Re: bgpd: add tcp md5sig documentation for rtr

Theo Buehler <[email protected]>
Newsgroups gmane.os.openbsd.tech
Message-ID <[email protected]>
On Wed, Aug 26, 2026 at 02:47:05PM +0200, Claudio Jeker wrote:
> I missed to add the tcp md5sig bits for rtr to bgpd.conf.5
> This is just a copy of the same bits in the neighbor section.
> 
> -- 
> :wq Claudio
> 
> Index: bgpd.conf.5
> ===================================================================
> RCS file: /cvs/src/usr.sbin/bgpd/bgpd.conf.5,v
> diff -u -p -r1.255 bgpd.conf.5
> --- bgpd.conf.5	2 Jun 2026 08:40:02 -0000	1.255
> +++ bgpd.conf.5	26 Aug 2026 12:26:35 -0000
> @@ -617,6 +617,16 @@ If not specified, the default
>  .Ic port
>  is
>  .Em 323 .
> +.Pp
> +.It Ic tcp md5sig password Ar secret
> +.It Ic tcp md5sig key Ar secret
> +Enable TCP MD5 signatures per RFC 2385.
> +The shared secret can either be given as a password or hexadecimal key.
> +.Bd -literal -offset indent
> +tcp md5sig password mekmitasdigoat
> +tcp md5sig key deadbeef
> +.Ed

Not sure why the spacing around the .Bd block is asymmetric but I'd
consider putting a .Pp here (and also in the other copy).

You do that in most other such blocks.

Either way ok

> +After changing keys, a session needs to be reset to use the new keys.
>  .El
>  .El
>  .Sh NETWORK AND FLOWSPEC ANNOUNCEMENTS
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.