On 2017-04-04, Noth wrote:
>I'm trying to use dpb in 6.1-current, and my setup works till it
> tries to sign the package it makes and then fails with this message:
..
> I've updated my signify keys and placed them in $CHROOT/etc/signify. I
> can't work out what dpb is expecting now that we n
dpb no longer does.
Use pkg_sign(1) directly like sthen says.
Before, signing directly during pkg_create(1) made some sense, since
the archive was built just once with the signature inside.
Now that the signature is outside, there is no gain to having pkg_create(1)
sign directly, so that was scra
2 avril 2017 11:49 "Comète" a écrit:
>> On 03/28,
Comète wrote:
>
> Hi,
>
> I'm trying to build an IPSEC encrypted tunnel
that works as a bridge. For
> this, I use isakmpd and etherip, vether, bridge
interfaces. On each VPN server
> (Host A and B), I've got PF running on the
external interface
Hi Lads
Had an issue where PhP was fully functioning on the system but the
concrete5 installer was not functioning
basically I had the following config for php in /etc/httpd.conf
root "/htdocs/www/"
location "*.php" {
fastcgi socket "/run/php-fpm.sock"
}
Ok thanks Stuart & Marc, and of course I managed to pebkac through my
ports update script... G.
On 05/04/17 10:43, Marc Espie wrote:
dpb no longer does.
Use pkg_sign(1) directly like sthen says.
Before, signing directly during pkg_create(1) made some sense, since
the archive was built jus
I imagine there are some projects that need some love that are on the back
burner at the moment that could use some hacking; even if it is totally
redone later by someone that wants to refactor it for privsep and such.
On Tue, Apr 4, 2017 at 4:21 PM Theo de Raadt wrote:
> Pete, you propose a wast
On Sat, Apr 01, 2017 at 10:52:20AM +0200, Peter N. M. Hansteen wrote:
> Hi,
>
> I thought I'd like to give you a heads up that there will be a "PF and
> networking" tutorial at BSDCan 2017 in Ottawa this June.
>
> The session will however not be the Nth rerun of the old one, we're
> starting from
Security and correctness should never be an after-thought. Have you
done any real software development? And have you ever tried to find
your way through cruddy code? 999 times out of 1000 it is less painful
and much more effective to rewrite from scratch. So what's the point of
having that prev
On Tue, Apr 04, 2017 at 09:07:08PM -0600, Theo de Raadt wrote:
> > cpu0: 256KB 64b/line 8-way L2 cache
> > rdmsr to register 0xc80 on vcpu 0
> > fatal protection fault in supervisor
mode
> > trap type 4 code 0 rip 811c1d17 cs 8 rflags 202 cr2 0 cpl e rsp
>
On Sat, 1 Apr 2017 10:52:20 +0200
"Peter N. M. Hansteen" wrote:
> Hi,
>
> I thought I'd like to give you a heads up that there will be a "PF and
> networking" tutorial at BSDCan 2017 in Ottawa this June.
>
> The session will however not be the Nth rerun of the old one, we're
> starting from scrat
This can all be done without GSoC, and OpenBSD is better off without it.
Obviously I cannot speak on behalf of any OpenBSD developers here, this
is just my thoughts based on observations of other open-source projects
that did GSoC over the years.
Some students were shit, letting the projects down
Hi,
anyone tried running OpenBSD on the udoo x86 ? Dmesg ? What works and what
dosen't ?
Jan
Huh, just found out that you can preorder this device right now. So
ordering might come later
Ping Theo, couldnt someone create a needs improvments list n put it on like
OpenBSD.org?
Luke Small skrev: (2 april 2017 16:54:39 CEST)
>
--
Sincerly flipchan - LayerProx dev
2017-04-05 22:55 GMT+02:00 Flipchan :
> Ping Theo, couldnt someone create a needs improvments list n put it on like
> OpenBSD.org?
No. You've got an itch to scratch, fix that.
Best
Martin
On Sat, Apr 1, 2017 at 10:52 AM, Peter N. M. Hansteen
wrote:
> Hi,
>
> I thought I'd like to give you a heads up that there will be a "PF and
> networking" tutorial at BSDCan 2017 in Ottawa this June.
>
> The session will however not be the Nth rerun of the old one, we're
> starting from scratch
I've been using a trick to emulate scheduled rules using IP tables.
It would be nice to have something like this covered.
I have even seen it in the silliest of home router firewalls.
First, create a rule with a table like so:
# Schedule Table
table persist
# Scheduled access to HTTP
pass in o
On 2017-04-05, wrote:
> I've been using a trick to emulate scheduled rules using IP tables.
Nice trick. Anchors are also good for this.
But don't forget that active connections won't be dropped unless you
also flush the relevant states.
Bring on the Flaming Theo!
On Wed, Apr 5, 2017 at 3:55 PM Flipchan wrote:
> Ping Theo, couldnt someone create a needs improvments list n put it on
> like OpenBSD.org?
>
> Luke Small skrev: (2 april 2017 16:54:39 CEST)
>
>
> --
> Sincerly flipchan - LayerProx dev
I suspect that unless you really know what you are doing, you'll never
satisfy
the OpenBSD gods. I suspect that there is a good reason that pkg_add was
rewritten in perl. I suspect because it may have been written in perl. And
just like that a
good idea wasn't completely done in another way.
On We
On Wed, Apr 05, 2017 at 12:46:27PM +1000, Jason Tubnor wrote:
> Just wondering if anyone else is seeing the same issue I am booting a
> 6.1-snapshot in bhyve? In preparation for the 6.1 pending release, I
> have tried to spin up 6.1-snap to iron out any issues in bhyve but I
> don't get very far in
On Wed, 5 Apr 2017 22:44:54 + (UTC)
Stuart Henderson wrote:
> On 2017-04-05,
> wrote:
> > I've been using a trick to emulate scheduled rules using IP
> > tables.
>
> Nice trick. Anchors are also good for this.
>
> But don't forget that active connections won't be dropped unless you
> al
Without hijacking this thread completely, but touching on some of the
elements discussed above (and I think these are great inclusions for the
tutorial).
We have implemented a variety of queues to manage our internet links and
ikev2 VPNs tunnels to remote offices. We have also done something simi
On Thu, Mar 23, 2017 at 09:30:43AM +0900, Stefan Sperling wrote:
> On Wed, Mar 22, 2017 at 02:42:19PM +, Kevin Chadwick wrote:
> > In case it is of any help to anyone. I tried 11n on a ar9271 a few weeks
> > ago and also an ar2133. Both would give athn0: device timeouts but the usb
> > ar9271 n
On 5 April 2017 at 13:07, Theo de Raadt wrote:
>
> > cpu0: Intel(R) Xeon(R) CPU E5-1620 v3 @ 3.50GHz, 3491.87 MHz
> > cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,
> CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SS,HTT,PBE,SSE3,
> PCLMUL,DTES64,DS-CPL,SSSE3,SDBG,FMA3,CX16,xTPR,PCID,DC
25 matches
Mail list logo
