Re: [OpenWrt-Devel] [PATCH 3/4] dnsmasq: Add config option to enable DNSSEC validation

2014-06-16 Thread Andre Heider
Hi, On Sun, Jun 15, 2014 at 12:26 AM, Yousong Zhou yszhou4t...@gmail.com wrote: It will be more complete if dnsmasq-dhcpv6 is also covered by this config option. Even better is letting this option depend on the actual dnsmasq build variant selected. As mentioned in the cover letter: while

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Andre Heider
Hi, On Sun, Jun 15, 2014 at 11:13 AM, Steven Barth cy...@openwrt.org wrote: could you please add nettle-mini support and make this a build variant instead of a config option, please? Build variant has the advantage that we can precompile it as ipks because we cannot enable dnssec by default.

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Nikos Mavrogiannopoulos
On Mon, Jun 16, 2014 at 10:12 AM, Andre Heider a.hei...@gmail.com wrote: could you please add nettle-mini support and make this a build variant instead of a config option, please? Build variant has the advantage that we can precompile it as ipks because we cannot enable dnssec by default. I

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Steven Barth
Hi, thanks for this. my intention was more to add one build-variant dnsmasq-full with standard + dhcpv6 + authoritative + dnssec. As dnssec adds hundreds of KB of dependencies anyway I don't think the 10 or 20 KB of the other features make it particularly worse or worth adding variants for

Re: [OpenWrt-Devel] [PATCH] ramips: RT-N56U support fixes and factory image creation

2014-06-16 Thread John Crispin
Hi Mikko, On 11/06/2014 17:01, Mikko Hissa wrote: @@ -0,0 +1,28 @@ +--- a/drivers/mtd/mtdpart.c 2014-04-27 10:09:21.566294160 +0300 b/drivers/mtd/mtdpart.c 2014-06-09 11:27:48.952211672 +0300 +@@ -793,8 +793,11 @@ + { + struct { + __be32 magic; +- __be32 pad[2]; ++

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Andre Heider
On Mon, Jun 16, 2014 at 10:15 AM, Nikos Mavrogiannopoulos n.mavrogiannopou...@gmail.com wrote: On Mon, Jun 16, 2014 at 10:12 AM, Andre Heider a.hei...@gmail.com wrote: could you please add nettle-mini support and make this a build variant instead of a config option, please? Build variant has

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Steven Barth
Hi Nikos, Is there a reason for not having dnssec by default? If there is a way to disable it, I believe it will only be beneficial to have it in. The main problem here is that this increase the default image size significantly plus we can't even reuse all the added crypto code because none

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Nikos Mavrogiannopoulos
On Mon, Jun 16, 2014 at 10:31 AM, Steven Barth cy...@openwrt.org wrote: Hi Nikos, Is there a reason for not having dnssec by default? If there is a way to disable it, I believe it will only be beneficial to have it in. The main problem here is that this increase the default image size

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Andre Heider
On Mon, Jun 16, 2014 at 10:16 AM, Steven Barth cy...@openwrt.org wrote: my intention was more to add one build-variant dnsmasq-full with standard + dhcpv6 + authoritative + dnssec. As dnssec adds hundreds of KB of dependencies anyway I don't think the 10 or 20 KB of the other features make it

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Steven Barth
On the contrary I'd prefer if it doesn't. Nettle is an open project under LGPL that anyone can contribute and can be reused by a variety of software; polarssl is closed commercial project under a commercial license with a GPLv2 exception. Oh well, I sometimes have the feeling if its open-source

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Steven Barth
That sounds better, but on the other side users wanting only dhcpv6 then get quite a lot of DNSSEC bloat. I don't have numbers at hand, but we could explore static libnettle-mini linking? No, I wasn't thinking about dropping the dhcpv6 variant just to add the full variant as number 3 so we

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread edgar . soldin
On 16.06.2014 10:40, Nikos Mavrogiannopoulos wrote: On Mon, Jun 16, 2014 at 10:31 AM, Steven Barth cy...@openwrt.org wrote: Hi Nikos, Is there a reason for not having dnssec by default? If there is a way to disable it, I believe it will only be beneficial to have it in. The main problem

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Andre Heider
On Mon, Jun 16, 2014 at 10:52 AM, Steven Barth cy...@openwrt.org wrote: That sounds better, but on the other side users wanting only dhcpv6 then get quite a lot of DNSSEC bloat. I don't have numbers at hand, but we could explore static libnettle-mini linking? No, I wasn't thinking about

[OpenWrt-Devel] AA: IPv6 bug on TP-Link TL-WR841N v8 (patch available)

2014-06-16 Thread Baptiste Jonglez
Hi, There is a bug in AA regarding IPv6 multicast support for the AR9341 switch (at least on a TP-Link TL-WR841N v8 device). Basically, it breaks IPv6 Neighbour Discovery, which seriously limits IPv6 functionality. See this ticket: https://dev.openwrt.org/ticket/15448 In particular, a patch

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread Nikos Mavrogiannopoulos
On Mon, Jun 16, 2014 at 10:53 AM, edgar.sol...@web.de wrote: On the contrary I'd prefer if it doesn't. Nettle is an open project under LGPL that anyone can contribute and can be reused by a variety of software; polarssl is closed commercial project under a commercial license with a GPLv2

Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support

2014-06-16 Thread edgar . soldin
On 16.06.2014 11:56, Nikos Mavrogiannopoulos wrote: On Mon, Jun 16, 2014 at 10:53 AM, edgar.sol...@web.de wrote: On the contrary I'd prefer if it doesn't. Nettle is an open project under LGPL that anyone can contribute and can be reused by a variety of software; polarssl is closed commercial

Re: [OpenWrt-Devel] [PATCH 3/4] dnsmasq: Add config option to enable DNSSEC validation

2014-06-16 Thread Yousong Zhou
On Mon, Jun 16, 2014 at 09:57:20AM +0200, Andre Heider wrote: Hi, On Sun, Jun 15, 2014 at 12:26 AM, Yousong Zhou yszhou4t...@gmail.com wrote: It will be more complete if dnsmasq-dhcpv6 is also covered by this config option. Even better is letting this option depend on the actual dnsmasq

Re: [OpenWrt-Devel] [PATCH 1/2] Added luci configuration for ocserv

2014-06-16 Thread Nikos Mavrogiannopoulos
On Sat, 2014-06-07 at 00:19 +0200, Nikos Mavrogiannopoulos wrote: This applies to ocserv at the github packages repository of openwrt: https://github.com/openwrt/packages Hello any comments one the above two additions? I'm mostly worried how can that be added to luci as these programs are

[OpenWrt-Devel] [Patch] [Resend] Add terminfo file in ncurses

2014-06-16 Thread Jonathan Bennett
Didn't hear back on this, and realized I didn't quite format the previous email correctly. Ran into a problem SSHing into an Openwrt router from a Fedora machine. Fedora sets terminfo to xterm-256color, but ncurses installed in openwrt doesn't include that file in the firmware. This causes a few

Re: [OpenWrt-Devel] /var/state/wireless not being updated any more?

2014-06-16 Thread Weedy
On Thu, Jun 12, 2014 at 8:28 PM, Gui Iribarren g...@altermundi.net wrote: On 06/12/2014 09:13 PM, Shankar Unni wrote: Ping? How can I look up the current state of the various wireless interfaces using uci now? http://wiki.openwrt.org/doc/uci/network#determining.linux.interface.names

Re: [OpenWrt-Devel] /var/state/wireless not being updated any more?

2014-06-16 Thread Jo-Philipp Wich
Hi, the data is cached upon the first call. To force a resync, run network_flush_cache. ~ Jow signature.asc Description: OpenPGP digital signature ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org

Re: [OpenWrt-Devel] Howto force mips64

2014-06-16 Thread Edison Figueira Junior
hello, I can be a beta test if you want :-) Enviada do meu iPhone Em 04/06/2014, às 10:05, John Crispin j...@phrozen.org escreveu: octeon is currently only partially working. we will push a fix to trunk in the next few days. experimental patch is currently in testing. please be patient for