Posts by timkuijsten@mastodon.social
 (DIR) Post #9iVKo7jlxBHAgplHHc by timkuijsten@mastodon.social
       2019-05-05T14:01:02Z
       
       0 likes, 2 repeats
       
       I'm hereby announcing the first public alpha release of WireSep: aprivilege separated implementation of WireGuard for OpenBSD. I'vebeen using it for a couple of weeks now with the official WireGuardfor Android client and I didn't experience any major hiccups.Feedback on the design and implementation is appreciated.https://github.com/timkuijsten/wiresep #vpn
       
 (DIR) Post #9leua37SLTVzzSjLPc by timkuijsten@mastodon.social
       2019-08-07T22:09:23Z
       
       1 likes, 2 repeats
       
       Just released v0.6.0 of WireSep, a privilege separated implementation of WireGuard for OpenBSD.* lot's of small refinements and some code restructuring* interface public key is no longer needed or allowed, only the private key* improve DoS resistence in the proxy by looking up sessions in logarithmic time* improvements to wiresep-keygen(1)See the ChangeLog for additional details: https://github.com/timkuijsten/wiresep/blob/master/ChangeLog #vpn #openbsd #wireguard
       
 (DIR) Post #9oUuFaVZQ3WNrvoO6C by timkuijsten@mastodon.social
       2019-10-31T16:37:56Z
       
       1 likes, 2 repeats
       
       Proudly presenting WireSep v0.8.0. WireSep is a privilege separated implementation of WireGuard for OpenBSD.Some highlights of this release:* private and pre-shared keys should now be put in a separate file. Default paths are used if not overruled, see wiresep.conf(5) for details.* greatly reduce the maximum resource limits on data and stack size and open descriptors* various improvements to the documentationChangeLog: https://github.com/timkuijsten/wiresep/blob/v0.8.0/ChangeLog#vpn #wireguard #openbsd #privsep
       
 (DIR) Post #9t2NX4xcD4QHDBSZCS by timkuijsten@mastodon.social
       2020-03-15T16:46:21Z
       
       0 likes, 1 repeats
       
       Just released version 0.9.0 of WireSep, a privilege separated implementation of WireGuard for OpenBSD.This release features a new client-only mode, a major rewrite of the connection management code and some performance and stability improvements.ChangeLog: https://github.com/timkuijsten/wiresep/blob/v0.9.0/ChangeLog#vpn #wireguard #openbsd #privsep
       
 (DIR) Post #9t3fnQ6hLdb7lLbryS by timkuijsten@mastodon.social
       2020-03-16T00:12:49Z
       
       2 likes, 0 repeats
       
       Yaay!! WireSep is now in OpenBSD ports!! 😀 https://marc.info/?l=openbsd-ports-cvs&m=158430973815254&w=2Thanks @qbit and others for importing my project!#wireguard #openbsd
       
 (DIR) Post #9tXeM9T93tggTeLjZQ by timkuijsten@mastodon.social
       2020-03-30T18:49:58Z
       
       0 likes, 0 repeats
       
       What would be the cheapest option to have an OpenBSD system on big-endian? I'd like to be able to test wiresep on it. I know about the EdgeRouter Lite, but I find EUR 100,- a bit expensive for something I don't really need personally.
       
 (DIR) Post #9tnC1qEzDJPEEf1w5Q by timkuijsten@mastodon.social
       2020-04-06T22:31:47Z
       
       1 likes, 0 repeats
       
       WireSep v0.11.0 is out!WireSep is a privilege separated implementation of WireGuard for OpenBSD.Some highlights:* wiresep-keygen(1) now securely stores keys in a file so no more copy/pasting* proper support for big-endian systems* various other improvements and fixeshttps://github.com/timkuijsten/wiresep/blob/master/ChangeLogNote: when upgrading from a previous version, please rename your private key files:# cd /etc/wiresep &&for _f in `ls *.key`; do mv "$_f" ${_f%.key}.privkey; done#vpn #wireguard #openbsd #privsep
       
 (DIR) Post #9uRMbr3mN5kxp8FDE0 by timkuijsten@mastodon.social
       2020-04-26T15:53:02Z
       
       0 likes, 2 repeats
       
       WireSep v0.11.3 is out, it contains quite a bunch reliability fixes, especially related to potential deadlocks on transient socket errors.Thanks to the community in providing me with a macppc so I can now properly stress test from home with all the devices I have. :)https://netsend.nl/wiresepSHA256 (wiresep-0.11.3.tar.gz) = uvhWBE7V9C7Zqms7ApSiFODi7thN7jO+QM2BBtFFBK8=#vpn #wireguard #openbsd #privsep