search for: pfs

Hi Is there known advices on how to favor PFS with dovecot? In Apache, I use the following directives, with cause all modern browsers to adopt 256 bit PFS ciphers, while keeping backward compatibility with older browsers and avoiding BEAST attack: SSLProtocol all -SSLv2 SSLHonorCipherOrder On SSLCipherSuite ECDHE at STRENGTH:ECDH at STRENG...

...2-on-FreeBSD-td3005929.html under windoze 7. but it seems to hang with this stack trace, #0? 0x77830190 in ntdll!LdrFindResource_U () ?? from /cygdrive/c/Windows/system32/ntdll.dll building goes as follows, $ ./R CMD INSTALL --no-test-load nlme_3.1-97.tar.gz * installing to library 'C:/pfs/R/R-2.11.1/library' * installing *source* package 'nlme' ... ** libs ? making DLL ... gcc -I"C:/pfs/R/R-2.11.1/include"???????? -O3 -Wall? -std=gnu99 -c corStruct.c - o corStruct.o gcc -I"C:/pfs/R/R-2.11.1/include"???????? -O3 -Wall? -std=gnu99 -c gnls.c -o gnl s.o g...

...99bf747a05f7 at 130.211.62.184:0 - no reply to our critical packet (see https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions). is there any way to configure to have the previous behaviour? Im trying to set dtlscipher=AES128-SHA but I always see DTLS ECDH initialized (automatic), faster PFS enabled any idea? Thanks! res_rtp_asterisk ------------------ * The DTLS part in Asterisk now supports Perfect Forward Secrecy (PFS). Enabling PFS is attempted by default, and is dependent on the configuration of the module using TLS. - Ephemeral ECDH (ECDHE) is enabled by default. To disable it,...

...urce* package 'RcppArmadillo' ... ** package 'RcppArmadillo' successfully unpacked and MD5 sums checked * checking LAPACK_LIBS: divide-and-conquer complex SVD available via system LAPACK ** libs g++ -I/tools/cluster/6.2/R/3.2.2_mkl/lib64/R/include -I/usr/local/include -I"/panfs/pfs.acf.ku.edu/crmda/tools/lib64/R/3.2/site-library/Rcpp/include" -I../inst/include -fpic -O3 -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -c RcppArmadillo.cpp -o RcppArmadillo.o g++ -I/tools/cluster/6.2/R/3.2.2_mkl/lib64/R/i...

...urce* package 'RcppArmadillo' ... ** package 'RcppArmadillo' successfully unpacked and MD5 sums checked * checking LAPACK_LIBS: divide-and-conquer complex SVD available via system LAPACK ** libs g++ -I/tools/cluster/6.2/R/3.2.2_mkl/lib64/R/include -I/usr/local/include -I"/panfs/pfs.acf.ku.edu/crmda/tools/lib64/R/3.2/site-library/Rcpp/include" -I../inst/include -fpic -O3 -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -c RcppArmadillo.cpp -o RcppArmadillo.o g++ -I/tools/cluster/6.2/R/3.2.2_mkl/lib64/R/i...

...is great , but BTW why do we need Java if no x-ogg application handler are installed ? When i visit a page with flash the first time , plugin installed is only few clicks away, and I don't even care what software makes my flash application works. So I understood with http://wiki.mozilla.org/PFS that , the defaulkt mozilla server keeps a liste off application <-> MimeTypes for plugin automagic install I was wondering why didn't the propose one for application/x-ogg ? Did anybody already ask them ? -- %<------------------------------------------------------->% Michel me...

We are using an Intel 82599 chip that allows 4 PFs ( eth0..3) per VM. I am able to manually start VMs using the hostdev definition for the four network connections, but I'd like to start using the pool approach. Ubuntu 12.04 libvirt 1.0.0 Following: http://wiki.libvirt.org/page/Networking#Assignment_from_a_pool_of_SRIOV_VFs_in_a_libvirt_.3Cnet...

...miss) FAULT(6) END(ikey_miss) - //----------------------------------------------------------------------------------- - // call do_page_fault (predicates are in r31, psr.dt may be off, r16 is faulting address) -ENTRY(page_fault) - SSM_PSR_DT_AND_SRLZ_I - ;; - SAVE_MIN_WITH_COVER - alloc r15=ar.pfs,0,0,3,0 - MOV_FROM_IFA(out0) - MOV_FROM_ISR(out1) - SSM_PSR_IC_AND_DEFAULT_BITS_AND_SRLZ_I(r14, r3) - adds r3=8,r2 // set up second base pointer - SSM_PSR_I(p15, p15, r14) // restore psr.i - movl r14=ia64_leave_kernel - ;; - SAVE_REST - mov rp=r14 - ;; - adds out2=16,r12 // out2 = pointer to...

...miss) FAULT(6) END(ikey_miss) - //----------------------------------------------------------------------------------- - // call do_page_fault (predicates are in r31, psr.dt may be off, r16 is faulting address) -ENTRY(page_fault) - SSM_PSR_DT_AND_SRLZ_I - ;; - SAVE_MIN_WITH_COVER - alloc r15=ar.pfs,0,0,3,0 - MOV_FROM_IFA(out0) - MOV_FROM_ISR(out1) - SSM_PSR_IC_AND_DEFAULT_BITS_AND_SRLZ_I(r14, r3) - adds r3=8,r2 // set up second base pointer - SSM_PSR_I(p15, p15, r14) // restore psr.i - movl r14=ia64_leave_kernel - ;; - SAVE_REST - mov rp=r14 - ;; - adds out2=16,r12 // out2 = pointer to...

I've been running RedHat 5.0 and Samba flawlessly for over 6 months now. I had to reboot the server and now I can't seem to print. When I use the "Printtool" to send a test text or postscript job to the printer, I get the following error: Unable to print to HP4000 Error Message: lpr: connect: no such file or directory jobs queued, but cannot start daemon The printer is set up

On Wed, Feb 26, 2014 at 11:22 AM, john fisher <john@jpfisher.net> wrote: > I get this error: > "error: Failed to create domain from ./vm0.xml > error: internal error Process exited while reading console log output: > kvm: -device > pci-assign,host=01:10.1,id=hostdev0,configfd=47,bus=pci.0,addr=0x8: > Duplicate ID 'hostdev0' for device " > > Ideas?

On 02/26/2014 08:43 PM, Dax Kelson wrote: > On Wed, Feb 26, 2014 at 11:22 AM, john fisher <john@jpfisher.net > <mailto:john@jpfisher.net>> wrote: > > I get this error: > "error: Failed to create domain from ./vm0.xml > error: internal error Process exited while reading console log > output: kvm: -device >

...in my test environment and it works just as expected and seemed to not have any unwanted effects. (Dovecot code is probably the most beautiful and easy to read C code I've seen, but there might also be some pitfalls I missed.) best regards, Adi Kriegisch PS: I need that feature to enable PFS while allowing Outlook to still connect and the others not to fall back to a different cipher; I was unable to find a PFS cipher that is supported by Outlook and OpenSSL. -------------- next part -------------- A non-text attachment was scrubbed... Name: ssl_prefer_server_ciphers-dc21.diff Type: te...

On May 24, 2008, at 11:43 AM, Marcel Moolenaar wrote: > All, > > So far I've tried LLVM on amd64, i386, ia64 and powerpc under FreeBSD > and aside for ia64, things look pretty good for a first try. There > are 2 unexpected failures for PowerPC, which appear to be caused by > uninitialized memory. I'm still working on a fix for that (need to > brush up on my C++

"May you live in interesting times" Is this a curse or a blessing? :) I've just tested a 3.1.5 GlusterFS native client against a 3.1.3 storage pool using this volume: Volume Name: pfs-rw1 Type: Distributed-Replicate Status: Started Number of Bricks: 2 x 2 = 4 Transport-type: tcp Bricks: Brick1: jc1letgfs16-pfs1:/export/read-write/g01 Brick2: jc1letgfs13-pfs1:/export/read-write/g01 Brick3: jc1letgfs16-pfs1:/export/read-write/g02 Brick4: jc1letgfs13-pfs1:/export/read-write/g02 Opt...

All, So far I've tried LLVM on amd64, i386, ia64 and powerpc under FreeBSD and aside for ia64, things look pretty good for a first try. There are 2 unexpected failures for PowerPC, which appear to be caused by uninitialized memory. I'm still working on a fix for that (need to brush up on my C++ skills). [sidenote: In FreeBSD -current, the memory allocator initializes memory with 0xa5

...vice is: conn site-a keyingtries=0 keylife=1h ikelifetime=8h left=1.1.1.1 right=2.2.2.2 leftsubnets={x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24} rightsubnets={x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24,x.x.x.x/24} pfs=yes auto=start authby=secret dpddelay=30 dpdtimeout=120 dpdaction=hold phase2alg=aes256-sha1;modp1536 phase2=esp ike=aes256-sha1;modp1536 It's mirrored exactly the same on the other side. I have tried changing the dead peer detec...

"A. Schulze" writes: > David Mehler: > >> Second question, in the doveconf -n there's reference to my ssl_cipher >> am I using current tls ciphers that support pfs? > >> ssl_cipher_list = ALL:!LOW:!SSLv3:!SSLv2:!EXP:!aNULL > > some non pfs cipher would be still active. check yourself: > # openssl ciphers -v 'ALL:!LOW:!SSLv3:!SSLv2:!EXP:!aNULL' | grep -v DH You'll want the 'E' variation (ephemeral) of the DH algorithms, a...

Hi all, I have made a RedHat 6.0 i386 binary rpm of 2.0.4b with the glibc2.1 configuration fix available at : ftp:<samba.org mirror>/pub/samba/Binary_Packages/redhat/RPMS/6.0/samba-2.0.4b-19990527.i386.rpm This rpm is to be preferred over the one on the RedHat 6.0 cd as it contains an autoconf configuration test to work around the glibc2.1 bug w.r.t. 64 bit locking (the one that

Hi. I rewrote the patch according to the comments. I adopted generating in-place code because it looks the quickest way. The point Eddie wanted to discuss is how to generate code and its ABI. i.e. in-place generating v.s. direct jump v.s. indirect function call Indirect function call doesn't make sense because ivt.S is compiled multi times. And it is up to pv instances to choose in-place