OPENBSD BLOG PLEASE DROP A COMMENT

[jon1enforce]

[jon1enforce]

A OPENBSD BLOG ON PYBITMESSAGE:::

+++
ERROR
+++
locale.py line 627
local.setlocale(locale.LC_ALL, newlocale)
unsupported locale settings
https://bugs.python.org/issue31636

+++
Libressl, the fast way is to substitude it with eopenssl11:
+++
1)pkg_add openssl
2)choose version 1.1.1
3)edit openssl.py (PATH /pybitmessage/pyelliptic/openssl.py) at loadOpenSSL():
libdir = []
+libdir.append('/usr/local/lib/eopenssl11/libcrypto.so.11.6')
+libdir.append('/usr/local/eopenssl11/libssl.so.11.6')
4) python3 pybitmessage/bitmessagemain.py
+++
the best way is to migrate from libressl to libressl 1.x.x.x with compiler..
+++
since pip3 install openbsd exist, there is an option to isolate the messenger from the system.
It is not necessary, but pledge and unveil give very good informations about programs, it can be used as a debug tool for optimizing issues.
Just make hard restrictions -- and look at the dropped errors. The challenge is, to write a program that way, that works with very hard restrictions. Like unveil everything except one folder and maybe /tmp... or give very smart pledges.
+++
freebsd and openbsd port
+++
the network interface looks different in any instances, like:
Linux /usr/include/bits/socket.h:

struct ucred {
__u32 pid;
__u32 uid;
__u32 gid;
};
openbsd /usr/include/sys/socket.h:

struct sockpeercred {
uid_t uid; /* effective user id /
gid_t gid; / effective group id */
pid_t pid;
};
+++
what is about
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
s.bind((HOST, PORT))
the SO_REUSEADDR flag tells the kernel to reuse a local socket in TIME_WAIT state, without waiting for its natural timeout to expire.
+++
self.sock.setsockopt(socket.IPPROTO_IP, socket.IP_MULTICAST_TTL, 2)
OSError 22 invalid argument

[jon1enforce]

[jon1enforce]

also look at security threads of simple socket binding:

https://docs.python.org/3/library/socket.html

.It is just for discussion now, because iam not clear about it.
Like the resuseaddr flag.