[update] net/wiresep-0.11.3

2020-04-26 Thread Tim Kuijsten
Here is a new point release that contains some reliability fixes for potential deadlocks, as well as some fixes in printing sessions ids on macppc. Index: Makefile === RCS file: /cvs/ports/net/wiresep/Makefile,v retrieving revision 1.7

Re: [update] net/wiresep-0.11.2

2020-04-24 Thread Tim Kuijsten
Stuart Henderson wrote: > On 2020/04/24 00:22, Tim Kuijsten wrote: > > New upstream release that includes patches by Klemens Nanni that > > fix an endless loop on platforms where char is unsigned, e.g. macppc. > > thanks - as this is a noop (the only thing that changes is

[update] net/wiresep-0.11.2

2020-04-23 Thread Tim Kuijsten
New upstream release that includes patches by Klemens Nanni that fix an endless loop on platforms where char is unsigned, e.g. macppc. Index: Makefile === RCS file: /cvs/ports/net/wiresep/Makefile,v retrieving revision 1.6 diff -u -p -

Re: [update] net/wiresep 0.10.1 => 0.11.1

2020-04-07 Thread Tim Kuijsten
Whoops, the previous patch was based on an old tree, here the same patch based on the latest ports tree. Tim Kuijsten wrote: > This is the latest and greatest. > > Please note I've moved away from GitHub to my own domain. >

[update] net/wiresep 0.10.1 => 0.11.1

2020-04-07 Thread Tim Kuijsten
resep-0.11.1 +MASTER_SITES = https://netsend.nl/wiresep/archive/ -CATEGORIES = net +CATEGORIES = net security + +HOMEPAGE = https://netsend.nl/wiresep/ MAINTAINER = Tim Kuijsten Index: dis

[UPDATED] net/wiresep 0.9.0 -> 0.10.1

2020-03-25 Thread Tim Kuijsten
Here is WireSep version 0.10.1. I've upstreamed both patches and incorporated some feedback I got from Klemens Nannie and Janne Johansson, big thanks! -Tim wiresep-0.10.1.tgz Description: GNU Zip compressed data

Re: The great find(1) cleanup

2020-03-20 Thread Tim Kuijsten
> Missing type checks should be easily added to every incovation lacking > them, they're clearer to read and might even speed things up by > preventing direcctory names to be matched against "*.orig" for example. > > When both primaries are present, `-type' should occur first for similar > reasons

[update] tor-0.4.1.6 -> 0.4.1.9

2020-03-18 Thread Tim Kuijsten
Tor v0.4.1.9 fixes a high-severity security issue, CVE-2020-10592. This is intended for 6.6-stable. Index: Makefile === RCS file: /cvs/ports/net/tor/Makefile,v retrieving revision 1.126 diff -u -p -r1.126 Makefile --- Makefile23 S

Re: net/mlvpn ioctl(TUNSIFMODE): Invalid argument

2019-11-28 Thread Tim Kuijsten
Solene Rapenne wrote: > On Thu, Nov 28, 2019 at 01:35:11PM +0100, Tim Kuijsten wrote: > > Looking at [1] I see they don't set tuninfo.type. This should be set to > > IFT_TUNNEL: > > net/if_types.h:#define IFT_TUNNEL 0x83 > > > > Does that

Re: net/mlvpn ioctl(TUNSIFMODE): Invalid argument

2019-11-28 Thread Tim Kuijsten
Looking at [1] I see they don't set tuninfo.type. This should be set to IFT_TUNNEL: net/if_types.h:#define IFT_TUNNEL 0x83 Does that help? [1] https://github.com/zehome/MLVPN/blob/2.3.2/src/tuntap_bsd.c#L146-L150 Solene Rapenne wrote: > On Thu, Nov 28, 2019 at 10:26:32AM +01

Re: [NEW] net/wiresep

2019-11-19 Thread Tim Kuijsten
> Looking in sample config, > > : # pick an unprivileged user/id > : user 1109 > > Please use @newuser/@newgroup in pkg/PLIST to add a user and set the sample > config to use it. For the actual number, pick the next available uid from > ports/infrastructure/db/user.list and include a diff to add

Re: [NEW] net/wiresep

2019-11-19 Thread Tim Kuijsten
> Looking in sample config, > > : # pick an unprivileged user/id > : user 1109 > > Please use @newuser/@newgroup in pkg/PLIST to add a user and set the sample > config to use it. For the actual number, pick the next available uid from > ports/infrastructure/db/user.list and include a diff to add

Re: [NEW] net/wiresep

2019-11-18 Thread Tim Kuijsten
> Forgot to mention, rather than the patch + SUBST_CMD dance, you can just > override make variables on the command line; > > MAKE_FLAGS = PREFIX=${PREFIX} ETCDIR=${SYSCONFDIR} again, now including the above fix as well. wiresep-0.8.3.tgz Description: GNU Zip compressed data

Re: [NEW] net/wiresep

2019-11-18 Thread Tim Kuijsten
here a fixed version: * drop complex use of DISTNAME for -rc.x support, not needed now * simplify rc script * align ruler length in README Stuart Henderson wrote: > On 2019/11/18 22:19, Tim Kuijsten wrote: > > Here is a new updated port of wiresep based on v0.8.3. > > > >

Re: [NEW] net/wiresep

2019-11-18 Thread Tim Kuijsten
main loop as transient * don't notify proxy to destroy unsent sessions Thanks Bjorn, Janne and Stuart for all the feedback! Stuart Henderson wrote: > On 2019/11/18 18:42, Tim Kuijsten wrote: > > > Btw, could we make the proctitle slightly nicer on the cpu-bearing > > &

Re: [NEW] net/wiresep

2019-11-18 Thread Tim Kuijsten
> Btw, could we make the proctitle slightly nicer on the cpu-bearing process? > > PID USERNAME PRI NICE SIZE RES STATE WAIT TIMECPU COMMAND > 19404 wsep 390 1440K 3232K onproc/1 - 0:07 27.88% tun0 You mean make it more clear in top(1) that tun0 is a process of

Re: [NEW] net/wiresep

2019-11-18 Thread Tim Kuijsten
> enclave[46390]: decreasing current data limit from 17179869184 to 1048576 > > enclave[46390]: decreasing maximum data limit from 17179869184 to 1048576 In the next branch I have patched the enclave to relax the heap limit to at least 2M instead of 1M (plus some extra dependant on the number of

Re: [NEW] net/wiresep

2019-11-14 Thread Tim Kuijsten
that aims to be simpler and faster than IPsec and OpenVPN. Simpler both in configuration and in implementation. Cheers! Tim Tim Kuijsten wrote: > Hi all, > > This is a port of my implementation of WireGuard. > > I had some trouble with the following when creating t

[NEW] wiresep - privilege separated implementation of WireGuard

2019-11-13 Thread Tim Kuijsten
Hi all, This is a port of my implementation of WireGuard. I had some trouble with the following when creating the port: 1. I was not able to set "SEPARATE_BUILD = Yes", I get the error "cannot open Makefile": /usr/ports/net/wiresep/ $ make build ===> Verifying specs: c crypto ===> found c.95

Re: new: opensmtpd clamav filter

2019-11-13 Thread Tim Kuijsten
"Theo de Raadt" wrote: > I'll add my voice to this. > > The powerful vendors writing new languages must expand their breath, > or face the consequences that some software is not going to get written > in their languages. Better is very much muted by unportable. What about gccgo? It supports mor

Re: [UPDATE] nagios/cnagios to 0.33

2016-11-28 Thread Tim Kuijsten
Op 28-11-16 om 15:11 schreef Kirill Bychkov: On Mon, November 28, 2016 16:51, Tim Kuijsten wrote: Op 28-11-16 om 14:37 schreef Kirill Bychkov: On Mon, November 28, 2016 02:22, Tim Kuijsten wrote: Hi ports@, I've updated cnagios to the latest release. Quite some segfaults have been

Re: [UPDATE] nagios/cnagios to 0.33

2016-11-28 Thread Tim Kuijsten
Op 28-11-16 om 14:37 schreef Kirill Bychkov: On Mon, November 28, 2016 02:22, Tim Kuijsten wrote: Hi ports@, I've updated cnagios to the latest release. Quite some segfaults have been fixed since 0.30. Tested on amd64. -Tim ps. I'm still looking for an easy way to use it with ici

[UPDATE] nagios/cnagios to 0.33

2016-11-27 Thread Tim Kuijsten
Hi ports@, I've updated cnagios to the latest release. Quite some segfaults have been fixed since 0.30. Tested on amd64. -Tim ps. I'm still looking for an easy way to use it with icinga. Maybe a cnagios package on it's own instead of being a subpackage of nagios would be better. I'm not su