cross ref ocspcheck in httpd.conf(5)

I've been playing a bit with OCSP stapling in httpd and found the documentation a bit lacking / confusing. httpd says: ocsp file Specify an OCSP response to be stapled during TLS handshakes with this server. The file should contain a DER-format

drm: fix debug build

Hi, I am currently trying to fix dual-monitor support for Intel HD Graphics 520. The following fixes the build when DRM_DEBUG is enabled. OK? Paul Index: dev/pci/drm/i915/intel_dp.c === RCS file:

Re: if_ioctl: move NET_LOCK down

On Mon, Dec 18, 2017 at 04:01:12PM +0100, Martin Pieuchot wrote: > Diff below moves the NET_LOCK() into every switch case that need it and > document locking for most of the fields of 'struct ifnet'. > case SIOCSIFXFLAGS: > if ((error = suser(p, 0)) != 0) >

Re: Export IPsec flows via snmpd(8)

On Tue, Dec 19, 2017 at 12:43:48PM +0100, Martin Pieuchot wrote: > I'd like to see some information about my tunnels in my NMS. Nice. I would find that very useful :) > The problem is that there's not standard MIB for this and most vendor > MIBs are huge and are not easy to implement. What

Re: Properly sync filesystems during {suspend,hibernate}/resume

> > I'd appreciate reports about how well it delivers and if any new > > problems show up. > > Tested on amd64 with softdep and softraid (CRYPTO). > Works as expected with suspend and hibernate. Thanks. > However, in both cases there is a warning in dmesg during the reboot : > > softraid0 sd1

Re: [EXTERNAL] Export IPsec flows via snmpd(8)

If I can find a free hour or so I can put something together for the MIB file. That seems about the right sort of information to me anyway - lifetimes might be useful too though. On 2017/12/19 13:40, Eichert, Diana wrote: > tech lurker here, long time NMS/EMS admin > > I did not see diffs to

Re: [EXTERNAL] Export IPsec flows via snmpd(8)

tech lurker here, long time NMS/EMS admin I did not see diffs to an OpenBSD MIB file. I assume that will be included in a "more complete solution"? diana -Original Message- From: owner-t...@openbsd.org [mailto:owner-t...@openbsd.org] On Behalf Of Martin Pieuchot Sent: Tuesday,

Export IPsec flows via snmpd(8)

I'd like to see some information about my tunnels in my NMS. The problem is that there's not standard MIB for this and most vendor MIBs are huge and are not easy to implement. So here's a diff that export the equivalent of "$ ipsecctl -s flow". I'm basically gluing ipsecctl(8) internals into

Re: Properly sync filesystems during {suspend,hibernate}/resume

Hi, * Theo de Raadt wrote: > > I'd appreciate reports about how well it delivers and if any new > problems show up. I tested the patch on an amd64 Intel NUC running softraid crypto with a keydisk. I made a lot of disk activity, suspended the system and pulled the plug. Both with and without

Re: Properly sync filesystems during {suspend,hibernate}/resume

Theo de Raadt writes: > After recent reboot related improvements, I have some familiarity with > tricking the vnode layer into a stable state. > > This should settle filesystems "clean" onto disk. If one does a > suspend and then runs out of battery.. or experiences a crash

make: guard condition in shortened_curdir()

Hello, make(1) has a guard in shortened_curdir() so Buf_Init() should only happen once. I think this is desirable because Buf_Init() malloc's space and old storage pointers could be overwritten. The guard doesn't work as intended because 'first' is always true. - Michael Index: job.c