[OpenWrt-Devel] Interesting issue with hnetd-nossl

2016-06-10 Thread Juliusz Chroboczek
Dear Markus, dear Steven, [openwrt-devel in CC] We've just spent the afternoon debugging an interesting issue. After installing hnetd-nossl, the router no longer answers to link-local IPv6 addresses -- it still has the fe80:: addresses assigned, it receives neighbour solicitations, but doesn't s

[OpenWrt-Devel] [PATCH v3 6/7] openssl: add --gc-sections

2016-06-10 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile index 4782c42..d10b447 100644 --- a/package/libs/openssl/Makefile +++ b/package/libs/openssl/Makefil

[OpenWrt-Devel] [PATCH v3 7/7] openssl: add option to disable SRP support

2016-06-10 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |9 +++-- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 7224b65..e1d9952 100644 --- a/package

[OpenWrt-Devel] [PATCH v3 3/7] openssl: add option for NPN support

2016-06-10 Thread Dirk Feytons
NPN has been superseded by ALPN so NPN is disabled by default The patch has been sent to OpenSSL for inclusion, see https://github.com/openssl/openssl/pull/1100 Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile

[OpenWrt-Devel] [PATCH v3 5/7] openssl: remove some unneeded functionality and algorithms

2016-06-10 Thread Dirk Feytons
The patch needed for this commit has been sent upstream: https://github.com/openssl/openssl/pull/1155 Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |7 +++--- .../openssl/patches/302-fix_no_cmac_build.patch| 24 2 files changed,

[OpenWrt-Devel] [PATCH v3 4/7] openssl: add option to disable PSK support

2016-06-10 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 492b042..7224b65 100644 --- a/package/li

[OpenWrt-Devel] [PATCH v3 2/7] openssl: add option to disable compression support

2016-06-10 Thread Dirk Feytons
By default it's disabled. After the CRIME attack it seems the use of compression is discouraged. Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile | 13 ++--- 2 files changed, 15 insertions(+), 3 deletions(-) diff --git a/packa

[OpenWrt-Devel] [PATCH v3 1/7] openssl: add option to omit deprecated APIs

2016-06-10 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 3d76dab..aa94300 100644 --- a/package/li

[OpenWrt-Devel] [PATCH v3 0/7] openssl: tweaks to reduce size

2016-06-10 Thread Dirk Feytons
This set of patches introduces a couple of config options to leave out stuff from OpenSSL. Additionally the hardcoded configure options have been extended to omit some rarely used functionality and algorithms. I'm not sure about the defaults for the introduced config options so please take a closer

Re: [OpenWrt-Devel] [PATCH package mountd] uci config for mountd fileystem options

2016-06-10 Thread Olivier Hardouin
Yes, you're right both patch are related. I'm trying to get more flexibility in mountd by passing the mount command options through UCI. On Fri, Jun 10, 2016 at 12:02 PM, John Crispin wrote: > > > On 10/06/2016 12:00, Mathias Kresin wrote: > > Hi Oliver, > > > > 2016-06-10 11:37 GMT+02:00 : > >

Re: [OpenWrt-Devel] [PATCH package mountd] uci config for mountd fileystem options

2016-06-10 Thread John Crispin
On 10/06/2016 12:00, Mathias Kresin wrote: > Hi Oliver, > > 2016-06-10 11:37 GMT+02:00 : >> Signed-off-by: Olivier Hardouin >> --- > > Your patch doesn't have a commit message, which explains why these > options are required by default. > > I've used mountd recently with ext4 and was able to

Re: [OpenWrt-Devel] [PATCH package mountd] uci config for mountd fileystem options

2016-06-10 Thread Mathias Kresin
Hi Oliver, 2016-06-10 11:37 GMT+02:00 : > Signed-off-by: Olivier Hardouin > --- Your patch doesn't have a commit message, which explains why these options are required by default. I've used mountd recently with ext4 and was able to read/write the mounted filesystem out of the box. Mathias >

[OpenWrt-Devel] [PATCH package mountd] uci config for mountd fileystem options

2016-06-10 Thread olivier . hardouin
Signed-off-by: Olivier Hardouin --- package/system/mountd/files/mountd.config | 28 1 file changed, 28 insertions(+) diff --git a/package/system/mountd/files/mountd.config b/package/system/mountd/files/mountd.config index 5610129..c105606 100644 --- a/package/system

[OpenWrt-Devel] [PATCH mountd] filesystem mount options in uci config

2016-06-10 Thread olivier . hardouin
Move (previously hardcoded) mount option to UCI to allow different configuration like charset (utf-8 or iso) and filesystem driver (if alternative ones are used). The fs names are changed in lowercase to comply with UCI general naming. Signed-off-by: Olivier Hardouin --- mount.c | 69

Re: [OpenWrt-Devel] [PATCH v2 5/6] openssl: remove some unneeded functionality and algorithms

2016-06-10 Thread Dirk Feytons
I can make a config option for it if you like and enable it by default. (FYI: no-srp saves almost 16K on libcrypto and 9,5K on libssl) Dirk F. On 9 June 2016 at 23:39, Karl Palsson wrote: > On this one, does SRP have to be included? I'm not using it, and > i know it's super uncommon, but it's l