Re: Apache2 on 5.7 = certificate error

2015-05-18 Thread Stefan Sperling
On Mon, May 18, 2015 at 10:04:03AM -0400, John Merriam wrote: I get the following error in the error_log when I try to start Apache2: [Mon May 18 09:51:43 2015] [error] Failed to configure CA certificate chain! The certificate is a wildcard certificate from RapidSSL. I have their

Re: spamd - whitelist sender email addresses

2015-05-18 Thread Craig Skinner
On 2015-05-18 Mon 09:26 AM |, Alex Greif wrote: I am using spamd on a current installation in greylisting mode, and have have problems with large sites that have several SMTP servers but no SPF ip-address ranges. Hi Alex, Bumping up the spamd(8) greyexp time to 2-4 days works well (on 5.6):

ASF, AMT and PCIe cards (Re: WOL support for bge driver)

2015-05-18 Thread David Vasek
On Mon, 18 May 2015, Stefan Sperling wrote: OTOH, many laptops nowadays ship with Intel AMT and suffer the same issue or worse. Yet we still run on them. Current AMT versions have an attack surface that dwarfs ASF's. Perhaps this is a lost cause and we'll simply have to accept that a lot of

Re: Apache2 on 5.7 = certificate error

2015-05-18 Thread John Merriam
On Mon, 18 May 2015, Stefan Sperling wrote: On Mon, May 18, 2015 at 10:04:03AM -0400, John Merriam wrote: I get the following error in the error_log when I try to start Apache2: [Mon May 18 09:51:43 2015] [error] Failed to configure CA certificate chain! The certificate is a

Re: spamd - whitelist sender email addresses

2015-05-18 Thread Alex Greif
On Mon, May 18, 2015 at 02:20:08PM +0100, Craig Skinner wrote: Hi Craig, yes, this should help, in the case that the sender tries longer than 4 hours. Are there any experiences, after how many hours/days the sender side (at the large ones like google, yahoo, hotmail, etc) gives up? thanks,

Re: console prompt disappeared after login

2015-05-18 Thread dan mclaughlin
On Mon, 18 May 2015 11:24:13 +0100 Pedro Tender pedro.ten...@fabamaq.com wrote: I've updated another machine today to latest snapshot and it is fixed. Have you tried the 18th May (ftp3.eu) snapshot ? On Sun, May 17, 2015 at 10:51 PM, dan mclaughlin thev...@openmailbox.org wrote: On

Re: Error when compiling libcrypto after 003_openssl.patch

2015-05-18 Thread Chess Griffin
On 5/17/2015 11:13 PM, Michael McConville wrote: Patch 002 applied and built cleanly, and patch 003 applied without issue. However, I get the error shown below when I attempt to build libcrypto for patch 003. ... Has anyone else experienced this? Any ideas about what might be causing it?

Re: console prompt disappeared after login

2015-05-18 Thread Pedro Tender
I'm not having problems with ksh nor zsh, going in and out of X (xfce). ​TTY's working fine.​ On Mon, May 18, 2015 at 12:56 PM, dan mclaughlin thev...@openmailbox.org wrote: On Mon, 18 May 2015 11:24:13 +0100 Pedro Tender pedro.ten...@fabamaq.com wrote: I've updated another machine

Re: console prompt disappeared after login

2015-05-18 Thread dan mclaughlin
On Mon, 18 May 2015 14:21:39 +0100 Pedro Tender pedro.ten...@fabamaq.com wrote: I'm not having problems with ksh nor zsh, going in and out of X (xfce). ​TTY's working fine.​ On Mon, May 18, 2015 at 12:56 PM, dan mclaughlin thev...@openmailbox.org wrote: On Mon, 18 May 2015

Apache2 on 5.7 = certificate error

2015-05-18 Thread John Merriam
Hello. I have upgraded my home server from OpenBSD 5.6 to 5.7. It is amd64 and it is on -stable with -stable ports. Everything is working fine after the upgrade except SSL in Apache2 (apache-httpd package/port). I get the following error in the error_log when I try to start Apache2: [Mon

Re: spamd - whitelist sender email addresses

2015-05-18 Thread Peter N. M. Hansteen
On Mon, May 18, 2015 at 09:26:13AM +0200, Alex Greif wrote: I am using spamd on a current installation in greylisting mode, and have have problems with large sites that have several SMTP servers but no SPF ip-address ranges. Sometimes I have more than 10 mail server IPs in the greylisted in

Re: spamd - whitelist sender email addresses

2015-05-18 Thread Alex Greif
On Mon, May 18, 2015 at 09:46:19AM +0200, Peter N. M. Hansteen wrote: On Mon, May 18, 2015 at 09:26:13AM +0200, Alex Greif wrote: I am using spamd on a current installation in greylisting mode, and have have problems with large sites that have several SMTP servers but no SPF ip-address

Httpd perfect forward secrecy

2015-05-18 Thread Martijn Rijkeboer
Hi, I've just switched my webserver from 5.6/nginx to 5.7/httpd and was testing my TLS setup using SSL Labs[1]. The SSL Labs test indicates that my setup doesn't support forward secrecy. Is this not implemented in the 5.7 version of httpd or is my configuration wrong (included below)? OS:

Re: spamd - whitelist sender email addresses

2015-05-18 Thread Craig Skinner
Hi Alex, On 2015-05-18 Mon 16:37 PM |, Alex Greif wrote: On Mon, May 18, 2015 at 02:20:08PM +0100, Craig Skinner wrote: yes, this should help, in the case that the sender tries longer than 4 hours. RFC 5321, in section 4.5.4.1. Sending Strategy has: ... .. Retries continue

Re: Robustness in ports fetch program?

2015-05-18 Thread Marc Espie
On Sun, May 17, 2015 at 08:18:06AM -0400, Alan Corey wrote: I don't think it did this back in 5.0 days or maybe earlier. I started with OpenBSD 2.7, I just usually attributed problems to being my fault. And I've always used the ports tree, not packages. Distfiles are often useful across

Re: Httpd perfect forward secrecy

2015-05-18 Thread Martijn Rijkeboer
I've just switched my webserver from 5.6/nginx to 5.7/httpd and was testing my TLS setup using SSL Labs[1]. The SSL Labs test indicates that my setup doesn't support forward secrecy. Is this not implemented in the 5.7 version of httpd or is my configuration wrong (included below)? In my

Re: Httpd perfect forward secrecy

2015-05-18 Thread Reyk Floeter
On Mon, May 18, 2015 at 07:43:26PM +0200, Martijn Rijkeboer wrote: Hi, I've just switched my webserver from 5.6/nginx to 5.7/httpd and was testing my TLS setup using SSL Labs[1]. The SSL Labs test indicates that my setup doesn't support forward secrecy. Is this not implemented in the 5.7

Re: Httpd perfect forward secrecy

2015-05-18 Thread Martijn Rijkeboer
On Mon, May 18, 2015 at 07:43:26PM +0200, Martijn Rijkeboer wrote: Hi, I've just switched my webserver from 5.6/nginx to 5.7/httpd and was testing my TLS setup using SSL Labs[1]. The SSL Labs test indicates that my setup doesn't support forward secrecy. Is this not implemented in the 5.7

possible httpd Content-Length overflow

2015-05-18 Thread lists
I'm not intimately familiar with the HTTP spec, but I'm having an issue transferring a large file (2GB) from httpd. Chrome starts streaming the file, but stops somewhere between 7-10 MB. Using the debugger, it appears that the Content-Length header is negative (-2095872469) in this case. A quick

Re: Update OpenBSD Remotely

2015-05-18 Thread Aaron Bieber
On Sun, May 17, 2015, at 08:08 AM, Peter Leber wrote: I want to build a test system based on OpenBSD 5.7 which updates in an automated fashion. The goal is to have a remotely located machine which runs OpenBSD 5.7 and is constantly updated. While restarting the machine remotely via SSH is

Re: Update OpenBSD Remotely

2015-05-18 Thread Doug Hogan
On Sun, May 17, 2015 at 11:52:19PM +0100, Raf Czlonka wrote: There are several things which this script does not check for - some of those are on my TODO list: I didn't review your script, but I did ctrl+s... TODO item #0 should be to use signify with SHA256.sig rather than checking SHA256

Re: Update OpenBSD Remotely

2015-05-18 Thread Giancarlo Razzolini
On 17-05-2015 11:08, Peter Leber wrote: I recognize that there's m:tier's binary patching service (https://stable.mtier.org), but the packages are signed by m:tier rather than the OpenBSD project. While following m:tier's binary patches is a good compromise to me, it's not a perfect solution.

spamd - whitelist sender email addresses

2015-05-18 Thread Alex Greif
Hi, I am using spamd on a current installation in greylisting mode, and have have problems with large sites that have several SMTP servers but no SPF ip-address ranges. Sometimes I have more than 10 mail server IPs in the greylisted in spamdb, from the same (friend) email address, and the the

Re: 5.7: size for ninja distfile?

2015-05-18 Thread Alan Corey
I seem to be getting a lot of size does not match errors (unusual) leading to error 1. But when I up-arrow and replay the line it goes past it. On 5/18/15, Alan Corey alan01...@gmail.com wrote: I kept getting size does not match for ninja-1.5.3p0 and several of the alternate sources were giving

Re: console prompt disappeared after login

2015-05-18 Thread dan mclaughlin
On Sun, 17 May 2015 14:29:07 - Maurits Fennis m...@nulldev.net wrote: just not the TTY's same here. -- Maurits Fennis () ascii ribbon campaign /\ www.asciiribbon.org here too. i just submitted a bug report problems with console output.

Re: spamd - whitelist sender email addresses

2015-05-18 Thread Peter N. M. Hansteen
On Mon, May 18, 2015 at 10:05:45AM +0200, Alex Greif wrote: But in some cases, the sender mail server tried so often from different SMTP IPs, and finally gave up with an error to the sender. Then the sender and receiver persons are quite unhappy, and a lot of time is vasted. In most cases the

Re: spamd - whitelist sender email addresses

2015-05-18 Thread Alex Greif
On Mon, May 18, 2015 at 10:52:52AM +0200, Peter N. M. Hansteen wrote: On Mon, May 18, 2015 at 10:05:45AM +0200, Alex Greif wrote: But in some cases, the sender mail server tried so often from different SMTP IPs, and finally gave up with an error to the sender. Then the sender and

Re: console prompt disappeared after login

2015-05-18 Thread Pedro Tender
I've updated another machine today to latest snapshot and it is fixed. Have you tried the 18th May (ftp3.eu) snapshot ? On Sun, May 17, 2015 at 10:51 PM, dan mclaughlin thev...@openmailbox.org wrote: On Sun, 17 May 2015 14:29:07 - Maurits Fennis m...@nulldev.net wrote: just not the

Re: spamd - whitelist sender email addresses

2015-05-18 Thread Adam Wolk
On Mon, 18 May 2015 09:26:13 +0200 Alex Greif alex.gr...@greifdesign.net wrote: Hi, I am using spamd on a current installation in greylisting mode, and have have problems with large sites that have several SMTP servers but no SPF ip-address ranges. Sometimes I have more than 10 mail server

Da man passing an other year

2015-05-18 Thread Rod Whitworth
Happy Birthday Theo. Rod/ *** NOTE *** Please DO NOT CC me. I am subscribed to the list. Mail to the sender address that does not originate at the list server is tarpitted. The reply-to: address is provided for those who feel compelled to reply off list. Thankyou. Rod/ --- This life is not