similar to: Different PRF with --disable-legacy-protocol?

On Sun, Jul 05, 2015 at 09:02:55PM +0200, Benjamin Richter wrote: > I'm struggling with setting up an SPTPS connection between two of my > machines. I attached the patch that I used to analyze this. Apparently > different keys are derived depending on the crypto backend. Is this > intentional? No, this is not intentional, it's a bug in the hmac_sha512 implementation in

Hello everybody, we have the following problem here: We've set up a complete samba domain (based on 3.0.20 now) which is running very fine including ldap backend. But we've still problems using roaming profiles (especially prf*tmp) files. We already tested the veto oplock directive with /prf*.tmp/ and even /*.tmp/ but these files remain always locked. Only "root" can delete

hello list, i use samba 2.2 with roaming profiles and windows xp/2000. when windows client logs in into domain and downloads the profile, i get often the "access denied" error, if windows downloads a new file. as i found out, windows downloads a file first as a prf<something>.tmp file and then renames it and that failes because access is denied then. i tried to add a line veto

We have an Apple OSX 10.3.4 Opendirectory (LDAP) Server with an SAMBA (3.0.2) PDC Server with roaming profiles for Windows XP (SP1 Prof) Clients on the Server. The Share for the PCs is only shared with SMB. When a PC log off, the profile will be copied to the server and brings the error message that the files prf*.tmp can?t be copied to the server. This error message occours not every time and

Hi all, I am trying to compare the performance of gcc , llvm-gcc , clang and lli(with JIT) on x86. i have attached the performance comparision spreadsheet as well as the source which i used for performing these test. i ran this code for 10000 iterations and the time of execution is as follows for -O3 results refer attachment. *time clang (-O0) llvm-gcc(-O0)

I've been using SPTPS (a.k.a ExperimentalProtocol) for a while now, but I've only recently started looking into the details of the protocol itself. I have some questions about the design: - I am not sure what the thread model for SPTPS is when compared with the legacy protocol. SPTPS is vastly more complex than the legacy protocol (it adds a whole new handshake mechanism), and

Hi, I'm currently trying to troubleshoot what appears to be a very subtle bug (most likely a race condition) in SPTPS that causes state to become corrupted during SPTPS key regeneration. The tinc version currently deployed to my production nodes is git 7ac5263, which is somewhat old (2014-09-06), but I think this is still relevant because the affected code paths haven't really changed

Hello everybody, we have the following problem here: We've set up a complete samba domain (based on 3.0.20 now) which is running very fine including ldap backend. But we've still problems using roaming profiles (especially prf*tmp) files. We already tested the veto oplock directive with /prf*.tmp/ and even /*.tmp/ but these files remain always locked. Only "root" can delete

Hello list, sometimes, when a user logs off, not ntuser.dat, but prf4EC.tmp, prf4ED, ..., will save. Does anyone have this problem, too? matze

Hi all, I am trying to compare the performance of gcc , llvm-gcc , clang and lli(with JIT) on x86. i have attached the performance comparision spreadsheet as well as the source which i used for performing these test. i ran this code for 10000 iterations and the time of execution is as follows for -O3 results refer attachment. *clang (-O0) * real 0m10.247s user 0m2.644s sys 0m5.949s

Is SPTPS protocol enabled in 1.1 by default? Or we need to manually enable it. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20180316/2360e357/attachment.html>

Running my program with --debugmsg warn+all,+relay I find that the following happens just before the program pops up a dialog box saying 'String resource not found': ---------------------- begin ---------------------- 08078330:Call kernel32.FindFirstFileA(41c56870 "windose/C4DNET_R73 PC/C4D_NET_Client.exe\\clientprefs\\c4d_language.prf",41c56730) ret=00862b69

I sent you a pull request that addresses the general issue, at least for the short term: https://github.com/gsliepen/tinc/pull/83 On 16 May 2015 at 19:36, Guus Sliepen <guus at tinc-vpn.org> wrote: > On Sat, May 16, 2015 at 04:53:33PM +0100, Etienne Dechamps wrote: > >> I believe there is a design flaw in the way SPTPS key regeneration >> works, because upon reception of

In the past 24 hours multiple persons have contacted me regarding the use of elliptic curve cryptography in tinc 1.1 in light of the suspicion that the NSA might have weakened algorithms and/or elliptic curves published by NIST. The new protocol in tinc 1.1 (SPTPS) uses ECDH and ECDSA to do session key exchange and authentication, in such a way that it has the perfect forward secrecy (PFS)

In the past 24 hours multiple persons have contacted me regarding the use of elliptic curve cryptography in tinc 1.1 in light of the suspicion that the NSA might have weakened algorithms and/or elliptic curves published by NIST. The new protocol in tinc 1.1 (SPTPS) uses ECDH and ECDSA to do session key exchange and authentication, in such a way that it has the perfect forward secrecy (PFS)

TB --- 2013-11-25 17:30:12 - tinderbox 2.20 running on freebsd-legacy2.sentex.ca TB --- 2013-11-25 17:30:12 - FreeBSD freebsd-legacy2.sentex.ca 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue Dec 4 09:23:10 UTC 2012 root at farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64 TB --- 2013-11-25 17:30:12 - starting RELENG_8 tinderbox run for i386/i386 TB --- 2013-11-25 17:30:12 -

Hi there, we're using tinc to mesh together hosts in a public datacenter (instead of using a private VLAN, sort of). So all hosts are reasonably modern; connections are low latency with an available bandwith of around 500Mbit/s or 1Gbit/s (depending on how close they are to each other). Iperf between two nodes directly reports around 940Mbit/s. The CPUs are Intel(R) Core(TM) i7-4770 CPU @

Hello all, I am trying to use the tapply function to sum some values and change the column names of the resulting vector. I input Emp Et 1 10565 ACC 2 7515 ADM 3 625 AGF 4 6243 CNS 5 12721 EDU 6 3924 FIN 7 18140 HLH 8 3686 INF 9 15841 MFG 10 243 MIN 11 1864 MNG 12 4664 OSV 13 5496 PRF 14 4988 PUB 15 2166 REC 16 2153 REL 17 16082 RTL 18 3582 TRN 19 757 UTL 20

Hi all, I attempted to add an EL5.1 client to our puppet server (EL5), and after signing the client cert, got the error "Certificates were not trusted: hostname not match with the server certificate" I found the mailing list discussion and the relevant page: http://www.reductivelabs.com/trac/puppet/wiki/RubySSL-2007-006 As far as I can tell, my puppermaster''s cert CN matches

Hi all, I'm back again with my speed issues. The past issues where dependant of network I used. Now I run my tests in a lab, with 2 configurations linked by a Gigabit switch : node1: Intel Core i5-2400 with Debian 7.2 node2: Intel Core i5-3570 with Debian 7.2 Both have AES and PCLMULQDQ announced in /proc/cpuinfo. I use Tinc 1.1 from Git. When I run an iperf test from node2 (client) to