Re: [patch] Turn on Server Cipher Preference

2015-05-14 Thread Joel Sing
On Friday 15 May 2015, Kyle Thompson wrote: > Very basic patch to turn on server cipher preference in libtls. This > will allow us to always use our cipher preference over what the client > thinks is best. Tested with httpd as the server and openssl as the > client with two ciphers selected. > > Sh

[patch] Turn on Server Cipher Preference

2015-05-14 Thread Kyle Thompson
Very basic patch to turn on server cipher preference in libtls. This will allow us to always use our cipher preference over what the client thinks is best. Tested with httpd as the server and openssl as the client with two ciphers selected. Should we make this a configurable option (possibly on by

Re: /etc/daily /tmp purge mods; skip open files with fstat test

2015-05-14 Thread patrick keshishian
On 5/14/15, Craig Skinner wrote: [...] > Here's a diff of a modified /etc/daily /tmp purge portion: > > o replace test(1) '-L' with '-h' due to: >-L ... "Do not rely on its existence; use -h instead" Interesting that FreeBSD[1] and MacOS X say the opposite. SUSv4 (one I have handy) has the e

Re: Small carp(4) diff

2015-05-14 Thread Claudio Jeker
On Thu, May 14, 2015 at 12:27:37PM +0200, Martin Pieuchot wrote: > ifp can never be NULL in carp_set_ifp(), so remove the check and gain > one level of indentation. > > ok? OK claudio@ (once I checked with cvs diff -b to reduce the noise) > Index: netinet/ip_carp.c > ===

Re: /etc/daily /tmp purge mods; skip open files with fstat test

2015-05-14 Thread Todd C. Miller
On Thu, 14 May 2015 17:48:49 +0100, Stuart Henderson wrote: > On 2015/05/14 17:45, Craig Skinner wrote: > > $ fstat -u _squid -f /tmp > > Even not allowing for TOCTOU problems I'd be wary of running fstat > automatically. If it is only used to detect when a file is in use that we would otherwise

Re: /etc/daily /tmp purge mods; skip open files with fstat test

2015-05-14 Thread Stuart Henderson
On 2015/05/14 17:45, Craig Skinner wrote: > $ fstat -u _squid -f /tmp Even not allowing for TOCTOU problems I'd be wary of running fstat automatically.

/etc/daily /tmp purge mods; skip open files with fstat test

2015-05-14 Thread Craig Skinner
Hi tech, Here's a daily(8) email, showing purged unreferenced open files in /tmp: - Forwarded message from Charlie Root - ... .. Checking filesystems: ** /dev/rwd0a (NO WRITE) ** Last Mounted on / ** Root file system 2474 files, 24716 used, 14539 free (275 frags, 1783 blocks, 0.7

Clean up 'certs' directory unused by ca in LibreSSL

2015-05-14 Thread Nico R.
Dear LibreSSL developers! When using the ‘ca’ tool in OpenSSL, I have always been confused by the documentation, examples and source code: the ‘ca’ tool seems to suggest using a ‘certs’ directory within the “default” directory hierarchy of a CA, but it neither uses nor properly documents that dir

Re: Small carp(4) diff

2015-05-14 Thread Martin Pieuchot
On 14/05/15(Thu) 08:20, sven falempin wrote: > On Thu, May 14, 2015 at 6:27 AM, Martin Pieuchot wrote: > > one level of indentation. > > > > pre > if (X == null ) {dprintf(you broke this); return ;} > unindented code; > /pre > > Same gain, more dev ease and corner case check. I disagree. Addi

Re: Small carp(4) diff

2015-05-14 Thread sven falempin
On Thu, May 14, 2015 at 6:27 AM, Martin Pieuchot wrote: > ifp can never be NULL in carp_set_ifp(), so remove the check and gain > one level of indentation. > pre if (X == null ) {dprintf(you broke this); return ;} unindented code; /pre Same gain, more dev ease and corner case check. > ok?

interfaces and priorities for relayd routers

2015-05-14 Thread David Gwynne
i want relayd to check teh availability of some services and inject routes when the service is available. if it is available, i want to advertise the routes using ospfd, but i also want the local machine to be able to contact the service even if it isnt the carp master. to do that i need to inject

Small carp(4) diff

2015-05-14 Thread Martin Pieuchot
ifp can never be NULL in carp_set_ifp(), so remove the check and gain one level of indentation. ok? Index: netinet/ip_carp.c === RCS file: /cvs/src/sys/netinet/ip_carp.c,v retrieving revision 1.254 diff -u -p -r1.254 ip_carp.c --- ne

Re: rework armv7 board name handling

2015-05-14 Thread Matthieu Herrb
On Thu, May 14, 2015 at 04:52:48PM +1000, Jonathan Gray wrote: > On Wed, May 13, 2015 at 01:47:48PM +1000, Jonathan Gray wrote: > > Instead of hard coding board names twice use an array and put the value > > in hw_prod so it will show up in sysctl. > > > > This omits setting hw_vendor as fdt sets