LibreSSL Official T-shirts

2015-01-29 Thread OpenBSD Store Misc
Hi everyone, Some new awesome LibreSSL T-shirts are available to help fund developments. You can see them on https://www.openbsdstore.com. We’re running a small pre-order for about 2 weeks. If you have any questions please email us off list. Yes, these are official products with funds

Re: httpd and native FastCGI basics

2015-01-29 Thread Kaspars Bankovskis
One option is using www/spawn-fcgi for starting your app. On Thu, Jan 29, 2015 at 01:57:08AM +, Sam Good wrote: I have searched google for FastCGI+httpd+openbsd, but have only seen thingsabout using the slowcgi proxy method or stuff about getting PHP-fpm to work.I would love some pointers

how to follow libressl stable in openBSD 5.6?

2015-01-29 Thread Harald Dunkel
Hi folks, Following OpenBSD 5.6 stable, what is the recommended procedure to upgrade libressl to the most recent stable version? Regards Harri

Re: how to follow libressl stable in openBSD 5.6?

2015-01-29 Thread Maurice McCarthy
On 2015-01-29 09:46, Harald Dunkel wrote: Hi folks, Following OpenBSD 5.6 stable, what is the recommended procedure to upgrade libressl to the most recent stable version? Regards Harri As the operating system and applications are tightly integrated that may be a bad idea. More likely it is

Re: how to follow libressl stable in openBSD 5.6?

2015-01-29 Thread Maurice McCarthy
On 2015-01-29 12:07, Harald Dunkel wrote: On 01/29/15 11:43, Maurice McCarthy wrote: As the operating system and applications are tightly integrated that may be a bad idea. More likely it is better to upgrade to current. I'd think you would be on your own if you compile from source for

Crashes at boot on Xen virtual machine

2015-01-29 Thread Wxcafé
Hi I'm trying to run an OpenBSD virtual machine in Xen 4.4. The install procedure worked fine, but when I boot the VM I get a kernel crash. Linux VMs on this host work perfectly fine, and as I said the installer runs ok too, so I'm not sure what's causing this. Following is the dmesg output :

Re: IPv6 gateway fe80::1 needs a ping to work

2015-01-29 Thread Martin Pieuchot
Hello Thomas On 29/01/15(Thu) 02:50, Thomas Bohl wrote: Hello List, my vServer hosting provider states the IPv6 default gateway as fe80::1. To get IPv6 traffic flowing it's necessary to ping fe80::1 fist. For now I help myself with the following line in crontab @reboot sleep 10 ping6 -c

Re: em0 watchdog timeout on Thinkpad T440 laptop

2015-01-29 Thread Jonathan Gray
On Thu, Jan 29, 2015 at 12:54:34PM +, Comète wrote: Hi, I use OpenBSD 5.6 GENERIC.MP (amd64) on a Thinkpad T440. I often use the suspend state and i've noticed that after each suspend, in the next 5 minutes after resuming, my network interface (em0) looses connection during about 1 or 2

Re: Wouldn't `daemon_enable=YES` make more sense than `daemon_flags=` in rc.conf.local?

2015-01-29 Thread Nick Holland
On 01/28/15 17:25, openda...@hushmail.com wrote: ... Most of my daemons don't have any flags ... ... Really? Look closer... IF the vast majority of daemons didn't have any flags at all, maybe there'd be some merit to this, but I don't think that's true. Here's a moderately simple rc.conf.local

Re: how to follow libressl stable in openBSD 5.6?

2015-01-29 Thread Harald Dunkel
On 01/29/15 11:43, Maurice McCarthy wrote: As the operating system and applications are tightly integrated that may be a bad idea. More likely it is better to upgrade to current. I'd think you would be on your own if you compile from source for stable - and code is changing quickly.

em0 watchdog timeout on Thinkpad T440 laptop

2015-01-29 Thread Comète
Hi, I use OpenBSD 5.6 GENERIC.MP (amd64) on a Thinkpad T440. I often use the suspend state and i've noticed that after each suspend, in the next 5 minutes after resuming, my network interface (em0) looses connection during about 1 or 2 minutes and then reconnect and so on, many times... As you

Re: Crashes at boot on Xen virtual machine

2015-01-29 Thread Sebastian Reitenbach
Hi, On Thursday, January 29, 2015 13:05 CET, Clément Hertling (Wxcafé) wxc...@wxcafe.net wrote: Hi I'm trying to run an OpenBSD virtual machine in Xen 4.4. The install procedure worked fine, but when I boot the VM I get a kernel crash. Linux VMs on this host work perfectly fine, and

ntpd.conf - add ability to read servers from an include file?

2015-01-29 Thread Alan McKay
Hey folks, Would anyone else see value in this? Basically for the sake of automated deployments it would be nice / clean to be able to do : includeservers /path/to/file And then read them all from the file. And the same file would be used as a table in pf.conf for NTP FW rules. One server per

Re: ntpd.conf - add ability to read servers from an include file?

2015-01-29 Thread Theo de Raadt
Basically for the sake of automated deployments it would be nice / clean to be able to do : includeservers /path/to/file And then read them all from the file. And the same file would be used as a table in pf.conf for NTP FW rules. One server per line. This would make initial

Re: What are the disadvantages of soft updates?

2015-01-29 Thread Steve Shockley
On 1/29/2015 12:03 AM, Ted Unangst wrote: error 5 is EIO, input/output error. softdep does not support disks that don't work, to put it bluntly. The original FFS code can cope with disk failure by backing out of the operation, but soft updates reorders things and can't undo what's already been

Re: em0 watchdog timeout on Thinkpad T440 laptop

2015-01-29 Thread Comète
29 janvier 2015 14:30 Jonathan Gray j...@jsg.id.au a écrit: On Thu, Jan 29, 2015 at 12:54:34PM +, Comète wrote: Hi, I use OpenBSD 5.6 GENERIC.MP (amd64) on a Thinkpad T440. I often use the suspend state and i've noticed that after each suspend, in the next 5 minutes after resuming,

Re: how to follow libressl stable in openBSD 5.6?

2015-01-29 Thread Maurice McCarthy
Harald, Thinking about it Libressl is not in 5.6 at all. There is only Openssl. The easiest way to keep stable up to date is to install the openup script from mtier. https://stable.mtier.org/ Regards Moss

Re: how to follow libressl stable in openBSD 5.6?

2015-01-29 Thread Harald Dunkel
Hi Maurice, On 01/29/15 15:01, Maurice McCarthy wrote: Harald, Thinking about it Libressl is not in 5.6 at all. There is only Openssl. The easiest way to keep stable up to date is to install the openup script from mtier. https://stable.mtier.org/ Thanx very much for your

Re: ntpd.conf - add ability to read servers from an include file?

2015-01-29 Thread Nex6|Bill
On Jan 29, 2015, at 10:10 AM, Theo de Raadt dera...@cvs.openbsd.org wrote: Basically for the sake of automated deployments it would be nice / clean to be able to do : includeservers /path/to/file And then read them all from the file. And the same file would be used as a table in pf.conf

Re: What's wrong with script(1)?

2015-01-29 Thread Marc Espie
On Wed, Jan 28, 2015 at 12:30:51PM +0100, Otto Moerbeek wrote: On Wed, Jan 28, 2015 at 11:22:52AM +, openda...@hushmail.com wrote: Hi, On 27. januar 2015 at 11:14 PM, Andy Bradford amb-sendok-1424992915.iclgpijjkmllbbajd...@bradfords.org wrote: man script: ``script makes

sudo nohup tcpdump at startup

2015-01-29 Thread fRANz
Hello guys, I implemented this config: http://home.nuug.no/~peter/pf/newest/log2syslog.html in order to stream pf logs to a remote machine. If I add the command: sudo nohup tcpdump -n -v -l -q -n -e -ttt -i pflog0 action block | logger -t pf -p local2.info to the /etc/rc.local file and reboot

Re: sudo nohup tcpdump at startup

2015-01-29 Thread Christopher Barry
On Thu, 29 Jan 2015 20:56:50 +0100 fRANz andrea.francesc...@gmail.com wrote: Hello guys, I implemented this config: http://home.nuug.no/~peter/pf/newest/log2syslog.html in order to stream pf logs to a remote machine. If I add the command: sudo nohup tcpdump -n -v -l -q -n -e -ttt -i pflog0

Re: how to follow libressl stable in openBSD 5.6?

2015-01-29 Thread Ralph Siegler
On Thu, 29 Jan 2015 14:01:12 +, Maurice McCarthy wrote: Harald, Thinking about it Libressl is not in 5.6 at all. There is only Openssl. The easiest way to keep stable up to date is to install the openup script from mtier. https://stable.mtier.org/ Regards Moss LibreSSL is indeed in

Re: IPv6 gateway fe80::1 needs a ping to work

2015-01-29 Thread Thomas Bohl
... # ping6 -vc 4 heise.de PING6(56=40+8+8 bytes) 2a03:4000:6:f0::47:e -- 2a02:2e0:3fe:1001:302:: 32 bytes from fe80::5e5e:ab00:6603:66c0%vio0: Neighbor Solicitation 16 bytes from 2a02:2e0:3fe:1001:302::, icmp_seq=0 hlim=60 dst=2a03:4000:6:f0::47:e%1 time=369.406 ms 16 bytes from

Re: What's wrong with script(1)?

2015-01-29 Thread STeve Andre'
On 01/29/15 18:16, openda...@hushmail.com wrote: Hi Marc / Otto! On 29. januar 2015 at 7:07 PM, Marc Espie es...@nerim.net wrote: And it shouldn't ! script(1) is often used for debugging purposes, and that noise becomes paramount to figuring out what's going on. Thanks, I had no idea. Would

Re: What's wrong with script(1)?

2015-01-29 Thread opendaddy
Hi Marc / Otto! On 29. januar 2015 at 7:07 PM, Marc Espie es...@nerim.net wrote: And it shouldn't ! script(1) is often used for debugging purposes, and that noise becomes paramount to figuring out what's going on. Thanks, I had no idea. Would it be possible though to mention some use cases

Re: Wouldn't `daemon_enable=YES` make more sense than `daemon_flags=` in rc.conf.local?

2015-01-29 Thread opendaddy
Greetings Nick! On 29. januar 2015 at 12:48 PM, Nick Holland n...@holland-consulting.net wrote: On 01/28/15 17:25, openda...@hushmail.com wrote: ... Most of my daemons don't have any flags ... ... Really? Look closer... IF the vast majority of daemons didn't have any flags at all, maybe

Re: IPv6 gateway fe80::1 needs a ping to work

2015-01-29 Thread Thomas Bohl
Am 29.01.2015 um 11:44 schrieb Martin Pieuchot: # ping6 -vc 4 heise.de PING6(56=40+8+8 bytes) 2a03:4000:6:f0::47:e -- 2a02:2e0:3fe:1001:302:: 32 bytes from 2a03:4000:6::1: Neighbor Advertisement Could you tcpdump ICMP6 packets on vio0 at this moment? I wonder if a wrong target address can be

Re: Wouldn't `daemon_enable=YES` make more sense than `daemon_flags=` in rc.conf.local?

2015-01-29 Thread Raf Czlonka
On Thu, Jan 29, 2015 at 11:16:41PM GMT, openda...@hushmail.com wrote: Indeed, don't get me wrong, I use flags all the time as well. I'm just arguing for a cleaner separation between startup and configuration for a slightly more semantic (and better looking) `rc.conf.local`, ie.:

Re: Wouldn't `daemon_enable=YES` make more sense than `daemon_flags=` in rc.conf.local?

2015-01-29 Thread Theo de Raadt
On 29. januar 2015 at 12:48 PM, Nick Holland n...@holland-consulting.net wrote: On 01/28/15 17:25, openda...@hushmail.com wrote: ... Most of my daemons don't have any flags ... ... Really? Look closer... IF the vast majority of daemons didn't have any flags at all, maybe there'd be

Please disregard my last

2015-01-29 Thread Damon Getsman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Of course, immediately after posting I finally stumbled across the right web hit: http://www.h-i-r.net/p/openbsd.html Please disregard my premature request for assistance. :) iQIcBAEBAgAGBQJUyxWxAAoJECqJ6HQbyBt4/goP/10yrYO+ViPbewYPjEBLrtiM

Re: how to follow libressl stable in openBSD 5.6?

2015-01-29 Thread Maurice McCarthy
On 2015-01-29 21:34, Ralph Siegler wrote: LibreSSL is indeed in 5.6 ziggy@arty /$ uname -v -s -r OpenBSD 5.6 GENERIC.MP#1 ziggy@arty /$ openssl version LibreSSL 2.0 Thanks, I stand corrected.

Re: Wouldn't `daemon_enable=YES` make more sense than `daemon_flags=` in rc.conf.local?

2015-01-29 Thread Calvin
There's also simplicity of implementation. Even a few more lines means more bugs. Having the parameters as one and checking for less cases means simpler software, and simple is reliable. From: owner-m...@openbsd.org [owner-m...@openbsd.org] on behalf of