Re: Back-out USB data toggle fix

2021-02-14 Thread Stuart Henderson
On 2021/02/14 15:22, Marcus Glocker wrote: > Unfortunately I'm seeing more and more USB device breakages reported > the last few days related to the USB data toggle fix which we did > commit 2-3 weeks ago. Do you think this could this be implicated in a keyboard with 'stuck' keys i.e. keep

Re: ssl(8) tweaks, mostly for ecdsa

2021-02-11 Thread Stuart Henderson
On 2021/02/11 22:22, Theo Buehler wrote: > On Thu, Feb 11, 2021 at 08:55:55PM +0000, Stuart Henderson wrote: > > acme-client works with ecdsa certificates, but if there's no existing > > key, it has no way to tell whether you want ec or rsa so it can't > > actually generat

ssl(8) tweaks, mostly for ecdsa

2021-02-11 Thread Stuart Henderson
acme-client works with ecdsa certificates, but if there's no existing key, it has no way to tell whether you want ec or rsa so it can't actually generate a new ec key. (even if it did, acme-client's default secp384r1 isn't accepted by buypass). here are a few changes for ssl(8) that i think are

Re: some Ryzen, AMD 500 Chipset, Navi 10 and Kingson pcidev

2021-02-08 Thread Stuart Henderson
On 2021/02/08 10:54, Jonathan Gray wrote: > On Sun, Feb 07, 2021 at 07:58:52PM +0100, Sven Wolf wrote: > > Hi, > > > > I've added some Ryzen 3xxx, AMD 500 Chipset, Navi 10 and Kingston ids to > > pcidev. I've taken the description from the Linux PCI device ids > >

Re: Unbound: add support for pf tables to ipset module

2021-02-07 Thread Stuart Henderson
On 2021/02/07 17:04, Christopher Zimmermann wrote: > Hi, > > a year ago I added support for our pf tables to the unbound ipset module. > Upstream does not seem eager to merge it: > https://github.com/NLnetLabs/unbound/pull/144 > > Implementing pf tables support was pretty straightforward. It has

Re: pfsync(4), mention about carp demotion

2021-02-01 Thread Stuart Henderson
On 2021/02/01 09:22, Theo de Raadt wrote: > It should use 'demotion counter' everywhere. Index: sbin/ifconfig/ifconfig.8 === RCS file: /cvs/src/sbin/ifconfig/ifconfig.8,v retrieving revision 1.360 diff -u -p -r1.360 ifconfig.8 ---

Re: pfsync(4), mention about carp demotion

2021-02-01 Thread Stuart Henderson
On 2021/02/01 14:32, Klemens Nanni wrote: > On Mon, Feb 01, 2021 at 01:13:20PM +0000, Stuart Henderson wrote: > > I think this needs documenting somewhere; I had to use the source to > > remember what triggered "carpdemote 32" on some routers. I am open to > > sugge

pfsync(4), mention about carp demotion

2021-02-01 Thread Stuart Henderson
I think this needs documenting somewhere; I had to use the source to remember what triggered "carpdemote 32" on some routers. I am open to suggestions to improving the wording, the way I have it it's useful as a reminder but isn't a great explanation for someone just learning about it.. Index:

Re: Patch for crypt(3) man page.

2021-01-27 Thread Stuart Henderson
On 2021/01/27 22:45, Ingo Schwarze wrote: > Hi, > > this page is a mess. It is full of unclear wordings, in some cases > verging incorrect statements. At the same time, parts of it are wordy. > > Here is an attempt to start fixing it. > I refrained from trying to explain $2a$ (as suggested by

Re: grep: add --null flag

2021-01-26 Thread Stuart Henderson
On 2021/01/26 11:18, Jordan Geoghegan wrote: > > > On 1/26/21 5:47 AM, Stuart Henderson wrote: > > On 2021/01/25 00:53, Sebastian Benoit wrote: > >> Sebastian Benoit(be...@openbsd.org) on 2021.01.25 00:27:05 +0100: > >>> Theo de Raadt(dera...@openb

Re: [External] : Re: pf route-to issues

2021-01-26 Thread Stuart Henderson
On 2021/01/26 09:29, Alexandr Nedvedicky wrote: > Hello, > > > > > > > > > > > I'm not sure if proposed scenario real. Let's assume there > > > is a PF box with three NICs running on this awkward set up > > > > > > em1 ... 192.168.1.10 > > > > > > em0 > > > > > >

Re: grep: add --null flag

2021-01-26 Thread Stuart Henderson
On 2021/01/25 00:53, Sebastian Benoit wrote: > Sebastian Benoit(be...@openbsd.org) on 2021.01.25 00:27:05 +0100: > > Theo de Raadt(dera...@openbsd.org) on 2021.01.24 16:01:32 -0700: > > > Stuart Henderson wrote: > > > > > > > On 2021/01/24 12:10, Theo

Re: acme-client(1): dns-01

2021-01-25 Thread Stuart Henderson
On 2020/12/24 18:11, Florian Obser wrote: > 'tis the season to be jolly... sorry for the late reply! > I think it's time to kick the tires on this one. Works for me, I tried it with the script I'm already using with uacme to do updates via rndc. > I don't like the "exec" keyword, we should

Re: grep: add --null flag

2021-01-24 Thread Stuart Henderson
On 2021/01/24 12:10, Theo de Raadt wrote: > I completely despise that the option is called "--null". > > Someone was a complete idiot. gnu grep has both --null and -z for this (why do they do that?!). If it's added as --null it should be added as -z too. Looking at Debian codesearch most things

Re: [PATCH] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-23 Thread Stuart Henderson
[cc's trimmed] On 2021/01/23 15:53, Alejandro Colomar wrote: > This is useful for using tee to just write to a file, > at the end of a pipeline, > without having to redirect to /dev/null > > Example: > > echo 'foo' | sudo tee -q /etc/foo; > > is equivalent to the old (and ugly) > > echo 'foo'

Re: vacation.1: correct .forward file example

2021-01-21 Thread Stuart Henderson
On 2021/01/21 12:43, Jason McIntyre wrote: > On Thu, Jan 21, 2021 at 11:15:48AM +0100, Martin Vahlensieck wrote: > > Hi > > > > I think the backslash at the beginning of the line is an error. > > > > Best, > > > > Martin > > > > Index: vacation.1 > >

Re: IPPROTO_SCTP

2021-01-18 Thread Stuart Henderson
On 2021/01/18 13:31, Landry Breuil wrote: > On Mon, Jan 18, 2021 at 12:13:32PM +0000, Stuart Henderson wrote: > > can I add IPPROTO_SCTP to in.h? only one port wants it at the > > moment, but I think I've seen others in the past. > > https://searchfox.org/mozilla-central/sear

IPPROTO_SCTP

2021-01-18 Thread Stuart Henderson
can I add IPPROTO_SCTP to in.h? only one port wants it at the moment, but I think I've seen others in the past. Index: netinet/in.h === RCS file: /cvs/src/sys/netinet/in.h,v retrieving revision 1.139 diff -u -p -r1.139 in.h ---

ifconfig(8) interface priorities; mention umb(4)

2021-01-17 Thread Stuart Henderson
umb(4) uses IF_WWAN_DEFAULT_PRIORITY (6); mention it in ifconfig(8). OK? (I considered more generic wording e.g. "wireless WAN interfaces", but that's inaccurate, this prio is only used for umb - wwan can also relate to some ppp/urndis/cdce interfaces which don't use this). Index: ifconfig.8

Re: unbound: missing null check

2021-01-06 Thread Stuart Henderson
On 2021/01/06 10:24, Florian Obser wrote: > On Wed, Jan 06, 2021 at 10:11:01AM +0100, Anton Lindqvist wrote: > > Hi, > > I have a unbound forward zone configured on my router for my $DAYJOB. > > The address associated with the zone is only accessible when the router > > is connected to a VPN. If

Re: Adding -p to pr(1)

2021-01-05 Thread Stuart Henderson
On 2021/01/05 00:27, Andras Farkas wrote: > Ping. > I'm hoping someone can review the diff adding -p to pr(1). It's been a few weeks, so probably worth sending the diff out again with the manpage change regenerated against -current. There are some places where you added lines >80 columns

Re: snmp - remove BER_TYPE_BOOLEAN

2021-01-04 Thread Stuart Henderson
On 2021/01/04 09:57, Martijn van Duren wrote: > Thanks for the feedback, it's always nice to get some background > information on old standards. However, this change is specifically for > SNMP, which does not use this part of BER/ASN1 as far as I could find. > I'm not going to remove it from ber.c

Re: acme-client(1): backup certs

2021-01-03 Thread Stuart Henderson
On 2021/01/02 17:10, Chris Bennett wrote: > On Sat, Jan 02, 2021 at 05:23:11PM +0100, Florian Obser wrote: > > > > Create .1 backup files when acme-client is going to overwrite a > > certificate file. > > > > This files are not terribly big and it's convenient to keep one > > previous file

Re: [PATCH] octeon.html dead links

2020-12-30 Thread Stuart Henderson
On 2020/12/30 00:12, Jordan Geoghegan wrote: > Hello, > > I noticed some dead links on the octeon.html page for the Portwell and Rhino > devices. > > The Portwell link has been pointed to archive.org and the Rhino links now > point to correct URL after Rhino Labs changed their website around.

Re: Rename SIMPLEQ_ to STAILQ_, diff 1/7

2020-12-26 Thread Stuart Henderson
On 2020/12/26 18:39, Denis Fondras wrote: > Le Sat, Dec 26, 2020 at 06:23:41PM +0100, Mark Kettenis a écrit : > > > > This diff renames SIMPLEQ_* to STAILQ_* in /usr/src/sys/sys to unify > > > > with FreeBSD and Linux. > > > > > > > > I added aliases at the end of queue.h to avoid breaking base

Re: acme-client(1) make -F flag use more obvious

2020-12-23 Thread Stuart Henderson
On 2020/12/15 17:49, Florian Obser wrote: > > > On 15 December 2020 14:56:41 CET, Stuart Henderson > wrote: > >On 2020/12/15 10:18, Solene Rapenne wrote: > >> This is a small change to acme-client(1) because I find > >> the explanation of -F flag not bein

Re: acme-client(1): fulfil all challenges, then tell the the CA

2020-12-23 Thread Stuart Henderson
On 2020/12/23 18:09, Florian Obser wrote: > First fulfil all challenges then tell the CA that it should check. > > With a CSR with multiple SANs acme-client would write one challenge, > tell the CA, write the next challenge and so on. > > For http-01 this doesn't matter but I think this will be

Re: diff: tcp ack improvement

2020-12-23 Thread Stuart Henderson
On 2020/12/17 20:50, Jan Klemkow wrote: > ping > > On Fri, Nov 06, 2020 at 01:10:52AM +0100, Jan Klemkow wrote: > > Hi, > > > > bluhm and I make some network performance measurements and kernel > > profiling. I've been running this on my workstation since you sent it out - lots of long-running

Re: netstat - proto ip record

2020-12-16 Thread Stuart Henderson
On 2020/12/16 16:43, Salvatore Cuzzilla wrote: > Hi folks, > > is there any process associated with this netstat record? > btw, what's the meaning of the state field with value '17'? > > ToTo@obsd ~ $ doas netstat -an -f inet > Active Internet connections (including servers) > Proto Recv-Q

Re: acme-client(1) make -F flag use more obvious

2020-12-16 Thread Stuart Henderson
On 2020/12/16 11:47, Renaud Allard wrote: > On 12/16/20 11:13 AM, Janne Johansson wrote: > > > > But it is a local check for the local date vs the date in the > > certificate, and perhaps your box is not on at 03:00 on Saturdays as you > > thought 3 months ago. > > > > If your clock is 3 months

Re: rc.d(8) for tcpbench

2020-12-15 Thread Stuart Henderson
On 2020/12/15 17:19, Theo de Raadt wrote: > Stuart Henderson wrote: > > > On 2020/12/15 16:33, Theo de Raadt wrote: > > > Jan Klemkow wrote: > > > > > > > On Tue, Dec 15, 2020 at 03:43:38PM -0700, Theo de Raadt wrote: > > > > >

Re: rc.d(8) for tcpbench

2020-12-15 Thread Stuart Henderson
On 2020/12/15 16:33, Theo de Raadt wrote: > Jan Klemkow wrote: > > > On Tue, Dec 15, 2020 at 03:43:38PM -0700, Theo de Raadt wrote: > > > Jan Klemkow wrote: > > > > > > > for frequent performance test it would be nice to just start tcpbench > > > > as a regular service. tcpbench gets an extra

Re: rc.d(8) for tcpbench

2020-12-15 Thread Stuart Henderson
On 2020/12/15 23:07, Jan Klemkow wrote: > Hi, > > for frequent performance test it would be nice to just start tcpbench > as a regular service. tcpbench gets an extra user and group with this > diff and is already pledged to "stdio". Thus, there should be no > security risk to do this even in

Re: acme-client(1) make -F flag use more obvious

2020-12-15 Thread Stuart Henderson
On 2020/12/15 10:18, Solene Rapenne wrote: > This is a small change to acme-client(1) because I find > the explanation of -F flag not being obvious that you > need it when you add/remove an alternative name in your > domain config. This only works directly for adding. For removal you need to rm

Re: Double entry in /usr/src/lib/libcurses/curs_util.3

2020-12-14 Thread Stuart Henderson
On 2020/12/14 14:45, Chris Bennett wrote: > See also has a double entry. > > Chris Bennett This is present in the latest release upstream, could you report it there please? https://invisible-island.net/ncurses/announce.html#h2-development SEE ALSO are usually in (at least roughly) alphabetical

Re: ipmi(4): ipmi_poll_thread(): tsleep(9) -> tsleep_nsec(9)

2020-12-08 Thread Stuart Henderson
On 2020/12/07 22:54, Scott Cheloha wrote: > On Wed, Dec 02, 2020 at 11:43:32PM +0100, Mark Kettenis wrote: > > > From: "Constantine A. Murenin" > > > Date: Wed, 2 Dec 2020 14:04:52 -0800 > > > > > > Not sure if you've seen it, but ipmi(4) has been disabled for over 12 > > > years, because it's

Re: IPv6 packets are not forwarded via IPsec tunnel

2020-12-08 Thread Stuart Henderson
On 2020/12/08 10:26, Yuichiro NAITO wrote: > The inner packet destination address is written in the encapsulated packet and > the final address to be delivered. > The outer packet destination address is peer address of IPsec tunnel. > > Do you mean that I have to set the routing table entry for

Re: syspatch exit state

2020-12-06 Thread Stuart Henderson
On 2020/12/06 16:39, Otto Moerbeek wrote: > On Sun, Dec 06, 2020 at 03:31:19PM +, SW wrote: > > > On 06/12/2020 14:32, Otto Moerbeek wrote: > > > On Sun, Dec 06, 2020 at 02:19:05PM +, SW wrote: > > > > > >> Hi, > > >> I've been looking to have syspatch give me a quick indication of

Re: relax loopback rule for networks

2020-12-04 Thread Stuart Henderson
On 2020/12/04 12:36, Claudio Jeker wrote: > In bgpd network inet static and network inet connected should skip > networks that use 127.0.0.1 as gateway. (This is to prevent network inet > static picking up reject routes like 224/4). > This does not really make sense for network inet rtlabel

Re: ipmi(4): ipmi_poll_thread(): tsleep(9) -> tsleep_nsec(9)

2020-12-02 Thread Stuart Henderson
On 2020/12/02 14:04, Constantine A. Murenin wrote: > Not sure if you've seen it, but ipmi(4) has been disabled for over 12 > years, because it's broken on some machines, so, this code is not > necessarily guaranteed to be correct as-is. yes I have a recollection that it may have not worked on

Re: wireguard + witness

2020-12-01 Thread Stuart Henderson
On 2020/12/01 21:27, Matt Dunwoodie wrote: > On Tue, 1 Dec 2020 10:32:29 +0100 > Sebastien Marie wrote: > > > Jason, Matt, > > > > sthen@ told me that the same lock is reported several times (exactly, > > two locks are reported several times: lock1, lock2, lock1, lock2...) > > > > witness(4)

Re: wireguard + witness

2020-12-01 Thread Stuart Henderson
On 2020/12/01 10:32, Sebastien Marie wrote: > On Tue, Dec 01, 2020 at 06:59:22AM +0100, Sebastien Marie wrote: > > On Mon, Nov 30, 2020 at 11:14:46PM +0000, Stuart Henderson wrote: > > > Thought I'd try a WITNESS kernel to see if that gives any clues about > > >

wireguard + witness

2020-11-30 Thread Stuart Henderson
Thought I'd try a WITNESS kernel to see if that gives any clues about what's going on with my APU crashing all over the place (long shot but I got bored with trying different older kernels..) I see these from time to time (one during netstart, and another 4 in 15 mins uptime), anyone know if

libressl pc files

2020-11-30 Thread Stuart Henderson
Several ports are patched to cope with the version number in pkgconfig files for libressl libs (currently all at 1.0.0) portoriginally wanted lang/php/7.2>= 1.0.1 lang/php/7.3>= 1.0.1 lang/php/7.4>= 1.0.1 multimedia/xine-lib >= 1.0.2

Re: wg(4) manpage tweaks

2020-11-27 Thread Stuart Henderson
On 2020/11/27 14:17, Jason McIntyre wrote: > On Fri, Nov 27, 2020 at 02:09:57PM +0000, Stuart Henderson wrote: > > On 2020/11/27 13:41, Jason McIntyre wrote: > > > > +++ wg.427 Nov 2020 12:28:32 - > > > > @@ -64,6 +64,9 @@ interface may be configu

Re: wg(4) manpage tweaks

2020-11-27 Thread Stuart Henderson
On 2020/11/27 13:41, Jason McIntyre wrote: > > +++ wg.427 Nov 2020 12:28:32 - > > @@ -64,6 +64,9 @@ interface may be configured to recognise > > .It Key > > Each peer uses its private key and corresponding public key to > > identify itself to others. > > +The public key may be displayed

wg(4) manpage tweaks

2020-11-27 Thread Stuart Henderson
It's not very clear how to fetch the pubkey. OK to add this to wg(4)? Index: wg.4 === RCS file: /cvs/src/share/man/man4/wg.4,v retrieving revision 1.6 diff -u -p -r1.6 wg.4 --- wg.424 Nov 2020 16:33:05 - 1.6 +++ wg.4

wg(4), change port in example

2020-11-24 Thread Stuart Henderson
Trying out the example from wg(4) I ran into this: # ifconfig wg1 192.168.5.1/24 ifconfig: SIOCAIFADDR: Address already in use After some head scratching it turns out that it's not complaining about anything set on the line immediately resulting in the error, but instead it's really wgport (that

Re: clean /dev from /etc/daily ?

2020-11-23 Thread Stuart Henderson
On 2020/11/23 09:31, Bryan Steele wrote: > On Mon, Nov 23, 2020 at 03:25:34PM +0100, Otto Moerbeek wrote: > > tOn Mon, Nov 23, 2020 at 01:53:01PM +0100, Solene Rapenne wrote: > > > > > A common mistake when using dd is to create a file in /dev which > > > fills up the space of / and may stay

Re: Ryzen 5800X hw.setperf vs hw.cpuspeed

2020-11-20 Thread Stuart Henderson
On 2020/11/20 07:41, Bryan Steele wrote: > At least on a desktop I'd suggest to leaved apmd(8) and not do any > manual hw.setperf tweaking, you should have adequate cooling the planet doesn't! :/

Re: AUDIORECDEVICE environment variable in sndio lib

2020-11-17 Thread Stuart Henderson
On 2020/11/17 18:23, Peter J. Philipp wrote: > On Tue, Nov 17, 2020 at 05:09:28PM +0000, Stuart Henderson wrote: > > On 2020/11/17 17:13, Peter J. Philipp wrote: > > > Hi, > > > > > > I have a mic on snd/1 and speakers on snd/0. I had tried a lot of > >

Re: AUDIORECDEVICE environment variable in sndio lib

2020-11-17 Thread Stuart Henderson
On 2020/11/17 17:13, Peter J. Philipp wrote: > Hi, > > I have a mic on snd/1 and speakers on snd/0. I had tried a lot of different > settings with audacity port but couldn't get this to work, so I chose the > method of last resort. Below is a patch to allow an AUDIORECDEVICE > environment >

Re: Import seq(1) from FreeBSD

2020-11-16 Thread Stuart Henderson
On 2020/11/16 05:49, Todd C. Miller wrote: > This is originally from NetBSD but FreeBSD appears to have some > additional fixes. > > I know we have jot(1) but seq(1) is considerably easier to use for > simple things and at this point, most other systems have it. OK with me. If this goes in then

Re: Strange snmpd issue with 6.7

2020-11-13 Thread Stuart Henderson
000, Stuart Henderson wrote: > > On 2020-11-09, Winfred Harrelson wrote: > > > On Sat, Nov 07, 2020 at 01:53:00PM -, Stuart Henderson wrote: > > >> On 2020-11-06, Winfred Harrelson wrote: > > >> > I am running OpenBSD 6.7 and am having a strange iss

Re: Fw: Hardware UUID discrepancies (dmidecode vs. sysctl) on amd64 multiboot system

2020-11-09 Thread Stuart Henderson
On 2020/11/09 15:28, Mark Kettenis wrote: > > I think it would be correct to change our code to follow the spec, > > but reading the manual of current versions of dmidecode it goes a bit > > further; > > > > There is some ambiguity about how to interpret the UUID fields > > prior to

Re: Fw: Hardware UUID discrepancies (dmidecode vs. sysctl) on amd64 multiboot system

2020-11-09 Thread Stuart Henderson
On 2020/11/08 11:42, Benjamin Baier wrote: > Forwarding to tech@ by request from Stuart Henderson > This issue came up on misc@ > https://marc.info/?l=openbsd-misc=160477082230840=2 > > Begin forwarded message: > > Date: Sat, 7 Nov 2020 22:30:44 +0100 > From: Benjamin

Re: pf route-to issues

2020-10-19 Thread Stuart Henderson
On 2020/10/19 19:53, David Gwynne wrote: > On Mon, Oct 19, 2020 at 09:34:31AM +0100, Stuart Henderson wrote: > > On 2020/10/19 15:35, David Gwynne wrote: > > > every few years i try and use route-to in pf, and every time it > > > goes badly. i tried it again last w

Re: net.inet.ip.forwarding=0 vs lo(4)

2020-10-19 Thread Stuart Henderson
On 2020/10/19 11:47, David Gwynne wrote: > On Sun, Oct 18, 2020 at 08:57:34PM +0100, Stuart Henderson wrote: > > On 2020/10/18 14:04, David Gwynne wrote: > > > the problem i'm hitting is that i have a multihomed box where the > > > service it provides listens on an

Re: pf route-to issues

2020-10-19 Thread Stuart Henderson
On 2020/10/19 15:35, David Gwynne wrote: > every few years i try and use route-to in pf, and every time it > goes badly. i tried it again last week in a slightly different > setting, and actually tried to understand the sharp edges i hit > this time instead of giving up. it turns out there are 2

Re: net.inet.ip.forwarding=0 vs lo(4)

2020-10-18 Thread Stuart Henderson
On 2020/10/18 14:04, David Gwynne wrote: > the problem i'm hitting is that i have a multihomed box where the > service it provides listens on an IP address that's assigned to lo1. > it's a host running a service, it's not a router, so the > net.inet.ip.forwarding sysctl is not set to 1. I ran

Re: Typo Diffs

2020-10-16 Thread Stuart Henderson
On 2020/10/16 02:36, Varik Valefor wrote: > Sir or Madam: > > Included within this message should be some diffs which can be applied to > fix some typographical errors and general wording problems which exist > within the OpenBSD manual pages, as well as some other files. > > These changes are

[s...@spacehopper.org: Re: Remove useless line from daemon class in login.conf]

2020-10-14 Thread Stuart Henderson
Just found this in my local tree still, iirc danj liked it but there wasn't much other enthusiasm. Any other comments? Should I just drop the diff? Change 'a' to use 2^10 minimum? Change to fixed 2^10 with no auto measurement? - Forwarded message from Stuart Henderson - From: Stuart

Re: Unbound 1.12.0

2020-10-13 Thread Stuart Henderson
On 2020/10/11 15:37, Renaud Allard wrote: > > > On 10/10/2020 22:05, Stuart Henderson wrote: > > Here's an update to the recently released version of Unbound. Much of > > the additional code is for DoH and is unused here as it requires the > > nghttp2 library. > &

Re: NSD 4.3.3

2020-10-09 Thread Stuart Henderson
On 2020/10/09 21:35, Stuart Henderson wrote: > Here's an update to NSD 4.3.3. Any tests/comments/OKs? Updated to reinstate the pledge lost in nsd.c (merge error as we had a local commit post 4.3.2), spotted by tb. (I didn't reorder the diff for easier reading this time). Index: Makefile

NSD 4.3.3

2020-10-09 Thread Stuart Henderson
Here's an update to NSD 4.3.3. Any tests/comments/OKs? diff in order; - changelog - code changes - manpage changes - autoconf foo doc/ChangeLog | 55 doc/RELNOTES | 24 dbaccess.c |4 - ipc.c |1 mini_event.h |

Re: ssh-keygen: generate ed25519 keys by default

2020-10-08 Thread Stuart Henderson
On 2020/10/08 15:40, Christian Weisgerber wrote: > At this point, I don't know how many SSH servers are still out there > that don't handle Ed25519. I still have an ECDSA key somewhere > that I use to log into a machine that still runs... "OpenSSH_6.0p1 > Debian-4+deb7u7, OpenSSL 1.0.1t 3 May

Re: Make df output more human friendly in daily(8)

2020-10-03 Thread Stuart Henderson
On 2020/10/03 08:44, Daniel Jakots wrote: > On Sat, 3 Oct 2020 08:00:44 +0200, Ingo Schwarze > wrote: > > > But this needs to remain: > > > > > -Reports on which file systems need to be dumped via > > > -.Xr dump 8 . > > > -.It > > Indeed, I wrongly assumed that the other dump call was

Re: pthread_spin_unlock and ownership behaviour

2020-10-03 Thread Stuart Henderson
Ports-wise, from a Nov 2019 build on i386, these used it: $ grep -Rl pthread_spin_unlock wrkscan wrkscan/devel/libivykis wrkscan/x11/gnustep/base wrkscan/x11/e17/eina wrkscan/misc/posixtestsuite wrkscan/net/libunbound wrkscan/net/libshout wrkscan/net/icecast wrkscan/net/bird/1,-doc

Re: trunk: keep interface up on port removal

2020-09-14 Thread Stuart Henderson
On 2020/09/14 10:57, Klemens Nanni wrote: > On Sun, Sep 13, 2020 at 06:44:13PM +0100, Stuart Henderson wrote: > > I can't test at the moment, but the other case is removing a port from > > the trunk without destroying the trunk interface itself. That's almost > > certain

Re: trunk: keep interface up on port removal

2020-09-13 Thread Stuart Henderson
On 2020/09/13 14:47, Klemens Nanni wrote: > So there's a dance around UP interfaces already; CVS log dates this > code back to 2010 when deraadt rearanged code into ifnewlladdr(), the > previous if.c revision also head this dance around UP. > > The if_down() line I removed from trunk(4) dates

Re: trunk: keep interface up on port removal

2020-09-13 Thread Stuart Henderson
On 2020/09/13 13:23, Klemens Nanni wrote: > On Sun, Sep 13, 2020 at 11:31:12AM +0100, Stuart Henderson wrote: > > On 2020/09/13 11:12, Stuart Henderson wrote: > > > This has been tried before, I forget what but there were problems > > > > from chat logs when I tri

Re: trunk: keep interface up on port removal

2020-09-13 Thread Stuart Henderson
On 2020/09/13 11:12, Stuart Henderson wrote: > This has been tried before, I forget what but there were problems from chat logs when I tried this before: 14:52 < sthen> if i kill the if_down, no crash, but the mac address doesn't get updated so i end up with the same one on em0, em1, trunk0

Re: trunk: keep interface up on port removal

2020-09-13 Thread Stuart Henderson
This has been tried before, I forget what but there were problems -- Sent from a phone, apologies for poor formatting. On 12 September 2020 21:16:31 Alexander Bluhm wrote: OK bluhm@ On Sat, Sep 12, 2020 at 05:49:52PM +0200, Klemens Nanni wrote: Index: if_trunk.c

Re: sppp: add free() sizes

2020-09-12 Thread Stuart Henderson
On 2020/09/12 19:13, Martin Pieuchot wrote: > Another approach would be to always use array of AUTHMAXLEN, I'm not sure > the size justifies two malloc(9). it used to do that, changed in if_sppsubr.c 1.74

Re: shrinking and growing reallocs: a theoretical? bad case for performance

2020-09-01 Thread Stuart Henderson
On 2020/08/31 08:39, Otto Moerbeek wrote: > A question from Theo made me think about realloc and come up with a > particular bad case for performance. I do not know if it happens in > practice, but it was easy to create a test program to hit the case. Not very scientific testing (a single attempt

Re: unwind(8): use SO_REUSEADDR

2020-08-30 Thread Stuart Henderson
On 2020/08/29 20:06, Florian Obser wrote: > I can't think of a downside, OK. > (Not sure of a use case either though.) It makes it easier to test unwind diffs on a machine that normally runs another nameserver :) OK.

Re: sync unwind to libunbound 1.11.0

2020-08-29 Thread Stuart Henderson
On 2020/08/27 15:28, Florian Obser wrote: > all heavy lifting done by sthen in unbound > > tests? ok with me. only tested lightly (the machine I normally use does DNS for other machines too so runs unbound). related, any idea what's happening here? unwind[51500]: fatal in main: could not bind

Re: $pexp in re.subr(8)

2020-08-07 Thread Stuart Henderson
On 2020/08/06 18:12, Thomas Levine wrote: > The present patch changes the rc.subr(8) manual page to match > the implementation. > > The current manual page for rc.subr(8) says that $pexp is "A regular > expression to be passed to pgrep(1) in order to find the desired process > or to be passed to

Re: [PATCH]: Add a check for upgrade feature to sysupgrade(8)

2020-08-03 Thread Stuart Henderson
On 2020/08/03 13:50, Solene Rapenne wrote: > On Mon, 3 Aug 2020 13:28:38 +0200 > Emil Engler : > > > ## Abstract > > This patch adds an argument to sysupgrade(8) which makes it possible > > to check if an upgrade is available, similar to "syspatch -c". > > This works both, for snapshots and

Re: no output on glass console after switching to serial

2020-08-01 Thread Stuart Henderson
On 2020/08/01 22:21, Mark Kettenis wrote: > > pci11 at ppb9 bus 10 > > vga1 at pci11 dev 0 function 0 "ASPEED Technology AST2000" rev 0x30 > > This is the BMC graphics and seems to be the only grapics device > available on this machine. Correct. > > wsdisplay at vga1 not configured > > And I

no output on glass console after switching to serial

2020-08-01 Thread Stuart Henderson
I've just been building a machine with serial console to go to colo tomorrow and have noticed that there's no output on glass console after the "switching console to com0" message. The only getty running after boot is the one on serial console. I won't be able to do much in the way of testing on

Re: cat(1): add more restrictive pledge(2)

2020-07-31 Thread Stuart Henderson
On 2020/07/31 00:07, tempmai...@firemail.cc wrote: > I have to say I'm only a beginner to C but hopefully my patch is > good. > > This patch adds a second and more restrictive pledge (only "stdio" > instead of "stdio rpath") after the getopt loop if there is no > input file or if the input file

Re: Python 3.8 os.listdir EINVAL on large directories

2020-07-26 Thread Stuart Henderson
Moving to tech. In gmane.os.openbsd.misc, you wrote: > Hi all, > > I am getting a stacktrace from the borg command in the borgbackup > package while checking a backup (see bottom of email for full > output, since it's verbose). The relevant part is this: > > filenames =

Re: Add ability to set control values with video(1)

2020-07-25 Thread Stuart Henderson
On 2020/07/25 09:20, Theo de Raadt wrote: > The normal idiom is when last-close happens in a driver, all modal-state > is lost and restored to default, and when you use the driver again -- > the new open gets you a raw configuration which is then changed via > ioctl, before futher use. Isn't this

Re: wsfontload(8): display number of characters in a loaded font

2020-07-17 Thread Stuart Henderson
Seems useful. While it's not especially likely anyone is parsing the output of this, just in case they are it's usually more admin-friendly to add a new column at the end unless there's a good reason not to. -- Sent from a phone, apologies for poor formatting. On 16 July 2020 21:29:50

Re: iked.conf.5: provide gre example

2020-07-16 Thread Stuart Henderson
On 2020/07/15 10:02, Theo de Raadt wrote: > It is extremely unwise to use DNS names at this level (or things which > look like DNS names). The same problems that pf has with DNS, are > present here. You really don't want people to get into this habit. Same in gre(4) config which needs addresses

Re: empty rc.firsttime when installing

2020-07-14 Thread Stuart Henderson
On 2020/07/14 15:03, Denis Fondras wrote: > I was upgrading an EdgeRouter and it restarted multiple times instead of > booting > /bsd > > When I had a chance to boot it correctly, I noticed that sysmerge and > fw_update > were run multiple times. > > This diff avoids filling rc.firsttime and

Re: silicom X710 ixl, unable to query phy types, no sff

2020-07-09 Thread Stuart Henderson
ompts. You'll need to restart the machine or power cycle ... > > Hope this helps, > > > > > > On Wed, 8 Jul 2020 at 23:09, Stuart Henderson wrote: > > > I have some ixl cards which show "unable to query phy types" at > > attach time, and return e

Re: silicom X710 ixl, unable to query phy types, no sff

2020-07-09 Thread Stuart Henderson
and the intel tools display it like this instead # /usr/sbin/ethtool -i ens1f2 driver: i40e version: 2.3.2-k firmware-version: 5.02 0x80002248 0.0.0 expansion-rom-version: bus-info: :05:00.2 supports-statistics: yes supports-test: yes supports-eeprom-access: yes supports-register-dump: ye

Re: silicom X710 ixl, unable to query phy types, no sff

2020-07-09 Thread Stuart Henderson
0 C, high 90.00 C) tx: -2.63 dBm (low -7.00 dBm, high 2.50 dBm) rx: -4.75 dBm (low -16.00 dBm, high 1.00 dBm) On 2020/07/08 22:59, Stuart Henderson wrote: > I have some ixl cards which show "unable to query phy types" at > attach time, and return either EIO or ENOD

silicom X710 ixl, unable to query phy types, no sff

2020-07-08 Thread Stuart Henderson
I have some ixl cards which show "unable to query phy types" at attach time, and return either EIO or ENODEV if I try fetching sff pages. I booted with SFP+ in all ixl ports and have this: ixl0 at pci6 dev 0 function 0 "Intel X710 SFP+" rev 0x02: port 1, FW 5.0.40043 API 1.5, msix, 4 queues,

Re: Use VGA text mode palette RGB values in rasops(9)

2020-07-07 Thread Stuart Henderson
On 2020/07/07 15:16, Frederic Cambus wrote: > Hi tech@, > > The recent spike of interest around framebuffer consoles has prompted > me to revisit a proposal I sent back in early 2017 [1]. > > Aesthetics considerations aside, kettenis@ raised the concern that colors > from the original rasops

Re: userland clock_gettime proof of concept

2020-07-01 Thread Stuart Henderson
running on 38 of these, btw. OpenBSD 6.7-current (GENERIC.MP) #0: Sat Jun 27 21:15:58 BST 2020 sthen@...:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 4169592832 (3976MB) avail mem = 4028198912 (3841MB) random: good seed from bootblocks mpath0 at root scsibus0 at mpath0: 256 targets

Re: Stuck in Needbuf state, trying to understand (6.7)

2020-06-26 Thread Stuart Henderson
On 2020/06/26 15:30, sven falempin wrote: > behavior confirmed on current. > > Once the process stalls, ( could be anything writing to the vnconfig disk, > cp , umount ) > a few other calls like df , or ps, etc may hang, never the same > sp or mp kernel, reproduced on today's snapshots.

awk FS behaviour change

2020-06-26 Thread Stuart Henderson
The Sep 10, 2019 version of awk introduced a change in handling this: ifconfig egress | awk '/inet / {FS="[ .]"; print "host-"$4"-"$5"}' Given a line like inet 10.20.30.40 netmask 0xff00 broadcast 10.20.30.255 it used to return host-30-40, now it returns

Re: Blacklist Ericsson F5521GW from umass

2020-06-22 Thread Stuart Henderson
On 2020/06/22 14:10, Tobias Heider wrote: > On Mon, Jun 22, 2020 at 02:01:43PM +0200, Tobias Heider wrote: > > Hi, > > > > I noticed that the ramdisk takes ages to boot on my T420. > > It seems that without umodem in the kernel, umass tries to attach to my > > Erricson F5521GW WAN modem and fails

Re: sample unbound.conf tweak

2020-06-21 Thread Stuart Henderson
On 2020/06/21 18:29, Klemens Nanni wrote: > On Sun, Jun 21, 2020 at 04:47:22PM +0100, Stuart Henderson wrote: > > An "uncomment" was left in when we reenabled dnssec by default, > > and it seems a bit pointless to say "comment out to disable". ok? > Reads be

Re: lfence for rdtsc

2020-06-21 Thread Stuart Henderson
On 2020/06/21 18:46, Paul Irofti wrote: > > > În 21 iunie 2020 16:30:43 EEST, Theo de Raadt a scris: > >Paul Irofti wrote: > > > >> If you change the name to rdtsc_ordered(), OK. > > > >That is a weaker name. > > > >Ordered in what way, at what level; ordered against what? > > > >This is using

sample unbound.conf tweak

2020-06-21 Thread Stuart Henderson
An "uncomment" was left in when we reenabled dnssec by default, and it seems a bit pointless to say "comment out to disable". ok? Index: unbound.conf === RCS file: /cvs/src/etc/unbound.conf,v retrieving revision 1.19 diff -u -p

Re: userland clock_gettime proof of concept

2020-06-19 Thread Stuart Henderson
On 2020/06/19 20:28, Paul Irofti wrote: > On Fri, Jun 19, 2020 at 06:52:40PM +0200, Mark Kettenis wrote: > > I don't expect userland processes to call CLOCK_UPTIME in a loop like > > they tend to do do for CLOCK_MONOTONIC and CLOCK_REALTIME. Linux > > doesn't have it ;). > > I don't care

<    1   2   3   4   5   6   7   8   9   10   >