Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Ian Sutton
On Mon, Sep 12, 2016 at 11:40:08PM -0700, Philip Guenther wrote: > Hmm. What wording of the documentation suggested that multiple > certificates should or *could* be place in that file? The manpage Oops, I had incorrectly assumed that's how intermediates were provided a la nginx > It doesn't sa

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Ian Sutton
On Tue, Sep 13, 2016 at 12:05:53AM -0700, Philip Guenther wrote: > See, here's where you're taking a wrong turn that I should have caught > earlier: your first post should answer this question: > What problem are you trying to solve? > > httpd may be able to do what you want *already*, bu

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Ian Sutton
On Tue, Sep 13, 2016 at 09:50:43AM +0200, Robert Klein wrote: > Did you try to /append/ the intermediate certificate(s) to the server > certificate? That worked for me on OpenBSD 6.0's httpd. Yes. Uncanny timing on your mail -- I just got it to work. httpd(8) needs the intermediate certificate t

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Robert Klein
On Tue, 13 Sep 2016 03:15:18 -0400 Ian Sutton wrote: > On Tue, Sep 13, 2016 at 12:05:53AM -0700, Philip Guenther wrote: > > See, here's where you're taking a wrong turn that I should have > > caught earlier: your first post should answer this question: > > What problem are you trying to

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Otto Moerbeek
On Tue, Sep 13, 2016 at 03:57:33AM -0400, Ian Sutton wrote: > On Tue, Sep 13, 2016 at 09:50:43AM +0200, Robert Klein wrote: > > Did you try to /append/ the intermediate certificate(s) to the server > > certificate? That worked for me on OpenBSD 6.0's httpd. > > Yes. > > Uncanny timing on your m

Re: Routing 10-40 Mpps on OpenBSD

2016-09-13 Thread Martin Pieuchot
On 11/09/16(Sun) 18:04, K K wrote: > [...] > > There is a lot of ongoing work in this area, OpenBSD doesn't claim to > > be the performance leader today. > > What is the take of OpenBSD developers on this? > Are they any plans? > > Many options seems available, but I have no idea how they could b

Re: spamd question

2016-09-13 Thread Kasper Haitsma
Happy days, spamd-sync is working. - pf.conf still needs rdr-to instead of divert-to - rc.conf.local is picky on the quotes for -n and sequence of -Y and -y (no sync proc in ps list) - the 5.0 machines are not using spamd.key :( I'm glad it is all well documented Date: Fri, 9 Sep 2016 12:14:18 +

Re: IPv6 fragmentation woes

2016-09-13 Thread Fernando Gont
On 08/09/2016 07:42 AM, Laurent CARON wrote: > Hi, > > Does anybody have a clue about this issue ? Thanks Based on a quick look at what you sent, this is not what I would expect. > Am I mistaken on something, or is this behavior perfectly normal ? > > Please note # tracepath6 from the linux bo

PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
Hi folks, I am using an openbsd (5.9) box as gateway/firewall to the internet. ISP is Deutsche Telekom. In between is a Vigor 130 VDSL2 modem, configured to PPPoE passthrough. The PPPoE connection is initiated on the openbsd box. Problem: https via the tunnel gets stuck for some sites, e.g. https

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Daniel Gillen
On 13/09/2016 11:51, Harald Dunkel wrote: > Hi folks, > > I am using an openbsd (5.9) box as gateway/firewall to the > internet. ISP is Deutsche Telekom. In between is a Vigor 130 > VDSL2 modem, configured to PPPoE passthrough. The PPPoE > connection is initiated on the openbsd box. > > Problem:

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Peter J. Philipp
Hello Harri, This interests me because I'm switching to Deutsche Telekom in february 2017. I did research back in march or april of 2016 on how to connect to Telekom with an allnet vdsl modem and I came across hints that Telekom uses vlan tagging. I made notes but I don't know how updated they

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
Hi Peter, On 09/13/2016 12:13 PM, Peter J. Philipp wrote: > > can try this: > > T-Online uses vlan tag 7, IP-TV uses vlan tag 8. So it depends on your > plan I guess? I'd appreciate if someone told me if this information is > outdated but I'm probably going to have to ask in february again > a

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Markus Hennecke
Am 13.09.2016 um 11:51 schrieb Harald Dunkel: Hi folks, I am using an openbsd (5.9) box as gateway/firewall to the internet. ISP is Deutsche Telekom. In between is a Vigor 130 VDSL2 modem, configured to PPPoE passthrough. The PPPoE connection is initiated on the openbsd box. Problem: https via

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Markus Hennecke
Am 13.09.2016 um 12:38 schrieb Markus Hennecke: Am 13.09.2016 um 11:51 schrieb Harald Dunkel: Hi folks, I am using an openbsd (5.9) box as gateway/firewall to the internet. ISP is Deutsche Telekom. In between is a Vigor 130 VDSL2 modem, configured to PPPoE passthrough. The PPPoE connection is i

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
Hi Daniel, On 09/13/2016 12:00 PM, Daniel Gillen wrote: > > I had a similar problem. In my case it had to do with Path MTU issues. > > This site f.ex.: http://test-ipv6.com/ will check for that. > > The solution for me was to switch to "jumbo" frames below the pppoe > device (1508 bytes if I re

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
Hi Markus, On 09/13/2016 12:42 PM, Markus Hennecke wrote: >> >> I use the same VDSL modem with Deutsche Telekom and can reach >> https://telekom.de/ >> The only MTU related setting in pf.conf seems to be this: >> >> ext_if = pppoe0 >> match in on $ext_if all scrub (no-df max-mss 1440) >> >> It is

doas.conf, no persist option in 6.0 Release

2016-09-13 Thread Eike Lantzsch
Hi to all, (Running 6.0 Release) On http://www.tedunangst.com/flak/post/doas-mastery the "persist" option is mentioned: "By adding the persist keyword, doas will remember that the user authenticated previously and not require further confirmation for a timeout of five minutes. permit persist :wh

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Kapfhammer, Stefan
Hello Harald, use the setup from there: http://www.un.geeig.net/openbsd-vdsl.html ‎if you don't have IPTV, leave everything after 'ping' probe and reboot out. I didn't use the 5 sysctl settings. Update ALLNET Bridge to at least fw c46a, reboot the device and reset to factory defaults. Don't cha

Re: UPS, Network UPS Tools and UPD(4)

2016-09-13 Thread Stuart Henderson
On 2016-09-12, Lawrence Wieser wrote: > Todd/Stuart, thanks for the responses. Permissions set correctly on > /dev/usb1 -- the device the UPS is connected to. And I had been through > the package readme. A couple of times! > > As is often the case I was making this much more complicated than it w

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Stuart Henderson
On 2016-09-13, Harald Dunkel wrote: > Hi folks, > > I am using an openbsd (5.9) box as gateway/firewall to the > internet. ISP is Deutsche Telekom. In between is a Vigor 130 > VDSL2 modem, configured to PPPoE passthrough. The PPPoE > connection is initiated on the openbsd box. > > Problem: https v

Re: IPv6 fragmentation woes

2016-09-13 Thread Stuart Henderson
On 2016-09-13, Fernando Gont wrote: > On 08/09/2016 07:42 AM, Laurent CARON wrote: >> Hi, >> >> Does anybody have a clue about this issue ? Thanks > > Based on a quick look at what you sent, this is not what I would expect. > > >> Am I mistaken on something, or is this behavior perfectly normal ?

Re: Dell Latitude E5570 on current/amd64

2016-09-13 Thread Jan Stary
On Aug 09 21:10:52, mlar...@azathoth.net wrote: > On Tue, Aug 09, 2016 at 07:43:38PM +0200, Jan Stary wrote: > > This is Dell Latitude E5570 running current (full dmesg below). > > Basically works, but I experience problems with resuming the video. > > > > You have Skylake video which does not re

Re: doas.conf, no persist option in 6.0 Release

2016-09-13 Thread jungle Boogie
On 13 September 2016 at 05:55, Eike Lantzsch wrote: > but in man doas.conf of 6.0 Release it is not mentioned and using that option > rightly results in a syntax error if used. It's not in -release. If you take a look here: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/doas/doas.c?r1=1.64

tip for inter-KVM VMs traffic filtering with PF running on separate box

2016-09-13 Thread Jiri B
Hi, I'm curious how to filter inter-VMs (running on Linux KVM host) traffic on a remote bare-metal host running OpenBSD and PF. Any tip? So, there would be a Linux KVM host running various VMs and separate OpenBSD box and I'd like to achieve that all traffic betweens those VMs running on that Lin

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Stuart Henderson
On 2016-09-13, Harald Dunkel wrote: > Hi Daniel, > > On 09/13/2016 12:00 PM, Daniel Gillen wrote: >> >> I had a similar problem. In my case it had to do with Path MTU issues. >> >> This site f.ex.: http://test-ipv6.com/ will check for that. >> >> The solution for me was to switch to "jumbo" fra

acpithinkpad(4): mute speaker on boot

2016-09-13 Thread Anton Lindqvist
I'm trying to fix a minor annoyance on my x240: the speaker mute key LED-state is not respected at boot. Pressing the mute key will mute the speaker while the expected behavior is to unmute. The LED-state will remain out-of-sync until I run `mixerctl -t outputs.master.mute`. I've managed to determ

Re: doas.conf, no persist option in 6.0 Release

2016-09-13 Thread Eike Lantzsch
On Dienstag, 13. September 2016 06:46:04 PYT jungle Boogie wrote: > On 13 September 2016 at 05:55, Eike Lantzsch wrote: > > but in man doas.conf of 6.0 Release it is not mentioned and using that > > option rightly results in a syntax error if used. > > It's not in -release. > > If you take a loo

Re: sockaddr_in initialization in ttcp (possibly other programs affected)

2016-09-13 Thread Héctor Luis Gimbatti
Hi, The main reason I've notified this ''bug'' to .misc is because other (important, maintained, in base? , etc) code may fail too. Cheers > -Original Message- > From: Jeremie Courreges-Anglas [mailto:j...@wxcvbn.org] > Sent: Monday, September 12, 2016 10:30 > To: Héctor Luis Gimbatti >

Connecting to a GRE Transparent Ethernet Bridging host

2016-09-13 Thread Russell Sutherland
Is it possible to use one of OpenBSD’s tunnelling interfaces (gre/gif/etherip) to connect to a remote host (Edgerouter Lite) which is using GRE in Transparent Ethernet (protocol type 0x6558) mode? Looking at the source code in /usr/src/sys/net there is a flag for this mode defined but I do not thi

Testing the waters - BUG in Indianapolis, IN USA

2016-09-13 Thread Bryan C. Everly
All, If anyone is in the area and would be interested, please let me know through the form below: http://techpoint.org/2016/09/indianapolis-bsd-user-group/ Thanks, Bryan

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Markus, On 09/13/16 13:07, Harald Dunkel wrote: > Hi Markus, > > On 09/13/2016 12:42 PM, Markus Hennecke wrote: >> >> Damn. Of course without this line it won't work: >> >> match out on $ext_if all scrub (max-mss 1440) >> > > I have > > mat

Re: acpithinkpad(4): mute speaker on boot

2016-09-13 Thread Ted Unangst
Anton Lindqvist wrote: > I'm trying to fix a minor annoyance on my x240: the speaker mute key > LED-state is not respected at boot. Pressing the mute key will mute the > speaker while the expected behavior is to unmute. The LED-state will > remain out-of-sync until I run `mixerctl -t outputs.master

Re: acpithinkpad(4): mute speaker on boot

2016-09-13 Thread Theo de Raadt
> Anton Lindqvist wrote: > > I'm trying to fix a minor annoyance on my x240: the speaker mute key > > LED-state is not respected at boot. Pressing the mute key will mute the > > speaker while the expected behavior is to unmute. The LED-state will > > remain out-of-sync until I run `mixerctl -t outp

Re: doas.conf, no persist option in 6.0 Release

2016-09-13 Thread bytevolcano
On Tue, 13 Sep 2016 10:28:56 -0400 Eike Lantzsch wrote: > On Dienstag, 13. September 2016 06:46:04 PYT jungle Boogie wrote: > > On 13 September 2016 at 05:55, Eike Lantzsch > > wrote: > > > but in man doas.conf of 6.0 Release it is not mentioned and using > > > that option rightly results in a

Re: OpenBSD 6.0 CDs arrived today

2016-09-13 Thread Ralph Siegler
On Wed, 07 Sep 2016 18:49:50 -0400, Kenneth Gober wrote: > Shipments of OpenBSD 6.0 CDs have started arriving, I'm in the USA, > New York area. > > -ken Hurray, mine finally arrived north of Chicago, IL USA.It went through UK post office Aug 31 so probably U.S. side delay. Must wipe a tear

Booting 6.0 on a Thinkpad Tablet 2, Almost

2016-09-13 Thread Lars Lehtonen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have a Lenovo Thinkpad 2 tablet that I'm attempting to install OpenBSD on. It originally shipped with Windows 8. I've disabled Secure Boot in the BIOS, and the tablet makes it to the boot> prompt when started with a USB stick. The boot process fail

Re: Booting 6.0 on a Thinkpad Tablet 2, Almost

2016-09-13 Thread Edgar Pettijohn
On 16-09-13 18:59:11, Lars Lehtonen wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I have a Lenovo Thinkpad 2 tablet that I'm attempting to install OpenBSD > on. It originally shipped with Windows 8. > > I've disabled Secure Boot in the BIOS, and the tablet makes it to the > boot> p

Re: Booting 6.0 on a Thinkpad Tablet 2, Almost

2016-09-13 Thread Bryan Steele
On Tue, Sep 13, 2016 at 06:59:11PM -0700, Lars Lehtonen wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I have a Lenovo Thinkpad 2 tablet that I'm attempting to install OpenBSD > on. It originally shipped with Windows 8. > > I've disabled Secure Boot in the BIOS, and the tablet makes