Dead peer detection in iked

2020-05-07 Thread Stephan Mending
Hi *, I was wondering why there is no dead peer detection implemented for iked ? Is it just due to lack of time ? Or are there good reasons to dismiss directly implemented dpd in iked ? Because technically one has the option to just use ifstated. I'm just being curios here. Thanks for your

Re: JSON support for bgpctl(8)

2020-05-07 Thread Theo de Raadt
Richard Chivers wrote: > Will bgpctl latest work with 6.6 bgpd, so we can compile a bgpctl_latest > with the json support for testing, without upgrading the rest of bgpd on > our boxes? bgpd and bgpctl need to be must in sync (compiled from the same source) because there is an

Re: JSON support for bgpctl(8)

2020-05-07 Thread Richard Chivers
Hi, Great to hear about the json support for bgpctl. Will bgpctl latest work with 6.6 bgpd, so we can compile a bgpctl_latest with the json support for testing, without upgrading the rest of bgpd on our boxes? I am tempted to have a go at an ospfctl json implementation, following your lead on

[PATCH] regress/evp: add simple test for AEAD ciphers

2020-05-07 Thread Dmitry Baryshkov
Add a companion to evptest.c and aeadtest.c: test for AEAD ciphers using EVP_CIPHER interface. For now it is capable of testing only GCM mode. Signed-off-by: Dmitry Baryshkov --- src/regress/lib/libcrypto/evp/evpaeadtest.c | 382 ++ .../lib/libcrypto/evp/evpaeadtests.txt

Re: JSON support for bgpctl(8)

2020-05-07 Thread Stuart Henderson
On 2020/05/07 17:02, Richard Chivers wrote: > Hi, > > Great to hear about the json support for bgpctl. > > Will bgpctl latest work with 6.6 bgpd, so we can compile a bgpctl_latest > with the json support for testing, without upgrading the rest of bgpd on > our boxes? It definitely won't, but if

Re: Dead peer detection in iked

2020-05-07 Thread William Ahern
On Thu, May 07, 2020 at 01:54:13PM +0200, Stephan Mending wrote: > Hi *, > I was wondering why there is no dead peer detection implemented for iked ? > > Is it just due to lack of time ? Or are there good reasons to dismiss > directly implemented dpd in iked ? > > Because technically one has the

ksh: Use typedef for function pointer

2020-05-07 Thread Michael Forney
I originally submitted this patch as a portability fix to Brian Callahan's oksh, but he suggested I submit it here instead. Conversion of function pointer to void pointer is not allowed in ISO C, though POSIX requires it for dlsym(). However, here we are also comparing function pointer to void