cagney

decoding EC point format

2

In an EC Subject Public Key Info PEM: ``` -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEU7FK0bi1qUymF77fmVfsUWQzwsWVacE9huKsKRIj7tku/QG7peRfmrvMOLbezIqpnRADROwTXQEgCx2rUjee/Q== -----END PUBLIC KEY----- ``` which is for a 256 bit EC, the 520 bit string: ``` 04...

80's not 90's

4

FYI, Wikipedia puts first release in 1987.

With --no-acls I'm surprised that the source is trying to read them vis: ``` + rsync -r --stats --no-acls --no-perms --no-times --chmod=u=rwX,go=rX --itemize-changes --rsync-path 'sudo rsync' --checksum ./bin ./FLAC ./Guitar...

Use CLOCK_REALTIME when logging and CLOCK_MONOTONIC when timing

11

Change update_current_time() so that current_time is set from CLOCK_REALTIME and current_time_ms is set from CLOCK_MONOTONIC. This way log messages display wall clock time while any timing calculations use monotonic time....

not enough sequence numbers available! (expire_timeout=10000000000, host_nr=0, ping_count=0, seqmap_next_id=0)

3

On FreeBSD (14.0, but also 13.x), fping gets this error: ``` +# fping -c 1 --timeout 1s --src 192.0.1.254 192.0.2.254 +fping error: not enough sequence numbers available! (expire_timeout=10000000000, host_nr=0, ping_count=0,...

Please think long and hard about using FreeS/WAN's {left,right} in the config files.

2

Libreswan's left/right syntax can be seen in nmstate's [IPsec](https://nmstate.io/features/ipsec.html) examples vis (i tweaked it as it had left=right): ``` interfaces: - name: hosta_conn type: ipsec ipv4: enabled: true dhcp: true...

way to ignore certain git directories

1

Is there a way to flag that certain very large git repositories should be ignored by pretty-git-prompt? For instance, step into the linux sources and there's a 1s pause; step...

make probing nic_offload really on-demand

4

per: - #1697 in 4.x and 5.0 the code probes the kernel to see if it supports nic_offload while adding an interface; which effectively means during startup (when `ipsec listen`...

When an algorithm is removed from the ike_alg tables (either disabled at build time or dropped by FIPS), the code searches for the name in the enum tables. That way...

f40: `ip route list` et.al. list spray paint the output in techno colour

1

grrrr