Re: Crypto softraid is supported on GPT/UEFI boot and not just on BIOS/MBR boot, right?

2017-09-28 Thread Janne Johansson
2017-09-29 3:31 GMT+02:00 Nick Holland : > > By that logic, we should have quit using cheap disks when they went over > 32MB. Or 120MB. Or 504MB. Or 128GB. Or ... > I have MBRs on 4TB SoftRaid volumes, works fine. > > fdisk, make the "entire" disk (welllthe first 2TB) OpenBSD. > disklabel,

Re: Crypto softraid is supported on GPT/UEFI boot and not just on BIOS/MBR boot, right?

2017-09-28 Thread Nick Holland
On 09/28/17 05:58, ti...@openmailbox.org wrote: >> On Wed, Sep 27, 2017 at 05:02:06PM -, ti...@openmailbox.org >> wrote: > .. >>> What am I doing wrong, are there actually any installboot >>> arguments that could help me make it work? >> >> It looks like you're using GPT on both the physical a

Re: Can I rotate the framebuffer (e.g. using wsdisplay) in OpenBSD?

2017-09-28 Thread Stéphane Aulery
Le 28/09/2017 à 10:13, Stefan Sperling a écrit : On Thu, Sep 28, 2017 at 12:55:41AM +0200, Stéphane Aulery wrote: Le 27/09/2017 à 17:24, Stefan Sperling a écrit : On Wed, Sep 27, 2017 at 04:11:45PM +0200, Kamil Cholewiński wrote: On Wed, 27 Sep 2017, Francois Pussault wrote: maybe installing

Re: regarding the default path for pkg_add in -current

2017-09-28 Thread Marc Espie
On Wed, Sep 27, 2017 at 08:57:10PM -0600, and...@quickstick.net wrote: > Hello Folks !! > > Regarding GENERIC.MP #115 > > I have a feeling you are about to roll into 6.2, however I just want to > bring the following to your attention in case it matters. > > I just did a clean install of -current

Re: relayd TLS load balancer for multiple websites

2017-09-28 Thread Darren Tucker
On 28 September 2017 at 06:32, mabi wrote: > Thanks for the pointer regarding SNI not being supported in relayd. I will go > on and find another solution, probably HAproxy. For a small number of domains it would probably be feasible to get a single certificate with multiple SANs. Letsencrypt at

Re: Maintaining process clarification

2017-09-28 Thread Zbyszek Żółkiewski
Hi Ingo, thanks for the note, please find my notes below, >> Example: In 6.1 > > I assume that means you are using -stable. > >> there is package openvpn-2.4.1, how updates to the package are >> handled? If there is critical issue with the package, then >> "openvpn-2.4.1" is updated or it get

Re: Strange sed substitution removes text

2017-09-28 Thread kshe
On Mon, 25 Sep 2017 18:16:15 +, Martijn van Duren wrote: > Lets just wait until Ingo has time to look into it. He's still on > holiday in Paris, so it might be a few days. Hi, I already reported this issue three months ago, along with other related and unrelated bugs; see my second message in

Re: Maintaining process clarification

2017-09-28 Thread Ingo Schwarze
Hi Zbyszek, Zbyszek wrote on Thu, Sep 28, 2017 at 11:43:35AM +0200: > I am new to OpenBSD Welcome. > Example: In 6.1 I assume that means you are using -stable. > there is package openvpn-2.4.1, how updates to the package are > handled? If there is critical issue with the package, then > "open

Re: relayd TLS load balancer for multiple websites

2017-09-28 Thread mabi
Thanks for the pointer regarding SNI not being supported in relayd. I will go on and find another solution, probably HAproxy. > Original Message > Subject: Re: relayd TLS load balancer for multiple websites > Local Time: September 28, 2017 3:02 PM > UTC Time: September 28, 2017

Re: relayd TLS load balancer for multiple websites

2017-09-28 Thread Marcus MERIGHI
m...@protonmail.ch (mabi), 2017.09.28 (Thu) 13:32 (CEST): > I was wondering if it is possible to use relayd as load balancer with > TLS termination for multiple different websites residing on different > server. With a public IP per website: yes. Else: no. reyk@, 2014-07-24, "no SNI yet" https:/

Re: relayd TLS load balancer for multiple websites

2017-09-28 Thread mabi
Thanks Bryan for your example. I saw in your example you only use the example.com domain. I would be using multiple domains such as example1.com, example2.com, exampleX.com, and so on. Would it also work in that case? Again I suppose here that I need to have all these different domains in one s

Re: FF vs. Chrome/Chromium

2017-09-28 Thread Boudewijn Dijkstra
Op Wed, 27 Sep 2017 16:44:01 +0200 schreef Theo de Raadt : Firefox has W^X compliance and so runs with the secure defaults. it uses page aliasing, which is a shitty way of being compliant Do you mean dual-mapping a.k.a. double-mapping? I found some old patches using a temporarily file and

Re: relayd TLS load balancer for multiple websites

2017-09-28 Thread Bryan Harris
Here is what I did, which I learned from the httpd & relayd book by Michael W Lucas (I recommend). I cannot remember why I set the top header options, I must have been trying to learn about them. The host ones are to figure out the site and send the connection to the table above. ext_addr="..."

relayd TLS load balancer for multiple websites

2017-09-28 Thread mabi
Hi, I was wondering if it is possible to use relayd as load balancer with TLS termination for multiple different websites residing on different server. From reading the man page I understand that for this purpose I will need to use one "relay" entity per website which will then have its own "ht

Re: Mount LUKS and truecrypt external volumes

2017-09-28 Thread Stuart Henderson
On 2017-09-26, x9p wrote: > Walking through ports i could not find alternatives to mount Linux LUKS > encrypted storages and Truecrypt-compatible storages. There aren't any in ports. It might be worth trying porting FUSE-based implementations, though FUSE on OpenBSD is missing a few things so por

Re: Crypto softraid is supported on GPT/UEFI boot and not just on BIOS/MBR boot, right?

2017-09-28 Thread tinkr
> On Wed, Sep 27, 2017 at 05:02:06PM -, ti...@openmailbox.org wrote: .. >> What am I doing wrong, are there actually any installboot arguments that >> could help me make it work? > > It looks like you're using GPT on both the physical and the > softraid disk, correct? > > In my setup, I have

Maintaining process clarification

2017-09-28 Thread Zbyszek Żółkiewski
Hi, I am new to OpenBSD and after 15 years of work with linux i find OpenBSD as very refreshing experience among bloated server software platforms, so guys thanks for that. My questions is about updating packages using pkg_add -u , i am kind of confused about how it works. Example: In 6.1 th

Re: FF vs. Chrome/Chromium

2017-09-28 Thread Artur Pedziwilk
> On 27 Sep 2017, at 16:44, Theo de Raadt wrote: > > you really shouldn't be promising that to anyone. it might not happen, > their design might not allow it. > > pledge in giant programs is very rare. chrome got LUCKY, and there is > no evidence that firefox will also. There was also anoth

Re: Can I rotate the framebuffer (e.g. using wsdisplay) in OpenBSD?

2017-09-28 Thread Stefan Sperling
On Thu, Sep 28, 2017 at 08:48:31AM -, ti...@openmailbox.org wrote: > In a world where such weird laptop manufacturers exist, OpenBSD > having framebuffer rotation would fix the whole setup. Yes, and as was already stated there are developers (not me) who plan to do that work and might even gen

Re: Can I rotate the framebuffer (e.g. using wsdisplay) in OpenBSD?

2017-09-28 Thread tinkr
> On Thu, Sep 28, 2017 at 12:55:41AM +0200, Stéphane Aulery wrote: .. >> And if I use a monitor in portrait orientation ? > > I have been using a monitor in portrait for many years and was never > bothered by the console being the wrong way (X is rotated of course). > > In a rare situation where

Re: Can I rotate the framebuffer (e.g. using wsdisplay) in OpenBSD?

2017-09-28 Thread Stefan Sperling
On Thu, Sep 28, 2017 at 12:55:41AM +0200, Stéphane Aulery wrote: > Le 27/09/2017 à 17:24, Stefan Sperling a écrit : > > On Wed, Sep 27, 2017 at 04:11:45PM +0200, Kamil Cholewiński wrote: > > > On Wed, 27 Sep 2017, Francois Pussault wrote: > > > > maybe installing a tool like xrandr ? > > > > > >

Re: Crypto softraid is supported on GPT/UEFI boot and not just on BIOS/MBR boot, right?

2017-09-28 Thread Stefan Sperling
On Wed, Sep 27, 2017 at 05:02:06PM -, ti...@openmailbox.org wrote: > > On Wed, Sep 27, 2017 at 10:31:22AM -, ti...@openmailbox.org wrote: > >> >> OpenBSD/amd64 BOOTX64 3.32 Are you running -current? (We would already know that if you had included a dmesg -- tsk tsk). In -current, boo

Re: softraid crypto with keydisk and password

2017-09-28 Thread Stefan Sperling
On Thu, Sep 28, 2017 at 04:15:20AM +0200, Erling Westenvik wrote: > On Thu, Sep 28, 2017 at 09:11:49AM +1000, tomr wrote: > > I remember seeing a post, I think on undeadly.org, which went through > > having the bootloader on password-encrypted usb drive, that also > > contains a keyfile for the mai