Re: relayd.conf.5: less SSL

2023-10-28 Thread Sebastian Benoit
Klemens Nanni(k...@openbsd.org) on 2023.10.26 13:28:42 +: > On Tue, Oct 24, 2023 at 09:09:21AM +0200, Peter N. M. Hansteen wrote: > > On Tue, Oct 24, 2023 at 06:54:30AM +, Klemens Nanni wrote: > > > - parse.y still accepting undocumented "ssl" with a warning since 2014 > > > - more

Re: snmpd: don't move back in oid tree when on/below instance below region

2023-10-28 Thread Theo Buehler
On Sat, Oct 28, 2023 at 09:59:25AM +0200, Martijn van Duren wrote: > Right now when we register a region with below that an instance we > can revert back in the tree. When we request below the instance we > currently use appl_region_next() to find the next region and simply > set the to be find

snmpd: don't move back in oid tree when on/below instance below region

2023-10-28 Thread Martijn van Duren
Right now when we register a region with below that an instance we can revert back in the tree. When we request below the instance we currently use appl_region_next() to find the next region and simply set the to be find oid to the the oid of the new region. In the situation described above this

Re: libagentx: don't return responses >= searchrange.end

2023-10-28 Thread Theo Buehler
On Sat, Oct 28, 2023 at 09:41:55AM +0200, Martijn van Duren wrote: > In most cases when a region is registered we have the full ownership. > As soon as a region has been registered below prior mentioned region we > could loose ownership halfway through. This case currently isn't fully > tested and

Re: snmpd: reject OIDS equal to searchrange.end

2023-10-28 Thread Martijn van Duren
On Sat, 2023-10-28 at 09:45 +0200, Martijn van Duren wrote: > RFC 2741 section 5.2 states that searchrange.end is non-inclusive. > appl_varbind_valid() and appl_response() currently tests inclusive. > The appl_varbind_valid() case is for backends that support > searchrange.end (like agentx) and

Re: snmpd: reject OIDS equal to searchrange.end

2023-10-28 Thread Theo Buehler
On Sat, Oct 28, 2023 at 09:45:25AM +0200, Martijn van Duren wrote: > RFC 2741 section 5.2 states that searchrange.end is non-inclusive. > appl_varbind_valid() and appl_response() currently tests inclusive. > The appl_varbind_valid() case is for backends that support > searchrange.end (like agentx)

snmpd: reject OIDS equal to searchrange.end

2023-10-28 Thread Martijn van Duren
RFC 2741 section 5.2 states that searchrange.end is non-inclusive. appl_varbind_valid() and appl_response() currently tests inclusive. The appl_varbind_valid() case is for backends that support searchrange.end (like agentx) and the appl_response() case for those who do not and need a fixup

libagentx: don't return responses >= searchrange.end

2023-10-28 Thread Martijn van Duren
In most cases when a region is registered we have the full ownership. As soon as a region has been registered below prior mentioned region we could loose ownership halfway through. This case currently isn't fully tested and with indices we can return OIDs >= searchrange.end. The easiest way is to