[Bug 1199358] Re: 3.9.3 kernel supports none AES-CTR key lengths

2013-07-10 Thread Alexander Gurvitz
It works in the latest release kernel (3.10.0-2.10). I think this bug should be closed. (Sorry submitting bug before testing it with the latest release kernel.) Alexander -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.l

[Bug 1199360] Re: 3.9.3 kernel supports none AES-CTR key lengths

2013-07-10 Thread Alexander Gurvitz
It works in the latest release kernel - 3.10.0-2.10. I think this bug should be closed now. Alexander -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199360 Title: 3.9.3 kernel supports none AES-CT

[Bug 1199360] [NEW] 3.9.3 kernel supports none AES-CTR key lengths

2013-07-09 Thread Alexander Gurvitz
Public bug reported: Even though it affects only ipsec-tools users, it seems to be a kernel bug, NOT ipsec-tools bug. The following ipsec-tools.conf: #!/usr/sbin/setkey -f flush; add 1.1.1.1 1.1.1.2 esp 1000 -E aes-ctr 0x111;

[Bug 1199358] [NEW] 3.9.3 kernel supports none AES-CTR key lengths

2013-07-09 Thread Alexander Gurvitz
Public bug reported: Actually it is a kernel bug, but since it affects (only) setkey users, posting here. The following ipsec-tools.conf: #!/usr/sbin/setkey -f flush; add 1.1.1.1 1.1.1.2 esp 1000 -E aes-ctr 0x111; .resul

[Bug 1164475] [NEW] Missing dependency (libxml2) in raring

2013-04-04 Thread Alexander Gurvitz
Public bug reported: bind9 uses libxml2 for one of it's optional features (namely statistics- channel) In bind9 source package on raring, I see that it depends on libxml2-dev. However, none of the resulting binary packages list libxml2 as the dependency, thus I think it may result in a system wh

[Bug 1085593] Re: bind 9.8.1-P1 crashes with an assertion failure

2012-12-03 Thread Alexander Gurvitz
As for the exact commit - I myself can't find anything related in the changes history. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1085593 Title: bind 9.8.1-P1 crashes with an assertion failure T

[Bug 1085593] Re: bind 9.8.1-P1 crashes with an assertion failure

2012-12-03 Thread Alexander Gurvitz
My conversation with upstream: *My bug report sent to ISC:* Attached is a named.conf and the zone file which result in assertion failure with bind 9.8.1 (actually BIND 9.8.1-P1 on ubuntu 12.04.01). Bug does NOT appears in 9.8.4 nor in 9.9.2 so I guess it's fixed, though I can't find anything rel

[Bug 1085593] Re: bind 9.8.1-P1 crashes with an assertion failure

2012-12-03 Thread Alexander Gurvitz
I first experienced with bug with a normal ("correct") zone file. Just the zone contained users information which I'm not willing to publish, thus I deleted most of the zone file and edited the rest and now it contains RRSIG records with "wrong" hashes, I don't this "malforming" affects anything -

[Bug 1085593] [NEW] bind 9.8.1-P1 crashes with an assertion failure

2012-12-02 Thread Alexander Gurvitz
Public bug reported: Ubuntu 12.04.1 LTS 1:9.8.1.dfsg.P1-4ubuntu0.4 While loading a certain zone file (attached) and using auto-dnssec (see the conf below), bind crashes with an "assertion failure" message. This bug seems to be fixed in the latest ISC releases - 9.8.4 and 9.9.2, please backport th

[Bug 963368] Re: dnssec-keygen takes forever to generate a keyfile

2012-12-02 Thread Alexander Gurvitz
It is NOT a bug. In order to generate SECURE keys, dnssec-keygen reads /dev/random, which will block until there's enough entropy available on your system. Some systems have very little entropy and thus dnssec-keygen may take forever. Possible solutions: 1. apt-get install haveged haveged daemon