Displaying 20 results from an estimated 200 matches similar to: "FreeBSD-SA-04:05.openssl question"
2004 Aug 26
2
ipfw core dump
Hi,
This is the first time I've come across this:
pid 11415 (ipfw), uid 0: exited on signal 11 (core dumped)
The core dump landed in root's home directory in one of my jails.
Has anyone seen this before? Should I be concerned? chkrootkit says
nothing. (How trustworthy is its output? ;-)
Thanks. Cheers.
--
Ng Pheng Siong <ngps@netmemetic.com>
http://firewall.rulemaker.net
2003 Jul 10
2
jail performance questions
I'm thinking of using jails to improve security on a server
I am setting up. Specifically, I would like to put Apache/PHP
in a jail, but I might like to set up 2-3 different jails for
different purposes.
I've found several examples showing how to set the jails up.
My questions involve system requirements. Assuming plenty of
disk space, 1GB ram and a dual processor PIII 1.13Ghz
2003 Sep 16
9
OpenSSH heads-up
OK, an official OpenSSH advisory was released, see here:
<URL: http://www.mindrot.org/pipermail/openssh-unix-announce/2003-September/000063.html >
The fix is currently in FreeBSD -CURRENT and -STABLE. It will be
applied to the security branches as well today. Attached are patches:
buffer46.patch -- For FreeBSD 4.6-RELEASE and later
buffer45.patch -- For FreeBSD 4.5-RELEASE and
2013 Oct 11
40
[Bug 70388] New: [NV34] failed to idle channel 0xcccc0000
https://bugs.freedesktop.org/show_bug.cgi?id=70388
Priority: medium
Bug ID: 70388
Assignee: nouveau at lists.freedesktop.org
Summary: [NV34] failed to idle channel 0xcccc0000
Severity: critical
Classification: Unclassified
OS: Linux (All)
Reporter: rosti.bsd at gmail.com
Hardware: x86 (IA32)
2003 Jul 12
5
jails, ipfilter & stunnel
I'm setting up a server where I plan to use Jails to improve security
I also have installed and am configuring ipfilter. Here are my
questions:
Because I'm using Jails, I will have to have multiple ip aliases on the
network interface. I will use ipfilter to specify what can go to each
of the addresses. (e.g., allow only incoming to port 80 on the jail
running apache).
Another
2003 Jul 23
10
malloc does not return null when out of memory
We have a little soekris box running freebsd that uses racoon for key
management. It's used for setting up an ipsec tunnel. I noticed that
one of these devices lost the tunnel this morning. I looked in the
log and saw this
Jul 23 01:37:57 m0n0wall /kernel: pid 80 (racoon), uid 0, was killed: out of swap space
I reproduced this problem using this code.
#include <stdlib.h>
int
2012 Jun 12
6
[RFC] net/sched/em_canid: Ematch rule to match CAN frames according to their CAN IDs
em_canid is an ematch capable of classifying CAN frames according to
their CAN IDs.
This RFC/Patch contains a reworked classifier initially posted in
http://www.spinics.net/lists/netdev/msg200114.html
The functionality is the same however there is almost 50% reduction
in the source code length.
There is a slight difference between this ematch and other available
ematches. Other ematches
2020 Sep 24
3
dovecot TSL 1.3 config option 'ssl_ciphersuites' causes fatal error on launch. not supported, bad config, or bug?
I've installed
grep PRETTY /etc/os-release
PRETTY_NAME="Fedora 32 (Server Edition)"
dovecot --version
2.3.10.1 (a3d0e1171)
openssl version
OpenSSL 1.1.1g FIPS 21 Apr 2020
iiuc, Dovecot has apparently had support for setting TLS 1.3 ciphersuites since v2.3.9, per this commit
lib-ssl-iostream: Support TLSv1.3 ciphersuites
2006 Apr 06
1
No subject
Does OpenSSH 4.3 support the use of the TLS ciphersuites that are
supported in OpenSSL?
If so, is this a compile time option or a run-time option? Or can sshd
support both the SSL and TLS ciphersuites at the same time?
Jim Humphreys
2011 Oct 24
3
Position of Chart in Windows
Hi,
IS is possible to align a chart to the left of the plot area as to make
space for a legend?
--
Regards/Groete/Mit freundlichen Grüßen/recuerdos/meilleures salutations/
distinti saluti/siong/duì yú/привет
Jurgens de Bruin
[[alternative HTML version deleted]]
2020 Oct 01
3
BUG: _presence_ of valid openssl.cnf Option = 'ServerPreference' causes Dovecot submission relay FAIL: "failed: Failed to initialize SSL: ..."
hi,
On 10/1/20 12:21 AM, JEAN-PAUL CHAPALAIN wrote:
> I had the same problem when migrating from Dovecot V2.2.36 on, Centos-7 to?Dovecot v2.3.8 on Centos-8
My report is specifically/solely about the addition/use of the
Options = ServerPreference
parameter.
I don't see that in your configuration.
Are you using it? In a config using Dovecot's submission proxy?
2020 Aug 25
2
BUG: _presence_ of valid openssl.cnf Option = 'ServerPreference' causes Dovecot submission relay FAIL: "failed: Failed to initialize SSL: ..."
I've
dovecot --version
2.3.10.1 (a3d0e1171)
openssl version
OpenSSL 1.1.1g FIPS 21 Apr 2020
, atm on Fedora32.
I configure
/etc/pki/tls/openssl.cnf
to set preferences for apps' usage, e.g. Postfix etc; Typically, here
cat /etc/pki/tls/openssl.cnf
openssl_conf = default_conf
[default_conf]
ssl_conf = ssl_sect
[ssl_sect]
system_default = system_default_sect
2008 Jul 17
1
Wine and pulse audio
I know that wine currently doesn't support the pulse audio, but can we expect this feature in upcomming versions?
While I used other audio drivers I had a lot of sound problems with other applications, pulse audio works perfectly so it would be nice to add a support for it.
Cheers!
2012 Mar 20
1
IMAP and POP3 per SSL
Hi!
I'm new to this list and i could not find a way to search through the already posted articles, so please forgive me if this subject has been discussed before.
Our security scanner stumbled over the IMAPs server i've set up recently using dovecot on a RedHat Enterprise 64bit Server.
The security scanner found an error regarding a new SSL security leak named "BEAST". The
2011 Apr 14
4
Categorical bubble plot
Hi,
I do not have much R experience just the basics, so please excuse
any obvious questions.
I would like to create bubble plot that have Categorical data on the x and y
axis and then the diameter if the bubble the value related to x and y.
Attached to the email is a pic of what I would like to do.
I do hope someone can help me.
--
Regards/Groete/Mit freundlichen Gr??en/recuerdos/meilleures
2011 Mar 10
1
Dove cot+Kerberos
Hi All.
I have a problem with authorization users AD via kerberos in
Dovecot&Postfix.
Windows SRV 2008 Standart - AD
mail server: Gentoo + cyrus-sasl + postfix + dovecot with support
ldap&kerberos.
I am created a 4 keytabs on Windows box.
C:\Users\Admin>ktpass -princ host/srv-mail.cn.energy at CN.ENERGY -mapuser
ldapmail at CN.ENERGY -pass "superpasswd" -crypto RC4-HMAC-NT
2011 Oct 10
4
Type of Graph to use
Hi,
Please advice on what type of graph can be used to display the following
data set.
I have the following:
Name Class
a Class 1
a Class4
b Class2
b Class1
d Class3
d Class5
e Class4
e Class2
So each entry in name can belong to more than one class. I want to represent
the data as to see where
2001 May 01
1
fatal compile error on SGI IRIX
IRIX64 6.5 01101245 IP27
20010425 CVS
- (djm) Include crypt.h if available in auth-passwd.c
cc-1143 cc: ERROR File = /usr/include/crypt.h, Line = 38
Declaration is incompatible with
"void des_encrypt(unsigned long *, struct des_ks_struct *, int)"
(declared at line 150 of "/usr/local/ssl/include/openssl/des.h").
extern void des_encrypt(char *, int);
2016 Jan 22
1
Does tinc have something akin to openvpn's --tls-auth ? Or do I not need that at all ?
Hello,
I wanted to ask if tinc had something akin to openvpn's --tls-auth
option, for all the reason's listed here:
https://community.openvpn.net/openvpn/wiki/Hardening
I have read http://www.tinc-vpn.org/documentation-1.1/tinc.pdf, but I
have not seen anything similar.
Or do I not need that feature at all because tinc handles cryptology
different than openvpn ( tinc's uses RSA keys
2006 Apr 07
1
your mail
> On Thu, 6 Apr 2006, Miller, Damien wrote:
>
> >
> > Does OpenSSH 4.3 support the use of the TLS ciphersuites that are
> > supported in OpenSSL?
> > If so, is this a compile time option or a run-time option?
> Or can sshd
> > support both the SSL and TLS ciphersuites at the same time?
>
> OpenSSH doesn't use SSL or TLS - the SSH protocol