From nobody Tue Jun 6 19:15:09 2023 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QbKyV1CzCz4bF4F for ; Tue, 6 Jun 2023 19:18:42 +0000 (UTC) (envelope-from li-fbsd@citylink.dinoex.sub.org) Received: from uucp.dinoex.org (uucp.dinoex.org [IPv6:2a0b:f840::12]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "uucp.dinoex.sub.de", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QbKyR579Vz4Pp8 for ; Tue, 6 Jun 2023 19:18:39 +0000 (UTC) (envelope-from li-fbsd@citylink.dinoex.sub.org) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of li-fbsd@citylink.dinoex.sub.org designates 2a0b:f840::12 as permitted sender) smtp.mailfrom=li-fbsd@citylink.dinoex.sub.org; dmarc=none Received: from uucp.dinoex.org (uucp.dinoex.org [IPv6:2a0b:f840:0:0:0:0:0:12]) by uucp.dinoex.org (8.17.2/8.17.2) with ESMTPS id 356JI80N073364 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Tue, 6 Jun 2023 21:18:08 +0200 (CEST) (envelope-from li-fbsd@citylink.dinoex.sub.org) X-MDaemon-Deliver-To: Received: (from uucp@localhost) by uucp.dinoex.org (8.17.2/8.17.2/Submit) with UUCP id 356JI8kO073363 for freebsd-stable@freebsd.org; Tue, 6 Jun 2023 21:18:08 +0200 (CEST) (envelope-from li-fbsd@citylink.dinoex.sub.org) Received: from admn.intra.daemon.contact (localhost [127.0.0.1]) by admn.intra.daemon.contact (8.17.1/8.17.1) with ESMTPS id 356JFaoL088135 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Tue, 6 Jun 2023 21:15:39 +0200 (CEST) (envelope-from li-fbsd@citylink.dinoex.sub.org) Received: from intra.daemon.contact (news@localhost) by admn.intra.daemon.contact (8.17.1/8.17.1/Submit) with NNTP id 356JF9Av087993 for freebsd-stable@freebsd.org; Tue, 6 Jun 2023 21:15:09 +0200 (CEST) (envelope-from li-fbsd@citylink.dinoex.sub.org) X-Authentication-Warning: admn.intra.daemon.contact: news set sender to li-fbsd@citylink.dinoex.sub.org using -f From: "Peter 'PMc' Much" X-Newsgroups: m2n.fbsd.stable Subject: Re: Camcontrol question related to Seagate disks Date: Tue, 6 Jun 2023 19:15:09 -0000 (UTC) Message-ID: References: <220afa61-4508-5dbd-c870-e405aa23c895@denninger.net> List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Injection-Date: Tue, 6 Jun 2023 19:15:09 -0000 (UTC) Injection-Info: admn.intra.daemon.contact; logging-data="87992"; mail-complaints-to="usenet@citylink.dinoex.sub.org" User-Agent: slrn/1.0.3 (FreeBSD) To: freebsd-stable@freebsd.org X-Milter: Spamilter (Reciever: uucp.dinoex.org; Sender-ip: 0:0:2a0b:f840::; Sender-helo: uucp.dinoex.org;) X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (uucp.dinoex.org [IPv6:2a0b:f840:0:0:0:0:0:12]); Tue, 06 Jun 2023 21:18:11 +0200 (CEST) X-Spamd-Result: default: False [-2.67 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-0.99)[-0.995]; NEURAL_HAM_SHORT(-0.67)[-0.672]; FORGED_SENDER(0.30)[pmc@citylink.dinoex.sub.org,li-fbsd@citylink.dinoex.sub.org]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.10)[text/plain]; MLMMJ_DEST(0.00)[freebsd-stable@freebsd.org]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; DMARC_NA(0.00)[sub.org]; R_DKIM_NA(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; RCPT_COUNT_ONE(0.00)[1]; HAS_XAW(0.00)[]; FROM_HAS_DN(0.00)[]; ARC_NA(0.00)[]; ASN(0.00)[asn:205376, ipnet:2a0b:f840::/32, country:DE]; TO_MATCH_ENVRCPT_ALL(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-stable@freebsd.org]; TO_DN_NONE(0.00)[]; FROM_NEQ_ENVFROM(0.00)[pmc@citylink.dinoex.sub.org,li-fbsd@citylink.dinoex.sub.org] X-Rspamd-Queue-Id: 4QbKyR579Vz4Pp8 X-Spamd-Bar: -- X-ThisMailContainsUnwantedMimeParts: N On 2023-06-06, Karl Denninger wrote: > Certain "newer" Seagate drives have an EPC profile that doesn't interact > as expected with the camcontrol "standard" way to tell spinning disks to > go into an idle state. > > Specifically those that support this: > https://www.seagate.com/files/docs/pdf/en-GB/whitepaper/tp608-powerchoice-tech-provides-gb.pdf "This" whole lengthy babble sounds just like EPC. > The usual has been "camcontrol idle da{x} -t 600" has typically resulted > in a 10 minute timeout, after which it goes into low power I entertain quite a zoo of disks of various brands and ages, and my impression is, about a third of them might behave as "typically" expected in that regard. And practically every model behaves different, some of them in an obscure and unexpected way. Sadly I don't have actual SAS devices available (and it doesn't get clear to me if Your's is SAS or SATA). With SATA You can send low-level commands to the disk via 'camcontrol cmd' - *IF* you manage to figure out what these commands should read. > (sometimes > you want "standby" rather than "idle" depending on the recovery time and > power mode you're after and the specifics of the drive in question.) And which one would You want? Short abstract of the crap: - deskstar/ultrastar older models may have a two-level timer variable with separate values for idle and stop. - WD (whatever rainbow) may have the timer value hidden behind a "vendor specific" gate, as described on truenas ("hacking green and red..."). - ultrastar (newer) may have EPC, but the timer values have only vague realtime resemblance. . seagate (consumer) may be configured to kill themselves with an incredible amount of almost immediate parkings. - ... I for my part got tired of the whole stuff, and there is a little tool in ports sysutils/gstopd, that can be easily expanded to handle SATA, and then the machine (and not the disk) will control when the disk is to stop. (ask me for patch) > The reason is that /it appears //these drives, on power-up, do not > enable the timers /until and unless you send a SSU "START" with the > correct power conditioning bits. Specifically, the power conditioning > value of "7h" has to be specified.  If its not then the EPC timers are > present but, it appears, they are not used. If You can figure out how this command should actually look like byte-wise, you can probably send them. > Does anyone know the proper camcontrol command to do this?  The "start" > command sent when the system spins up does not appear to do so.  If I > send an "idle" or "standby" to the drive with a timeout it takes > effect That stays unclear to me. "start" is SCSI, "idle" and "standby" is SATA. > immediately but any access to it spins it up (as expected) and it does > not re-enter the lower-power mode on the timer, implying that the SSU > command did not enable the timers, and thus they remain inactive even > though they ARE set and camcontrol does report them. Hm, what is SSU? Staggered Spin-Up? I'm trying to configure delayed spin-up with this one on plain SATA: # camcontrol cmd /dev/ada2 -a "EF 06 00 00 00 00 00 00 00 00 00 00" but that doesn't really work, because the device driver has it's own ideas about when to taste the device... No, wait... > To allow unlimited flexibility in controlling the drive’s > PowerChoice technology feature, the Start/Stop Unit (SSU) SCSI > command can be used. Hm... so this would be the *SCSI* command 0x1B... then this one should work (here is the 'STOP' incantation; replace with Your proper bit values according to that seagate paper): # /sbin/camcontrol cmd /dev/xxx -c "1B 01 00 00 00 00" HTH PMc From ml@ft-c.de Tue Jun 13 20:01:46 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Qgfb72LwBz4dhYC for ; Tue, 13 Jun 2023 20:01:55 +0000 (UTC) (envelope-from ml@ft-c.de) Received: from einhorn-mail-out.in-berlin.de (einhorn.in-berlin.de [192.109.42.8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail.in-berlin.de", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Qgfb56gRnz3lmp for ; Tue, 13 Jun 2023 20:01:53 +0000 (UTC) (envelope-from ml@ft-c.de) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of ml@ft-c.de designates 192.109.42.8 as permitted sender) smtp.mailfrom=ml@ft-c.de; dmarc=none X-Envelope-From: ml@ft-c.de X-Envelope-To: Received: from authenticated.user (localhost [127.0.0.1]) by einhorn.in-berlin.de with ESMTPSA id 35DK1o0v861632 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for ; Tue, 13 Jun 2023 22:01:50 +0200 Message-ID: <4cb819068e68768a8ad32f558b2225464a823dba.camel@ft-c.de> Subject: ipfilter block an vhost name From: ft Reply-To: ml@ft-c.de To: stable@FreeBSD.org Date: Tue, 13 Jun 2023 22:01:46 +0200 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.44.4 FreeBSD GNOME Team List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 X-Spamd-Result: default: False [-3.50 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-0.999]; NEURAL_HAM_SHORT(-1.00)[-0.998]; R_SPF_ALLOW(-0.20)[+ip4:192.109.42.0/24]; RCVD_IN_DNSWL_LOW(-0.10)[192.109.42.8:from]; MIME_GOOD(-0.10)[text/plain]; RWL_MAILSPIKE_GOOD(-0.10)[192.109.42.8:from]; RCVD_COUNT_TWO(0.00)[2]; ARC_NA(0.00)[]; R_DKIM_NA(0.00)[]; MLMMJ_DEST(0.00)[stable@FreeBSD.org]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:29670, ipnet:192.109.42.0/24, country:DE]; MIME_TRACE(0.00)[0:+]; DMARC_NA(0.00)[ft-c.de]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[stable@freebsd.org]; HAS_REPLYTO(0.00)[ml@ft-c.de] X-Rspamd-Queue-Id: 4Qgfb56gRnz3lmp X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N Hello=20 It is possible to block all in and/or out packages from an url with no logging any ports (or http and https) It seem it is a vhost, the ip have more url. my example: block in from "brigitte.de" to any block out from "brigitte.de" to any Franz From nobody Tue Jun 13 20:17:52 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Qgfxj2x6Qz4djhZ for ; Tue, 13 Jun 2023 20:18:01 +0000 (UTC) (envelope-from george+freebsd@m5p.com) Received: from mailhost.m5p.com (mailhost.m5p.com [74.104.188.4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "m5p.com", Issuer "R3" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Qgfxj0yz1z3nrF for ; Tue, 13 Jun 2023 20:18:01 +0000 (UTC) (envelope-from george+freebsd@m5p.com) Authentication-Results: mx1.freebsd.org; none Received: from [IPV6:2001:470:1f07:15ff::26] (court.m5p.com [IPv6:2001:470:1f07:15ff:0:0:0:26]) (authenticated bits=0) by mailhost.m5p.com (8.16.1/8.15.2) with ESMTPSA id 35DKHr47046011 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO); Tue, 13 Jun 2023 16:17:58 -0400 (EDT) (envelope-from george+freebsd@m5p.com) Message-ID: Date: Tue, 13 Jun 2023 16:17:52 -0400 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0 Subject: Re: ipfilter block an vhost name To: ml@ft-c.de, stable@FreeBSD.org References: <4cb819068e68768a8ad32f558b2225464a823dba.camel@ft-c.de> Content-Language: en-US From: George Mitchell In-Reply-To: <4cb819068e68768a8ad32f558b2225464a823dba.camel@ft-c.de> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=0.0 required=10.0 tests=HELO_NO_DOMAIN,NICE_REPLY_A autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mattapan.m5p.com X-Rspamd-Queue-Id: 4Qgfxj0yz1z3nrF X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:701, ipnet:74.104.0.0/16, country:US]; TAGGED_FROM(0.00)[freebsd] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N On 6/13/23 16:01, ft wrote: > Hello > > It is possible to block all in and/or out packages from an url > with no logging > any ports (or http and https) > > It seem it is a vhost, the ip have more url. > > my example: > block in from "brigitte.de" to any > block out from "brigitte.de" to any > > > Franz > > At the packet filtering level, all ipfilter has to go on are the source and destination IP addresses in the packet itself. So even if 'block in from "brigitte.de" to any' is syntactically acceptable in your rule set (I believe it is not), it's still blocking on the IP address to which the name resolves, not on the name. -- George From nobody Tue Jun 13 20:24:42 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Qgg5V6Xynz4dkPY for ; Tue, 13 Jun 2023 20:24:46 +0000 (UTC) (envelope-from Holger.Kipp@alogis.com) Received: from DEU01-BE0-obe.outbound.protection.outlook.com (mail-be0deu01on20706.outbound.protection.outlook.com [IPv6:2a01:111:f400:7e23::706]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Qgg5V2VF5z3qZg for ; Tue, 13 Jun 2023 20:24:46 +0000 (UTC) (envelope-from Holger.Kipp@alogis.com) Authentication-Results: mx1.freebsd.org; none ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LqjoWcArnKssy3dVnbSOCnQ72bM3vvmhcAYyn9nW3wPQmCLYcW9dc+IHSKtxIN5qBBVvXUw0hezS8IeAYBjPFlPtiZI1ufF6jyHs99ZHaOK/gqNhOaXE2Yfvw+EzrXAmlYdAIRE9WbigYW/aCHGjQUVq7AO/0yBFv9Rn882RiXavi54Aq4ijv/B+2OZFKa2N105eO4XYjfCIBisyQAswzP9fykikx0VagQ90udU+nUZoGbAKYjWlIcicndcmUD9s3pSr4AasYq0dwhCNCtBzxt7aBj7n2VkSqIljGWRqh+nutTy87rz3ldA3co3d9+QLxnTKOLckVn/spP078dz9vw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=D/suNBtSrK7YA/7f5g3h2KPcjjd8jq9EdX/FT5umXhc=; b=ARQVNj0gO9/p5Hg/2Rb9GDNx5dDM01dJCdkGGwmjl+4rbXO9L0ICWO94A6TeoBWyTMCDR+fwAe1I1k8CI6ySaTJjqtvOkUumwxsX2xZc55PkPwDCFrzU9+LhDQL1k0S0k7DLwalrRlYUW1xwpiHBlp2vGJvcIw9mvcHVi2DImI9909ZsYCMUKcupiE/OCsPcKsQD5DfIVxld5Mpv3AnjFpH0g8z9dqQuFIwOWCQ69dpjEt5XpcjBWhsWD+2kYEYPTk9inRHeke8My0R1wGbnsx8Eh/ZV6ix/SeeNGXDvqaK0fmONChOHx8Df1sVDic2CIUn/qJf5AJCBNvT2aX8U3g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=alogis.com; dmarc=pass action=none header.from=alogis.com; dkim=pass header.d=alogis.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alogis.onmicrosoft.com; s=selector2-alogis-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=D/suNBtSrK7YA/7f5g3h2KPcjjd8jq9EdX/FT5umXhc=; b=bCo4Kt5HYUws80nDlT4wUEVR+2y5rDNVk6poYi8EgpEuD6DlKO8UmesTGznnSsKUQhm/neFM9svcJAZb3h7tJEvsUeB09gbCt8f5bkQF7I8Z31+VJ8QZI6ytHEwvpmMUTVmBQ6641cbgjZTuDJ628G5qgCNIyX2OuAwpI32j+9E= Received: from BE1P281MB2898.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:6e::12) by FR2P281MB1496.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:8f::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6477.29; Tue, 13 Jun 2023 20:24:42 +0000 Received: from BE1P281MB2898.DEUP281.PROD.OUTLOOK.COM ([fe80::d8a4:5cc1:4d4e:403b]) by BE1P281MB2898.DEUP281.PROD.OUTLOOK.COM ([fe80::d8a4:5cc1:4d4e:403b%3]) with mapi id 15.20.6477.028; Tue, 13 Jun 2023 20:24:42 +0000 From: Holger Kipp To: "ml@ft-c.de" CC: "stable@freebsd.org" Subject: Re: ipfilter block an vhost name Thread-Topic: ipfilter block an vhost name Thread-Index: AQHZnjHqp6vIJTbackWrcoY5fhTKb6+JLcf+ Date: Tue, 13 Jun 2023 20:24:42 +0000 Message-ID: References: <4cb819068e68768a8ad32f558b2225464a823dba.camel@ft-c.de> In-Reply-To: <4cb819068e68768a8ad32f558b2225464a823dba.camel@ft-c.de> Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: BE1P281MB2898:EE_|FR2P281MB1496:EE_ x-ms-office365-filtering-correlation-id: fbca9828-f9c8-4e86-06da-08db6c4c385b x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BE1P281MB2898.DEUP281.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230028)(4636009)(376002)(346002)(39840400004)(396003)(366004)(136003)(451199021)(86362001)(6486002)(8676002)(316002)(41300700001)(83380400001)(5660300002)(6512007)(38100700002)(6506007)(33656002)(71200400001)(122000001)(8936002)(38070700005)(64756008)(66476007)(36756003)(66556008)(66446008)(76116006)(4326008)(66946007)(478600001)(186003)(6916009)(4744005)(2906002)(2616005)(45980500001);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?MkdXdy9icVZBeU5sN2YvWHBqd2UyL2U1d2hObHdndjVDSzdVcThpQ242UjNK?= =?utf-8?B?eVdwMFltSkI4dHhPcHV0QWthYmhmZTNIOUZ1WFVtR28zcmZCcW50ZzkrWGt5?= =?utf-8?B?ZzVDWEVGRFdySzVhWjVrdUVUOWdQTy9kaVF4NUIwV2dPVk1Cemx1TVRNcHNM?= =?utf-8?B?VzhyS2FWU0dsNXBkUVRQZ0Z3aXB3SjBtWHBrVUxKQlhKTFMvelVDY3drVUkw?= =?utf-8?B?VXZGbzRKS3VQalNNS2RSTk1sMnUxN1JJZEpkZzM4bVFFNk5rbll3bVE5WFNG?= =?utf-8?B?UDZlUDNKQUV3M0h0aVVhaFhFNlNtaEphL00zaEVGd0JCd0RWVnJkaU4xKzlm?= =?utf-8?B?dE9Dek1sMU82Mk1JTm5tK2pSdy93MXVraTlsNzJCc3QrZDlBb3h4clBqYmk5?= =?utf-8?B?S1hKRE9FVVAzV0ljZDRJMUhEUS8yM0Z1Vk5XTVdKWFlReGlmUlByT2dZNU1p?= =?utf-8?B?SmlyOTJhQjJtNHZ4Y205L1F4dXNCRzFmZ2Z0MHVycXdidTZRS0hLZFBlWTBG?= =?utf-8?B?SDF0TG02L2V2MXlQa2dETzlhbUV3NkJCaWdmWG9WSEZKTi9Bd3FpakdWR2pW?= =?utf-8?B?TExqaGxFeFdNcnRzb0xRWjhZSjU5MmJRblYyODlHVGlIdDNLOVlHbXBOMWsv?= =?utf-8?B?UGVxRWdqWFBISU9BaHVYOU5jMzZBZ2h1WmhRN1hXM0xybGhYMGd0eUNyZnYy?= =?utf-8?B?eXpMaEpkUnpBNHp4VGRmanBWUkJ6aWRLWm0yYllrNEpYMEpwYnRUYlJOQ0sy?= =?utf-8?B?Q3k1UUJVelV5M2ZOSFVaTVRHVXZOOXUvdTN4OE4vZUZML0JCWHNZRzFCSFRi?= =?utf-8?B?VkoyZmlWT1l5R1k2ckswOVNiZGZnL1U1akRtNG81KytFQkZtcXgvRGtBTjJP?= =?utf-8?B?RUp2TGJaT3dOcHhEUlJoZWo1eTBNck1nK2dvVnJzTXFkTHlJaElBSUVGUzBr?= =?utf-8?B?Sjd6UVpCa3g1dU5JK3VWMTlTZnc2VTF0TExIYlJxM3E3M3ppek00K3B6RVdS?= =?utf-8?B?TzhWZ3ZxUmh3enZqVjZTU0NQWWpZdXFkZFJ0bG5XYldkeThhVEJ4OTJRdkh0?= =?utf-8?B?U3hNa2tjSjdzQWVtMlFkRlZSTy96V1FSSGNuRXB6R21Pb2ZzRkFicXZVa3pI?= =?utf-8?B?UVc1b0tuQXBDNnlmQmsrQitVZW9WTUJNUFZWdkRqL3FJeG1RUW9QYUtWdzRV?= =?utf-8?B?VGZXRmdZUW4vTG93NzJVWEJlV3NMZzNvbUZMMldqR3JjbHY0bU1aRFZlaUc1?= =?utf-8?B?N2lzWkhOV2dxR0Y1enE2Y3g2cE41TGxDYlJZaWNQMVpUSmQ4VjRvUTFvaTFy?= =?utf-8?B?eSs3UC90UGlwTVZ5Vjl4ZGRaYTB4Nk03SVgrT2FVWHltcVRWUmovS0ZTb0ZV?= =?utf-8?B?aDN6bW14SG5BbUJBeiswV3Qxd0RFS3NDRHVsdXFOckxhTUxEMWNLREdaQ0c5?= =?utf-8?B?YTQzUG1lN29TekRTUVZnYkdib25MbHBKdkg4a3RCRkp2cTk2QnVmUmJTRVV5?= =?utf-8?B?K1lDOVJBSm5kTVVoS2hjZ2JYby9WaXptUm9Ud1VCaUxaOHhEcFdZL3d5eU1o?= =?utf-8?B?Q3gzaUJRMll1dW8yWnN1cEUzeDdEV2NtQm4yL2N4NFE5eTBHR0VFNVIvdlFh?= =?utf-8?B?ZUlhbjFVSmRRcVNOUUUwbGpUS1RkQktUWVJJTHVqajBDbkJ6NGgxQTE2YXNO?= =?utf-8?B?U2V4SXBMSmIvbjVoaUlsZG0rZVRsNUpnbUs3VHZYZExYQTdQb3RpamJNMjBo?= =?utf-8?B?dUphK2xRU25KUmxSRlZOV2FlbjN5R2tjTU9rQTE0R2hJcmQ4a3lpOVVtcFUr?= =?utf-8?B?bk1VSC9QNmFzY0dJc2VLZHJadC84M3BZMUsrcEFVOTNXNXMyUjFlVm10MW9Z?= =?utf-8?B?dVFjbUV3QytWREI5UHByZi8yQnAzTGZsd0tjVVBIV3ZueEcrVnd5ais2SGoz?= =?utf-8?B?ei9va0hmQ0JicUIrRVBCcTh6VkhLUVFtSmFuZWt2bjlDRzlYZGtObFl0R295?= =?utf-8?B?YXBxUkI4c3pxY29JUjZFQnFYY2dTNy9KM1hYS2M2REJoaWxBeStSSTdjdnFr?= =?utf-8?B?ckJ5M1k5WDFsSE1UaGFSYnM0c2RSbHhJUWlDaXVLUG9tczJRdlBCVFl5L2Nm?= =?utf-8?B?VGkvUWlZdnpyNEtMU21tQ09BV0JtcC9zdWJ4RHgwRTdiV0JoQmt5SEtNbUpx?= =?utf-8?Q?S4aX9UVMA9aw2otqh3ukp3w=3D?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 X-OriginatorOrg: alogis.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BE1P281MB2898.DEUP281.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: fbca9828-f9c8-4e86-06da-08db6c4c385b X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jun 2023 20:24:42.1429 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 15828ba7-fd50-4285-ae4d-078568595b48 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +jSN2n6dr8FFwEsJtCC09Yvupk7lfOqZvtVcPNCX9lvsCsuJKUju6q6nyBKZRdNn X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR2P281MB1496 X-Rspamd-Queue-Id: 4Qgg5V2VF5z3qZg X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N DQpIaSB0aGVyZSwNCg0KPiBPbiAxMy4gSnVuIDIwMjMsIGF0IDIyOjAyLCBmdCA8bWxAZnQtYy5k ZT4gd3JvdGU6DQo+IA0KPiDvu79IZWxsbyANCj4gDQo+IEl0IGlzIHBvc3NpYmxlIHRvIGJsb2Nr IGFsbCBpbiBhbmQvb3Igb3V0IHBhY2thZ2VzIGZyb20gYW4gdXJsDQo+IHdpdGggbm8gbG9nZ2lu Zw0KPiBhbnkgcG9ydHMgKG9yIGh0dHAgYW5kIGh0dHBzKQ0KDQpJIGFzc3VtZSB0aGlzIGlzIGEg cXVlc3Rpb24uIA0KDQpZb3UgY2FuIHVzZSBGUUROcyBidXQgdGhleSB3aWxsIGJlIHJlc29sdmVk IGR1cmluZyBzdGFydHVwIChpZiBETlMgaXMgYXZhaWxhYmxlKSwgc28gZWZmZWN0aXZlbHkgdGhp cyB3aWxsIGp1c3QgdXNlIHRoZSBJUCBhZGRyZXNzLg0KDQo+IEl0IHNlZW0gaXQgaXMgYSB2aG9z dCwgdGhlIGlwIGhhdmUgbW9yZSB1cmwuDQo+IA0KPiBteSBleGFtcGxlOg0KPiBibG9jayBpbiAg ZnJvbSAiYnJpZ2l0dGUuZGUiIHRvIGFueQ0KPiBibG9jayBvdXQgZnJvbSAiYnJpZ2l0dGUuZGUi IHRvIGFueQ0KDQpMYXN0IGxpbmUgc2hvdWxkIGJlIA0KYmxvY2sgb3V0IGZyb20gYW55IHRvICJi cmlnaXR0ZS5kZSINCg0KPiBGcmFueg0KDQpJZiB5b3Ugd2FudCB0byBibG9jayBzcGVjaWZpYyBk b21haW5zIGFuZCBzdWJkb21haW5zIG9ubHksIGJ1dCBub3QgZnVsbCBJUCBhZGRyZXNzZXMsIHlv dSBuZWVkIHRvIHVzZSBzb21lIG1hbmRhdG9yeSBodHRwKHMpIHByb3h5LCB0aG91Z2ggKGVnIHNx dWlkKS4NCg0KQmVzdCByZWdhcmRzDQpIb2xnZXI= From nobody Thu Jun 15 04:02:26 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QhTCF1jgdz4cbgT for ; Thu, 15 Jun 2023 04:02:33 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from omta001.cacentral1.a.cloudfilter.net (omta001.cacentral1.a.cloudfilter.net [3.97.99.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QhTCB3Fpqz3Cwg for ; Thu, 15 Jun 2023 04:02:30 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Authentication-Results: mx1.freebsd.org; dkim=none; spf=none (mx1.freebsd.org: domain of cy.schubert@cschubert.com has no SPF policy when checking 3.97.99.32) smtp.mailfrom=cy.schubert@cschubert.com; dmarc=none Received: from shw-obgw-4001a.ext.cloudfilter.net ([10.228.9.142]) by cmsmtp with ESMTP id 9Qxtq39CfLAoI9eBpq4SU9; Thu, 15 Jun 2023 04:02:29 +0000 Received: from spqr.komquats.com ([70.66.148.124]) by cmsmtp with ESMTPA id 9eBnqeHdGHFsO9eBoqkinY; Thu, 15 Jun 2023 04:02:29 +0000 X-Authority-Analysis: v=2.4 cv=XZqaca15 c=1 sm=1 tr=0 ts=648a8d55 a=Cwc3rblV8FOMdVN/wOAqyQ==:117 a=Cwc3rblV8FOMdVN/wOAqyQ==:17 a=xqWC_Br6kY4A:10 a=kj9zAlcOel0A:10 a=of4jigFt-DYA:10 a=m5QXn6DzAAAA:8 a=Q-fNiiVtAAAA:8 a=NEAV23lmAAAA:8 a=YxBL1-UpAAAA:8 a=6I5d2MoRAAAA:8 a=EkcXrb_YAAAA:8 a=LSvh8wLa8LJD6VgE4yUA:9 a=CjuIK1q_8ugA:10 a=MVGw0nVQe49WX2woHWDl:22 a=Fp8MccfUoT0GBdDC_Lng:22 a=Ia-lj3WSrqcvXOmTRaiG:22 a=IjZwj45LgO3ly-622nXo:22 a=LK5xJRSDVpKd5WXXoEvA:22 Received: from slippy.cwsent.com (slippy [10.1.1.91]) by spqr.komquats.com (Postfix) with ESMTP id 2D8A097D; Wed, 14 Jun 2023 21:02:27 -0700 (PDT) Received: from slippy (localhost [IPv6:::1]) by slippy.cwsent.com (Postfix) with ESMTP id 1275D2C1; Wed, 14 Jun 2023 21:02:27 -0700 (PDT) Date: Wed, 14 Jun 2023 21:02:26 -0700 From: Cy Schubert To: George Mitchell Cc: ml@ft-c.de, stable@FreeBSD.org Subject: Re: ipfilter block an vhost name Message-ID: <20230614210226.6f0fc0a6@slippy> In-Reply-To: References: <4cb819068e68768a8ad32f558b2225464a823dba.camel@ft-c.de> Organization: KOMQUATS X-Mailer: Claws Mail 3.19.0 (GTK+ 2.24.33; amd64-portbld-freebsd14.0) List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4xfPJGlMzJw6j1PfzzbYCn2wdAFVQ7h0qXIWvf8+A3N1xd+x2ks2sB0M6qWTzn/cyrGciQFToOTW/rwh3DYcQp8FWdCkuZkNuWp4v365wDr8dxDnjmvvPg oxLMYv94/y7qRzjo2bDU9Qcg9mjqjIu0cj6qI1YyBy6eYJ1KOycOv+PJOhZDekSeAk3lAcGfRfnFwNGb6imZqCNlVXX0ShVkRPKiBOiIPpC3j6Tzm8MbT5g1 oI3bWiWb7EjhLt+KISBDMA== X-Spamd-Result: default: False [-1.69 / 15.00]; AUTH_NA(1.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.99)[-0.995]; MID_RHS_NOT_FQDN(0.50)[]; MIME_GOOD(-0.10)[text/plain]; RCVD_IN_DNSWL_LOW(-0.10)[3.97.99.32:from]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:16509, ipnet:3.96.0.0/15, country:US]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MLMMJ_DEST(0.00)[stable@freebsd.org]; R_SPF_NA(0.00)[no SPF record]; R_DKIM_NA(0.00)[]; BLOCKLISTDE_FAIL(0.00)[70.66.148.124:server fail,3.97.99.32:server fail]; HAS_ORG_HEADER(0.00)[]; DMARC_NA(0.00)[cschubert.com: no valid DMARC record]; RCVD_COUNT_FIVE(0.00)[5]; ARC_NA(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; TAGGED_RCPT(0.00)[freebsd]; RCVD_VIA_SMTP_AUTH(0.00)[] X-Rspamd-Queue-Id: 4QhTCB3Fpqz3Cwg X-Spamd-Bar: - X-ThisMailContainsUnwantedMimeParts: N On Tue, 13 Jun 2023 16:17:52 -0400 George Mitchell wrote: > On 6/13/23 16:01, ft wrote: > > Hello > > > > It is possible to block all in and/or out packages from an url > > with no logging > > any ports (or http and https) > > > > It seem it is a vhost, the ip have more url. > > > > my example: > > block in from "brigitte.de" to any > > block out from "brigitte.de" to any > > > > > > Franz > > > > > At the packet filtering level, all ipfilter has to go on are the > source and destination IP addresses in the packet itself. So even > if 'block in from "brigitte.de" to any' is syntactically acceptable > in your rule set (I believe it is not), it's still blocking on the > IP address to which the name resolves, not on the name. -- George > All packet filters -- ipfilter, ipfw, pf, npf, iptables, firewalld (iptables repackaged) -- inspect IP, TCP, UDP, and other protocol headers. They cannot inspect packet payload (the data). In the commercial world (like we use at $JOB) we have IPS (intrusion prevention devices), IDS (intrusion detection devices), API gateways (which inspect http data streams (payload), and other devices to inspect packet contents as the OP suggested. A good example of this is the Broadcom Layer7 API gateway (https://www.broadcom.com/products/software/api-management/layer7-api-gateways). Broadcom calls it an XML firewall -- they use the term firewall loosely. In the Open Source world one can install mod_security2, ModSecurity, and other application inspection tools -- some of which call themselves web application firewalls (again, they're not firewalls in the strictest sense). Some application "firewalls" are built on top of a packet filter with an application filter (many written in Java) on top of it. One could build their on XML firewall on top of FreeBSD (with ipfilter, ipfw, or pf) using an API gateway (XML firewall) such as kong (https://github.com/Kong/kong). And as suggested before, if you're trying to protect http services mod_security may work as a layer 7 (OSI model layer 7) firewall for you. Interestingly the Broadcom product, formerly CA, formerly Layer 7, a Vancouver, BC, Canada company, named their product Layer 7 for this very reason. Long story short, if you look the OSI model, the netwrok interface is at layer 1 of the OSI model. The MAC layer (ethernet) at layer 2. IP is layer 3, TCP and UDP are at the transport layer or layer 4. NFS, SQL, SMB, RPC, etc., are at the session, layer 5. Your compression and encryption protocols are at the presentation layer (layer 6). And finally http and other applications are at layer 7. ipfilter, pf, and ipfw work at layers 3 and 4, though pf can also filter at layer 2. You will need some kind of additional software to filter at layer 7. Hope this explanation helps. -- Cheers, Cy Schubert FreeBSD UNIX: Web: https://FreeBSD.org NTP: Web: https://nwtime.org e^(i*pi)+1=0 From ml@ft-c.de Fri Jun 16 04:47:25 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Qj68d0KLSz4dmyL for ; Fri, 16 Jun 2023 04:47:29 +0000 (UTC) (envelope-from ml@ft-c.de) Received: from einhorn-mail-out.in-berlin.de (einhorn.in-berlin.de [192.109.42.8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail.in-berlin.de", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Qj68c0sHXz3MDS for ; Fri, 16 Jun 2023 04:47:28 +0000 (UTC) (envelope-from ml@ft-c.de) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of ml@ft-c.de designates 192.109.42.8 as permitted sender) smtp.mailfrom=ml@ft-c.de; dmarc=none X-Envelope-From: ml@ft-c.de X-Envelope-To: Received: from authenticated.user (localhost [127.0.0.1]) by einhorn.in-berlin.de with ESMTPSA id 35G4lQKA909040 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT) for ; Fri, 16 Jun 2023 06:47:26 +0200 Message-ID: Subject: pg_citus extension error From: ft Reply-To: ml@ft-c.de To: stable@FreeBSD.org Date: Fri, 16 Jun 2023 06:47:25 +0200 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.44.4 FreeBSD GNOME Team List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 X-Spamd-Result: default: False [-3.40 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.90)[-0.899]; R_SPF_ALLOW(-0.20)[+ip4:192.109.42.0/24:c]; RCVD_IN_DNSWL_LOW(-0.10)[192.109.42.8:from]; MIME_GOOD(-0.10)[text/plain]; RWL_MAILSPIKE_GOOD(-0.10)[192.109.42.8:from]; RCVD_COUNT_TWO(0.00)[2]; DMARC_NA(0.00)[ft-c.de]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:29670, ipnet:192.109.42.0/24, country:DE]; FROM_EQ_ENVFROM(0.00)[]; MLMMJ_DEST(0.00)[stable@FreeBSD.org]; MIME_TRACE(0.00)[0:+]; MID_RHS_MATCH_FROM(0.00)[]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[ml@ft-c.de]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[stable@freebsd.org]; ARC_NA(0.00)[] X-Rspamd-Queue-Id: 4Qj68c0sHXz3MDS X-Spamd-Bar: --- X-ThisMailContainsUnwantedMimeParts: N Hello,=20 A postgresql database v14 is running in a jail. I installed pg_citus with portupgrade: no error messages I get an error,=C2=A0 (1). when I=C2=A0create extension citus; or (2). when I change shared_preload_libraries and restart the database (1) errormessage: SQL Error [58P01]: ERROR: could not load library "/usr/local/lib/postgresql/citus.so": /usr/local/lib/libcurl.so.4: Undefined symbol "nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation" (2) when I set the value in postgresql.conf shared_preload_libraries =3D 'citus' and restart, then I get the error-message service postgresql restart 2023-06-16 06:26:19.909 CEST [31451] FATAL:=C2=A0 could not load library "/usr/local/lib/postgresql/citus.so": /usr/local/lib/libcurl.so.4: =C2=A0Undefined symbol "nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation" Here some information: ls -l /usr/local/lib/libcurl* -rw-r--r-- 1 1509404 May 25 03:14 libcurl.a lrwxr-xr-x 1 16 May 25 03:14 libcurl.so -> libcurl.so.4.8.0 lrwxr-xr-x 1 16 May 25 03:14 libcurl.so.4 -> libcurl.so.4.8.0 -rwxr-xr-x 1 706112 May 25 03:14 libcurl.so.4.8.0 ls -l /usr/local/lib/postgresql/citus.so -rwxr-xr-x 1 1711040 Jun 15 22:52 citus.so (all with root wheel) portversion 11.3.0 Do you need more information? Franz From nobody Fri Jun 16 06:21:15 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Qj8Dx21gdz4fJKH for ; Fri, 16 Jun 2023 06:21:21 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Qj8Dx1b8Yz3tVS; Fri, 16 Jun 2023 06:21:21 +0000 (UTC) (envelope-from matthew@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1686896481; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=aX6ByjjpESUdA+hr3pLRFEHZu4hkWXFVHWdFgIg69Mw=; b=Rmtaesxcqvg8/K4OSc9fZrkLOqaDhabWGLwgG5kHVvIDJxLL1gc+EQACm0o7tU8tr+wPgv ebcnLHlXId0ACaAuF+T+4W18q7CtkJhKNNOu3HtHqfC/PRgnFT3++AQhWLzHmHzJHAbVfA nprVr/+/K5D+3q/1ajfJBjo+SOeRU4jc1XcsXeCsGc9f5lsa6PG8rq/rxfsr4lOSeCc4BZ vbU+rvMX70AD2Tx4AvovvavTrsBs6mbGEeYxoqd6Rn7lUICQuT/a9erUGYtjFcgo5/Nmd8 hiekX3Q8nQ0TWqigHlfkAXssnkyZwpAWntrBk+3tBzvMEV7aI1V6WzEjTtSheA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1686896481; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=aX6ByjjpESUdA+hr3pLRFEHZu4hkWXFVHWdFgIg69Mw=; b=aa8wSIpiz4TFrEFGWy75DfEgZZimbLFOtlydCjKcFNYmlejwzqYGuy+OBPOCuwc4hZv7sY qIAehXSq4oAmVWwfOxUxeSM+69JoeMQvtTWoGwKOyt0oqkbTGbYnXbxa9gxqpE66QiY0xz gCcDFqaU46iO3wArW4W8saqLzyQoHeWo2bcluI9rlnAplG+1hOpZjfH4IZjNtmU4b+ll4r Da+YkbmLfGAy2Cs9r580cCm/OUE0dDy6XKdDy7kffIdH1h8BA60/ftU+Zv/3C706xyCWKo QhJbQyLPeaWvmz3mJ7xs+oGFD6MJqjwaeWxq1RLEC4ofOIKg0a0wNth9Ckp8Fg== ARC-Authentication-Results: i=1; smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1686896481; a=rsa-sha256; cv=none; b=bb+SBBj87zzF7SIwmVmBoQKgKKZ2UAbg/R/F3kR/E3gpx+g4UU8pLKObXQmG41RgWriUaZ 1oGSMjkzpz/NHsFsx1BoU+BkmGMjtWOkfiggseI/xdIYTkCLnv0Db1MSdl/To1k4BA7PTZ cwrOLOfAOnOeNqpljjN216HvxNAveJ8SMxwV+QPLicgprJJQ0uVBHE33kN1dW+CwVgcywb 7YgnEUyB8raFjR7nSIewrldrgzmZh+vtQq7AAV24/aOZV2z5PSCDWwiXRsksZtdx6bpwWL 2Auyx1TVWulbZhTSq4sxk8+j2nHQf2XMccqWgPOZvyoBR/lmZ/Ml2GgqkjfTjg== Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: matthew/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4Qj8Dw6dyQz1B10; Fri, 16 Jun 2023 06:21:20 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from [IPV6:2001:8b0:151:1:45dc:7eba:a202:c891] (unknown [IPv6:2001:8b0:151:1:45dc:7eba:a202:c891]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 129CC24A45; Fri, 16 Jun 2023 07:21:16 +0100 (BST) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/129CC24A45; dkim=none; dkim-atps=neutral Message-ID: Date: Fri, 16 Jun 2023 07:21:15 +0100 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.12.0 Subject: Re: pg_citus extension error To: ftimmer@ft-c.de, stable@FreeBSD.org References: From: Matthew Seaman In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------CcYjQIJ8puC1andhMxl8WdUF" X-ThisMailContainsUnwantedMimeParts: N This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------CcYjQIJ8puC1andhMxl8WdUF Content-Type: multipart/mixed; boundary="------------M0w5qEjVpgJwBoVz6Yj0ipOx"; protected-headers="v1" From: Matthew Seaman To: ftimmer@ft-c.de, stable@FreeBSD.org Message-ID: Subject: Re: pg_citus extension error References: In-Reply-To: --------------M0w5qEjVpgJwBoVz6Yj0ipOx Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMTYvMDYvMjAyMyAwNTo0NSwgZnQgd3JvdGU6DQo+IEEgcG9zdGdyZXNxbCBkYXRhYmFz ZSB2MTQgaXMgcnVubmluZyBpbiBhIGphaWwuDQo+IEkgaW5zdGFsbGVkIHBnX2NpdHVzIHdp dGggcG9ydHVwZ3JhZGU6IG5vIGVycm9yIG1lc3NhZ2VzDQo+IA0KPiBJIGdldCBhbiBlcnJv ciwNCj4gKDEpLiB3aGVuIEnCoGNyZWF0ZSBleHRlbnNpb24gY2l0dXM7IG9yDQo+ICgyKS4g d2hlbiBJIGNoYW5nZSBzaGFyZWRfcHJlbG9hZF9saWJyYXJpZXMgYW5kIHJlc3RhcnQgdGhl IGRhdGFiYXNlDQo+IA0KPiAoMSkNCj4gZXJyb3JtZXNzYWdlOg0KPiBTUUwgRXJyb3IgWzU4 UDAxXTogRVJST1I6IGNvdWxkIG5vdCBsb2FkIGxpYnJhcnkNCj4gIi91c3IvbG9jYWwvbGli L3Bvc3RncmVzcWwvY2l0dXMuc28iOiAvdXNyL2xvY2FsL2xpYi9saWJjdXJsLnNvLjQ6DQo+ IFVuZGVmaW5lZCBzeW1ib2wNCj4gIm5naHR0cDJfb3B0aW9uX3NldF9ub19yZmM5MTEzX2xl YWRpbmdfYW5kX3RyYWlsaW5nX3dzX3ZhbGlkYXRpb24iDQo+IA0KDQpUaGFuayB5b3UgdmVy eSBtdWNoIGZvciB0aGUgcmVwb3J0LiAgVGhlIHN5bWJvbCB5b3UgbWVudGlvbiBvbmx5IGFw cGVhcnMgDQppbiB0aGUgY3VybCBzb3VyY2VzIC0tIHRoZXJlJ3Mgbm8gcmVmZXJlbmNlIGZy b20gcGdfY2l0dXMuICBTbyBJIGZlZWwgDQp0aGlzIG1heSBiZSBtb3JlIGEgcHJvYmxlbSBp biBjdXJsIHRoYW4gdG8gZG8gd2l0aCBwZ19jaXR1cy4NCg0KQ2FuIEkgYXMgd2hhdCB2ZXJz aW9uIG9mIGN1cmwgeW91IGhhdmUgaW5zdGFsbGVkLCBhbmQgd2hhdCBvcHRpb25zIHlvdSAN CnVzZWQgdG8gYnVpbGQgdGhhdCBwb3J0Pw0KDQoJQ2hlZXJzLA0KDQoJTWF0dGhldw0KCQ0K --------------M0w5qEjVpgJwBoVz6Yj0ipOx-- --------------CcYjQIJ8puC1andhMxl8WdUF Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEEGfFU7L8RLlBUTj8wAFE/EOCp5OcFAmSL/1sFAwAAAAAACgkQAFE/EOCp5OdM oRAAnTkWtW/KYMbXb5xHk0BG9BOMIUKKCKgRIzQuBi51AFRP6qNahqw1Ei23uQk/7f/x2bYN40hw V2vOHnqAWFJMOzQR0FiVTlPrpQ0uTM3nTxY6tPCgRwNlF98ulK7IbFnqrgiz79AWKKisftbPbVLS 7BCO6Y4QDC6qtZNwO1zuCYfZE7xcXb+gNU0gaEorCNIcQ58+l4189oXucl1cPNdq3wA/6h8au1/5 E5Kc7IZEGsR7MHNgJnAsffAKOLuyKpLh++lXE144QsNFjBFQrRPvDqeBNc2ZoE2otLwdgY544ufP 4twh/buZm85ZriQB9C99hK4axJAhi+IrL51l+mD/q/5eCby4A6oPgccrOtUPZ8aq3lBE3A9O4LzP OLYyhxdm4U46wig+4rA+SeFXbrSyxa+kQIU15XtrEqwgPn2nQlnbNWBt5R6wUSWRarPpY6ubbg0X baQyS8llUwyGxywEOD0ynU4tI3JzUE1jBvPVPAvdURYyHJGNbNkAvIEbv10XPi42Z1Wp72UgTqUG UeSvNAc5yhCdmdTkVZzM6r568LlxxmoYbJdnzy0UT4iWBm47zhoZrLk5CHfybRKyGGy3mQ8foS1y kcUyCVA6ODgIRdiHdfjG/z+0ioiIuPhkgTU/u0xi7VSgDhdmmn6wlbr+NrDScl54K5H9+cl4+ZwE vjQ= =9LH7 -----END PGP SIGNATURE----- --------------CcYjQIJ8puC1andhMxl8WdUF-- From nobody Fri Jun 16 06:37:07 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Qj8bB0l6Mz4fNvn for ; Fri, 16 Jun 2023 06:37:10 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Qj8bB0JmPz41Kg for ; Fri, 16 Jun 2023 06:37:10 +0000 (UTC) (envelope-from matthew@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1686897430; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=5bBU/XOE4fdJ/mee3Jqv4qVvhJYwztYo6/yY45hoi5M=; b=RKZaNGH/X8Id74m1q7HIQPxo8BfTvxq3Zt/v+/R5xEdMm5A0Y2oLJ4Y65oD/iolI6tBgJb bw/ft2cQfXl3e6yxu13DN15DwyNyfLcX8dO7NowaaIDWM3F2ic3iSMfIoZdqPeyzx27F1D i2633z45ZbDQiYG6jGmdague4aDD0TZ3xaCLYbjM0Evb0NwrA7FC/11vdANjc7hpUbAyt7 8UAZooyohWA2TT2eljc90QO44unEkPtnxsbYacEP33YjphR4fu5S6xq18YIj2/yvW9bljd rqX61EoICNr6vl3uwNHCWLa7nCxlF/Xd5JzWRMMDxxxCoEsw6qXe9zV3GEoWWg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1686897430; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=5bBU/XOE4fdJ/mee3Jqv4qVvhJYwztYo6/yY45hoi5M=; b=vVnrBscj8rLDbebMahMl6urn6o8XDnp7TvXBATl/uqFgk3MSmatQm4IC1oXny33+mqd0+9 qka8KlZEXmUB90sall3fFzs5GRLFWwMTIR+WSVFckHc6LQKSYUpGAiuRYyYSc33tAXGnuA VWXqh79WUZC2lzt39MBXwBxJPxHfcpTO7qIJCLGWO+aMjBDxdn/DR4NuokYHy1dm9PZQBZ jYu31Ob0Cvx5nM8ebvEak2IVs8TQ3fLKc8rWicOCMHMGX1/USKpg55gm3x/OzvzD9+OjTX 8xUXBuMNiotCfvFeY23gLf1SOyawd1d2P1Q8Erq/JGKoZitA6oVuUjrF126Msg== ARC-Authentication-Results: i=1; smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1686897430; a=rsa-sha256; cv=none; b=o1hZu2U15qBozJS2VH99YR+7Wgq0QGQYbw3rmM5Jl9SfdiAljC1FM+imTOPjuT+zSvMa0Y DOTiDgkr1tXEO8xTNA3mANST8RUxPR7gv1+lUhZTKVbSMYGz8KPgASe6n9GVPROqaO2qFk SstIB4hKCwiWFVVa4xDHcECEHujXuRXI3MhD2uSv9EPDtyqIn/HTpUSZPglMiu0WzQyZl7 SxuJtc1XY5L8tLSTbm4HmTbBDyJZjsxT91bAnwkQNObZUqI/dv8VWNgNx3AOskH5k4cKzI q8pPuwjOfhZT4vfvX1WpAiWuIqLZSfpZiaioCTSF7Lw6p1SkbyR+CUGGieYNOg== Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: matthew/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4Qj8b95Rq6z1BZC for ; Fri, 16 Jun 2023 06:37:09 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from [IPV6:2001:8b0:151:1:45dc:7eba:a202:c891] (unknown [IPv6:2001:8b0:151:1:45dc:7eba:a202:c891]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 8827B24A96 for ; Fri, 16 Jun 2023 07:37:08 +0100 (BST) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/8827B24A96; dkim=none; dkim-atps=neutral Message-ID: <7c9a3e70-d232-d09d-d8fd-a0ba666e19e1@FreeBSD.org> Date: Fri, 16 Jun 2023 07:37:07 +0100 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.12.0 To: stable@freebsd.org References: From: Matthew Seaman Subject: Re: pg_citus extension error In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------7JFBAtWpo9tT5TiNKMFxLS3c" X-ThisMailContainsUnwantedMimeParts: N This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------7JFBAtWpo9tT5TiNKMFxLS3c Content-Type: multipart/mixed; boundary="------------iam3H3tVQKcjeSA3dXgvV2pV"; protected-headers="v1" From: Matthew Seaman To: stable@freebsd.org Message-ID: <7c9a3e70-d232-d09d-d8fd-a0ba666e19e1@FreeBSD.org> Subject: Re: pg_citus extension error References: In-Reply-To: --------------iam3H3tVQKcjeSA3dXgvV2pV Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMTYvMDYvMjAyMyAwNzoyMSwgTWF0dGhldyBTZWFtYW4gd3JvdGU6DQo+IE9uIDE2LzA2 LzIwMjMgMDU6NDUsIGZ0IHdyb3RlOg0KPj4gQSBwb3N0Z3Jlc3FsIGRhdGFiYXNlIHYxNCBp cyBydW5uaW5nIGluIGEgamFpbC4NCj4+IEkgaW5zdGFsbGVkIHBnX2NpdHVzIHdpdGggcG9y dHVwZ3JhZGU6IG5vIGVycm9yIG1lc3NhZ2VzDQo+Pg0KPj4gSSBnZXQgYW4gZXJyb3IsDQo+ PiAoMSkuIHdoZW4gScKgY3JlYXRlIGV4dGVuc2lvbiBjaXR1czsgb3INCj4+ICgyKS4gd2hl biBJIGNoYW5nZSBzaGFyZWRfcHJlbG9hZF9saWJyYXJpZXMgYW5kIHJlc3RhcnQgdGhlIGRh dGFiYXNlDQo+Pg0KPj4gKDEpDQo+PiBlcnJvcm1lc3NhZ2U6DQo+PiBTUUwgRXJyb3IgWzU4 UDAxXTogRVJST1I6IGNvdWxkIG5vdCBsb2FkIGxpYnJhcnkNCj4+ICIvdXNyL2xvY2FsL2xp Yi9wb3N0Z3Jlc3FsL2NpdHVzLnNvIjogL3Vzci9sb2NhbC9saWIvbGliY3VybC5zby40Og0K Pj4gVW5kZWZpbmVkIHN5bWJvbA0KPj4gIm5naHR0cDJfb3B0aW9uX3NldF9ub19yZmM5MTEz X2xlYWRpbmdfYW5kX3RyYWlsaW5nX3dzX3ZhbGlkYXRpb24iDQo+Pg0KPiANCj4gVGhhbmsg eW91IHZlcnkgbXVjaCBmb3IgdGhlIHJlcG9ydC7CoCBUaGUgc3ltYm9sIHlvdSBtZW50aW9u IG9ubHkgYXBwZWFycyANCj4gaW4gdGhlIGN1cmwgc291cmNlcyAtLSB0aGVyZSdzIG5vIHJl ZmVyZW5jZSBmcm9tIHBnX2NpdHVzLsKgIFNvIEkgZmVlbCANCj4gdGhpcyBtYXkgYmUgbW9y ZSBhIHByb2JsZW0gaW4gY3VybCB0aGFuIHRvIGRvIHdpdGggcGdfY2l0dXMuDQo+IA0KPiBD YW4gSSBhcyB3aGF0IHZlcnNpb24gb2YgY3VybCB5b3UgaGF2ZSBpbnN0YWxsZWQsIGFuZCB3 aGF0IG9wdGlvbnMgeW91IA0KPiB1c2VkIHRvIGJ1aWxkIHRoYXQgcG9ydD8NCg0KQWxzbywg d2hhdCdzIHRoZSBvdXRwdXQgZnJvbSBgbGRkIC91c3IvbG9jYWwvbGliL2xpYmN1cmwuc28u NC4qYCA/ICBvIA0Kc2hvdWxkIGJlIHNlZWluZyBzb21ldGhpbmcgbGlrZSB0aGlzOg0KDQpg YGANCnBrZzp+Li4ucG9ydHMvZGF0YWJhc2VzL3BnX2NpdHVzOiUgbGRkIC91c3IvbG9jYWwv bGliL2xpYmN1cmwuc28uNC4qDQovdXNyL2xvY2FsL2xpYi9saWJjdXJsLnNvLjQuOC4wOg0K CWxpYm5naHR0cDIuc28uMTQgPT4gL3Vzci9sb2NhbC9saWIvbGlibmdodHRwMi5zby4xNCAo MHgyNmE5M2FhOWYwMDApDQoJbGliaWRuMi5zby4wID0+IC91c3IvbG9jYWwvbGliL2xpYmlk bjIuc28uMCAoMHgyNmE5M2E0ZjgwMDApDQoJbGlic3NsLnNvLjExID0+IC91c3IvbG9jYWwv bGliL2xpYnNzbC5zby4xMSAoMHgyNmE5M2IwNTAwMDApDQoJbGliY3J5cHRvLnNvLjExID0+ IC91c3IvbG9jYWwvbGliL2xpYmNyeXB0by5zby4xMSAoMHgyNmE5M2I5ZTcwMDApDQoJbGli enN0ZC5zby4xID0+IC91c3IvbG9jYWwvbGliL2xpYnpzdGQuc28uMSAoMHgyNmE5M2M3Mzkw MDApDQoJbGliei5zby42ID0+IC9saWIvbGliei5zby42ICgweDI2YTkzYzlkMTAwMCkNCgls aWJ0aHIuc28uMyA9PiAvbGliL2xpYnRoci5zby4zICgweDI2YTkzZDY1NTAwMCkNCglsaWJj LnNvLjcgPT4gL2xpYi9saWJjLnNvLjcgKDB4MjZhOTM2MmYzMDAwKQ0KCWxpYnVuaXN0cmlu Zy5zby41ID0+IC91c3IvbG9jYWwvbGliL2xpYnVuaXN0cmluZy5zby41ICgweDI2YTkzZTIy MzAwMCkNCmBgYA0KDQoJQ2hlZXJzLA0KDQoJTWF0dGhldw0K --------------iam3H3tVQKcjeSA3dXgvV2pV-- --------------7JFBAtWpo9tT5TiNKMFxLS3c Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEEGfFU7L8RLlBUTj8wAFE/EOCp5OcFAmSMAxMFAwAAAAAACgkQAFE/EOCp5Ods pg/+KdRSh2mVyAB6daVxKWbeR/xp7G1FEYrxfgsWY2vXCxyP3Z2ks4RwZTFIWmIHuJt9Q5c3M8S9 CWdqUBecuFVkIA/4BR2Tnll+oqB0P6s9y74byALBM5DVegdg4m+kIEa1fyXhRQqVUnEd7grzZBvx XsNhNEkf8HbajyMaEmlxuvPRqtJ02Wq5fYlW4F2Jn4OhgMK9u3Rp/rBsXsE3zyHTpdUvMnWg6ns4 JOxjjl34SWt7e5LWMDQWTkkEWw7XOvvFD6tjOPmxdlMTP+N+rrRRjHgYMcK9/jc2oi/Y3qeM8XP+ TjInqwVr1A5cwbaiPrksG7oZupNP23nJ7Ky3ryO26dvFeSSmI5004fOYCX6Qk2bqpjLK2ss2H6m2 Bt5QG4YijPty87SrsqKeDNzsee+vIzcZUIhXoe+zzo6gNk0QPHk2WAwZ30e2AMoilESBQa7L9Gq4 Y+csf83rv4PvWerI5tuXuB1l8e4H7k8xZ8g36bPGtnywX9IgwxFx/kMQCdOIaFms99ai0qLKz7dV CEH9eR72XSbKmLisgWazm+ujod9yI9JA9v/FIx7tcTJomodVqUKIDqzPihE0zuzx031Qn1lwutv+ Gjfd9pJqTmvRFJ10oS227OL11U60nQPeQwyxglQMKjOWCuhdAurOymi2CrdWJv0quC6bnbwsH6xK yFA= =+Bk4 -----END PGP SIGNATURE----- --------------7JFBAtWpo9tT5TiNKMFxLS3c-- From ml@ft-c.de Fri Jun 16 07:32:29 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Qj9q529yVz4fbJW for ; Fri, 16 Jun 2023 07:32:33 +0000 (UTC) (envelope-from ml@ft-c.de) Received: from einhorn-mail-out.in-berlin.de (einhorn.in-berlin.de [192.109.42.8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail.in-berlin.de", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Qj9q50p6mz4Chc for ; Fri, 16 Jun 2023 07:32:33 +0000 (UTC) (envelope-from ml@ft-c.de) Authentication-Results: mx1.freebsd.org; none X-Envelope-From: ml@ft-c.de Received: from authenticated.user (localhost [127.0.0.1]) by einhorn.in-berlin.de with ESMTPSA id 35G7WTAT1154086 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Fri, 16 Jun 2023 09:32:30 +0200 Message-ID: Subject: Re: pg_citus extension error From: ft Reply-To: ml@ft-c.de To: Matthew Seaman , stable@FreeBSD.org Date: Fri, 16 Jun 2023 09:32:29 +0200 In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.44.4 FreeBSD GNOME Team List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 X-Rspamd-Queue-Id: 4Qj9q50p6mz4Chc X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:29670, ipnet:192.109.42.0/24, country:DE] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N On Fri, 2023-06-16 at 07:21 +0100, Matthew Seaman wrote: > On 16/06/2023 05:45, ft wrote: > > A postgresql database v14 is running in a jail. > > I installed pg_citus with portupgrade: no error messages > >=20 > > I get an error, > > (1). when I=C2=A0create extension citus; or > > (2). when I change shared_preload_libraries and restart the > > database > >=20 > > (1) > > errormessage: > > SQL Error [58P01]: ERROR: could not load library > > "/usr/local/lib/postgresql/citus.so": /usr/local/lib/libcurl.so.4: > > Undefined symbol > > "nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation" > >=20 >=20 > Thank you very much for the report.=C2=A0 The symbol you mention only > appears=20 > in the curl sources -- there's no reference from pg_citus.=C2=A0 So I fee= l > this may be more a problem in curl than to do with pg_citus. >=20 > Can I as what version of curl you have installed, and what options > you=20 > used to build that port? >=20 Hello your first question: version of curl pkg info curl curl-8.1.1 Name : curl Version : 8.1.1 Installed on : Mon Jun 12 10:28:00 2023 CEST Origin : ftp/curl Architecture : FreeBSD:13:amd64 Prefix : /usr/local Categories : www net ftp Maintainer : sunpoet@FreeBSD.org WWW : https://curl.se/ Options : ALTSVC : on BROTLI : off CARES : off CA_BUNDLE : on COOKIES : on CURL_DEBUG : off DEBUG : off DICT : on DOCS : on EXAMPLES : on FTP : on GNUTLS : off GOPHER : on GSSAPI_BASE : on GSSAPI_HEIMDAL : off GSSAPI_MIT : off GSSAPI_NONE : off HTTP : on HTTP2 : on IDN : off IMAP : on IPV6 : on LDAP : off LDAPS : off LIBSSH2 : on MQTT : off NTLM : on OPENSSL : on POP3 : on PROXY : on PSL : on RTMP : off RTSP : on SMB : off SMTP : on STATIC : on TELNET : on TFTP : on THREADED_RESOLVER: on TLS_SRP : on WOLFSSL : off ZSTD : off Shared Libs required: libssh2.so.1 libpsl.so.5 libnghttp2.so.14 Shared Libs provided: libcurl.so.4 Annotations : FreeBSD_version: 1301000 cpe : cpe:2.3:a:haxx:curl:8.1.1:::::freebsd13:x64 the second question: ldd ... [ft@jail_pg01 ~]$ ldd /usr/local/lib/libcurl.so.4.* /usr/local/lib/libcurl.so.4.8.0: libnghttp2.so.14 =3D> /usr/local/lib/libnghttp2.so.14 (0x80153d000) libssh2.so.1 =3D> /usr/local/lib/libssh2.so.1 (0x80156f000) libpsl.so.5 =3D> /usr/local/lib/libpsl.so.5 (0x8015ae000) libssl.so.111 =3D> /usr/lib/libssl.so.111 (0x801e00000) libheimntlm.so.11 =3D> /usr/lib/libheimntlm.so.11 (0x8015c2000) libhx509.so.11 =3D> /usr/lib/libhx509.so.11 (0x801e98000) libcom_err.so.5 =3D> /usr/lib/libcom_err.so.5 (0x8015cc000) libcrypto.so.111 =3D> /lib/libcrypto.so.111 (0x801ee9000) libasn1.so.11 =3D> /usr/lib/libasn1.so.11 (0x8021dc000) libwind.so.11 =3D> /usr/lib/libwind.so.11 (0x8015d1000) libheimbase.so.11 =3D> /usr/lib/libheimbase.so.11 (0x80227f000) libroken.so.11 =3D> /usr/lib/libroken.so.11 (0x802286000) libcrypt.so.5 =3D> /lib/libcrypt.so.5 (0x80229b000) libz.so.6 =3D> /lib/libz.so.6 (0x8022bc000) libkrb5.so.11 =3D> /usr/lib/libkrb5.so.11 (0x8022d9000) libgssapi.so.10 =3D> /usr/lib/libgssapi.so.10 (0x80235b000) libgssapi_krb5.so.10 =3D> /usr/lib/libgssapi_krb5.so.10 (0x802367000) libthr.so.3 =3D> /lib/libthr.so.3 (0x802389000) libc.so.7 =3D> /lib/libc.so.7 (0x801083000) libintl.so.8 =3D> /usr/local/lib/libintl.so.8 (0x8023b7000) libunistring.so.2 =3D> /usr/local/lib/libunistring.so.2 (0x8023c5000) libidn2.so.0 =3D> /usr/local/lib/libidn2.so.0 (0x8025c1000) libprivateheimipcc.so.11 =3D> /usr/lib/libprivateheimipcc.so.11 (0x8025f5000) From nobody Fri Jun 16 16:57:45 2023 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QjQMg4gKrz4f1Pp for ; Fri, 16 Jun 2023 16:58:07 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QjQMg2LGVz3N87; Fri, 16 Jun 2023 16:58:07 +0000 (UTC) (envelope-from matthew@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1686934687; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=lWyZMO7mNO3zH2B2hDzcizlKMxjMHajlpeeNCrHJlPo=; b=w+lUKvomDBf12BEttYbzicCWiKc5s1wKdfjTUD84UUZBly1xKDlNzdNLBVHMQeQtiMj2J5 1q3B2dgo6SuHprAJ3+RC1F0pAC52jvSdFy4s/uPcS5hEr8QxjH0GYBPra88NYBcad8h5DZ BoVJmn2G+KABDB7WKqsWzgoLAqTQ1ucAR5mDXOrEVfcAd9TZPh+7D03a7hxLbDls9iREQf 5GnXCN/8rITVIWoGBxv0Yv2jK0IHjCgaBENBy9PZu7k2LHndcZcwKt54AeW/q3oIvyYdSq vZ9OQqF9/8AkXrIHe61QqIo+hsCnZHIyAO7shUEgHgDCWOZNga5cPwukGkSNKw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1686934687; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=lWyZMO7mNO3zH2B2hDzcizlKMxjMHajlpeeNCrHJlPo=; b=r25HhlsLUlwX1EiDVPCt66dQVAqcuC2NismW/DW3indTvIwW6bpiZCd2/39dZ/iwqesCvb XGxbZQ9r5VX7nvASWB78RKM9IdG9T4q4RynvgdNZSEjClR7fs+Grzp3S6ob9An68Ena3SU MBTK8WvsDLRCT0J8bDxXAsYwTvUUiVL66zIoQg6MAC93TyXWihgNsQlNUFV7KOPbZqAjhi 6Ak7YDN4QHKTyCSfS73+bvVjvqZZxGnuFyQmIHEdwKSNlVR2Dq405qMiX2ezy0A4FX9pei zmM9ds7cNrd9rHsh4ymaixkeWSWvL2ZoVeebyo8ZtTUssRs2u6cEobVdXOJbOA== ARC-Authentication-Results: i=1; smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1686934687; a=rsa-sha256; cv=none; b=j9EYQZaQPTcE32/xRla5hLgxzsk7CSWwIZuRcxMWeYLoKuyk/FK+5NqA7rrm+coj408ae2 3I/YaqopPRAbucHw92bisXShmsNJDTwriqQMfFdU8Mt0mY0loyI6nINofTYOjY+kdoINvQ iKVZxgh2NN5VzBhdhEe9JThxVTVk093ovdxyvYvQtXAGPslqMPA/UCdYyHaaNSRAqCrXat zq8TMIXXla6S1XP3LBUEclIFdlK0nrVGC2cR75vvIIA+X7ZuMSrSU8vV5ArCCXArIk3ucp xo5B0uHWJNuxbkGjl9N5Pa0UTFal/O+twrV/u1qU7CDszlG4fH5IrcKSNSXx0A== Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: matthew/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4QjQMf6TC5zPXd; Fri, 16 Jun 2023 16:58:06 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from [IPV6:2001:8b0:151:1:9840:8e86:a34e:c321] (unknown [IPv6:2001:8b0:151:1:9840:8e86:a34e:c321]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id A6ED324D16; Fri, 16 Jun 2023 17:58:03 +0100 (BST) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none (p=none dis=none) header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/A6ED324D16; dkim=none; dkim-atps=neutral Message-ID: Date: Fri, 16 Jun 2023 17:57:45 +0100 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.12.0 To: ml@ft-c.de, stable@FreeBSD.org References: From: Matthew Seaman Subject: Re: pg_citus extension error In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------dVGIW82mnYnb2iWJo0o8iPW4" X-ThisMailContainsUnwantedMimeParts: N This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------dVGIW82mnYnb2iWJo0o8iPW4 Content-Type: multipart/mixed; boundary="------------JoMN5LrJyZMY0Nte5MiQdoCD"; protected-headers="v1" From: Matthew Seaman To: ml@ft-c.de, stable@FreeBSD.org Message-ID: Subject: Re: pg_citus extension error References: In-Reply-To: --------------JoMN5LrJyZMY0Nte5MiQdoCD Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMTYvMDYvMjAyMyAwODozMiwgZnQgd3JvdGU6DQo+IE9uIEZyaSwgMjAyMy0wNi0xNiBh dCAwNzoyMSArMDEwMCwgTWF0dGhldyBTZWFtYW4gd3JvdGU6DQo+PiBPbiAxNi8wNi8yMDIz IDA1OjQ1LCBmdCB3cm90ZToNCj4+PiBBIHBvc3RncmVzcWwgZGF0YWJhc2UgdjE0IGlzIHJ1 bm5pbmcgaW4gYSBqYWlsLg0KPj4+IEkgaW5zdGFsbGVkIHBnX2NpdHVzIHdpdGggcG9ydHVw Z3JhZGU6IG5vIGVycm9yIG1lc3NhZ2VzDQo+Pj4NCj4+PiBJIGdldCBhbiBlcnJvciwNCj4+ PiAoMSkuIHdoZW4gScKgY3JlYXRlIGV4dGVuc2lvbiBjaXR1czsgb3INCj4+PiAoMikuIHdo ZW4gSSBjaGFuZ2Ugc2hhcmVkX3ByZWxvYWRfbGlicmFyaWVzIGFuZCByZXN0YXJ0IHRoZQ0K Pj4+IGRhdGFiYXNlDQo+Pj4NCj4+PiAoMSkNCj4+PiBlcnJvcm1lc3NhZ2U6DQo+Pj4gU1FM IEVycm9yIFs1OFAwMV06IEVSUk9SOiBjb3VsZCBub3QgbG9hZCBsaWJyYXJ5DQo+Pj4gIi91 c3IvbG9jYWwvbGliL3Bvc3RncmVzcWwvY2l0dXMuc28iOiAvdXNyL2xvY2FsL2xpYi9saWJj dXJsLnNvLjQ6DQo+Pj4gVW5kZWZpbmVkIHN5bWJvbA0KPj4+ICJuZ2h0dHAyX29wdGlvbl9z ZXRfbm9fcmZjOTExM19sZWFkaW5nX2FuZF90cmFpbGluZ193c192YWxpZGF0aW9uIg0KPj4+ DQo+Pg0KPj4gVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIHJlcG9ydC7CoCBUaGUgc3lt Ym9sIHlvdSBtZW50aW9uIG9ubHkNCj4+IGFwcGVhcnMNCj4+IGluIHRoZSBjdXJsIHNvdXJj ZXMgLS0gdGhlcmUncyBubyByZWZlcmVuY2UgZnJvbSBwZ19jaXR1cy7CoCBTbyBJIGZlZWwN Cj4+IHRoaXMgbWF5IGJlIG1vcmUgYSBwcm9ibGVtIGluIGN1cmwgdGhhbiB0byBkbyB3aXRo IHBnX2NpdHVzLg0KPj4NCj4+IENhbiBJIGFzIHdoYXQgdmVyc2lvbiBvZiBjdXJsIHlvdSBo YXZlIGluc3RhbGxlZCwgYW5kIHdoYXQgb3B0aW9ucw0KPj4geW91DQo+PiB1c2VkIHRvIGJ1 aWxkIHRoYXQgcG9ydD8NCj4+DQo+IEhlbGxvDQo+IA0KPiB5b3VyIGZpcnN0IHF1ZXN0aW9u OiB2ZXJzaW9uIG9mIGN1cmwNCj4gDQo+IHBrZyBpbmZvIGN1cmwNCj4gY3VybC04LjEuMQ0K Wy4uLl0NCg0KY3VybC04LjEuMiBpcyBjdXJyZW50LCBidXQgYmVpbmcgb25lIHBhdGNobGV2 ZWwgYmVoaW5kIHNob3VsZCBub3QgYmUgYSANCnByb2JsZW0uICBMb29rcyBmaW5lLg0KDQo+ IHRoZSBzZWNvbmQgcXVlc3Rpb246IGxkZCAuLi4NCj4gDQo+IFtmdEBqYWlsX3BnMDEgfl0k ICBsZGQgL3Vzci9sb2NhbC9saWIvbGliY3VybC5zby40LioNCj4gL3Vzci9sb2NhbC9saWIv bGliY3VybC5zby40LjguMDoNCj4gICAgbGlibmdodHRwMi5zby4xNCA9PiAvdXNyL2xvY2Fs L2xpYi9saWJuZ2h0dHAyLnNvLjE0ICgweDgwMTUzZDAwMCkNCg0KQWxzbyBmaW5lLg0KDQpJ J3ZlIHRyaWVkIHRvIHJlcHJvZHVjZSB0aGUgcHJvYmxlbSwgYnV0IHdpdGhvdXQgc3VjY2Vz cyBzbyBmYXIuICBJIG5vdGUgDQp0aGF0IHdhcyB1c2luZyB0aGUgZGVmYXVsdCBvcHRpb25z IHNldHRpbmdzIGZvciBwZ19jaXR1cyB3aGljaCBkb2VzIGhhdmUgDQpBTk9OU1RBVFMgZGlz YWJsZWQuICBHaXZlbiB0aGF0IGVuYWJsaW5nIEFOT05TVEFUUyBpcyB0aGUgb25seSByZWFz b24gDQpmb3IgcGdfY2l0dXMgdG8gaGF2ZSBhbnl0aGluZyBhdCBhbGwgdG8gZG8gd2l0aCBs aWJjdXJsLCBJIHNlZSBJIG5lZWQgdG8gDQp0ZXN0IHdpdGggdGhhdCBvcHRpb24gZW5hYmxl ZC4NCg0KSWYgeW91J3JlIGRlc3BlcmF0ZSBmb3IgYSB3b3JrYXJvdW5kIHRob3VnaCwgdHJ5 IGVuc3VyaW5nIEFOT05TVEFUUyBpcyANCm9mZiBhbmQgcmVidWlsZCBwZ19jaXR1cy4NCg0K CUNoZWVycywNCg0KCU1hdHRoZXcNCg0K --------------JoMN5LrJyZMY0Nte5MiQdoCD-- --------------dVGIW82mnYnb2iWJo0o8iPW4 Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEEGfFU7L8RLlBUTj8wAFE/EOCp5OcFAmSMlIkFAwAAAAAACgkQAFE/EOCp5Od0 cw//aoQV/0krN0hjIusxG/o/q0q6gCcDRReY1IZwaT4WLe6yO7J4rk94iIBxzMeWYknUVp6vWcCy YxcHcc7kLiGfTerSPqmo5L/0BobPrJJ04dy6ep05GPsycjJ6+QamDYuU9fNjM1XcCiZ5sP7ukhyJ axl2ZM4zPYFcJLKeDKgkEgXwK0qheiMvhIxjgCkRqQuRE0ZmAI/1nlChGy1h4MALBK6CZpK0DNXB LEBqM0YzxhKTuuNV9Z21HZyDgmEGHt6O03jmkqZTqLhJLksp2xdycox4+ufEETiR8cBpMKg3qGof uQcpdPTXUcet5oqYmZesSJywnx7iyO3Rlw3f5KU+hHnD76rqsnSZw4UljvvZRpibuLtsYpzLc6K4 HvDIvwRFbWGiTDRTzg4hvnnKTuref21wVCr8zv2sgy5b6A2wc4dMHm3mQxCLhv4dNRkFk8/46CKD 9zYqzjrlEYRPqfACwXkWQl1Cc6WOMAgoRKpCE0rCMD0Osn3bc2/k7hNugL7NVRodeJdtzqAB0ZVf JknJww+6yeJL4gpGvt5PGH6nkDAHF+Dde4418AN0WEXcSqmbb3tTkhjbxFI752V2GOd+9626gKid rSHup9oyobpUKZhSAMepkEdzpwYr+fqXlHaQPBraGLXBO8oXnK3346FtWL6Gi0N80YLKIqRlomYK l58= =PC5I -----END PGP SIGNATURE----- --------------dVGIW82mnYnb2iWJo0o8iPW4--