FAQ which discussed installations on bigger disks way back when i originally installed that box. You can still find it in the attic: http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/www/faq/faq14.html?rev=1.295=text/html#LargeDrive There is also a section for "Disks larger than 2TB". But you didn't answered the initial question by Alex, if you install on a BIOS system or on a UEFI system? UEFI systems with GPT layout need some addtional steps to get it off the ground correctly.
Re: T450s doesn't resume after suspend
Am 08/05/16 um 10:10 schrieb Marc Peters: > Hi, > > i have a T450s which doesn't resume after suspended. When i close the > lid, the laptop suspends correctly but doesn't resume at all. Opening > the lid or pressing the button doesn't bring it back. I have to reset it. > > An acpidump is available at http://www.mpeters.org/T450s_acpidump.tar.gz > > Anything else needed? > > > Marc Disabling TPM as suggested off-list seems to do the trick.
Re: Install OpenBSD on disks larger than 2TB
Hey, Works for me: ~ $ sudo disklabel -p m sd2 # /dev/rsd2c: type: SCSI disk: SCSI disk label: SR RAID 1 duid: 7e4e73c2d1d85347 flags: bytes/sector: 512 sectors/track: 255 tracks/cylinder: 511 sectors/cylinder: 130305 cylinders: 44975 total sectors: 5860532576 # total bytes: 2861588.2M boundstart: 256 boundend: 5860532576 drivedata: 0 did you do anything special during the installation? Or did you simply follow the installer?
Re: T450s doesn't resume after suspend
Le 2016-08-05 10:10, Marc Peters a écrit : Hi, i have a T450s which doesn't resume after suspended. When i close the lid, the laptop suspends correctly but doesn't resume at all. Opening the lid or pressing the button doesn't bring it back. I have to reset it. An acpidump is available at http://www.mpeters.org/T450s_acpidump.tar.gz Anything else needed? Marc Hello, you should use sendbug(1) as root for this, and this will send the mail to b...@openbsd.org
T450s doesn't resume after suspend
Hi, i have a T450s which doesn't resume after suspended. When i close the lid, the laptop suspends correctly but doesn't resume at all. Opening the lid or pressing the button doesn't bring it back. I have to reset it. An acpidump is available at http://www.mpeters.org/T450s_acpidump.tar.gz Anything else needed? Marc dmesg: $ dmesg OpenBSD 6.0-current (GENERIC.MP) #0: Wed Aug 3 15:01:44 CEST 2016 r...@mapet.home:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 12759285760 (12168MB) avail mem = 12368117760 (11795MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xccbfd000 (66 entries) bios0: vendor LENOVO version "JBET60WW (1.24 )" date 05/25/2016 bios0: LENOVO 20BX004DGE acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP SLIC ASF! HPET ECDT APIC MCFG SSDT SSDT SSDT SSDT SSDT SSDT SSDT SSDT SSDT PCCT SSDT TCPA SSDT UEFI MSDM BATB FPDT UEFI DMAR acpi0: wakeup devices LID_(S4) SLPB(S3) IGBE(S4) EXP2(S4) XHCI(S3) EHC1(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpihpet0 at acpi0: 14318179 Hz acpiec0 at acpi0 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz, 2095.48 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,RDSEED,ADX,SMAP,PT,SENSOR,ARAT cpu0: 256KB 64b/line 8-way L2 cache cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges cpu0: apic clock running at 99MHz cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz, 2095.16 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,RDSEED,ADX,SMAP,PT,SENSOR,ARAT cpu1: 256KB 64b/line 8-way L2 cache cpu1: smt 1, core 0, package 0 cpu2 at mainbus0: apid 2 (application processor) cpu2: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz, 2095.16 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,RDSEED,ADX,SMAP,PT,SENSOR,ARAT cpu2: 256KB 64b/line 8-way L2 cache cpu2: smt 0, core 1, package 0 cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz, 2095.16 MHz cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,RDSEED,ADX,SMAP,PT,SENSOR,ARAT cpu3: 256KB 64b/line 8-way L2 cache cpu3: smt 1, core 1, package 0 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 40 pins acpimcfg0 at acpi0 addr 0xf800, bus 0-63 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (PEG_) acpiprt2 at acpi0: bus 2 (EXP1) acpiprt3 at acpi0: bus 3 (EXP2) acpiprt4 at acpi0: bus -1 (EXP3) acpicpu0 at acpi0: C3(200@233 mwait.1@0x40), C2(200@148 mwait.1@0x33), C1(1000@1 mwait.1), PSS acpicpu1 at acpi0: C3(200@233 mwait.1@0x40), C2(200@148 mwait.1@0x33), C1(1000@1 mwait.1), PSS acpicpu2 at acpi0: C3(200@233 mwait.1@0x40), C2(200@148 mwait.1@0x33), C1(1000@1 mwait.1), PSS acpicpu3 at acpi0: C3(200@233 mwait.1@0x40), C2(200@148 mwait.1@0x33), C1(1000@1 mwait.1), PSS acpipwrres0 at acpi0: PUBS, resource for XHCI, EHC1 acpipwrres1 at acpi0: NVP3, resource for PEG_ acpipwrres2 at acpi0: NVP2, resource for PEG_ acpitz0 at acpi0: critical temperature is 128 degC acpibtn0 at acpi0: LID_ acpibtn1 at acpi0: SLPB "LEN0071" at acpi0 not configured "LEN200F" at acpi0 not configured acpibat0 at acpi0: BAT0 model "45N1113" serial 227 type LION oem "LGC" acpibat1 at acpi0: BAT1 model "45N1775" serial 2450 type LION oem "SANYO" acpiac0 at acpi0: AC unit online acpithinkpad0 at acpi0 "SMO1200" at acpi0 not configured "PNP0C14" at acpi0 not configured "PNP0C14" at acpi0 not configured "PNP0C14" at acpi0 not configured "INT340F" at acpi0 not configured acpivideo0 at acpi0: VID_ acpivout at acpivideo0 not configured cpu0: Enhanced SpeedStep 2095 MHz:
Best way to hardware AES.
I'm thinking about getting some intel or sparc system with AES hardware. What would be the cleanest way to access the Open Cryptographic Framework to access the hardware. I'm writing in C. I'd like to do 256 bit aes-ctr or preferably aes-gcm and use ultrasparc T2 and above, i7 or older Xeons. I'm looking at using openssl/evp.h, but would it be better to do some sort of internal ssl session for what would mostly be an app with pre-shared symmetric keys?
