Buffer overrun in mac_authencrypt (Issue #446)

2018-01-07 Thread Hal Murray via devel
https://gitlab.com/NTPsec/ntpsec/issues/446 This is likely to involve some discussion so I moved it here where that will be more convenient. We should be supporting longer digests. Wikipedia says: NIST's directive that U.S. government agencies must stop uses of SHA-1 after 2010 was hoped to ac

Re: Catching up

2018-01-07 Thread Richard Laager via devel
On 01/07/2018 08:53 PM, Gary E. Miller via devel wrote: > On Sun, 7 Jan 2018 18:02:32 -0600 > Richard Laager via devel wrote: > >> Debian has two versions of Python. Debian's Python 3.x executable name >> is python3, so `/usr/bin/env python` gets me Python 2.x. I think this >> is a great example

Re: Catching up

2018-01-07 Thread Hal Murray via devel
>> I don't think running directly out of the source tree is very >> interesting. > OTOH, a bunch of programs, like ntplogtemp, that used to be able to run > in tree, no longer can. I think that is our loss. Creeping complexity > for no real user benefit. Sometimes life is tough. python ntpclie

Re: Catching up

2018-01-07 Thread Gary E. Miller via devel
Yo Hal! On Sun, 07 Jan 2018 16:41:16 -0800 Hal Murray via devel wrote: > I don't think running directly out of the source tree is very > interesting. OTOH, a bunch of programs, like ntplogtemp, that used to be able to run in tree, no longer can. I think that is our loss. Creeping complexity f

Re: Catching up

2018-01-07 Thread Gary E. Miller via devel
Yo Richard! On Sun, 7 Jan 2018 18:02:32 -0600 Richard Laager via devel wrote: > Debian has two versions of Python. Debian's Python 3.x executable name > is python3, so `/usr/bin/env python` gets me Python 2.x. I think this > is a great example of this question. Just two python's? Right now Gen

We need more testing

2018-01-07 Thread Hal Murray via devel
Was: Subject: Re: What packet modes do we support? Eric said: >> Context is I'm working on documentation. Often, I'm removing >> stuff that is no longer relevant. Sometimes that requires checking >> the code. Some of the code needs cleaning up too. I think - maybe >> I just don't understand it

Re: Catching up

2018-01-07 Thread Hal Murray via devel
rlaa...@wiktel.com said: [Running with Python3] Thanks. > That way, the scripts can be run directly from the source tree (with the / > usr/bin/env shebang). I don't think running directly out of the source tree is very interesting. Many of the python programs need our python libraries and one

Re: Catching up

2018-01-07 Thread Richard Laager via devel
Debian has two versions of Python. Debian's Python 3.x executable name is python3, so `/usr/bin/env python` gets me Python 2.x. I think this is a great example of this question. My previous rough sketch hand-waved over a complicated part, which is how to figure out the python binary path. Even if

Re: Catching up

2018-01-07 Thread Gary E. Miller via devel
Yo Richard! On Sun, 7 Jan 2018 16:27:11 -0600 Richard Laager via devel wrote: > On 01/07/2018 04:27 AM, Hal Murray via devel wrote: > > Is there a recipe for setting our stuff up to use Python3 when the > > system defaults python to Python2? Depends a lot on what OS you are using. On gentoo

Re: Catching up

2018-01-07 Thread Richard Laager via devel
On 01/07/2018 04:27 AM, Hal Murray via devel wrote: > Is there a recipe for setting our stuff up to use Python3 when the system > defaults python to Python2? For the Debian packaging, I do two things: 1) Instead of ./waf configure/build/install, I use: python3 waf ... 2) I patch the #!/usr/bin/e

Re: asciidoc question: [red]?

2018-01-07 Thread Hal Murray via devel
>> I find this in our documentation: >> page. [red]#Note: Potential ... > http://www.methods.co.nz/asciidoc/chunked/ch10.html Thanks, but I didn't want to get in that deep. I was looking for something simple I could copy. As far as I can tell, we don't use colors. (That's probably good. It'

Re: rasPi Stretch Lite install notes

2018-01-07 Thread Sanjeev Gupta via devel
> - sudo apt-get update && sudo apt-get -us dist-upgrade && sudo apt-get -u dist-upgrade && sudo apt-get autoremove I find apt-get --purge autoremove better, as it removes any config files as well, reducing surprises when you next re-install a package. -- Sanjeev Gupta +65 98551208

rasPi Stretch Lite install notes

2018-01-07 Thread Achim Gratz via devel
I've been postponing the upgrade of the rasPi 1B+ to Stretch for a while… well, the three year old SD card gave up the ghost while I was away over the holidays, so that has been forced on me to do yesterday. After a few days of trying I could actually dump an image of the card so I have salvaged t

Re: What packet modes do we support?

2018-01-07 Thread Eric S. Raymond via devel
Hal Murray via devel : > Where is that documented? The page that covers differences from Classic - docs/ntpsec.txt. It's under Security. > Context is I'm working on documentation. Often, I'm removing stuff that is > no longer relevant. Sometimes that requires checking the code. Some of the

Re: asciidoc question: [red]?

2018-01-07 Thread Eric S. Raymond via devel
Hal Murray via devel : > > I find this in our documentation: > page. [red]#Note: Potential > It comes through unmodified in the html version. > > I assume it's trying to make some text stand out. > > How do I make colored text and/or is that the right way to do it? > Is there an example I can

Catching up

2018-01-07 Thread Hal Murray via devel
I just pushed lots of documentation updates, mostly in the crypto area. (No thumbs up/down message from the autobuild stuff yet. I guess it's sleeping.) There is (much?) more work to do. I'm going to take a break from documentation for a while. There is a new hack in attic/digest.c It works on