similar to: Tons of "Failed to decrypt and verify packet"

Hi, There is still tinc-1.1pre7-1-iphoneos-arm.deb, but it can not connect 1.1pre9 server. Error log shows Peer tries to roll back protocol version to 17.0. Is it possible compile 1.1pre9 for iOS? Thank you. -- @hshh -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20131021/d88ae312/attachment.html>

With pleasure we announce the release of tinc version 1.1pre10. Here is a summary of the changes: * Added a benchmark tool (sptps_speed) for the new protocol. * Fixed a crash when using Name = $HOST while $HOST is not set. * Use AES-256-GCM for the new protocol. * Updated support for Solaris. * Allow running tincd without a private ECDSA key present when ExperimentalProtocol is not

With pleasure we announce the release of tinc version 1.1pre10. Here is a summary of the changes: * Added a benchmark tool (sptps_speed) for the new protocol. * Fixed a crash when using Name = $HOST while $HOST is not set. * Use AES-256-GCM for the new protocol. * Updated support for Solaris. * Allow running tincd without a private ECDSA key present when ExperimentalProtocol is not

Hi all, I have two nodes, connected to a switch, using Tinc 1.1 from git. They connect each other with sptps, and to other nodes in the Internet with old protocol because they have Tinc 1.0. There is no problem with remote nodes, but between my 2 local nodes, they see 1518 PMTU. But local network is 1500 MTU !!! So nodes can ping each other but larger data does not go. test1=sllm1 test2=sllm2

Hi all, I just joigned this list, so I'm sorry if this problem has already been reported. I'm running Dovecot 2.0.13 on many servers, one for POP/IMAP access, others for LDA, others for authentification only, etc. All servers are accessing a shared file system, based on MooseFS (www.moosefs.org). The FS is mounted using FUSE. All my Dovecot servers have this configuration :

Hi all, I have a little problem with Dovecot 2.1.17 and MailDir accounts. I was using a shared file system (MooseFS), and all was pretty stable. Now I'm switching to CephFS, and Dovecot LMTP have problem to deliver mails. Very often, on large accounts, LMTP processes are running for a few hours before delivering the message. When I strace it, I can see that they are reading (open and stat

You could remove them with sieve in the latest version of pigeonhole. On Mar 24, 2015 7:33 AM, Florent B <florent at coppint.com> wrote: > > I know about RFC's, but that could be an option, not enabled by default.

Thank you for your report, we'll look into it! Aki > On December 27, 2017 at 8:16 PM Florent B <florent at coppint.com> wrote: > > > Hi, > > This repository does not work with Aptly. > It seems "architecture" line is wrong in InRelease file (needs to be > "Architectures:" instead of "Architecture:"). > And

Hi, I'm doing some perf profiling, and I can see that BF_encrypt & BF_decrypt of libcrypto.so.1.0.0 (used in tincd) are consuming CPU time. I'm using Tinc 1.0.23 and Cipher = aes-128-cbc BF_encrypt & BF_decrypt seems related to Blowfish (https://www.openssl.org/docs/crypto/blowfish.html). Is it normal that BF functions are used even if AES is used ? I do not know anything about

On Wed, Apr 27, 2016 at 05:15:57PM +0800, hshh wrote: > >Updated support for BSD tun/tap devices. > It is broken on FreeBSD tun. > > tcpdump on tun, > 09:05:07.458988 IP0 bad-hlen 0 Can you show me your tinc.conf and tinc-up script? Also, which version of FreeBSD are you using? -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org>

On Wed, Apr 27, 2016 at 05:26:36PM +0800, hshh wrote: > >> It is broken on FreeBSD tun. > >> > >> tcpdump on tun, > >> 09:05:07.458988 IP0 bad-hlen 0 It's indeed broken. As a workaround, can you try to change Device to /dev/tap10? You might have to run "kldload if_tap.ko" before starting tinc. -- Met vriendelijke groet / with kind regards,

Hello, I think routing could be improved in several ways, at least, there lacks some documentation describing how Tinc routes packets. In order to test Tinc, I setup the following virtual network: - tinc 1.1pre9 with ExperimentalProtocol=yes - use of network namespaces (actually python-nemu[1]) - star topology, where all nodes runs tinc except the center, which I use to filter communications,

On Wed, Apr 27, 2016 at 10:22:27PM +0800, hshh wrote: > There is something wrong while routing ipv6 on tap, I prefer to use tun. Oh, what is wrong with IPv6 on tap? > Will you fix it soon? Yes. -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc

Hi, ? I've recently moved from OpenVPN to Tinc for the mesh setup. Everything works nicely except for some looping packet issues. ? I have 12 servers around the United States, including a couple of moving clients. Every now and then the network is flooded with what I assume is looping packets. 200-300MB of bandwidth per node over 10-45 minutes (normally < 20 KB/s, idle). Most if not all

Hi all, I got a problem with a Dovecot IMAP/POP installation. Since a recent failure of our distributed file system (no loss of data btw), Dovecot seems to have a problem with index cache files. For a lot of accounts, I have this error in logs: Error: Corrupted index cache file /xxx/yyy/zzz/indexes/.INBOX/dovecot.index.cache: invalid record size If I delete all files from /indexes/

Hi, Is there anything known about ZFS under 10.0-BETA4 when FreeBSD was upgraded from 9.2-RELEASE? I have two servers, with very different hardware (on is with soft raid and the other have not) and after a zpool upgrade, no way to get the server booting. Do I miss something when upgrading? I cannot get the error message for the moment. I reinstalled the raid server under Linux and the other

Hi all, Is it possible and easy to make a CTI server with Asterisk? Florent,

Hi everyone, I am using Dovecot 2.2 with dict SQL. My config is using : connect = host=10.111.5.1X host=10.111.5.1Y host=10.111.5.1Z dbname=mail user=quota_updater password=xxxxxxxx But when an SQL server is down, I have these messages in logs : dict: Error: mysql(10.111.5.1Y): Connect failed to database (mail): Can't connect to MySQL server on '10.111.5.1Y' (111) - waiting for

Hello everyone on the list, I?m borrowing a bit of your time in order to present a little CSS experiment I?ve been working on: a stylesheet which gives a Markdown-like aspect to HTML elements, especially those elements that the Markdown syntax generates in the first place. This means > signs for blockquotes, # signs or underlines for titles, etc. I wrote a mini-website for it:

Are you sure it is enabled by default? On Fri, Mar 16, 2018 at 4:07 PM, Todd C. Miller <Todd.Miller at sudo.ws> wrote: > On Fri, 16 Mar 2018 14:37:58 -0700, al so wrote: > > > Is SPTPS protocol enabled in 1.1 by default? Or we need to manually > enable > > it. > > It is enabled by default. You can disable it by setting > ExperimentalProtocol = no in