Re: lo(4) checksum offload

2023-06-01 Thread Peter Stuge
David Gwynne wrote: > > Currently packets sent over loopback interface get their checksum > > calculated twice. In the output path it is set and during TCP/IP > > input it is calculated again to be compared with the previous value. .. > > The question is, does it break corner cases? Please test w

Re: ifconfig description for wireguard peers

2023-06-01 Thread Claudio Jeker
On Wed, May 31, 2023 at 02:07:17PM +, Klemens Nanni wrote: > On Wed, May 31, 2023 at 10:27:13AM +0200, Claudio Jeker wrote: > > On Tue, May 30, 2023 at 11:56:01PM +, Klemens Nanni wrote: > > > On Tue, May 23, 2023 at 07:13:28PM +, Klemens Nanni wrote: > > > > On Sat, Jan 14, 2023 at 02:

Re: lo(4) checksum offload

2023-06-01 Thread Alexander Bluhm
On Thu, Jun 01, 2023 at 04:38:53PM +, Peter Stuge wrote: > David Gwynne wrote: > > > Currently packets sent over loopback interface get their checksum > > > calculated twice. In the output path it is set and during TCP/IP > > > input it is calculated again to be compared with the previous valu

Re: ifconfig description for wireguard peers

2023-06-01 Thread Mikolaj Kucharski
On Wed, May 24, 2023 at 11:43:03PM +0200, Hrvoje Popovski wrote: > On 23.5.2023. 21:13, Klemens Nanni wrote: > > On Sat, Jan 14, 2023 at 02:28:27PM +, Stuart Henderson wrote: > >> On 2023/01/12 04:49, Mikolaj Kucharski wrote: > >>> Hi, > >>> > >>> Is there anything else which I can do, to help

httpd: rewrite not handled correctly + fix

2023-06-01 Thread Erik Brens
OpenBSD's httpd refuses to serve an index file and returns a nasty "500 Internal Server Error" when the URL that's being requested does not contain a file name and there's a rewrite rule for the path in httpd.conf. Here's an excerpt from my httpd.conf that demonstrates the issue: location matc

acme-client: name resolution error when specifying a port in the api url

2023-06-01 Thread Ronald Heggenberger
Hi! I am using step-ca to host my own acme provisioner (which is already working - existing proxmox servers can request and get x509 TLS certificates), and as next step I wanted to use acme-client on OpenBSD servers, since it's deployed within the default installation. So I added it to /etc/acm