Small typo in upgrade66.html

2019-10-23 Thread Richard Toohey
Hi, Thanks for 6.6.  And sysupgrade. Read the 6.6 upgrade notes at http://www.openbsd.org/faq/upgrade66.html and there's a small typo near the top. "Before rebooting into the install kernel     Check diskspace of /usr. Verify that the /usr partition has a size of at least 1.1G. With less sp

Re: LDAP tls: handshake failure

2019-10-23 Thread Predrag Punosevac
Kapetanakis Giannis wrote: > On 23/10/2019 19:14, Predrag Punosevac wrote: > > Hi Misc, > > > > I just upgraded a LDAP server from 6.5 to 6.6 running authorization and > > authentication services for a 100 some member university research group. > > It appears TLS handshake is broken. This worked p

Re: Encrypting my keydisk

2019-10-23 Thread Aaron Mason
On Thu, Oct 24, 2019 at 10:44 AM List wrote: > > One would obviously NOT store the key on harddisk. That wouldn't make > any sense and is not necessary. > > This could be similarly achieved as the normal FDE with passphrase. But > instead of the actual harddisk as target, the target of the "yet to

Fwd: Encrypting my keydisk

2019-10-23 Thread Aaron Mason
On Wed, Oct 23, 2019 at 7:45 PM Normen Wohner wrote: > > To enable two factor encryption? > One passcode is in his head the other on a key. > If either is missing the data on drive is unreadable. > I don’t know what is hard to understand about it. > In an ideal world you’d use the manual passcode

Re: Encrypting my keydisk

2019-10-23 Thread List
One would obviously NOT store the key on harddisk. That wouldn't make any sense and is not necessary. This could be similarly achieved as the normal FDE with passphrase. But instead of the actual harddisk as target, the target of the "yet to implement" encryption of the keydisk would be the key on

Re: LDAP tls: handshake failure

2019-10-23 Thread Kapetanakis Giannis
On 23/10/2019 19:14, Predrag Punosevac wrote: > Hi Misc, > > I just upgraded a LDAP server from 6.5 to 6.6 running authorization and > authentication services for a 100 some member university research group. > It appears TLS handshake is broken. This worked perfectly on 6.5 and > earlier. > > titan

SATA HDD hot-plugging question

2019-10-23 Thread Alexei Malinin
Hello. Does the ahci driver support SATA HDD hot-plugging? There is no information about it in the ahci(4) man page. I have an HP Compaq 8000 Elite Convertible Minitower Business PC (https://www.support.hp.com/us-en/product/hp-compaq-8000-elite-convertible-minitower-pc/4065889/manuals). Its manua

LDAP tls: handshake failure

2019-10-23 Thread Predrag Punosevac
Hi Misc, I just upgraded a LDAP server from 6.5 to 6.6 running authorization and authentication services for a 100 some member university research group. It appears TLS handshake is broken. This worked perfectly on 6.5 and earlier. titan# uname -a OpenBSD titan.int.autonlab.org 6.6 GENERIC.MP#372

Re: Problems with route installation to fib from OSPF

2019-10-23 Thread Joao Alves
Hi Remi, I've managed to fully reproduce repeatedly. So the problem is basically related with the MPATH flag. What I've done first was to force the MPATH flag to appear. To do this, I've forced both Ubuntu hosts to advertise the route simultaneously. So the first issue is at this point, whe

Re: fw_update long timeout, how to specify mirror

2019-10-23 Thread Tommy Nevtelen
On 22/10/2019 18.01, Theo de Raadt wrote: The firmwares are intentionally kept out of the standard download zone. I'll talk to some people and see if there is a way we can shift things around, to make slight improvements. However, I don't see how anything we do would fix your problem. Whateve

Re: acme-client issue with domain w/ alternative name

2019-10-23 Thread Daniel Winters
Hi Florian, >> > Today acme-client renewed all but 2 of my domains; the two that have >> > "alternative names" in the certificates. I cannot get it to renew >> > those two. This is on amd64 on 6.6-current, updated today. >> >> I can reproduce this on amd64 current, as well as on 6.6. >> >> Same