Re: fpos_t in funopen(3)

2021-12-27 Thread Todd C . Miller
On Mon, 27 Dec 2021 15:18:38 -0600, Joe Nelson wrote: > I recently discovered the funopen function, and was confused by its > declaration. Specifically, one of its arguments is > > fpos_t (*seekfn)(void *, fpos_t, int) > > I wondered how seekfn would be able to return an error code, since

Re: parallel ip forwarding

2021-12-27 Thread Hrvoje Popovski
On 25.12.2021. 18:52, Alexander Bluhm wrote: > On Sat, Dec 25, 2021 at 09:24:07AM +0100, Hrvoje Popovski wrote: >> On 24.12.2021. 0:55, Alexander Bluhm wrote: >>> I think we can remove the ipsec_in_use workaround now. The IPsec >>> path is protected with the kernel lock. >>> >>> There are some

slaacd(8): router lifetime zero vs. prefixes

2021-12-27 Thread Florian Obser
Prefix life time is independent from router life time. Form an IPv6 address even if the router announcing the prefix isn't a default router. Problem reported by mgraves AT brainfat.net on misc OK? diff --git engine.c engine.c index 81a06cc5528..7a2c11e1bc2 100644 --- engine.c +++ engine.c @@

slaacd: wait for non-tentative link local address

2021-12-27 Thread Florian Obser
Wait for the link-local address to become non-tentative. Otherwise we just end up with an ugly "Can't assign requested address" error from sendmsg(2). OK? diff --git frontend.c frontend.c index b3be6c3fe98..3bbe3656dd3 100644 --- frontend.c +++ frontend.c @@ -75,6 +75,7 @@ struct iface {

Re: rpki-client: check ipAddrBlock and autonomousSysNum for criticality

2021-12-27 Thread Theo Buehler
On Sat, Dec 25, 2021 at 05:48:53PM +0100, Claudio Jeker wrote: [...] > I would love to get rid of X509_V_FLAG_IGNORE_CRITICAL and use a callback > to ensure the right extensions are critical but I never managed to > understand how the X509_verify_cert() callback actually works. > Documentation