pkg_info -Q multiple queries?

2019-10-24 Thread meunier
Hello, Is there a way to do multiple queries at once using pkg_info? Something like: pkg_info -Q query1 query2 ... The best I've found so far is to do something like: for q in query1 query2 ...; do pkg_info -Q $q; done which is slow when the list of queries is long (my network bandwidth is

Re: acme-client issue with domain w/ alternative name [Solved]

2019-10-24 Thread Daniel Winters
For the archives: With the help of Florian and Ian we managed to find the error in the setup: One of the alternative names in acme-client.conf had no A record in DNS anymore (it was removed a few days prior). acme-client will fail in such a case and return "status": "invalid" in the output of

CARP with /30 ?

2019-10-24 Thread Axel Rau
Hi all, does a CARP setup with 2 firewll boxes with an upstream /30 transfer net i feasible? E.g. 5.6.7.232/30 5.6.7.232 if box1 5.6.7.233 upstream router 5.6.7.234 if box2 5.6.7.235 if CARP Quick answer would be very helpfull. Thanks, Axel --- PGP-Key: CDE74120 ☀ computing @ chaos

Re: LDAP tls: handshake failure

2019-10-24 Thread Martijn van Duren
On 10/24/19 2:25 PM, Claudio Jeker wrote: > > OK claudio@ > I'll commit this soon-ish based on claudio's OK, but if at all possible I would like to ask the people affected by this to test this and see if this solves their problem. For the people running -current, here's an updated diff based

Re: LDAP tls: handshake failure

2019-10-24 Thread Robert Klein
On Thu, 24 Oct 2019 14:06:47 +0200, Martijn van Duren wrote: > > On 10/24/19 1:50 PM, Robert Klein wrote: > > Hi, > > > > > > > > On Thu, 24 Oct 2019 05:26:49 +0200, > > Predrag Punosevac wrote: > >> > >> Kapetanakis Giannis wrote: > >> > >>> On 23/10/2019 19:14, Predrag Punosevac wrote: >

Re: CARP with /30 ?

2019-10-24 Thread Alarig Le Lay
On 24/10/2019 10:41, Axel Rau wrote: > Hi all, > > does a CARP setup with 2 firewll boxes with an upstream /30 transfer net i > feasible? > E.g. > > 5.6.7.232/30 > > 5.6.7.232 if box1 > 5.6.7.233 upstream router > 5.6.7.234 if box2 > 5.6.7.235 if CARP > > Quick answer would be very helpfull.

Re: Does net.mpls.maxloop_inkernel do anything?

2019-10-24 Thread Claudio Jeker
On Thu, Oct 24, 2019 at 12:01:35PM +0100, Thomas Habets wrote: > $ cd /usr/src/sys > $ grep mpls_inkloop -r . > ./netmpls/mpls.h: _inkloop, \ > ./netmpls/mpls.h:extern int mpls_inkloop; > ./netmpls/mpls_raw.c:int mpls_inkloop = MPLS_INKERNEL_LOOP_MAX; > $ grep -r

Re: LDAP tls: handshake failure

2019-10-24 Thread Martijn van Duren
On 10/24/19 1:50 PM, Robert Klein wrote: > Hi, > > > > On Thu, 24 Oct 2019 05:26:49 +0200, > Predrag Punosevac wrote: >> >> Kapetanakis Giannis wrote: >> >>> On 23/10/2019 19:14, Predrag Punosevac wrote: Hi Misc, I just upgraded a LDAP server from 6.5 to 6.6 running authorization

Re: LDAP tls: handshake failure

2019-10-24 Thread Claudio Jeker
On Thu, Oct 24, 2019 at 02:06:47PM +0200, Martijn van Duren wrote: > On 10/24/19 1:50 PM, Robert Klein wrote: > > Hi, > > > > > > > > On Thu, 24 Oct 2019 05:26:49 +0200, > > Predrag Punosevac wrote: > >> > >> Kapetanakis Giannis wrote: > >> > >>> On 23/10/2019 19:14, Predrag Punosevac wrote: >

Re: LDAP tls: handshake failure

2019-10-24 Thread Robert Klein
On Thu, 24 Oct 2019 15:35:44 +0200, Martijn van Duren wrote: > > On 10/24/19 3:29 PM, Robert Klein wrote: > > On Thu, 24 Oct 2019 14:06:47 +0200, > > Martijn van Duren wrote: > >> > >> On 10/24/19 1:50 PM, Robert Klein wrote: > >>> Hi, > >>> > >>> > >>> > >>> On Thu, 24 Oct 2019 05:26:49 +0200, >

Does net.mpls.maxloop_inkernel do anything?

2019-10-24 Thread Thomas Habets
$ cd /usr/src/sys $ grep mpls_inkloop -r . ./netmpls/mpls.h: _inkloop, \ ./netmpls/mpls.h:extern int mpls_inkloop; ./netmpls/mpls_raw.c:int mpls_inkloop = MPLS_INKERNEL_LOOP_MAX; $ grep -r MPLSCTL_MAXINKLOOP . ./netmpls/mpls.h:#defineMPLSCTL_MAXINKLOOP 4

Re: LDAP tls: handshake failure

2019-10-24 Thread Robert Klein
Hi, On Thu, 24 Oct 2019 05:26:49 +0200, Predrag Punosevac wrote: > > Kapetanakis Giannis wrote: > > > On 23/10/2019 19:14, Predrag Punosevac wrote: > > > Hi Misc, > > > > > > I just upgraded a LDAP server from 6.5 to 6.6 running authorization and > > > authentication services for a 100 some

Re: Problems with route installation to fib from OSPF

2019-10-24 Thread Joao Alves
Hi Remi, I've installed a lab with OpenBSD6.6 VM's to see if would happen in the newer version. I was able to reproduce it again, but in slightly different manner. First of all, you need to have BGP running in FW's also, and have the same route received through BGP, otherwise the issue is not

Re: LDAP tls: handshake failure

2019-10-24 Thread Martijn van Duren
On 10/24/19 3:29 PM, Robert Klein wrote: > On Thu, 24 Oct 2019 14:06:47 +0200, > Martijn van Duren wrote: >> >> On 10/24/19 1:50 PM, Robert Klein wrote: >>> Hi, >>> >>> >>> >>> On Thu, 24 Oct 2019 05:26:49 +0200, >>> Predrag Punosevac wrote: Kapetanakis Giannis wrote: > On

Re: When will be created a great desktop experience for OpenBSD?

2019-10-24 Thread Manuel Solis
Hello Ropers I do use it to the point that i can not stand another WM, to answer your question: you could launch apps by (a) installing dmenu(1) (b) $firefox & (c) i kind of wrote a script that does what dmenu but using sh. (d) configuring /.fvwmrc to use shortcuts or a menu. (

Re: Encrypting my keydisk

2019-10-24 Thread List
So answering your forwarded Mail Thread. What's the reason ? Because your diskencryption stands and falls with the complexity of your passphrase. And if you were able to use a keydisk to encrypt your harddrive it would be WAY harder to bruteforce your keydisk rather than your passphrase. This

Re: Encrypting my keydisk

2019-10-24 Thread Normen Wohner
> Am 24.10.2019 um 03:27 schrieb Aaron Mason : > > On Wed, Oct 23, 2019 at 7:45 PM Normen Wohner wrote: >> >> To enable two factor encryption? >> One passcode is in his head the other on a key. >> If either is missing the data on drive is unreadable. >> I don’t know what is hard to

Patch for sysupgrade of a disc constrained net4801

2019-10-24 Thread PJ
Hi misc! I just successfully sysupgraded a net4801 with a 4GB CFdisk from 6.5 to 6.6. The net4801 has no display hardware so I wanted to delete the unused sets before rebooting, using "sysupgrade -n". I also don't need to compile on the system (which thanks to "syspatch" should not be

Re: Patch for sysupgrade of a disc constrained net4801

2019-10-24 Thread Jacob Adams
> *** /usr/sbin/sysupgrade Sat Oct 12 18:52:33 2019 > --- sysupgrade Fri Oct 25 02:02:11 2019 > *** > *** 1,6 > #!/bin/ksh > # > ! # $OpenBSD: sysupgrade.sh,v 1.25 2019/09/28 17:30:07 ajacoutot Exp $ > # > # Copyright (c) 1997-2015 Todd Miller, Theo de Raadt, Ken Westerback > #

Re: Problems with route installation to fib from OSPF

2019-10-24 Thread Remi Locherer
Hi Joao, I'll try to reproduce. It might take some time. Remi On Thu, Oct 24, 2019 at 02:09:09PM +0200, Joao Alves wrote: > Hi Remi, > > I've installed a lab with OpenBSD6.6 VM's to see if would happen in the > newer version. > > I was able to reproduce it again, but in slightly different