Bad kernel for OpenBSD 6.1 sparc64 ?

2017-04-20 Thread Jeff
Hi, I have a Sunfire V120 (Sparc) with mirrored disks running OpenBSD 6.0. I attempted to update to OpenBSD 6.1 using the files first from: http://mirrors.sonic.net/pub/OpenBSD/6.1/sparc64 Then from: https://ftp3.usa.openbsd.org/pub/OpenBSD/6.1/sparc64 First I tried to copy bsd.rd to / and

Re: iked/IKEv2 issue with 6.1

2017-04-20 Thread Igor V. Gubenko
Thank you, the patch appears to work. I haven't fully tested connecting/establishing connections, so I'll send another update. Prior to the patch, iked also complained about lack of public keys for PSK connections 1 and 2 (in /etc/iked/pubkeys/fqdn/) It doesn't mind them being absent anymore

Re: iked/IKEv2 issue with 6.1

2017-04-20 Thread Reyk Floeter
On Thu, Apr 20, 2017 at 04:03:38PM -0400, Igor V. Gubenko wrote: > Hello everyone, > > OpenIKED just doesn't seem to like me much. > > I managed to get it working around 5.8 but from upgrade to upgrade I > encountered different issues. > > I have 3 tunnels using IKEv2. 2 are using a PSK, and 1

Re: WARNING: symbol(icudt58_dat) size mismatch, relink your program

2017-04-20 Thread uma
El 2017-04-20 14:40, Predrag Punosevac escribió: Sorry for the noise. Did anybody try to use slappasswd after upgrading from 6.0 to 6.1 (amd64). I get slappasswd:/usr/local/lib/libicuuc.so.12.0: /usr/local/lib/libicudata.so.12.0 : WARNING: symbol(icudt58_dat) size mismatch, relink your program

iked/IKEv2 issue with 6.1

2017-04-20 Thread Igor V. Gubenko
Hello everyone, OpenIKED just doesn't seem to like me much. I managed to get it working around 5.8 but from upgrade to upgrade I encountered different issues. I have 3 tunnels using IKEv2. 2 are using a PSK, and 1 is using cert/RSA auth. They were working fine on 6.0. However the same

Re: Performance Clang

2017-04-20 Thread Heiko
Thank you for the info. So you expect a lower time in future. Am 20.04.17 um 21:31 schrieb Christian Weisgerber: > The exact numbers are a bit odd, but generally speaking, yes, adding > clang has substantially increased the build time. I see about a > doubling on Xeon E3-12xx-based machines for

Re: Performance Clang

2017-04-20 Thread Heiko
Please dont get me wrong. I dont want to start any compiler wars. I only was worried about the compile time. Am 20.04.17 um 20:50 schrieb Karel Gardas: > IMHO very unfair comparison and you should really wait till OpenBSD > system/core is build with Clang and GCC 4.2.1 is removed from the >

Re: tmux.conf syntactic change

2017-04-20 Thread Scott Bonds
Yah, I ran into that too, syntax for that sorta stuff changed, now its like this: bind -T copy-mode-vi v send -X begin-selection On 04/20, Predrag Punosevac wrote: Not really a question but one thing I noticed after upgrading dozen or so OpenBSD servers from 6.0 to 6.1 per official

Re: Performance Clang

2017-04-20 Thread Christian Weisgerber
On 2017-04-20, Heiko wrote: > So I guess the main advantage is the license? > Or is clang technically (binaries, debug) better? OpenBSD does not live in a bubble. If it did, we could still be using gcc 2.95. But it turns out people, including OpenBSD

WARNING: symbol(icudt58_dat) size mismatch, relink your program

2017-04-20 Thread Predrag Punosevac
Sorry for the noise. Did anybody try to use slappasswd after upgrading from 6.0 to 6.1 (amd64). I get slappasswd:/usr/local/lib/libicuuc.so.12.0: /usr/local/lib/libicudata.so.12.0 : WARNING: symbol(icudt58_dat) size mismatch, relink your program I tried reinstalling openldap-server-2.4.44p3

Re: Performance Clang

2017-04-20 Thread Christian Weisgerber
On 2017-04-19, Heiko wrote: > I'm using current on amd64 (Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz, > 3411.91 MHz) > > I noticed that with clang it needs 109 minutes for "make build" and > before with gcc 32 minutes. Not sure what you mean by "performance" in the

tmux.conf syntactic change

2017-04-20 Thread Predrag Punosevac
Not really a question but one thing I noticed after upgrading dozen or so OpenBSD servers from 6.0 to 6.1 per official documentation is that my .tmux.conf file is now broken. /root/.tmux.conf:16: invalid or unknown command: bind-key -t vi-copy 'v' begin-selection /root/.tmux.conf:17: invalid or

Re: Performance Clang

2017-04-20 Thread Karel Gardas
On Thu, Apr 20, 2017 at 1:43 AM, Heiko wrote: > Hello Misc, > > I'm using current on amd64 (Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz, > 3411.91 MHz) > > I noticed that with clang it needs 109 minutes for "make build" and > before with gcc 32 minutes. > > Is this a

Re: Strange PF behaviour after 6.0 -> 6.1 upgrade

2017-04-20 Thread Edgar Pettijohn
The answer may be in an irrelevant section​ of pf.conf. why not post it's entirety. ⁣Sent from BlueMail ​ On Apr 20, 2017, 10:15 AM, at 10:15 AM, "Sjöholm Per-Olov" wrote: > >> On 20 Apr 2017, at 13:00, Sjöholm Per-Olov wrote: >> >> >>> On 20 Apr 2017, at

Re: Strange PF behaviour after 6.0 -> 6.1 upgrade

2017-04-20 Thread Sjöholm Per-Olov
> On 20 Apr 2017, at 13:00, Sjöholm Per-Olov wrote: > > >> On 20 Apr 2017, at 01:18, Sjöholm Per-Olov wrote: >> >> >>> On 20 Apr 2017, at 00:39, Fred wrote: >>> >>> On 04/19/17 23:30, Sjöholm Per-Olov wrote: Anyone with a clue

Re: smtpd log: certificate verification failed

2017-04-20 Thread Walter Alejandro Iglesias
On Thu, Apr 20, 2017 at 03:08:30PM +0200, Gilles Chehade wrote: > On Thu, Apr 20, 2017 at 02:59:10PM +0200, Walter Alejandro Iglesias wrote: > > Hello everyone, > > > > Just to be sure, when I get this message: > > > > maillog:Apr 20 13:53:03 server smtpd[99586]: smtp-out: Server certificate >

Re: smtpd log: certificate verification failed

2017-04-20 Thread Gilles Chehade
On Thu, Apr 20, 2017 at 02:59:10PM +0200, Walter Alejandro Iglesias wrote: > Hello everyone, > > Just to be sure, when I get this message: > > maillog:Apr 20 13:53:03 server smtpd[99586]: smtp-out: Server certificate > verification failed on session 81c5fc1509d4c884 > > Is it about my server

smtpd log: certificate verification failed

2017-04-20 Thread Walter Alejandro Iglesias
Hello everyone, Just to be sure, when I get this message: maillog:Apr 20 13:53:03 server smtpd[99586]: smtp-out: Server certificate verification failed on session 81c5fc1509d4c884 Is it about my server cert or the remote one?

Re: howto show IPv6 address lifetime?

2017-04-20 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Florian, On 04/20/17 12:45, Florian Ermisch wrote: > Hi Harri, > > until someone in the know replies you could take a look at the DHCPv6 traffic > to see if a lifetime is included in the replies (and maybe keep them handy > for a dev to look

Re: Thinkpad T460s on lastest -snapshot, no Xorg

2017-04-20 Thread Muhammad Muntaza
On Apr 16, 2017 7:23 AM, "Gregor Best" wrote: Hi Daniel, I have a laptop with a similar chipset. The issue is that the inteldrm(4) driver does not support Skylake devices at the moment. If you boot the machine EFI mode, efifb(4) should attach to the EFI frame buffer. This

Re: Strange PF behaviour after 6.0 -> 6.1 pgrade

2017-04-20 Thread Sjöholm Per-Olov
> On 20 Apr 2017, at 01:18, Sjöholm Per-Olov wrote: > > >> On 20 Apr 2017, at 00:39, Fred wrote: >> >> On 04/19/17 23:30, Sjöholm Per-Olov wrote: >>> Anyone with a clue would be _very_ much appreciated…. >>> I upgraded from 6.0 to 6.1 two days ago and

"set state-defaults pflow" parsing issue in 6.1

2017-04-20 Thread Bob Jones
Hi, I've come accross a strange parsing issue where if you have "modulate state" set, then "set state-defaults pflow" does not set "(pflow)". For example, the below dummy config : set state-defaults pflow table {192.0.2.0/24,198.51.100.0/24} table {203.0.113.0/24} pass in inet proto tcp from

Re: howto show IPv6 address lifetime?

2017-04-20 Thread Florian Ermisch
Hi Harri, until someone in the know replies you could take a look at the DHCPv6 traffic to see if a lifetime is included in the replies (and maybe keep them handy for a dev to look at). Maybe dhcpcd supports this feature but there's an uncommon combination of flags it doesn't know about yet.

Re: ipsec ... again

2017-04-20 Thread Markus Rosjat
hi, comments below Am 19.04.2017 um 23:23 schrieb Remi Locherer: here is the ipsec.conf on the openbsd machine ike from {10.10.10.0/24} to 10.10.15.0/24 \ You need to add "peer AA.BB.CC.DD" here. why, it's a passive setup the active site can have the peer part or did this change

Re: flaky network connection after 6.1 upgrade

2017-04-20 Thread Stefan Sperling
On Wed, Apr 19, 2017 at 10:08:01AM +0200, Stefan Sperling wrote: > On Tue, Apr 18, 2017 at 11:29:22PM -0500, Colton Lewis wrote: > > > Can you show me a dmesg please, specifically the lines which are > > > related to your wifi card? > > > athn0 at pci6 dev 0 function 0 "Atheros AR9281" rev 0x01:

Sysctl options to install IDS software

2017-04-20 Thread C. L. Martinez
Hi all, In the following days, I want to replace some linux systems that acts as IDS/IPS nodes with OpenBSD 6.1 (congratulations to all OpenBSD's team. IMO, the best OpenBSD that I have used). These OpenBSD nodes will be installed with Suricata, Bro and Snort components. In the Linux and

Mad Catz Mad Catz R.A.T.TE usb mouse locks up X pointer

2017-04-20 Thread dotbit
Hello, I have a problem with X and my "Mad Catz Mad Catz R.A.T.TE" usb mouse. The problem happens when the mouse is plugged in and I try to do something with the mouse in X. I am using dwm 6.1 but I have also tried with TWM from base and the problem is exactly the same. The pointer is moving

pf table statistics

2017-04-20 Thread alf
Hello, I have a table in my pf.conf that is declared and used as such: table persist block drop quick from pass in on $EXT_IF inet proto tcp from any to any port 22 keep state (max-src-conn 5, max-src-conn-rate 5/3, overload flush global) which gets flushed via roots crontab: 10

Re: howto show IPv6 address lifetime?

2017-04-20 Thread Harald Dunkel
On 04/19/17 15:38, Dimitris Papastamos wrote: > > You don't seem to have any autoconfigured addresses. > Try ifconfig vether0 inet6 autoconf first. > Here is the output of ifconfig on my gateway: # ifconfig re1 re1: flags=8843 mtu 1500 lladdr