Re: I can't make build stable 6.4

2018-12-22 Thread Philip Guenther
On Sat, Dec 22, 2018 at 10:29 AM Krzysztof Strzeszewski wrote: > I change permission: > > chown build /usr/src/lib/libcrypto/obj/v3_info.o.d > chown build /usr/src/lib/libcrypto/obj/v3_info.po.d > chown build /usr/src/lib/libcrypto/obj/v3_info.so.d > chown build /usr/src/lib/libcrypto/obj/v3_purp

Re: Httpd unix socket

2018-12-22 Thread Flipchan
Its also works when i curl the socket from the user www with doas On December 23, 2018 2:17:50 AM GMT+01:00, Tom Smyth wrote: >Hi Flip > >at a guess httpd is chrooted perhaps this is causing you the issue > >can you see if you refer to it in your config as /run/listen.sock >does it work for y

Re: Httpd unix socket

2018-12-22 Thread Flipchan
Hey, In httpd.conf i have put it as: fastcgi socket "/run/listen.sock" The request just times out, when running httpd in debug mode: httpd -dvv Nothing is reported about this which is very weird On December 23, 2018 2:17:50 AM GMT+01:00, Tom Smyth wrote: >Hi Flip > >at a guess httpd is chr

Re: Httpd unix socket

2018-12-22 Thread Tom Smyth
Hi Flip at a guess httpd is chrooted perhaps this is causing you the issue can you see if you refer to it in your config as /run/listen.sock does it work for you ? I hope this helps... On Sun, 23 Dec 2018 at 01:10, Flipchan wrote: > > Hey, > > I have a http server listening on a socket in /

Httpd unix socket

2018-12-22 Thread Flipchan
Hey, I have a http server listening on a socket in /var/www/run/listen.sock , with permissions 0666 and www:www i can curl the socket and it works , but it does not work when i try to use it with httpd, maybe because httpd only support fastcgi sockets and not "raw" unix sockets. Does anyone kn

Re: Daily digest, Issue 4662 (14 messages)

2018-12-22 Thread Steve Fairhead
On 22/12/2018 13:20, Stuart Henderson wrote: On 2018-12-20, Steve Fairhead wrote: On 20/12/2018 13:20,tors...@cnc-london.net wrote: Try to add below to your pf.conf table persist pass in on $ext_if inet proto tcp from any to $ext_if port 1194 \ (max-src-conn 10, max-src-conn-

Re: I can't make build stable 6.4

2018-12-22 Thread Krzysztof Strzeszewski
Tnx, I change permission: chown build /usr/src/lib/libcrypto/obj/v3_info.o.d chown build /usr/src/lib/libcrypto/obj/v3_info.po.d    chown build /usr/src/lib/libcrypto/obj/v3_info.so.d chown build /usr/src/lib/libcrypto/obj/v3_purp.so.d end it's ok. it is a bug end 4 files have bad permission f

Re: I can't make build stable 6.4

2018-12-22 Thread Edgar Pettijohn
On Dec 22, 2018 9:00 AM, Krzysztof Strzeszewski wrote: > > Hi, > > I can't "make build" stable 6.4. What iswrong? > > > # > > P  -MD -MP  -c /usr/src/lib/libcrypto/x509v3/v3_info.c -o v3_info.o > error: error opening 'v3_info.o.d': Permission denie

Re: I can't make build stable 6.4

2018-12-22 Thread Edgar Pettijohn
On Dec 22, 2018 9:00 AM, Krzysztof Strzeszewski wrote: > > Hi, > > I can't "make build" stable 6.4. What iswrong? > > > # > > P  -MD -MP  -c /usr/src/lib/libcrypto/x509v3/v3_info.c -o v3_info.o > error: error opening 'v3_info.o.d': Permission denie

I can't make build stable 6.4

2018-12-22 Thread Krzysztof Strzeszewski
Hi, I can't "make build" stable 6.4. What iswrong? # P  -MD -MP  -c /usr/src/lib/libcrypto/x509v3/v3_info.c -o v3_info.o error: error opening 'v3_info.o.d': Permission denied 1 error generated. *** Error 1 in lib/libcrypto (:41 'v3_info.o': @cc -O

Re: Relayd with multiple lets encrypt cert's

2018-12-22 Thread Flipchan
So the only way is to have each vhost listen on on port each? On December 22, 2018 12:31:54 PM GMT+01:00, Claudio Jeker wrote: >On Sat, Dec 22, 2018 at 12:28:46PM +0100, Aham Brahmasmi wrote: >> Hi, >> >> > On Sat, Dec 22, 2018 at 07:07:58AM +0100, Flipchan wrote: >> > > Hello, >> > > Does anyo

Re: Relayd with multiple lets encrypt cert's

2018-12-22 Thread Aham Brahmasmi
> On Sat, Dec 22, 2018 at 12:28:46PM +0100, Aham Brahmasmi wrote: > > Hi, > > > > > On Sat, Dec 22, 2018 at 07:07:58AM +0100, Flipchan wrote: > > > > Hello, > > > > Does anyone know how to get this working with multiple letsencrypt > > > > certs? > > > > > > > > > > You need individual IP:port

Re: Relayd with multiple lets encrypt cert's

2018-12-22 Thread Claudio Jeker
On Sat, Dec 22, 2018 at 12:28:46PM +0100, Aham Brahmasmi wrote: > Hi, > > > On Sat, Dec 22, 2018 at 07:07:58AM +0100, Flipchan wrote: > > > Hello, > > > Does anyone know how to get this working with multiple letsencrypt certs? > > > > > > > You need individual IP:port settings for each of the ce

Re: Relayd with multiple lets encrypt cert's

2018-12-22 Thread Aham Brahmasmi
Hi, > On Sat, Dec 22, 2018 at 07:07:58AM +0100, Flipchan wrote: > > Hello, > > Does anyone know how to get this working with multiple letsencrypt certs? > > > > You need individual IP:port settings for each of the certs. Also don't > forward to different hosts based on match rules unless you rea

Re: blocking openvpn port scanners

2018-12-22 Thread Stuart Henderson
On 2018-12-20, Steve Fairhead wrote: > On 20/12/2018 13:20, tors...@cnc-london.net wrote: >> Try to add below to your pf.conf >> >> table persist >> >> pass in on $ext_if inet proto tcp from any to $ext_if port 1194 \ >> (max-src-conn 10, max-src-conn-rate 30/5, \ >> overlo

Re: X-Accel-Redirect equivalent for httpd

2018-12-22 Thread Stuart Henderson
On 2018-12-21, Chris Narkiewicz wrote: > Is there an equivalent or alternative for NginX X-Accel-Redirect? > > https://www.nginx.com/resources/wiki/start/topics/examples/x-accel/ > > I'm porting a django app that checks for user's permissions before > allowing them to download a document and this

Re: Relayd with multiple lets encrypt cert's

2018-12-22 Thread Claudio Jeker
On Sat, Dec 22, 2018 at 07:07:58AM +0100, Flipchan wrote: > Hello, > > im trying to get relayd to work with multiple letsencrypt certificates, > > i want to go user -> https -> http backendhost based on Host header > > relayd: > > table { 192.168.3.3 192.168.3.3 } > table { 127.0.0.1 } > tabl