Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
en.osm.town is one of the many independent Mastodon servers you can use to participate in the fediverse.
An independent, community of OpenStreetMap people on the Fediverse/Mastodon. Funding graciously provided by the OpenStreetMap Foundation.

Administered by:

Server stats:

252
active users

en.osm.town: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#libressl

0 posts0 participants0 posts today
Felix Palmen :freebsd: :c64:<p>Released: <a href="https://mastodon.bsd.cafe/tags/swad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>swad</span></a> v0.1 🥳 </p><p>Looking for a simple way to add <a href="https://mastodon.bsd.cafe/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>authentication</span></a> to your <a href="https://mastodon.bsd.cafe/tags/nginx" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>nginx</span></a> reverse proxy? Then swad *could* be for you!</p><p>swad is the "Simple Web Authentication Daemon", written in pure <a href="https://mastodon.bsd.cafe/tags/C" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>C</span></a> (+ <a href="https://mastodon.bsd.cafe/tags/POSIX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>POSIX</span></a>) with almost no external dependencies. <a href="https://mastodon.bsd.cafe/tags/TLS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TLS</span></a> support requires <a href="https://mastodon.bsd.cafe/tags/OpenSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OpenSSL</span></a> (or <a href="https://mastodon.bsd.cafe/tags/LibreSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>LibreSSL</span></a>). It's designed to work with nginx' "auth_request" module and offers authentication using a <a href="https://mastodon.bsd.cafe/tags/cookie" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cookie</span></a> and a login form.</p><p>Well, this is a first release and you can tell by the version number it isn't "complete" yet. Most notably, only one single credentials checker is implemented: <a href="https://mastodon.bsd.cafe/tags/PAM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PAM</span></a>. But as pam already allows pretty flexible configuration, I already consider this pretty useful 🙈</p><p>If you want to know more, read here:<br><a href="https://github.com/Zirias/swad" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">github.com/Zirias/swad</span><span class="invisible"></span></a></p>
Bryan Steele :flan_beard:<p><a href="https://x.com/openbsd/status/1889330772399501381" rel="nofollow noopener noreferrer" target="_blank"><span class="invisible">https://</span><span class="ellipsis">x.com/openbsd/status/188933077</span><span class="invisible">2399501381</span></a></p><blockquote><p>LibreSSL is not affected by the OpenSSL vulnerabilities announced today.</p></blockquote><p><a href="https://bsd.network/tags/openbsd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>openbsd</span></a> <a href="https://bsd.network/tags/libressl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>libressl</span></a> <a href="https://bsd.network/tags/openssl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>openssl</span></a></p>
Ólafur Jens Sigurðsson<p><span class="h-card" translate="no"><a href="https://mastodon.social/@bagder" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>bagder</span></a></span> makes me wonder if <a href="https://c.im/tags/LibreSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>LibreSSL</span></a> is doing any better in that regard?</p>
Felix Palmen :freebsd: :c64:<p>Finally a <a href="https://mastodon.bsd.cafe/tags/poudriere" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>poudriere</span></a> bulk build of my package list succeeded for <a href="https://mastodon.bsd.cafe/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FreeBSD</span></a> 14.1. Quite some <a href="https://mastodon.bsd.cafe/tags/libressl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>libressl</span></a> fallout to fix (I still refuse to use OpenSSL ...) ... and a few other mysterious issues.</p><p>Testing it on my desktop right now. <a href="https://mastodon.bsd.cafe/tags/ZFS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ZFS</span></a> <a href="https://mastodon.bsd.cafe/tags/bootenvironments" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bootenvironments</span></a> are still AWESOME! Did just the following:</p><p># bectl create new<br># bectl mount new /mnt/tmp<br># cd /usr/src<br># make BATCH_DELETE_OLD_FILES=yes DESTDIR=/mnt/tmp installkernel installworld delete-old delete-old-libs<br># etcupdate -D /mnt/tmp<br># etcupdate resolve -D /mnt/tmp<br># pkg -c /mnt/tmp upgrade -f<br># pkg -c /mnt/tmp autoremove<br># bectl umount new<br># bectl activate -t new</p><p>Full upgrade without touching the running installation, one single reboot to test it! Yes, for a major upgrade, running was FreeBSD 13.3 😁</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://mastodon.social/@rmbolger" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>rmbolger</span></a></span> <span class="h-card" translate="no"><a href="https://hackers.town/@drwho" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>drwho</span></a></span> <span class="h-card" translate="no"><a href="https://mastodon.social/@cacert" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>cacert</span></a></span> Either way, <span class="h-card" translate="no"><a href="https://infosec.exchange/@letsencrypt" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>letsencrypt</span></a></span> should not push such <a href="https://infosec.space/tags/bloatware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bloatware</span></a> becaise there's no valid reason for it.to come.with it's own version of <code>cat</code>, <code>dd</code> and other tools bundled with it...</p><ul><li>Like at worst I would understand them bundling <a href="https://infosec.space/tags/LibreSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>LibreSSL</span></a> &amp; <a href="https://infosec.space/tags/curl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>curl</span></a> if their script relied on it...</li></ul>
Felix Palmen 📯<p>Goal: Get some <a href="https://techhub.social/tags/letsencrypt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>letsencrypt</span></a> certificate obtained with <a href="https://techhub.social/tags/uacme" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>uacme</span></a> deployed on some <a href="https://techhub.social/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Windows</span></a> box</p><p>Step 1: Ok, this probably works best with <a href="https://techhub.social/tags/Powershell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Powershell</span></a> (which I don't really like ...)</p><p>Step 2: There's no <a href="https://techhub.social/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FreeBSD</span></a> port ... but hey, there's now a FreeBSD port of <a href="https://techhub.social/tags/dotnet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>dotnet</span></a>, let's try to "just" build Powershell using that.</p><p>Step 3: Hell why does it fail to build. Oh, System.Security.Cryptography.Native doesn't play well with <a href="https://techhub.social/tags/LibreSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>LibreSSL</span></a></p><p>Patch and retry, I guess I'll take some sleep now first. Bah!</p><p>(there's some irony in running into OpenSSL/LibreSSL issues when trying to deploy TLS certificates ...)</p>
Felix Palmen 📯<p><span class="h-card" translate="no"><a href="https://mastodon.bsd.cafe/@TomAoki" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>TomAoki</span></a></span> <span class="h-card" translate="no"><a href="https://universeodon.com/@peteorrall" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>peteorrall</span></a></span> <span class="h-card" translate="no"><a href="https://social.lol/@hl" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>hl</span></a></span> <span class="h-card" translate="no"><a href="https://mastodon.social/@xdydx" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>xdydx</span></a></span> I'm surprised ... I didn't expect this to come up in the "enterprise" realm, "just" using kerberized <a href="https://techhub.social/tags/NFSv4" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>NFSv4</span></a> instead should be pretty fine there and it's probably more the <a href="https://techhub.social/tags/soho" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>soho</span></a> environment that will profit most from some up-to-date <a href="https://techhub.social/tags/smb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>smb</span></a> client in <a href="https://techhub.social/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FreeBSD</span></a> 😎 ... but would certainly be very nice to get that!</p><p>Also interesting they finally want to move to <a href="https://techhub.social/tags/MIT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MIT</span></a> <a href="https://techhub.social/tags/krb5" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>krb5</span></a> in base. I'll probably continue to build it from ports, so I can use <a href="https://techhub.social/tags/LibreSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>LibreSSL</span></a> instead of <a href="https://techhub.social/tags/OpenSSL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OpenSSL</span></a>, but still nice, as I found you're e.g. forced to use base <a href="https://techhub.social/tags/kerberos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kerberos</span></a> with the NFS client.</p>
ExploreLive feeds
About