Re: Mention /etc/examples/ in those config files manpages + FILES short description

2020-05-01 Thread Theo de Raadt
Jason McIntyre wrote: > > Just so this now applies to all /etc/examples/ files' manpages > > "consistently". > > > > Cheers, > > -- > > clematis (0xA2C87EDB507B4C53) > > > > ok, so i see from those threads that i was against expanding FILES, but > happy for entries for the corresponding

JSON support for bgpctl(8)

2020-05-01 Thread Claudio Jeker
This diff add JSON output support for bgpctl. Most commands should produce now a resonable JSON object. The individual objects can probably be improved and extended. I'm at a point where I'm happy with the result and looking for feedback. It is possible to commit the non-JSON bits first and add

Re: Mention /etc/examples/ in those config files manpages + FILES short description

2020-05-01 Thread clematis
On Fri, May 01, 2020 at 06:52:27AM +0100, Jason McIntyre wrote: > i don;t understand your reference to 28 out of 41 files. i cannot see > where we added any expanded FILES entries. can you provide a summary of > these inconsistencies, please? There's 41 example files in /etc/examples/. 28 of them

Re: Mention /etc/examples/ in those config files manpages + FILES short description

2020-05-01 Thread Ingo Schwarze
Hi, clematis wrote on Fri, May 01, 2020 at 11:37:51AM +0200: > On Fri, May 01, 2020 at 06:52:27AM +0100, Jason McIntyre wrote: >> i don;t understand your reference to 28 out of 41 files. i cannot see >> where we added any expanded FILES entries. can you provide a summary of >> these

[PATCH] add ping(1)-like stats to tcpbench(1)

2020-05-01 Thread richard . n . procter
Hi, This implements ping(1)-like summary statistics for tcpbench(1), e.g. ^C --- localhost tcpbench statistics --- 1099642814 bytes sent over 4.126 seconds bandwidth min/avg/max/std-dev = 1228.131/2117.309/2491.399/517.779 Mbps The std-dev especially would have helped me catch a TCP

Re: patch: Enable dock audio on Thinkpad dock (Thinkpad L460)

2020-05-01 Thread Damien Couderc
On 27/04/2020 15:19, Abel Abraham Camarillo Ojeda wrote: The following enables audio via the dock station port in my thinkpad L460. But, anyone knows if its possible to automatically disable the laptop speaker when I plug in the audio port in the dock? it doesn't appear to have a *_sense,

Re: Audio over hdmi

2020-05-01 Thread Damien Couderc
On 26/04/2020 06:58, Alexandre Ratchov wrote: On Sat, Apr 25, 2020 at 05:16:03PM +0200, Damien Couderc wrote: I can see in the full dmesg that there are two different FTYPE results provided during azalia_codec_init and only the first one seems to be displayed in the mixerctl output. I think

Re: Mention /etc/examples/ in those config files manpages + FILES short description

2020-05-01 Thread Marc Espie
I do think newcomers will tend to miss examples, even if /etc/examples is somewhat documented elsewhere. Also, queries to mandocdb will probably benefit... say "what commands do have an example configuration file ?" kind of what you should be able to ask with advanced queries.

iwn(4): prevent divide-by-zero

2020-05-01 Thread Stefan Sperling
I have seen a kernel panic with iwn(4) due to a divide by zero on this line in ieee80211_mira.c's ieee80211_mira_update_stats(): sfer /= (mn->txfail + 1) * mn->frames; We ended up in mira_choose() via iwn_rx_compressed_ba(). The following patch prevents the problem. ok? diff

Re: Mention /etc/examples/ in those config files manpages + FILES short description

2020-05-01 Thread Theo de Raadt
I think there's a bit of drama going on here. Once a person uses one example in the examples directory, they will become aware of the directory and see it has other files. And possibly use them in the future. It is not clear to me that example discovery has to come via each and every manual

[patch] relayd.conf.5, DHE params seems incorrect/outdated.

2020-05-01 Thread Jesper Wallin
Hi all, I was trying to score 100 on all the tests over at ssllabs.com, but seem to only reach 90 on "Key Exchange". Not sure if it's related, but I was playing with the "dhe" option in relayd.conf(5) in order to increase the number of bits used for the ephemeral key. No matter how I specified

Re: [patch] relayd.conf.5, DHE params seems incorrect/outdated.

2020-05-01 Thread Sebastian Benoit
Jesper Wallin(jes...@ifconfig.se) on 2020.05.01 12:15:06 +0200: > Hi all, > > I was trying to score 100 on all the tests over at ssllabs.com, but seem > to only reach 90 on "Key Exchange". Not sure if it's related, but I was > playing with the "dhe" option in relayd.conf(5) in order to increase

Re: [patch] relayd.conf.5, DHE params seems incorrect/outdated.

2020-05-01 Thread Klemens Nanni
On Fri, May 01, 2020 at 02:33:38PM +0200, Sebastian Benoit wrote: > Indeed it has to specified as auto, none or legacy. > > I cant see how this could ever have worked, i believe the documentation was > always wrong. One suggestion inline, OK kn either way. > Index: relayd.conf.5 >

Re: Default device in audioctl and mixerctl

2020-05-01 Thread Theo de Raadt
Alexandre Ratchov wrote: > On Fri, May 01, 2020 at 01:34:54PM +0200, Damien Couderc wrote: > > Hi, > > > > I noticed that audioctl and mixerctl both use /dev/audioctl0 as a default > > since the reimplementation of the new api. > > > > Shouldn't it use the /dev/audioctl link instead to permit

Default device in audioctl and mixerctl

2020-05-01 Thread Damien Couderc
Hi, I noticed that audioctl and mixerctl both use /dev/audioctl0 as a default since the reimplementation of the new api. Shouldn't it use the /dev/audioctl link instead to permit choosing which device we want as the default? --- audioctl.c.orig    Fri May  1 13:29:01 2020 +++ audioctl.c  

Re: Audio over hdmi

2020-05-01 Thread Theo de Raadt
Chris Bennett wrote: > On Fri, May 01, 2020 at 02:17:56PM +0200, Alexandre Ratchov wrote: > > On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: > > > > > > Speaking of the hdmi-only devices that were disabled in 2009: does the > > > project still stand on this position in 2020? I

Re: Audio over hdmi

2020-05-01 Thread Alexandre Ratchov
On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: > > Speaking of the hdmi-only devices that were disabled in 2009: does the > project still stand on this position in 2020? I made a quick search and it > seems that more than half of the screens are audio capable now. I understand >

Re: Default device in audioctl and mixerctl

2020-05-01 Thread Alexandre Ratchov
On Fri, May 01, 2020 at 01:34:54PM +0200, Damien Couderc wrote: > Hi, > > I noticed that audioctl and mixerctl both use /dev/audioctl0 as a default > since the reimplementation of the new api. > > Shouldn't it use the /dev/audioctl link instead to permit choosing which > device we want as the

Re: Audio over hdmi

2020-05-01 Thread Mark Kettenis
> Date: Fri, 1 May 2020 14:17:56 +0200 > From: Alexandre Ratchov > > On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: > > > > Speaking of the hdmi-only devices that were disabled in 2009: does the > > project still stand on this position in 2020? I made a quick search and it > >

Re: Audio over hdmi

2020-05-01 Thread Chris Bennett
On Fri, May 01, 2020 at 02:17:56PM +0200, Alexandre Ratchov wrote: > On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: > > > > Speaking of the hdmi-only devices that were disabled in 2009: does the > > project still stand on this position in 2020? I made a quick search and it > >

Re: Default device in audioctl and mixerctl

2020-05-01 Thread Damien Couderc
Le 01/05/2020 à 14:51, Alexandre Ratchov a écrit : On Fri, May 01, 2020 at 01:34:54PM +0200, Damien Couderc wrote: Hi, I noticed that audioctl and mixerctl both use /dev/audioctl0 as a default since the reimplementation of the new api. Shouldn't it use the /dev/audioctl link instead to permit

Re: Audio over hdmi

2020-05-01 Thread Theo de Raadt
Damien Couderc wrote: > Le 01/05/2020 à 15:01, Mark Kettenis a écrit : > >> Date: Fri, 1 May 2020 14:17:56 +0200 > >> From: Alexandre Ratchov > >> > >> On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: > >>> > >>> Speaking of the hdmi-only devices that were disabled in 2009: does

Re: Audio over hdmi

2020-05-01 Thread Stuart Henderson
On 2020/05/01 17:16, Damien Couderc wrote: > Le 01/05/2020 à 15:01, Mark Kettenis a écrit : > > > Date: Fri, 1 May 2020 14:17:56 +0200 > > > From: Alexandre Ratchov > > > > > > On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: > > > > > > > > Speaking of the hdmi-only devices that

Re: JSON support for bgpctl(8)

2020-05-01 Thread Hiltjo Posthuma
On Fri, May 01, 2020 at 01:18:03PM +0200, Claudio Jeker wrote: > This diff add JSON output support for bgpctl. > Most commands should produce now a resonable JSON object. > The individual objects can probably be improved and extended. > I'm at a point where I'm happy with the result and looking

Re: Audio over hdmi

2020-05-01 Thread Damien Couderc
Le 01/05/2020 à 15:01, Mark Kettenis a écrit : Date: Fri, 1 May 2020 14:17:56 +0200 From: Alexandre Ratchov On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: Speaking of the hdmi-only devices that were disabled in 2009: does the project still stand on this position in 2020? I

Re: patch: Enable dock audio on Thinkpad dock (Thinkpad L460)

2020-05-01 Thread Abel Abraham Camarillo Ojeda
On Friday, May 1, 2020, Damien Couderc wrote: > On 27/04/2020 15:19, Abel Abraham Camarillo Ojeda wrote: > >> The following enables audio via the dock station port in my >> >>> thinkpad L460. But, anyone knows if its possible to automatically >>> disable the laptop speaker when I plug in the

Re: Disable snmpd 'private' community

2020-05-01 Thread Martijn van Duren
Moving to tech@ On 5/1/20 5:17 PM, Steven Surdock wrote: > I see that snmpd.conf supports "read-write disabled", but this doesn't seem > to _completely_ disable the private community. If I set "read-write > disabled" I can still poll values using the 'private' community. Is this a > bug or a

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Tobias Heider
Hi Stephan, >> "Also: the mentioned sha1 transform is also a HMAC construction and >> technically >> safe to use (for now), same as the PRF." > > I don't get how this could be ? SHA-1 for signage and hash generation is > colliding. How can it be that this doesn't apply for iked ? It is true

Re: Audio over hdmi

2020-05-01 Thread Alexandre Ratchov
On Fri, May 01, 2020 at 05:16:10PM +0200, Damien Couderc wrote: > > So if I'm not wrong it could be possible to set the -f option with the > analog device and the -F option with the digital-only one. > > That said, it would work only if you have two audio device (e.g. HDMI from > video card as

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Theo de Raadt
Stephan Mending wrote: > I don't get how this could be ? then go study.

Re: iwn/athn/wpi: fix CCMP replay check with HW crypto

2020-05-01 Thread Stefan Sperling
On Fri, May 01, 2020 at 08:06:05PM +, Kevin Chadwick wrote: > On 2020-05-01 16:05, Stefan Sperling wrote: > > The CCMP header contains a nonce, > > which is incremented by the transmitter whenever it encrypts a new frame. > > I assume there isn't opportunity to set the nonce to a 128 bit

Re: [PATCH] add ping(1)-like stats to tcpbench(1)

2020-05-01 Thread j
From: richard.n.procter () gmail ! com Date: Fri, 01 May 2020 10:12:05 + To: openbsd-tech Subject: [PATCH] add ping(1)-like stats to tcpbench(1) Hi, This implements ping(1)-like summary statistics for tcpbench(1), e.g. ^C --- localhost tcpbench statistics --- 1099642814 bytes sent over

Re: Mention /etc/examples/ in those config files manpages + FILES short description

2020-05-01 Thread Theo de Raadt
Jason McIntyre wrote: > On Fri, May 01, 2020 at 07:13:53AM -0600, Theo de Raadt wrote: > > I think there's a bit of drama going on here. > > > > Once a person uses one example in the examples directory, they > > will become aware of the directory and see it has other files. > > And possibly use

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Theo de Raadt
if someone with a domainname called "collisions" still doesn't understand what a HMAC is, then it is clear what is going on -- that person is simply fighting a war against math they don't understand. tobias, there is no need for a long explanation of what a HMAC is, you are facing someone with an

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Theo de Raadt
Tobias Heider wrote: > > Though using SHA1 in combination with HAMC as pseudorandom function is > > perfectly fine as of today. Can't even spell HMAC.

Re: iwn/athn/wpi: fix CCMP replay check with HW crypto

2020-05-01 Thread Kevin Chadwick
On 2020-05-01 16:05, Stefan Sperling wrote: > The CCMP header contains a nonce, > which is incremented by the transmitter whenever it encrypts a new frame. I assume there isn't opportunity to set the nonce to a 128 bit random one. It would avoid a lot of risk with the likelihood of collisions

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Stephan Mending
Hi, I actually read your thread. By what I understood you're at the moment trying to change a few defaults. That was the reason I wanted to add SHA1 for removal. I just thought it deserved a seperate thread. I do understand that you're trying to be careful with removing or changing

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Stuart Henderson
On 2020/05/02 00:23, Stephan Mending wrote: > Hi, > > I actually read your thread. By what I understood you're at the moment > trying to change a few defaults. > > That was the reason I wanted to add SHA1 for removal. I just thought it > deserved a seperate thread. > > I do understand that

Re: Audio over hdmi

2020-05-01 Thread Mark Kettenis
> From: Damien Couderc > Date: Fri, 1 May 2020 18:24:12 +0200 > > Le 01/05/2020 à 17:30, Stuart Henderson a écrit : > > On 2020/05/01 17:16, Damien Couderc wrote: > >> Le 01/05/2020 à 15:01, Mark Kettenis a écrit : > Date: Fri, 1 May 2020 14:17:56 +0200 > From: Alexandre Ratchov >

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Tobias Heider
On Fri, May 01, 2020 at 11:35:23PM +0200, Stephan Mending wrote: > Hi *, > > this diff removes SHA1 as default transform for integrity algorithms. > > It's been broken long enough. Let's at least get rid of it in iked's > defaults. > > SHA1 is officially broken since 2011 and there have been

Re: Mention /etc/examples/ in those config files manpages + FILES short description

2020-05-01 Thread Jason McIntyre
On Fri, May 01, 2020 at 07:13:53AM -0600, Theo de Raadt wrote: > I think there's a bit of drama going on here. > > Once a person uses one example in the examples directory, they > will become aware of the directory and see it has other files. > And possibly use them in the future. > > It is not

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Stuart Henderson
On 2020/05/02 00:43, Stephan Mending wrote: > On 02/05/2020 00:40, Stuart Henderson wrote: > > On 2020/05/02 00:23, Stephan Mending wrote: > > > Hi, > > > > > > I actually read your thread. By what I understood you're at the moment > > > trying to change a few defaults. > > > > > > That was the

Re: patch: Enable dock audio on Thinkpad dock (Thinkpad L460)

2020-05-01 Thread Abel Abraham Camarillo Ojeda
On Friday, May 1, 2020, Damien Couderc wrote: > Le 01/05/2020 à 18:04, Damien Couderc a écrit : > >> Le 01/05/2020 à 17:42, Abel Abraham Camarillo Ojeda a écrit : >> >>> >>> >>> On Friday, May 1, 2020, Damien Couderc >> open...@petrocore.eu>> wrote: >>> >>> On 27/04/2020 15:19, Abel Abraham

Re: IPv6 Support for umb(4)

2020-05-01 Thread Stuart Henderson
On 2020/05/01 20:10, Gerhard Roth wrote: > On 4/30/20 11:07 PM, Stuart Henderson wrote: > > On 2020/04/30 20:32, Gerhard Roth wrote: > > > Hi Theo, > > > > > > is umb really working that differently for a P2P interface? I think it is > > > very similar to ppp(4) and IPv6. The standard way is to

iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Stephan Mending
Hi *, this diff removes SHA1 as default transform for integrity algorithms. It's been broken long enough. Let's at least get rid of it in iked's defaults. SHA1 is officially broken since 2011 and there have been doubts about it since 2005. Though using SHA1 in combination with HAMC as

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Stephan Mending
On 02/05/2020 00:40, Stuart Henderson wrote: On 2020/05/02 00:23, Stephan Mending wrote: Hi, I actually read your thread. By what I understood you're at the moment trying to change a few defaults. That was the reason I wanted to add SHA1 for removal. I just thought it deserved a seperate

Re: IPv6 Support for umb(4)

2020-05-01 Thread Gerhard Roth
On 4/30/20 11:07 PM, Stuart Henderson wrote: On 2020/04/30 20:32, Gerhard Roth wrote: Hi Theo, is umb really working that differently for a P2P interface? I think it is very similar to ppp(4) and IPv6. The standard way is to obtain the IP address via PPP protocol. Just like this, umb(4)

Re: iked(8): Removing SHA1 from default transforms

2020-05-01 Thread Sebastian Benoit
Stuart Henderson(s...@spacehopper.org) on 2020.05.01 23:46:49 +0100: > On 2020/05/02 00:43, Stephan Mending wrote: > > On 02/05/2020 00:40, Stuart Henderson wrote: > > > On 2020/05/02 00:23, Stephan Mending wrote: > > > > Hi, > > > > > > > > I actually read your thread. By what I understood

Re: JSON support for bgpctl(8)

2020-05-01 Thread Sebastian Benoit
Hiltjo Posthuma(hil...@codemadness.org) on 2020.05.01 16:31:33 +0200: > On Fri, May 01, 2020 at 01:18:03PM +0200, Claudio Jeker wrote: > > This diff add JSON output support for bgpctl. > > Most commands should produce now a resonable JSON object. > > The individual objects can probably be improved

Re: patch: Enable dock audio on Thinkpad dock (Thinkpad L460)

2020-05-01 Thread Damien Couderc
Le 01/05/2020 à 18:04, Damien Couderc a écrit : Le 01/05/2020 à 17:42, Abel Abraham Camarillo Ojeda a écrit : On Friday, May 1, 2020, Damien Couderc > wrote:     On 27/04/2020 15:19, Abel Abraham Camarillo Ojeda wrote:     The following enables audio via

Re: Audio over hdmi

2020-05-01 Thread Damien Couderc
Le 01/05/2020 à 17:30, Stuart Henderson a écrit : On 2020/05/01 17:16, Damien Couderc wrote: Le 01/05/2020 à 15:01, Mark Kettenis a écrit : Date: Fri, 1 May 2020 14:17:56 +0200 From: Alexandre Ratchov On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: Speaking of the hdmi-only

iwn/athn/wpi: fix CCMP replay check with HW crypto

2020-05-01 Thread Stefan Sperling
This diff needs testing in particular on: athn(4), iwn(4), wpi(4) I have tested on iwn(4) and athn(4) so far. Testing with other drivers would be good, too, to ensure that no regressions are introduced for the software crypto case. Drivers which offload CCMP decryption to hardware contain a check

Re: patch: Enable dock audio on Thinkpad dock (Thinkpad L460)

2020-05-01 Thread Damien Couderc
Le 01/05/2020 à 17:42, Abel Abraham Camarillo Ojeda a écrit : On Friday, May 1, 2020, Damien Couderc > wrote: On 27/04/2020 15:19, Abel Abraham Camarillo Ojeda wrote: The following enables audio via the dock station port in my

Re: Audio over hdmi

2020-05-01 Thread Alexandre Ratchov
On Fri, May 01, 2020 at 03:01:04PM +0200, Mark Kettenis wrote: > > Date: Fri, 1 May 2020 14:17:56 +0200 > > From: Alexandre Ratchov > > > > On Fri, May 01, 2020 at 01:11:16PM +0200, Damien Couderc wrote: > > > > > > Speaking of the hdmi-only devices that were disabled in 2009: does the > > >