Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Jacob L. Leifman
On 7 Jan 2017 at 15:28, Theo de Raadt wrote: > > On Fri, Jan 06, 2017 at 10:48:37AM -0500, RD Thrush wrote: > > > On 01/06/17 06:28, Stuart Henderson wrote: > > > > Related to this (and particularly thinking about autoinstalls), > > > > would it make sense to allow explicit protocols in the hostna

Re: rdist.c patch

2016-03-06 Thread Jacob L. Leifman
In some regards rdist is possibly more powerful/flexible than rsync with its built in support for post-processing scripts. For example, I find it extremely useful for keeping CARP firewalls in sync while allowing for administrative changes to either. On 7 Mar 2016 at 11:18, Michael Kennett wrot

Re: openssl's *strlcy

2014-04-18 Thread Jacob L. Leifman
I'm guessing that openssl was incorporated into OpenBSD base without prior sufficient audit by the OBSD devs because it was presumed to have better auditing / quality control upstream given its security critical nature and function. (A number of devs have commented in the past about the [lack o

(Fwd) last(1) nit

2013-02-08 Thread Jacob L. Leifman
ping? ALL feedback is welcome :-) --- Forwarded message follows --- From: "Jacob L. Leifman" To: tech@openbsd.org Date sent: Fri, 25 Jan 2013 18:34:55 -0500 The last(1) utility allows for an alternate data file to be specifie

last(1) nit

2013-01-25 Thread Jacob L. Leifman
The last(1) utility allows for an alternate data file to be specified with -f switch which is particularly useful for reviewing rotated versions of wtmp or forensic analysis. What I found distracting (and made me briefly think it was not working) is that regardless this specification, at the en

Re: base httpd ProxyPreserveHost not working

2012-03-26 Thread Jacob L. Leifman
On 25 Mar 2012 at 10:22, Stuart Henderson wrote: > On 2012/03/24 21:33, Stuart Henderson wrote: > > On 2012/03/24 16:58, Jacob L. Leifman wrote: > > > following up on my own post (the only reponse I received was the > > > suggestion to switch to nginx, and whi

Re: base httpd ProxyPreserveHost not working

2012-03-24 Thread Jacob L. Leifman
following up on my own post (the only reponse I received was the suggestion to switch to nginx, and while it does appear that much development is happening there, I am not in a position to deploy current right away...) On 23 Mar 2012 at 18:26, Jacob L. Leifman wrote: > In the process

base httpd ProxyPreserveHost not working

2012-03-23 Thread Jacob L. Leifman
In the process of migrating a simple reverse proxy from a Linux box to OpenBSD (4.9-i386) I've come across a problem behavior that seems to indicate that the directive ProxyPreserveHost is not working. In fact setting it on or off does not affect the perceived behavior at all. The setup is rath

Re: [PATCH] fix broken support for installing on extended partitions

2011-02-11 Thread Jacob L. Leifman
are you a qemu image with all > things > > set up and the 3rd or 4th extended partition of type 0xa6, but you > don't > > need such hand-holding. You can do that yourself ;-) > > > > > Having working extended partitions would be nice, but finally > finding >

Re: [PATCH] bioctl(8): fix dd invocation

2009-05-10 Thread Jacob L. Leifman
On 10 May 2009 at 19:14, Theo de Raadt wrote: > > Hi Damien, > > > > > I think we should fix dd(1). > > > > I like that. > > > > Not allowing uppercase violates the principle of least surprise for "M" > > in particular, but accepting uppercase for all four multipliers is probably > > most conven