From owner-svn-src-projects@freebsd.org Mon Oct 19 01:50:18 2020 Return-Path: Delivered-To: svn-src-projects@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 1DD86441917 for ; Mon, 19 Oct 2020 01:50:18 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4CF07s755Bz3gP6; Mon, 19 Oct 2020 01:50:17 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id D3E721BE4B; Mon, 19 Oct 2020 01:50:17 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 09J1oHeb081721; Mon, 19 Oct 2020 01:50:17 GMT (envelope-from rmacklem@FreeBSD.org) Received: (from rmacklem@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 09J1oHOa081720; Mon, 19 Oct 2020 01:50:17 GMT (envelope-from rmacklem@FreeBSD.org) Message-Id: <202010190150.09J1oHOa081720@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rmacklem set sender to rmacklem@FreeBSD.org using -f From: Rick Macklem Date: Mon, 19 Oct 2020 01:50:17 +0000 (UTC) To: src-committers@freebsd.org, svn-src-projects@freebsd.org Subject: svn commit: r366823 - projects/nfs-over-tls/usr.sbin/rpc.tlsservd X-SVN-Group: projects X-SVN-Commit-Author: rmacklem X-SVN-Commit-Paths: projects/nfs-over-tls/usr.sbin/rpc.tlsservd X-SVN-Commit-Revision: 366823 X-SVN-Commit-Repository: base MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-projects@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: "SVN commit messages for the src " projects" tree" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2020 01:50:18 -0000 Author: rmacklem Date: Mon Oct 19 01:50:17 2020 New Revision: 366823 URL: https://svnweb.freebsd.org/changeset/base/366823 Log: Wrap a line that exceeded 80chars. No semantics changes. Modified: projects/nfs-over-tls/usr.sbin/rpc.tlsservd/rpc.tlsservd.c Modified: projects/nfs-over-tls/usr.sbin/rpc.tlsservd/rpc.tlsservd.c ============================================================================== --- projects/nfs-over-tls/usr.sbin/rpc.tlsservd/rpc.tlsservd.c Mon Oct 19 01:16:39 2020 (r366822) +++ projects/nfs-over-tls/usr.sbin/rpc.tlsservd/rpc.tlsservd.c Mon Oct 19 01:50:17 2020 (r366823) @@ -743,7 +743,8 @@ rpctls_verbose_out("%s\n", cp2); rpctls_verbose_out("rpctls_server: BIO_get_ktls_send=%d\n", ret); if (ret != 0) { ret = BIO_get_ktls_recv(SSL_get_rbio(ssl)); - rpctls_verbose_out("rpctls_server: BIO_get_ktls_recv=%d\n", ret); + rpctls_verbose_out("rpctls_server: BIO_get_ktls_recv=%d\n", + ret); } if (ret == 0) { if (rpctls_debug_level == 0) From owner-svn-src-projects@freebsd.org Mon Oct 19 01:52:28 2020 Return-Path: Delivered-To: svn-src-projects@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 74F57441B84 for ; Mon, 19 Oct 2020 01:52:28 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4CF0BN2bVgz3gwN; Mon, 19 Oct 2020 01:52:28 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 3C5431C21F; Mon, 19 Oct 2020 01:52:28 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 09J1qSox087527; Mon, 19 Oct 2020 01:52:28 GMT (envelope-from rmacklem@FreeBSD.org) Received: (from rmacklem@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 09J1qS1g087526; Mon, 19 Oct 2020 01:52:28 GMT (envelope-from rmacklem@FreeBSD.org) Message-Id: <202010190152.09J1qS1g087526@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rmacklem set sender to rmacklem@FreeBSD.org using -f From: Rick Macklem Date: Mon, 19 Oct 2020 01:52:28 +0000 (UTC) To: src-committers@freebsd.org, svn-src-projects@freebsd.org Subject: svn commit: r366824 - projects/nfs-over-tls X-SVN-Group: projects X-SVN-Commit-Author: rmacklem X-SVN-Commit-Paths: projects/nfs-over-tls X-SVN-Commit-Revision: 366824 X-SVN-Commit-Repository: base MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-projects@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: "SVN commit messages for the src " projects" tree" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2020 01:52:28 -0000 Author: rmacklem Date: Mon Oct 19 01:52:27 2020 New Revision: 366824 URL: https://svnweb.freebsd.org/changeset/base/366824 Log: Fix a minor grammatical error. No semantics change intended. Modified: projects/nfs-over-tls/nfs-over-tls-setup.txt Modified: projects/nfs-over-tls/nfs-over-tls-setup.txt ============================================================================== --- projects/nfs-over-tls/nfs-over-tls-setup.txt Mon Oct 19 01:50:17 2020 (r366823) +++ projects/nfs-over-tls/nfs-over-tls-setup.txt Mon Oct 19 01:52:27 2020 (r366824) @@ -121,7 +121,7 @@ as amd64 (not i386). Then daemons must be running on the NFS server(s) and NFS client(s) for NFS-over-TLS to work. rpc.tlsservd(8) for the server(s) and rpc.tlsclntd(8) for the client(s). -Then you will have to create x509 certificate for at least the NFS +Then you will have to create a x509 certificate for at least the NFS server(s) and, optionally, some or all of the NFS clients. There are many ways to create signed certificates for TLS, but here From owner-svn-src-projects@freebsd.org Mon Oct 19 02:12:33 2020 Return-Path: Delivered-To: svn-src-projects@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 405CB441EBD for ; Mon, 19 Oct 2020 02:12:33 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4CF0dY10MHz3y1d; Mon, 19 Oct 2020 02:12:33 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 05BE71C3C5; Mon, 19 Oct 2020 02:12:33 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 09J2CWfj099785; Mon, 19 Oct 2020 02:12:32 GMT (envelope-from rmacklem@FreeBSD.org) Received: (from rmacklem@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 09J2CWLS099784; Mon, 19 Oct 2020 02:12:32 GMT (envelope-from rmacklem@FreeBSD.org) Message-Id: <202010190212.09J2CWLS099784@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rmacklem set sender to rmacklem@FreeBSD.org using -f From: Rick Macklem Date: Mon, 19 Oct 2020 02:12:32 +0000 (UTC) To: src-committers@freebsd.org, svn-src-projects@freebsd.org Subject: svn commit: r366825 - projects/nfs-over-tls X-SVN-Group: projects X-SVN-Commit-Author: rmacklem X-SVN-Commit-Paths: projects/nfs-over-tls X-SVN-Commit-Revision: 366825 X-SVN-Commit-Repository: base MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-projects@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: "SVN commit messages for the src " projects" tree" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2020 02:12:33 -0000 Author: rmacklem Date: Mon Oct 19 02:12:32 2020 New Revision: 366825 URL: https://svnweb.freebsd.org/changeset/base/366825 Log: Update the setup doc to recognize that snapshots will have everything except the modified openssl and the daemons that use it. Modified: projects/nfs-over-tls/nfs-over-tls-setup.txt Modified: projects/nfs-over-tls/nfs-over-tls-setup.txt ============================================================================== --- projects/nfs-over-tls/nfs-over-tls-setup.txt Mon Oct 19 01:52:27 2020 (r366824) +++ projects/nfs-over-tls/nfs-over-tls-setup.txt Mon Oct 19 02:12:32 2020 (r366825) @@ -11,15 +11,13 @@ awkward, but hopefully this lists all the steps. Go anonymous ftp onto ftp.freebsd.org cd pub/FreeBSD/snapshots/ISO-IMAGES/13.0 - You want to get an install image with "amd64" in it (thats 64bit x86). - The higher the 6digit number, the newer the snapshot. + The more recent data given as 2020MMDD is a newer snapshot. + Any one that is 20201001 or later should be sufficient. An iso with "disc1" in the name is a full install image that can be burned onto a DVD. (I haven't done other types of installs, but there are several others.) - Burn the iso onto a DVD (or whatever). - Install it on a 64bit x86 system. -If the 6digit number is 364898 or higher, the kernel sources and /usr/include -should be sufficiently up to date. If not, you will need to get newer sources -via "svn" and symbolically link the directories into /usr/include. (For here on, you might as well login as root.) Now, you will need a subversion client on some machine. If you do not @@ -27,7 +25,7 @@ already have one, log into the newly installed FreeBSD # pkg install subversion - It will probably ask you to install "pkg" first and then it should work. -If your version is less than 364898 or if you do not already have them, +If you do not already have them, you will need to get up-to-date sources via "svn": # cd /usr/src # svn checkout http://svn.freebsd.org/base/head . @@ -52,17 +50,6 @@ to it. # cd /usr/src # make buildkernel # make installkernel - -Fix the include files. Here's my "cheat" way of doing this. -(This is needed if your installed system is prior to 364898.) -# cd /usr/include -# mv sys sys.old -# ln -s /usr/src/sys/sys sys -# mv fs fs.old -# ln -s /usr/src/sys/fs fs -# mv netinet netinet.old -# ln -s /usr/src/sys/netinet netinet -- This should be enough to allow userspace building. Now, you need jhb@'s patched openssl3 source tree, so you can build it. - If you don't already have one, get a github account.