Re: 4k display on integrated Intel graphics?

2018-06-29 Thread Maximilian Pichler
On Fri, Jun 29, 2018 at 9:49 PM, Bryan Vyhmeister  wrote:
> It should work fine because the USB-C ports have DisplayPort signaling
> built-in and I would not expect any issues.
>
> https://www.displayport.org/displayport-over-usb-c/
>
> HDMI 1.4 does not support 4k at 60Hz like HDMI 2.0 does but HDMI 2.0 is
> not supported as you found out. I have not tested USB-C to DP
> specifically with my NUC6i7KYK but it does drive 4k over DisplayPort
> which should be the same with USB-C to DP. I do get some weird artifacts
> like the screen "shaking" back and forth a bit until I launch Xorg which
> then works perfectly.

Thanks for explaining. Some shaking could be lived with...

I just realized that some monitors (e.g. LG 27UD88) can connect via
USB-C directly, whilest serving as a USB hub and power source. Would
this be expected to work as well?



Re: 4k display on integrated Intel graphics?

2018-06-29 Thread Bryan Vyhmeister
On Fri, Jun 29, 2018 at 06:01:06PM +0200, Maximilian Pichler wrote:
> Does this mean it's unlikely to work with an USB-C-to-DP adapter or
> just hasn't been tried?

It should work fine because the USB-C ports have DisplayPort signaling
built-in and I would not expect any issues.

https://www.displayport.org/displayport-over-usb-c/

HDMI 1.4 does not support 4k at 60Hz like HDMI 2.0 does but HDMI 2.0 is
not supported as you found out. I have not tested USB-C to DP
specifically with my NUC6i7KYK but it does drive 4k over DisplayPort
which should be the same with USB-C to DP. I do get some weird artifacts
like the screen "shaking" back and forth a bit until I launch Xorg which
then works perfectly.

Bryan



Re: automatically rotate isakmpd.pcap

2018-06-29 Thread Federico Donati



On 2018-06-28 10:18, Federico Donati wrote:

With newsyslog, logs are being rotated, but new file "isakmpd.pcap" is 
not usable with tcpdump (message is "tcpdump: bad dump file format").


I've also tried to stop isakmpd writing isakmpd.pcap (echo p > 
isakmpd.fifo), but it didn't work.


Ok, this workaround works:


conf file:

# cat newsyslog_ipsec.conf 



/var/run/isakmpd.pcap root:wheel  600  30* $D0 ZB "rm 
/var/run/isakmpd.pcap ; echo p on > /var/run/isakmpd.fifo"


command to be run:

# echo p off > /var/run/isakmpd.fifo; newsyslog -Ff newsyslog_ipsec.conf -v

Newsyslog creates an empty file during the rotation. Tcpdump doesn't 
like this file, so I need to stop the writing of isakmpd.pcap, rotate 
the log, remove the newly created file and activate the logging again 
(so isakmpd will create its working pcap file).


This actually works, but I have to put in crontab rather than inside 
/etc/newsyslog.conf, and I find this pretty ugly.


It would be nice if newsyslog had a "prerotate" function, something like 
logrotate.


I'm always open to suggestion if you had similar needs.


Bye



Re: 4k display on integrated Intel graphics?

2018-06-29 Thread Maximilian Pichler
> It worked for me last time I tried, but I could only drive 30Hz. Probably an
> adapter limitation.

The spec indeed says it can only do 30Hz over HDMI, but 60Hz over DP.
So thanks for pointing this out, you saved me from buying the wrong
cable. https://ark.intel.com/products/95451/Intel-Core-i7-7500U

On Fri, Jun 29, 2018 at 3:05 AM, Mike Larkin  wrote:
> Oh, just noticed the USB-C bit. You're on your own.

Does this mean it's unlikely to work with an USB-C-to-DP adapter or
just hasn't been tried?

This review (in German) says it works, but presumably on some other
OS. https://notebooks-und-mobiles.de/asus-zenbook-ux390ua-laptop-im-test

Thanks!



ber.3 diff from last ber source commit

2018-06-29 Thread Rob Pierce
I mistakenly committed modifications to the ber.3 man page (in snmpd).

This man page is currently not linked into the build.

I am sending this diff post-commit for visibility only.

A work in progress. Comments welcome.

Regards,

Index: ber.3
===
RCS file: /cvs/src/usr.sbin/snmpd/ber.3,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -p -r1.13 -r1.14
--- ber.3   1 Oct 2013 12:48:27 -   1.13
+++ ber.3   29 Jun 2018 15:18:03 -  1.14
@@ -1,4 +1,4 @@
-.\" $OpenBSD: ber.3,v 1.13 2013/10/01 12:48:27 reyk Exp $
+.\" $OpenBSD: ber.3,v 1.14 2018/06/29 15:18:03 rob Exp $
 .\"
 .\" Copyright (c) 2007, 2012 Reyk Floeter 
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: October 1 2013 $
+.Dd $Mdocdate: June 29 2018 $
 .Dt BER 3
 .Os
 .Sh NAME
@@ -25,8 +25,10 @@
 .Nm ber_replace_elements ,
 .Nm ber_add_sequence ,
 .Nm ber_add_set ,
+.Nm ber_add_enumerated ,
 .Nm ber_add_integer ,
 .Nm ber_get_integer ,
+.Nm ber_get_enumerated ,
 .Nm ber_add_boolean ,
 .Nm ber_get_boolean ,
 .Nm ber_add_string ,
@@ -40,10 +42,12 @@
 .Nm ber_add_eoc ,
 .Nm ber_get_eoc ,
 .Nm ber_add_oid ,
+.Nm ber_add_noid ,
 .Nm ber_add_oidstring ,
 .Nm ber_get_oid ,
 .Nm ber_oid2ber ,
 .Nm ber_string2oid ,
+.Nm ber_oid_cmp ,
 .Nm ber_printf_elements ,
 .Nm ber_scanf_elements ,
 .Nm ber_get_writebuf ,
@@ -54,7 +58,7 @@
 .Nm ber_free_elements ,
 .Nm ber_calc_len ,
 .Nm ber_set_application ,
-.Nm ber_set_writecallback
+.Nm ber_set_writecallback ,
 .Nm ber_free
 .Nd parse ASN.1 with Basic Encoding Rules
 .Sh SYNOPSIS
@@ -78,6 +82,10 @@
 .Ft "int"
 .Fn "ber_get_integer" "struct ber_element *root" "long long *val"
 .Ft "struct ber_element *"
+.Fn "ber_add_enumerated" "struct ber_element *prev" "long long val"
+.Ft "int"
+.Fn "ber_get_enumerated" "struct ber_element *root" "long long *val"
+.Ft "struct ber_element *"
 .Fn "ber_add_boolean" "struct ber_element *prev" "int bool"
 .Ft "int"
 .Fn "ber_get_boolean" "struct ber_element *root" "int *bool"
@@ -104,6 +112,8 @@
 .Ft "struct ber_element *"
 .Fn "ber_add_oid" "struct ber_element *prev" "struct ber_oid *oid"
 .Ft "struct ber_element *"
+.Fn "ber_add_noid" "struct ber_element *prev" "struct ber_oid *oid, int n"
+.Ft "struct ber_element *"
 .Fn "ber_add_oidstring" "struct ber_element *prev" "const char *string"
 .Ft "int"
 .Fn "ber_get_oid" "struct ber_element *root" "struct ber_oid *oid"
@@ -111,6 +121,8 @@
 .Fn "ber_oid2ber" "struct ber_oid *oid" "u_int8_t *buf" "size_t size"
 .Ft "int"
 .Fn "ber_string2oid" "const char *string" "struct ber_oid *oid"
+.Ft "int"
+.Fn "ber_oid_cmp" "struct ber_oid *oid" "struct ber_oid *oid"
 .Ft "struct ber_element *"
 .Fn "ber_printf_elements" "struct ber_element *prev" "char *format" "..."
 .Ft "int"
@@ -153,6 +165,8 @@ using the
 .Fn ber_add_set ,
 .Fn ber_add_integer ,
 .Fn ber_get_integer ,
+.Fn ber_add_enumerated ,
+.Fn ber_get_enumerated ,
 .Fn ber_add_boolean ,
 .Fn ber_get_boolean ,
 .Fn ber_add_string ,
@@ -182,11 +196,12 @@ struct ber_oid {
 .Ed
 .Pp
 .Fn ber_add_oid ,
+.Fn ber_add_noid ,
 .Fn ber_add_oidstring ,
 .Fn ber_get_oid ,
 .Fn ber_oid2ber ,
-.Fn ber_oid_cmp ,
 .Fn ber_string2oid
+.Fn ber_oid_cmp ,
 .Sh FORMAT STRINGS
 .Fn ber_printf_elements ,
 .Fn ber_scanf_elements
@@ -203,6 +218,7 @@ struct ber_oid {
 .Sh RETURN VALUES
 Upon successful completion
 .Fn ber_get_integer ,
+.Fn ber_get_enumerated ,
 .Fn ber_get_boolean ,
 .Fn ber_get_string ,
 .Fn ber_get_nstring ,
@@ -225,6 +241,9 @@ The
 .Nm ber
 manpage first appeared in
 .Ox 4.3 .
+.Sh STANDARDS
+ITU-T Recommendation X.690, also known as ISO/IEC 8825-1:
+Information technology - ASN.1 encoding rules.
 .Sh AUTHORS
 .An -nosplit
 The
@@ -234,5 +253,13 @@ library was written by
 .An Marc Balmer Aq Mt m...@openbsd.org
 and
 .An Reyk Floeter Aq Mt r...@openbsd.org .
+.Sh CAVEATS
+Only the subset of
+.Nm ber
+data types specified above are supported.
+.Pp
+Indefinite length
+.Nm ber
+encoding is not supported.
 .Sh BUGS
 This manpage is a stub.



State of Yubikey/U2F support on OpenBSD

2018-06-29 Thread Rickard von Essen
I've been experimenting with switching over one of my laptops to OpenBSD, but
there is one main problem stopping me from switching. The support for Yubikeys
and U2F.

I'm try to gather a list of things that currently doesn't work. And maybe find
some collaborators to investigate and maybe fix the issues. So if you are
interested to work on any of these or have further information please post on
this thread.

A) Yubikey-manager (ykman) is the new Yubikey CLI. I got it to install but only
one out of three transport (protocols) works. OTP works. CCID fails connecting
to the Yubikey via pcscd, further investigation needed (this is hopefully not to
hard to fix). FIDO doesn't work since the pyu2f library doesn't support OpenBSD,
this is probably not to hard to fix. I'm tracking these in [1].

B) Chromium (v 65.0.3325.181) crashes when U2F auth is requested and a key is
inserted, see [2]. I haven't yet debugged this, but fixing this probably
requires a fair amount of knowledge about Chromiums internals.

C) Firefox (v 59.0.2) doesn't officially support U2F but have a config option to
enable this [3][4]. Unfortunately this doesn't work on OpenBSD (but macOS for
example).  (Firefox 60 is supposed to support the new FIDO2 standard this might
improve on U2F support too.)

[1] https://github.com/Yubico/yubikey-manager/issues/124
[2] https://bugs.chromium.org/p/chromium/issues/detail?id=451248
[3] https://discourse.mozilla.org/t/u2f-standard-to-firefox/23301/2
[4] https://www.yubico.com/2017/11/how-to-navigate-fido-u2f-in-firefox-quantum/



dmesg for Fujitsu PRIMERGY TX1310 M3

2018-06-29 Thread John Long
OpenBSD 6.3 (GENERIC.MP) #107: Sat Mar 24 14:21:59 MDT 2018
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8389017600 (8000MB)
avail mem = 8127692800 (7751MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x7bef (69 entries)
bios0: vendor FUJITSU // American Megatrends Inc. version "V5.0.0.11 R1.17.0 
for D3521-A1x" date 02/19/2018
bios0: FUJITSU PRIMERGY TX1310 M3
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG HPET LPIT SSDT SSDT DBGP DBG2 SSDT 
UEFI SSDT DMAR EINJ ERST BERT HEST
acpi0: wakeup devices PEGP(S4) PEG0(S4) PXSX(S4) RP09(S4) PXSX(S4) RP10(S4) 
PXSX(S4) RP11(S4) PXSX(S4) RP12(S4) PXSX(S4) RP13(S4) PXSX(S4) RP01(S4) 
PXSX(S4) RP02(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1225 v6 @ 3.30GHz, 3293.89 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 24MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1225 v6 @ 3.30GHz, 3292.39 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1225 v6 @ 3.30GHz, 3292.39 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E3-1225 v6 @ 3.30GHz, 3292.39 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,SENSOR,ARAT,MELTDOWN
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 120 pins
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 2399 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG0)
acpiprt2 at acpi0: bus -1 (RP13)
acpiprt3 at acpi0: bus -1 (RP02)
acpiprt4 at acpi0: bus -1 (RP05)
acpiec0 at acpi0: not present
acpicpu0 at acpi0: C3(200@256 mwait.1@0x40), C2(200@151 mwait.1@0x33), 
C1(1000@1 mwait.1), PSS
acpicpu1 at acpi0: C3(200@256 mwait.1@0x40), C2(200@151 mwait.1@0x33), 
C1(1000@1 mwait.1), PSS
acpicpu2 at acpi0: C3(200@256 mwait.1@0x40), C2(200@151 mwait.1@0x33), 
C1(1000@1 mwait.1), PSS
acpicpu3 at acpi0: C3(200@256 mwait.1@0x40), C2(200@151 mwait.1@0x33), 
C1(1000@1 mwait.1), PSS
acpipwrres0 at acpi0: PG00, resource for PEG0
acpipwrres1 at acpi0: WRST
acpipwrres2 at acpi0: WRST
acpipwrres3 at acpi0: WRST
acpipwrres4 at acpi0: WRST
acpipwrres5 at acpi0: WRST
acpipwrres6 at acpi0: WRST
acpipwrres7 at acpi0: WRST
acpipwrres8 at acpi0: WRST
acpipwrres9 at acpi0: WRST
acpipwrres10 at acpi0: WRST
acpipwrres11 at acpi0: WRST
acpipwrres12 at acpi0: WRST
acpipwrres13 at acpi0: WRST
acpipwrres14 at acpi0: WRST
acpipwrres15 at acpi0: WRST
acpipwrres16 at acpi0: WRST
acpipwrres17 at acpi0: WRST
acpipwrres18 at acpi0: WRST
acpipwrres19 at acpi0: WRST
acpipwrres20 at acpi0: WRST
acpipwrres21 at acpi0: PG01, resource for PEG1
"INT3F0D" at acpi0 not configured
"INT345D" at acpi0 not configured