Re: The 16 partitions thread

2020-04-30 Thread bofh
On Thu, Apr 30, 2020 at 11:13 AM Consus wrote: > On Thu, Apr 30, 2020 at 07:22:35AM -0500, Ed Ahlsen-Girard wrote: > > I read the 16 partitions thread and think, "I marvel at their patience > > with interlocutors who have not read the relevant source code and give > > no indication that they

Re: Sound is good on OpenBSD

2020-04-30 Thread Abel Abraham Camarillo Ojeda
On Wed, Apr 29, 2020 at 7:46 AM Alexandre Ratchov wrote: > On Wed, Apr 29, 2020 at 11:46:06AM +0200, Moises Simon wrote: > > On Tue, Apr 28, 2020 at 03:38:58PM -0500, Abel Abraham Camarillo Ojeda > wrote: > > > I think increasing -b option in sndiod helps to prevent audio jumping, > I > > > hear

loading DBD-Pg under base httpd, works but it's wrong way

2020-04-30 Thread Chris Bennett
I've had a hell of a time getting Pg.so to load under base httpd. env LD_DEBUG=1 chroot /var/www script.pl gives errors about DynaLoader not being able to load due to a missing library. After looking at Postgresql libraries loaded using pg_config --libs I moved just those libs under /var/www.

Re: RCS file ownership?

2020-04-30 Thread Lévai , Dániel
Hi all! Years ago, I mean 10+, I was -- strangely -- quite actively using RCS for local configuration file history management, and fell into the same pit myself. I made this [1] off the cuff diff then, and reading this thread thought that I need to see how badly it would apply for today's

Re: relayd: Why doesn't "tls keypair" look for the fullchain certificate?

2020-04-30 Thread Chad Hoolie
Hello, Great idea - thanks a bunch! --Chad ‐‐‐ Original Message ‐‐‐ On Thursday 30. April 2020 kl. 19:07, Anthony J. Bentley wrote: > Chad Hoolie writes: > > > Why does "tls keypair" in relayd.conf look for the regular and not the > > fullchain certificate? > > Certificate filenames

Re: relayd: Why doesn't "tls keypair" look for the fullchain certificate?

2020-04-30 Thread Anthony J. Bentley
Chad Hoolie writes: > Why does "tls keypair" in relayd.conf look for the regular and not the > fullchain certificate? Certificate filenames are defined by your acme-client.conf. > Thus, forcing users who want an A+ certificate to spend hours > searching the web for this hack? > > cd /etc/ssl >

Re: The 16 partitions thread

2020-04-30 Thread Consus
On Thu, Apr 30, 2020 at 07:22:35AM -0500, Ed Ahlsen-Girard wrote: > Some people read replies in misc and say, "wow, Theo and the OBSD devs > are obnoxiously harsh.' > > I read the 16 partitions thread and think, "I marvel at their patience > with interlocutors who have not read the relevant

Re: RCS file ownership?

2020-04-30 Thread Theo de Raadt
Adam Thompson wrote: > AFAICT, GNU RCS (v5.9.4, ca. 2015, examined) creates a temp file, > unlinks the target file, then renames the temp file. I beleve this > guarantees(-ish, modulo "special" filesystems including NFS and > FreeBSD's directory-SUID behaviour) that resulting file ownership = >

Re: RCS file ownership?

2020-04-30 Thread Adam Thompson
Being neither a C programmer nor a Texinfo fan, checking GNU RCS is a bit painful, and my conclusions aren't guaranteed. AFAICT, GNU RCS (v5.9.4, ca. 2015, examined) creates a temp file, unlinks the target file, then renames the temp file. I beleve this guarantees(-ish, modulo "special"

Re: How to enable TLS 1.3?

2020-04-30 Thread Chad Hoolie
Thanks a lot for the help Martijn. Fingers crossed it will appear soon. Our search engine rankings depend on it! --Chad ‐‐‐ Original Message ‐‐‐ On Thursday, April 30, 2020 4:16 PM, Martijn van Duren wrote: > If it's not in the manpage it's probably not there. > I did gave a quick

Re: How to enable TLS 1.3?

2020-04-30 Thread Kevin Chadwick
On 2020-04-30 13:55, Chad Hoolie wrote: > Any idea about relayd though? I don't see any mentioning of 1.3 in man > relayd.conf: I'm not a dev but tls1.3 dropped RSA and I think requires ecdsa key support that relayd currently lacks. Although httpd was originally based on relayd. I assume the

Re: How to enable TLS 1.3?

2020-04-30 Thread Chad Hoolie
Any idea about relayd though? I don't see any mentioning of 1.3 in man relayd.conf: tls no tlsv1.2 Disable the TLSv1.2 protocol. The default is to enable TLSv1.2. sslv3 Enable the SSLv3 protocol. The default is no sslv3. tlsv1 Enable all TLSv1 protocols. This

Re: How to enable TLS 1.3?

2020-04-30 Thread Martijn van Duren
If it's not in the manpage it's probably not there. I did gave a quick look through the relayd source, but from what I saw there's no TLS1.3 support there. On 4/30/20 3:55 PM, Chad Hoolie wrote: > Any idea about relayd though? I don't see any mentioning of 1.3 in man > relayd.conf: > > tls >

The 16 partitions thread

2020-04-30 Thread Ed Ahlsen-Girard
Some people read replies in misc and say, "wow, Theo and the OBSD devs are obnoxiously harsh.' I read the 16 partitions thread and think, "I marvel at their patience with interlocutors who have not read the relevant source code and give no indication that they would understand it if they did."

Re: How to enable TLS 1.3?

2020-04-30 Thread Martijn van Duren
On 4/30/20 1:19 PM, Chad Hoolie wrote: > Hello, > > I'm using httpd with acme-client and Let's Encrypt > (https://www.romanzolotarev.com/openbsd/acme-client.html). > > This setup, however, only seems to support TLS 1.2, whereas TLS 1.3 is needed > to achieve A+ ratings across the board. > >

Re: installation hangs/crashes on 2007 iMac

2020-04-30 Thread Jan Stary
On Apr 29 14:12:24, open...@2al.ch wrote: > I have an Macmini2,1 from mid 2007 with similar specs [1] and presumably > similar firmware. I tested a whole lot of combinations for booting it and > came to the following conclusion: > > To boot OpenBSD you have to use the internal SATA or ATA

relayd: Why doesn't "tls keypair" look for the fullchain certificate?

2020-04-30 Thread Chad Hoolie
Hi, Why does "tls keypair" in relayd.conf look for the regular and not the fullchain certificate? Thus, forcing users who want an A+ certificate to spend hours searching the web for this hack? cd /etc/ssl doas mv foobar.com.crt foobar.com.crt.bak doas ln -s foobar.com.fullchain.pem

How to enable TLS 1.3?

2020-04-30 Thread Chad Hoolie
Hello, I'm using httpd with acme-client and Let's Encrypt (https://www.romanzolotarev.com/openbsd/acme-client.html). This setup, however, only seems to support TLS 1.2, whereas TLS 1.3 is needed to achieve A+ ratings across the board. Anybody know how to make the upgrade? --Chad

Re: RCS file ownership?

2020-04-30 Thread Craig Skinner
G'day Adam/all, On Wed, 29 Apr 2020 12:43:42 -0500 Adam Thompson wrote: > When I use co(1) with "-l" to check out a file (and/or "ci -l") is > there any way to preserve file ownership and *not* have it reset to > the user running co(1) or ci(1)? Attached is a script I've used for years to work