| 00:04.04 | *** join/#maemo krnlyng (~liar@178.114.97.66.wireless.dyn.drei.com) |
| 00:04.19 | *** join/#maemo louisdk (~louisdk@static-5-103-130-65.seas-nve.net) |
| 00:28.11 | *** join/#maemo drawkula (~username@p4FC12F23.dip0.t-ipconnect.de) |
| 00:37.45 | *** join/#maemo sunshavi (~user@190.234.106.189) |
| 00:44.14 | jonwil | bah, I cant find the source code to upstream openssl (debian version 0.9.8n-1) |
| 00:48.01 | *** join/#maemo pozitron (~nu@45.32.232.26) |
| 00:57.47 | *** join/#maemo louisdk (~louisdk@static-5-103-130-65.seas-nve.net) |
| 01:28.38 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 02:12.05 | *** join/#maemo Oksanaa (~Wikiwide@Maemo/community/ex-council/Wikiwide) |
| 02:34.44 | *** join/#maemo vakkov_ (~vakkov@79.132.28.207) |
| 02:38.42 | *** join/#maemo LauRoman (~LauRoman@5.14.87.59) |
| 02:43.33 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 02:52.22 | *** join/#maemo Defiant (erik@f054025165.adsl.alicedsl.de) |
| 03:18.10 | *** join/#maemo pigeon (~pigeon@eth5284.nsw.adsl.internode.on.net) |
| 03:37.03 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 03:39.10 | *** join/#maemo svetlana (~u@fsf/member/svetlana) |
| 04:09.00 | *** join/#maemo DocScrutinizer05 (~saturn@openmoko/engineers/joerg) |
| 04:13.49 | *** join/#maemo FReaper-PC (~FR@115.132.88.188) |
| 04:14.55 | *** join/#maemo Roth (~quassel@2601:18c:c700:c4d3:538:af0b:5504:d13) |
| 05:13.26 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 06:04.49 | *** join/#maemo krnlyng (~liar@178.114.97.66.wireless.dyn.drei.com) |
| 06:09.56 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 07:04.44 | *** join/#maemo futpib (~futpib@37.113.231.27) |
| 07:21.35 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 07:49.21 | *** join/#maemo geaaru (~geaaru@host170-152-static.43-88-b.business.telecomitalia.it) |
| 08:06.41 | *** join/#maemo krnlyng (~liar@178.114.108.229.wireless.dyn.drei.com) |
| 08:22.52 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 08:27.33 | *** join/#maemo freemangordon_ (~ivo@92.247.16.100) |
| 08:31.16 | bencoh | meh, jonwil is offline again |
| 08:33.55 | bencoh | anyway, some of the work (porting / tracking patches) has been done for 0.9.8zf: |
| 08:34.03 | bencoh | http://repository.maemo.org/community-testing/pool/fremantle/free/source/o/openssl/ |
| 08:34.15 | bencoh | it might be a good start |
| 08:45.00 | *** join/#maemo zGrr (~GrR@user-46-113-129-107.play-internet.pl) |
| 08:46.46 | zGrr | moin :) |
| 09:04.44 | *** join/#maemo freemangordon_ (~ivo@92.247.16.100) |
| 09:36.29 | ceene | ttp://talk.maemo.org/showthread.php?p=1492874#post1492874 |
| 09:38.38 | bencoh | ceene: does openssl s_client work btw? |
| 09:38.59 | *** join/#maemo vahe (~funtoo@130.193.124.135) |
| 09:39.35 | ceene | i don't know yet |
| 09:40.37 | *** join/#maemo krnlyng (~liar@178.114.105.189.wireless.dyn.drei.com) |
| 09:41.24 | *** join/#maemo flo_lap (~fuchs@Maemo/community/contributor/florian) |
| 09:45.49 | sixwheeledbeast | IIRC our version of 0.9.8n is actually 0.9.8n with 0.9.8o patches applied |
| 09:46.11 | ceene | from the changelog it's in fact 0.9.8zf :/ |
| 09:46.23 | ceene | it's quite complex all this |
| 09:46.29 | ceene | but i think there are no maemo patches |
| 09:46.36 | ceene | except for thumb support, which i've just added |
| 09:48.13 | ceene | openssll s_client works ok |
| 09:49.42 | sixwheeledbeast | I remember compiling the list of CVE patches applied between 0.9.8o - 0.9.8z. |
| 09:50.08 | sixwheeledbeast | The idea then was to backport due to ABI incompatibilities |
| 09:50.19 | bencoh | ceene: it is, in -testing |
| 09:50.53 | bencoh | I dont really understand why jonwil doesnt use apt-get source |
| 09:51.05 | ceene | yeah, that's what i do |
| 09:51.13 | ceene | most of the time at least |
| 09:54.38 | sixwheeledbeast | ah this was the thread http://talk.maemo.org/showthread.php?t=93296 |
| 09:56.42 | ceene | i've just eedited my post with what i think is the difference between maemo and debian versions |
| 09:56.48 | ceene | that is only packaging, not code |
| 10:01.06 | *** join/#maemo Pali (~pali@Maemo/community/contributor/Pali) |
| 10:04.01 | kerio | sixwheeledbeast: there's no ABI incompatibility :\ |
| 10:04.05 | kerio | if there is, it's a bug |
| 10:05.26 | bencoh | as far as we could tell, there was none indeed |
| 10:08.00 | *** join/#maemo jonwil (~jonwil@27-33-80-219.tpgi.com.au) |
| 10:08.54 | ceene | what i don't think is doable is patching theclosed source bits to use new openssl |
| 10:09.46 | jonwil | We dont necessarily need to patch them |
| 10:09.49 | kerio | how new |
| 10:09.50 | kerio | ? |
| 10:10.00 | ceene | we could live with two openssl versions i guess |
| 10:10.00 | kerio | they'll happily use openssl 0.9.8zh or whatever the latest 0.9.8 is |
| 10:10.12 | kerio | i don't think any one of us wants to write an openssl shim |
| 10:10.18 | ceene | nope |
| 10:10.26 | jonwil | There is no reason we cant have both 0.9.8zh or whatever it is for the closed source bits and also 1.0.2 for all the FOSS bits |
| 10:10.34 | kerio | indeed |
| 10:10.50 | ceene | that's the way then |
| 10:10.59 | jonwil | as for what we have, CSSU is using 0.9.8zf |
| 10:11.21 | ceene | little by little the closed bits should be getting RE if at all possible and rewritten using new libs and whatever |
| 10:11.25 | sixwheeledbeast | I am only recalling the thread from last time. |
| 10:11.27 | ceene | but that's far away i think |
| 10:11.47 | jonwil | but stock is 9.8.8n-1 from Debian with some local changes |
| 10:12.24 | kerio | cssu is on zf |
| 10:12.35 | kerio | and no further change was done |
| 10:12.49 | bencoh | no need to work on top of 0.9.8n |
| 10:14.08 | jonwil | If I can find the upstream Debian 0.9.8n-1 source, I can figure out exactly whats different between openssl 0.9.9n-1 from Debian and openssl 0.9.8n-1+maemo4+0m5 from Fremantle and then we can identify which of those Maemo-local changes actually matter and need to be somehow handled for any new 1.x.whatever port we may do |
| 10:14.15 | jonwil | CSSU is " |
| 10:14.37 | sixwheeledbeast | cssu testing is zf, stable is still 0.9.8n-1. |
| 10:14.39 | bencoh | jonwil: fmg already "ported" those patches to zf |
| 10:14.44 | jonwil | CSSU is 0.9.8zf with bits from Debian 0.9.8n-1 and bits from Maemo 0.9.8n-1+maemo4+0m5 |
| 10:14.48 | jonwil | I know its been ported to zf |
| 10:14.57 | bencoh | so why bother with n? |
| 10:17.48 | jonwil | I want to know exactly what is different between stock Maemo PR1.3 OpenSSL and upstream Debian OpenSSL (ignoring whatever may have been done in CSSU). That information will confirm once and for all which of the changes Nokia made on top of upstream Debian are necessary in some way for Maemo (and which are just e.g. back-ports from OpenSSL > 0,9.8n or otherwise are no longer necessary with... |
| 10:17.49 | jonwil | ...the latest OpenSSL) |
| 10:18.46 | ceene | jonwil: does it really matter? |
| 10:18.53 | *** join/#maemo eMHa (~mh@p579DB448.dip0.t-ipconnect.de) |
| 10:19.00 | ceene | i mean, if we're going to stick with the old version for the closed source bits |
| 10:19.17 | ceene | and we're gonna try to port open source apps to use the new lib |
| 10:19.28 | kerio | ceene: no, we're going to "stick with" the latest openssl 0.9.8 version |
| 10:19.29 | ceene | why do we care what was done for things that we're not going to touch? |
| 10:19.32 | kerio | because bugs are things that exist |
| 10:19.48 | ceene | even if nokia did some changes to openssl |
| 10:19.51 | ceene | do we want them? |
| 10:20.06 | ceene | i mean... it's not like openssl is something that should ever be touched without a stick |
| 10:20.30 | bencoh | I'm not even sure we'd want any 3rd-party patch, considering history :* |
| 10:20.37 | bencoh | (hey debian, we're looking at you) |
| 10:20.39 | ceene | my guess is if they did something, chances are they are for worse |
| 10:20.49 | ceene | yeah, that's what i'm saying :) |
| 10:21.06 | ceene | i trust debian more than the nokia guys on this thing, and look at what debian did |
| 10:21.25 | bencoh | btw, iirc the 12_valgrind.patch we have isn't the harmful debian one |
| 10:21.37 | bencoh | but we should check chanlogs |
| 10:21.51 | ceene | that patch is still on debian sid |
| 10:21.57 | bencoh | yeah |
| 10:22.07 | ceene | so i don't think that's the bad one |
| 10:22.23 | bencoh | that's what we thought back then as well |
| 10:22.38 | ceene | really, touching a library like openssl without very profound knowledge of what you are doing doesn't look like a good idea |
| 10:22.56 | ceene | i know that i am not able to understand or asses what risks a little change might pose in ssl |
| 10:23.35 | jonwil | Specifically I am looking at 22_openssl_psk_0.9.8n-lib.dpatch for example, its a Nokia patch (its full of Nokia copyrights) and its adding something we might actually need (PSK cypersuites) |
| 10:23.48 | jonwil | thats just an example of something Nokia added that we may somehow need to care about |
| 10:24.23 | ceene | oh, if that's added functionality then there's little workaround about that :/ |
| 10:24.59 | jonwil | Looks like https://launchpad.net/debian/+source/openssl/0.9.8n-1 is the source I want actually :) |
| 10:25.18 | Pali | freemangordon: looks like that patch for "/revision" DT entry will not be accepted and Arnd want to see that ATAG_REVISION will be parsed in that your hook where is save_atags |
| 10:25.28 | ceene | that's what i thought, yes |
| 10:25.29 | Pali | freemangordon: will you extend your patch? |
| 10:26.39 | jonwil | ok, so now I will do a diff between the source from Debian and the source from Maemo and see whats different between the 2 :) |
| 10:30.09 | bencoh | wtf is a CST (20_load-cert.dpatch) ... |
| 10:35.57 | kerio | where are the nokia patches? |
| 10:41.09 | bencoh | mixed with the others in debian/patches/ |
| 10:41.43 | bencoh | though I suspect they're the .dpatch ones :) |
| 10:45.52 | bencoh | jonwil: psk support has been added in openssl-1.0.0 |
| 10:46.11 | jonwil | ok |
| 10:46.44 | bencoh | the 2005 nokia copyright is a bit surprising |
| 10:48.43 | bencoh | well... the same copyright is present in vanilla openssl-1.0.0 |
| 10:49.36 | bencoh | and the psk code has been around in git since at least 2006 |
| 10:51.13 | *** join/#maemo trumee (~trumee@c-50-175-121-86.hsd1.tx.comcast.net) |
| 10:51.45 | bencoh | openssl commit ddac197404f585b8da58df794fc3beb9d08e8cd2, code comes from nokia |
| 11:00.21 | useretail | hey guys, how to extract nolo from firmware image? |
| 11:03.59 | *** join/#maemo krnlyng (~liar@178.112.246.14.wireless.dyn.drei.com) |
| 11:07.41 | *** join/#maemo krnlyng (~liar@83.175.90.24) |
| 11:08.31 | jonwil | new post made http://talk.maemo.org/showthread.php?p=1492878#post1492878 |
| 11:11.43 | jonwil | useretail: There should be a way to extract nolo via flasher-3.5 |
| 11:11.48 | jonwil | What do you want nolo for anyway? |
| 11:12.22 | bencoh | jonwil: you probably still want the CST (20_load-cert.dpatch) patch |
| 11:12.32 | bencoh | apart from that... |
| 11:12.45 | jonwil | ok, post in the thread then |
| 11:15.55 | useretail | recently device went to reboot loop, so i'm trying to figure out how booting works |
| 11:16.35 | jonwil | how will extracting nolo help with that? |
| 11:16.35 | *** join/#maemo krnlyng (~liar@178.112.246.14.wireless.dyn.drei.com) |
| 11:17.32 | useretail | i couldn't find sources for it |
| 11:30.05 | *** join/#maemo Mekkis (~Mekkis@nl.ti4200.info) |
| 11:39.04 | *** join/#maemo Cor-Ai_ (~cor-ai@c-9397e355.06-922-7570702.cust.bredbandsbolaget.se) |
| 11:59.02 | KotCzarny | ~bootloop |
| 11:59.02 | infobot | i guess bootloop is when your device has broken rootfilesystem, so during reboot it fails on some service startup or kernel module load and thus reboots. This *drains* battery! And you can't reflash to stop bootloop when battery is drained. Recharge your battery by other means before reflashing. E.g. using ~rescueOS. Or external charger or BL-5J compatible other device. |
| 11:59.15 | KotCzarny | rule #1, charge your battery |
| 12:01.01 | jonwil | there is no source code for nolo out there btw |
| 12:03.20 | *** join/#maemo Wizzup (~Wizzup@a82-161-36-93.adsl.xs4all.nl) |
| 12:03.56 | *** join/#maemo jon_y_ (~enforcer@2001:e68:4075:dd06:e01f:8e6d:cdca:d0e5) |
| 12:04.22 | *** join/#maemo phlixi (~phlixi@ppp-62-216-204-14.dynamic.mnet-online.de) |
| 12:05.33 | *** join/#maemo Vajb (~Vajb@85-76-160-28-nat.elisa-mobile.fi) |
| 12:12.04 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 12:17.32 | *** join/#maemo darkschneider (~gab@93-32-51-166.ip32.fastwebnet.it) |
| 12:23.45 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 12:29.13 | *** join/#maemo at1as (~at1as@kurios.r4780y.com) |
| 12:32.59 | *** join/#maemo sunshavi (~user@190.234.106.189) |
| 12:48.30 | *** join/#maemo SpeedEvil (~quassel@tor/regular/SpeedEvil) |
| 12:53.36 | *** join/#maemo vahe (~funtoo@130.193.124.135) |
| 12:57.03 | *** join/#maemo Hurrian (~Hurrian@unaffiliated/rikanee) |
| 12:58.12 | *** join/#maemo pozitrono (~nu@85.17.25.22) |
| 12:59.18 | ceene | i'm having trouble building qt4 package |
| 12:59.30 | ceene | /tmp/N900/qt4-x11-4.7.4~git20110505+cssu11/include/QtCore/qstringlist.h:1:86: ../../../qt4-x11-4.7.4 |
| 12:59.33 | ceene | ~git20110505\+cssu11/src/corelib/tools/qstringlist.h: No such file or directory |
| 12:59.34 | ceene | which is false |
| 12:59.54 | KotCzarny | are you are you really sure? |
| 12:59.57 | ceene | shouldn't this be straightforward? |
| 13:00.04 | KotCzarny | those paths can be misleading |
| 13:00.11 | ceene | i mean, this is apt-get source'd from scratchbox |
| 13:00.18 | ceene | it should build |
| 13:00.19 | KotCzarny | also, change the name of the directory from ~ to - |
| 13:00.22 | KotCzarny | and reconfigure |
| 13:00.28 | ceene | yeah, i've checked |
| 13:00.33 | KotCzarny | apparently ~ got eaten by bash |
| 13:00.46 | ceene | no, no, it was in the pasting |
| 13:00.50 | ceene | that got cut out to the other line |
| 13:01.05 | KotCzarny | still, remove any special chars from the dir name |
| 13:01.13 | ceene | if i go to /tmp/N900/qt4-x11-4.7.4~git20110505+cssu11/include/QtCore/, i ../../../qt4-x11-4.7.4~git20110505\+cssu11/src/corelib/tools/qstringlist.h exists |
| 13:01.30 | *** join/#maemo eMHa_ (~mh@p579DBAE8.dip0.t-ipconnect.de) |
| 13:01.32 | ceene | but that's the name of the deb package, i mean, that should work |
| 13:01.35 | KotCzarny | mv /tmp/N900/qt4-x11-4.7.4~git20110505+cssu11/ /tmp/N900/qt4-x11-4.7.4_git20110505_cssu11/ |
| 13:01.37 | KotCzarny | and redo |
| 13:01.52 | KotCzarny | you may try using bash instead of bb shell |
| 13:03.08 | *** join/#maemo krnlyng (~liar@178.112.246.14.wireless.dyn.drei.com) |
| 13:03.28 | ceene | same thing |
| 13:03.57 | ceene | also, the error comes from gcc |
| 13:04.13 | ceene | so shell shouldn't matter |
| 13:04.37 | bencoh | why would gcc print an escaped +? |
| 13:04.45 | bencoh | "~git20110505\+cssu11" |
| 13:05.36 | ceene | dunno |
| 13:06.20 | KotCzarny | ceene, did you reran ./configure ? |
| 13:06.33 | KotCzarny | and the error msg should be different then |
| 13:06.57 | ceene | i'm trying to build the whole package, so i use dpkg-buildpackage |
| 13:07.14 | ceene | that's what the autobuilder is supposed to do |
| 13:07.17 | KotCzarny | check if patches do something weird |
| 13:07.20 | ceene | get the source code and inke dpkg-buildpackage |
| 13:07.26 | KotCzarny | hardcoded stuff etc |
| 13:07.34 | ceene | s/inke/invoke/ |
| 13:09.14 | ceene | i'm gonna remove the + |
| 13:09.27 | freemangordon | jonwil: those Nokia patches were never upstreamed iirc |
| 13:09.34 | freemangordon | (openns that is) |
| 13:09.38 | freemangordon | *openssl |
| 13:09.50 | freemangordon | and we need them for the supl servers |
| 13:10.23 | freemangordon | jonwil: BTW I think it is better to look in CSSU openssl, not in the stock |
| 13:15.28 | ceene | i've had to edit the debian/changelog and replace the + with a - |
| 13:15.34 | jonwil | Which nokia patches? |
| 13:15.47 | KotCzarny | ceene, does it compile now? |
| 13:15.50 | bencoh | freemangordon: which one? |
| 13:16.03 | freemangordon | *psk* ones |
| 13:16.08 | bencoh | they were |
| 13:16.15 | freemangordon | bencoh: upstreamed? |
| 13:16.17 | ceene | i can understand that some script is buggy, but i don't understand how is this compiled by the autobuilder |
| 13:16.24 | bencoh | freemangordon: yeah, see TMO |
| 13:16.32 | ceene | KotCzarny: not yet, but it's gonna compile once i finish renaming these things |
| 13:16.34 | jonwil | https://git.openssl.org/?p=openssl.git;a=commit;h=ddac197404f585b8da58df794fc3beb9d08e8cd2 is the upstream commit for the PSK patches |
| 13:16.47 | KotCzarny | ceene, maybe it uses different shell/env |
| 13:17.13 | bencoh | didnt know we need it for supl though, thx for the info :) |
| 13:17.28 | freemangordon | wait, what? 2006?!? |
| 13:17.36 | bencoh | yeah, kinda ... old |
| 13:18.04 | bencoh | looks like openssl didnt want to release it in the 0.9.x series |
| 13:18.08 | freemangordon | but they are missing in 0.9.8 |
| 13:18.13 | freemangordon | even in the latest |
| 13:18.24 | freemangordon | well even in 0.9.8zf |
| 13:18.33 | bencoh | feature vs bugfix I guess |
| 13:18.51 | freemangordon | hmm, yeah, makes sense |
| 13:19.21 | freemangordon | BTW, AFAIK 0.9.8 and 1.0.x can coexists |
| 13:19.27 | jonwil | yes they can |
| 13:19.30 | bencoh | yeah :) |
| 13:19.46 | bencoh | hmm, dunno about headers, but libs can |
| 13:19.49 | ceene | now it's compiling |
| 13:19.55 | freemangordon | so we should not have much of a problems |
| 13:19.57 | jonwil | headers can't |
| 13:20.12 | KotCzarny | ceene, told ya, special chars confuse configure scripts |
| 13:20.12 | ceene | well, it serves my purpose now, which is to get it compiling against openssl1.0.2e |
| 13:20.39 | ceene | i want then to backport some of the ssl related things of qt5 |
| 13:20.45 | bencoh | ceene: really, qt? well, I guess if this one works, everything will, but... :D |
| 13:20.46 | ceene | to let it support tlsv12, etc |
| 13:21.18 | jonwil | anyhow, we should now have all the info we need to have in order to complete items #1, #2 and #3 from the first post in http://talk.maemo.org/showthread.php?t=96292 |
| 13:21.23 | freemangordon | ceene: we should patch (or backport from newer) qt fot it to support > tls1 |
| 13:21.34 | ceene | freemangordon: yes, that's the idea |
| 13:21.46 | ceene | most apps don't change default ssl options |
| 13:21.52 | freemangordon | as 4.7 is aware of tls1 and ssl3 only |
| 13:22.08 | freemangordon | most in maemo do, as ssl3 is no longer supported :) |
| 13:22.24 | ceene | so probably just modifying qssl::secureprotocols or however it's called, i don't remember, would be enough for apps to use the appropriate protocol |
| 13:22.26 | bencoh | regarding curl and tlsv1, stupid thing (libcurl) will default to sslv3 unless told otherwise |
| 13:22.28 | freemangordon | ant is is the default |
| 13:22.33 | ceene | provided backporting protocol support to qt4 is doable |
| 13:22.40 | freemangordon | bencoh: same for qt |
| 13:22.51 | bencoh | freemangordon: except curl wont try tslv1 by dfault |
| 13:22.59 | freemangordon | qt as well :) |
| 13:23.02 | bencoh | at all |
| 13:23.03 | bencoh | ah |
| 13:23.40 | freemangordon | qt sends ssl3 hello, server rejects it and that's all :) |
| 13:23.50 | freemangordon | or something like that |
| 13:24.01 | freemangordon | I had that problrm with FB sharing plugin |
| 13:24.03 | ceene | ssl3 should just be removed, as far as i know |
| 13:24.15 | bencoh | yeah |
| 13:24.32 | bencoh | freemangordon: something like that with curl as well yeah |
| 13:24.46 | jonwil | Can anyone help make sure the root certificates in https://github.com/community-ssu/maemo-security-certman/commits/master are up to date with what they should be these days? |
| 13:24.50 | bencoh | unless you specify -1 (force tlsv1) |
| 13:24.59 | freemangordon | but our curl should be pretty recent iirc |
| 13:25.06 | bencoh | 7.26 |
| 13:25.09 | jonwil | I dont know where the good set of root certificates are these days |
| 13:25.14 | freemangordon | jonwil: last time I've checked, it was fine |
| 13:25.18 | jonwil | ok |
| 13:25.24 | freemangordon | but it was some 2 years ago :) |
| 13:25.45 | jonwil | where does that set of root certificates come from? Mozilla? NSS? |
| 13:26.01 | freemangordon | "freemangordon committed on 30 Aug 2013" |
| 13:26.10 | freemangordon | mozilla should be ok |
| 13:26.43 | freemangordon | someone with time and patience should check certs if FF agains those in maemo |
| 13:26.48 | freemangordon | *in FF |
| 13:29.13 | ceene | is qt5 something desirable for maemo? |
| 13:29.32 | freemangordon | wayland? |
| 13:29.50 | ceene | or a bump to 4.8 instead of 4.7 |
| 13:30.01 | freemangordon | what for? |
| 13:30.08 | ceene | don't know, just asking |
| 13:38.27 | Wizzup | I would doubt wayland is something that would be useful for maemo now |
| 13:40.57 | *** join/#maemo vahe (~funtoo@130.193.124.135) |
| 13:46.03 | bencoh | not really |
| 13:51.10 | jonwil | hmmm, if I knew how all this certificate stuff in maemo-security-certman worked, I would take a look and see if its up-to-date with what it should be. |
| 13:51.26 | jonwil | I found http://mxr.mozilla.org/nss/source/lib/ckfw/builtins/certdata.txt which contains the current Mozilla root certificate set |
| 13:51.28 | *** join/#maemo eijk (~eijk@x55b2d3a0.dyn.telefonica.de) |
| 13:52.25 | *** join/#maemo vahe (~funtoo@130.193.124.135) |
| 13:58.31 | *** join/#maemo xorly (~xorly@ip-86-49-15-121.net.upcbroadband.cz) |
| 14:00.10 | *** join/#maemo arossdotme (~zxy@host-92-11-93-192.as43234.net) |
| 14:04.03 | jonwil | Pitty Juhani Mäkelä seems to be gone, otherwise they might be able to tell us how to update the maemo-security-certman certificates using the certdata.txt file |
| 14:13.04 | sunshavi | can this certificates, can not just only be cped from a working linux workstation? |
| 14:19.55 | *** join/#maemo Vajb (~Vajb@85-76-36-253-nat.elisa-mobile.fi) |
| 14:54.07 | *** join/#maemo BCMM (~user@unaffiliated/bcmm) |
| 15:12.54 | *** join/#maemo XDS2010 (sid1218@gateway/web/irccloud.com/x-udszaxgfhragubna) |
| 15:17.44 | *** join/#maemo Vajb (~Vajb@85-76-36-253-nat.elisa-mobile.fi) |
| 15:23.20 | *** join/#maemo LauRoman (~LauRoman@5-14-87-59.residential.rdsnet.ro) |
| 15:23.49 | Pali | sunshavi: no it needs to be in format usable for certman |
| 15:25.38 | sunshavi | pali: Mmm. /etc/ssl/certs/ca-certificates.crt, is not in the required format. Then my assumption was wrong. |
| 15:26.31 | sunshavi | pali: btw: some people get it from cli see: https://wiki.archlinux.org/index.php/Isync#Step_.231:_Get_the_certificates |
| 15:26.51 | Pali | and? |
| 15:27.12 | Pali | s_client is used for TLS via TCP |
| 15:27.25 | sunshavi | that pem file is in the format required bi certman? |
| 15:27.43 | Pali | of course you must be able to download public server cert and CA from server |
| 15:28.11 | Pali | sunshavi: PEM format is some standard format for storing pkcs stuff |
| 15:28.40 | Pali | certificate is just some asn structure stored either binary or base64 |
| 15:28.52 | *** join/#maemo vakkov (~vakkov@79.132.28.207) |
| 15:28.53 | Pali | but certman needs some special storage |
| 15:29.00 | Pali | some indexes or what |
| 15:30.36 | sunshavi | mmm. My assumption was the ca-certificates pkg is just some base-64 encoded files. and it should be the same for all distros, like a plain text file. Am I wrong? |
| 15:45.54 | *** join/#maemo pozitron (~nu@162.216.46.34) |
| 15:46.11 | Pali | sunshavi: each TLS library needs certificates in own format |
| 15:46.23 | Pali | NSS, OpenSSL, GnuTLS |
| 15:46.25 | Pali | also Certman |
| 15:46.41 | sunshavi | mmm, ok |
| 15:46.43 | Pali | Qt4 too :-) |
| 15:46.57 | sunshavi | they r statically linked then |
| 15:47.00 | kerio | oh yeah about that |
| 15:47.06 | kerio | we should probably update that crap |
| 15:47.16 | kerio | and align with the mozilla trust store as a reasonable default |
| 15:47.44 | Pali | I think that fedora has some project/prgram which take list of CA certificates and generate correct format for NSS, OpenSSL and GnuTLS |
| 15:48.16 | kerio | can't we just copy debian |
| 15:48.17 | kerio | and go from there |
| 15:48.45 | Pali | NSS uses sqlite or db2 for stroring certs (depends on app) |
| 15:48.50 | Pali | firefox uses db2 |
| 15:48.57 | Pali | chromium sqlite3 |
| 15:49.07 | Pali | but both firefox and chromium ses NSS |
| 15:49.09 | bencoh | hmm... firefox doesnt rely on NSS for certs? |
| 15:49.20 | kerio | chromium doesn't use NSS anymore |
| 15:49.29 | kerio | they switched to boringssl |
| 15:49.36 | Pali | kerio: really? |
| 15:49.46 | Pali | and where they store user certs? |
| 15:49.48 | kerio | i'm fairly sure they did |
| 15:49.50 | kerio | i dunno |
| 15:50.40 | Pali | $ readelf -d /usr/lib/chromium-browser/chromium-browser | grep -i nss |
| 15:50.40 | Pali | <PROTECTED> |
| 15:50.40 | Pali | <PROTECTED> |
| 15:50.46 | Pali | $ chromium-browser --version |
| 15:50.46 | Pali | Chromium 45.0.2454.85 Ubuntu 12.04 |
| 15:50.57 | Pali | no, still uses NSS |
| 15:51.22 | Pali | nothing boring |
| 15:51.40 | kerio | https://code.google.com/p/chromium/issues/detail?id=393317 |
| 15:51.46 | kerio | i don't know lolz |
| 15:52.35 | Pali | $ readelf -d /usr/lib/chromium-browser/chromium-browser | grep -i ssl |
| 15:52.35 | Pali | <PROTECTED> |
| 15:52.46 | Pali | $ readelf -d /usr/lib/chromium-browser/chromium-browser | grep -i crypto |
| 15:52.46 | Pali | <PROTECTED> |
| 15:52.46 | Pali | <PROTECTED> |
| 15:53.10 | kerio | literally all the libraries |
| 15:53.16 | Pali | /usr/lib/chromium-browser/libs/libcrcrypto.so |
| 15:53.25 | kerio | i think libcrcrypto is boringssl's libcrypto |
| 15:53.30 | Pali | looks like... |
| 15:53.34 | Pali | but stil uses NSS |
| 15:53.46 | Pali | maybe just for user cert storage? |
| 15:53.49 | sunshavi | pali: then after openssl (0.9.8z) compilation on n900. I can not backport it to n800. cos finding the right certificates is going to be an issue |
| 15:53.54 | kerio | Pali: probably as a backend |
| 15:54.01 | kerio | chrome tends to use whatever the default for the OS is |
| 15:54.19 | kerio | i guess that means libnss on linux |
| 15:54.59 | bencoh | kerio: you're mixing two different "NSS" |
| 15:55.46 | kerio | network software something, right |
| 15:55.53 | kerio | the mozilla tls library |
| 15:56.35 | bencoh | that one isn't particularly "default" on linux OSes |
| 15:56.50 | bencoh | it's, well... used in mozilla products |
| 15:57.55 | kerio | yeah but |
| 15:58.01 | kerio | the mozilla trust store most definetely is |
| 15:58.11 | kerio | what else are you going to use? oracle java's? |
| 15:59.13 | bencoh | what's the "mozilla trust store" |
| 16:00.15 | *** join/#maemo flo_lap (~fuchs@Maemo/community/contributor/florian) |
| 16:00.51 | kerio | https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/ |
| 16:04.08 | bencoh | most linux distrib will ship with the certs included in the mozilla "root store" |
| 16:04.22 | bencoh | but it doesn't mean they use libnss in any way |
| 16:04.41 | bencoh | think of the ca-certificates debian package for instance |
| 16:06.36 | bencoh | no libnss there, just a bunch of certs and a wrapper to openssl c_rehash |
| 16:08.02 | kerio | we should do that thing |
| 16:09.39 | bencoh | Pali: do you know where maemosec/certman is used? |
| 16:10.26 | Pali | bencoh: wifi (eapd), modest, paritally microb (browser) and maybe other parts |
| 16:11.19 | bencoh | does microb use it through libnss? |
| 16:11.45 | Pali | microb links to certman libs |
| 16:11.53 | Pali | so something is doing with it |
| 16:12.01 | bencoh | hmm |
| 16:13.07 | bencoh | well, I guess we'd need to read microb-engine source... |
| 16:14.56 | bencoh | funny ldd on browser.launc doesnt give nss |
| 16:15.16 | Pali | because browser does not use nss |
| 16:15.34 | Pali | it is in lower layer in eal |
| 16:15.57 | bencoh | hmm |
| 16:16.25 | Pali | http://browser.garage.maemo.org/docs/browser_paper.html |
| 16:16.37 | Pali | http://browser.garage.maemo.org/docs/eal/index.html |
| 16:16.50 | bencoh | right, browserd is linked against it |
| 16:18.10 | bencoh | browserd is linked against libnss3/libssl3 and openssl but not against maemosec or certman libs |
| 16:18.34 | bencoh | browser is linked against maemosec/certman stuff and openssl, but no libnss3/libssl3 |
| 16:20.40 | freemangordon | Pali: certificates are in standart pem format, there is a cmdline tool to rehash them |
| 16:21.20 | Pali | freemangordon: are you able to update certman package where are certs? |
| 16:21.48 | freemangordon | just a sec |
| 16:23.01 | freemangordon | Pali: https://github.com/community-ssu/maemo-security-certman/blob/master/debian/maemosec-certman-common-ca.postinst |
| 16:24.13 | bencoh | at least that's openssl-"standard" |
| 16:27.01 | freemangordon | Pali: according to https://github.com/community-ssu/maemo-security-certman/commit/0be038825a98dae2d80fd411a02cb4c86ed1b36a merlin1991 should be able to change certificates as well :) |
| 16:27.03 | *** join/#maemo KotCzarny (ariel@31.135.195.239) |
| 16:27.12 | freemangordon | I already have too much on the plate, sorry |
| 16:27.27 | freemangordon | also, I don;t remember how exactly it is done |
| 16:30.23 | sunshavi | freemangordon: can i get those certs on n800 and just rehash them too?, for openssl use |
| 16:30.40 | freemangordon | yep |
| 16:31.09 | freemangordon | though the tricky part is that you should rename the certificate after rehashing and rehash again or somesuch |
| 16:31.14 | freemangordon | can;t remember exactly |
| 16:31.18 | sunshavi | great, well all of we r on Merlin hands then |
| 16:31.31 | freemangordon | or, you should use cmcli to import the certificate |
| 16:31.46 | *** join/#maemo vakkov (~vakkov@79.132.28.207) |
| 16:31.52 | freemangordon | sorry, it was 2 years ago I last played with this |
| 16:32.45 | sunshavi | mmm, I have compiled mbsync aka isync for n800. But i can connect to gmail I think it is a certificate issue |
| 16:33.10 | sunshavi | I would need to dig a little bit about the certificates subject |
| 16:33.34 | sunshavi | s/can/can't/ |
| 16:33.40 | freemangordon | yeah, cmcli is the way |
| 16:33.56 | sunshavi | freemangordon: thanks |
| 16:34.22 | freemangordon | cmcli [-<T|t> <domain>[:<domain>...]] [-<c|p> <domain>] |
| 16:34.22 | freemangordon | -a <cert-file [<cert-file>...]> -i <pkcs12-file> |
| 16:34.22 | freemangordon | -a to add a certificate to the given domain |
| 16:34.29 | bencoh | cmcli? is that the way you add certs in maemo? |
| 16:34.36 | freemangordon | yes |
| 16:34.42 | bencoh | thx :) |
| 16:34.44 | freemangordon | add/remove/etc |
| 16:35.28 | freemangordon | I guess we need "-i to install a PKCS#12 container or a single private key" |
| 16:39.47 | sunshavi | no cmcli on n800, which pkg is part of cmcli? |
| 16:40.13 | freemangordon | maemo-security-certman |
| 16:40.22 | sunshavi | let's search |
| 16:49.21 | sunshavi | freemangordon: "maemo-security-certman" needs to be backported to n800 |
| 16:50.08 | sunshavi | at least we r in the right path :) |
| 16:50.18 | freemangordon | sunshavi: could be, but I don;t have such device, feel free to backport it https://github.com/community-ssu/maemo-security-certman |
| 16:51.30 | sunshavi | nice. thanks |
| 16:51.58 | freemangordon | sunshavi: though i doubt there is no similar tool on n800 |
| 16:52.24 | freemangordon | DocScrutinizer05: what is used to manage ssl certs on n800? |
| 16:52.26 | bencoh | well, Pali said libcst was renamed to maemosec, so ... |
| 16:52.33 | sunshavi | mmm, what would be the name?, where is that pkg right now? |
| 16:53.28 | sunshavi | bencoh: libcst is a lib. So (no cli tools on lib pkg) |
| 16:53.47 | freemangordon | sunshavi: what about maemosec-certman-tools |
| 16:54.02 | bencoh | yeah, but it might lead you to some other tool |
| 16:54.03 | sunshavi | let's search |
| 16:54.42 | *** join/#maemo zGrr (~GrR@188.146.9.144.nat.umts.dynamic.t-mobile.pl) |
| 16:55.25 | freemangordon | sunshavi: what is the output of "dpkg -l | grep cst" |
| 16:56.37 | freemangordon | there shoule be some *tools* or *bin* package or somesuch |
| 16:56.44 | sunshavi | --8<---------------cut here---------------start------------->8--- |
| 16:56.44 | sunshavi | ii libcst 1.7.20 X509 certificate manager library, dummy pack |
| 16:56.44 | sunshavi | ii libcst0 1.7.20 X509 certificate manager library |
| 16:56.44 | sunshavi | --8<---------------cut here---------------end--------------->8--- |
| 16:56.47 | sunshavi | <PROTECTED> |
| 16:58.32 | sunshavi | freemangordon: no match also on "maemosec-certman-tools" |
| 16:58.43 | freemangordon | sec |
| 16:59.27 | freemangordon | sunshavi: there is some closed source certificate manager |
| 16:59.42 | freemangordon | check which packages depend on libcst |
| 17:01.51 | freemangordon | sunshavi: http://maemo.org/development/documentation/manuals/3-x/howto_certificate_storage_bora/ |
| 17:02.23 | freemangordon | or is it maemo4 |
| 17:02.25 | freemangordon | ? |
| 17:02.27 | *** join/#maemo KotCzarny (ariel@31.135.195.239) |
| 17:02.48 | DocScrutinizer05 | freemangordon: no idea |
| 17:05.36 | DocScrutinizer05 | freemangordon: I think N8x0 had diablo |
| 17:05.44 | DocScrutinizer05 | not bora |
| 17:06.08 | KotCzarny | yes, chinook, then diablo |
| 17:07.29 | bencoh | apt-cache rdepends |
| 17:08.13 | freemangordon | it seems there is no cli |
| 17:08.20 | freemangordon | but UI only |
| 17:10.11 | sunshavi | --8<---------------cut here---------------start------------->8--- |
| 17:10.11 | sunshavi | ~ $ apt-cache rdepends libcst |
| 17:10.11 | sunshavi | libcst |
| 17:10.12 | sunshavi | Reverse Depends: |
| 17:10.14 | sunshavi | <PROTECTED> |
| 17:10.17 | sunshavi | --8<---------------cut here---------------end--------------->8--- |
| 17:10.22 | sunshavi | bencoh: thanks |
| 17:10.31 | freemangordon | what is that package certs? |
| 17:10.39 | sunshavi | debian is not my main distro |
| 17:11.06 | freemangordon | sunshavi: dpkg -L certs |
| 17:11.15 | freemangordon | will list all the files in the package |
| 17:11.30 | sunshavi | --8<---------------cut here---------------start------------->8--- |
| 17:11.31 | sunshavi | ~ $ apt-cache show certs |
| 17:11.31 | sunshavi | Package: certs |
| 17:11.31 | sunshavi | Status: install ok installed |
| 17:11.34 | sunshavi | Priority: optional |
| 17:11.37 | sunshavi | Section: misc |
| 17:11.40 | sunshavi | Installed-Size: 88 |
| 17:11.43 | sunshavi | Maintainer: Yauheni Kaliuta <yauheni.kaliuta@nokia.com> |
| 17:11.47 | sunshavi | Architecture: armel |
| 17:11.50 | sunshavi | Version: 1.6.2 |
| 17:11.53 | sunshavi | Depends: libcst, gconf2 |
| 17:11.56 | sunshavi | Conffiles: |
| 17:11.58 | freemangordon | you'd better use pastebin or something |
| 17:11.58 | sunshavi | <PROTECTED> |
| 17:11.59 | DocScrutinizer05 | please use pastebin!! |
| 17:12.01 | sunshavi | Description: A set of X509 certificates |
| 17:12.05 | sunshavi | <PROTECTED> |
| 17:12.08 | sunshavi | <PROTECTED> |
| 17:12.10 | *** mode/#maemo [+o DocScrutinizer05] by ChanServ |
| 17:12.11 | sunshavi | --8<---------------cut here---------------end--------------->8--- |
| 17:12.17 | bencoh | no tool? |
| 17:12.32 | DocScrutinizer05 | sunshavi: please don't do that! |
| 17:12.39 | sunshavi | pastebin? |
| 17:12.41 | sunshavi | mmm |
| 17:12.41 | bencoh | and yeah, pastebin if you need to paste long stuff |
| 17:12.46 | sunshavi | ok, mo more lines |
| 17:12.58 | DocScrutinizer05 | ~pastebin |
| 17:12.58 | infobot | A "pastebin" is a web-based service where you should paste anything over 3 lines so you don't flood the channel. Here are links to a few: http://www.pastebin.com, http://pastebin.ca, http://channels.debian.net/paste, http://paste.lisp.org, http://bin.cakephp.org/; or install pastebinit with yum or aptitude. |
| 17:13.04 | sunshavi | ok, let's digest pastebin |
| 17:13.14 | freemangordon | sunshavi: yeah, as you risk doc to kick you :) |
| 17:13.18 | *** mode/#maemo [-o DocScrutinizer05] by ChanServ |
| 17:15.48 | DocScrutinizer05 | also google pastebinit, cmdline tool very useful. python |
| 17:16.14 | sunshavi | mmm, emacs has a pkg 4 pastebin I think |
| 17:16.35 | sunshavi | now, creating a user on paste.lisp.org |
| 17:17.05 | DocScrutinizer05 | https://packages.debian.org/search?keywords=pastebinit |
| 17:18.21 | *** join/#maemo futpib (~futpib@176.212.187.149) |
| 17:19.34 | DocScrutinizer05 | could somebody bored do a lil fancy and package https://packages.debian.org/sid/pastebinit for fremantle, then upload to repos? |
| 17:22.03 | sunshavi | DocScrutinizer05: pastebinit, needs a user? |
| 17:22.20 | KotCzarny | you can use pastebin.com or pastebin.ca |
| 17:22.21 | DocScrutinizer05 | not up til last time I checked |
| 17:22.36 | sunshavi | then let's try it |
| 17:22.50 | KotCzarny | and try to paste 'raw' links (ie. after pasting to the site click 'raw' then paste the link) |
| 17:24.18 | sunshavi | http://pastebin.ca/3307567 |
| 17:24.24 | sunshavi | is that ok? |
| 17:26.21 | KotCzarny | yeah, though i prefer clicking raw on the left and pasting this form: http://pastebin.ca/raw/3307567 |
| 17:27.00 | bencoh | hmm... this package doesnt contain much... |
| 17:27.10 | sunshavi | KotCzarny: nice |
| 17:27.22 | sunshavi | that was my first pastebin post :) |
| 17:28.07 | DocScrutinizer05 | saturn:~ # head -n 100 /etc/services |pastebinit |
| 17:28.09 | DocScrutinizer05 | http://susepaste.org/10297252 |
| 17:31.11 | sunshavi | bencoh: the gtalk plugin from maemo is not working anymore cos cert has expired. :) |
| 17:34.21 | freemangordon | sunshavi: you can import new certificate from control panel |
| 17:35.29 | sunshavi | I should retry it then. Now I am connected by jabber to gtalk |
| 17:36.17 | DocScrutinizer05 | jr@saturn:~/bin> ssh root@iron900 dpkg -l|head -n200|pastebinit |
| 17:36.18 | DocScrutinizer05 | http://susepaste.org/31171592 |
| 17:38.27 | sunshavi | then. what is the equivalent to this file on maemo n800 with os2008 /etc/ssl/certs/ca-certificates.crt? |
| 17:41.43 | *** join/#maemo zGrr (~GrR@188.146.129.113.nat.umts.dynamic.t-mobile.pl) |
| 17:46.57 | *** join/#maemo futpib_ (~futpib@37.113.213.226) |
| 17:48.43 | *** join/#maemo eijk (~eijk@x55b2d3a0.dyn.telefonica.de) |
| 17:58.29 | sunshavi | another question could be: I am getting this error "SSL error connecting imap.gmail.com (173.194.219.109:993): error:00000007:lib(0):func(0):BUF lib", but "openssl s_client -connect imap.gmail.com:993" works, which could be the issue? |
| 18:07.26 | *** join/#maemo trumee (~trumee@c-50-175-121-86.hsd1.tx.comcast.net) |
| 18:28.28 | *** join/#maemo zGrr (~GrR@178235245220.warszawa.vectranet.pl) |
| 18:34.08 | *** join/#maemo sparetire_ (~sparetire@unaffiliated/sparetire) |
| 18:38.57 | Sicelo | i have no sound out of N900 earpiece during a call now. if i enable loudspeaker that works, and also headset works. device has definitely not been dropped since the last known working state. any ideas? |
| 18:39.13 | KotCzarny | reboot? |
| 18:39.26 | Sicelo | i was about to say without reboot :) |
| 18:39.31 | KotCzarny | :) |
| 18:39.40 | KotCzarny | but it might have given up a ghost |
| 18:39.55 | KotCzarny | earpieces die in cellphones just from use |
| 18:42.15 | Sicelo | going to see if it's not just pulseaudio acting up |
| 18:43.28 | Sicelo | worked :) |
| 18:43.34 | KotCzarny | :) |
| 18:43.47 | KotCzarny | put an info about it on the wiki (or tmo) |
| 18:44.45 | Sicelo | but, i seem to think there's 'bigger' problem somewhere .. i noticed this 'silent earpiece' on sunday, but later that day all was ok. and today i received a call and nothing could be heard. |
| 18:44.50 | Sicelo | dunno really |
| 18:55.28 | *** join/#maemo louisdk (~louisdk@static-5-103-130-65.seas-nve.net) |
| 19:18.06 | *** join/#maemo heroux (sandroco@gateway/shell/insomnia247/x-wmbexvkuioiwdtlu) |
| 19:21.45 | Sicelo | KotCzarny: by the way, just hit 7 days uptime =) |
| 19:28.28 | KotCzarny | um, new battery or new hack? |
| 19:30.17 | Sicelo | i don't get you .. not 7 days on single charge |
| 19:30.54 | Sicelo | i charge daily as this is my main phone, and it is in use for internet a lot |
| 19:32.14 | *** join/#maemo mulin0 (~sailfish@151.74.194.178.dynamic.wline.res.cust.swisscom.ch) |
| 19:32.19 | DocScrutinizer05 | IroN900:~# uptime |
| 19:32.20 | DocScrutinizer05 | <PROTECTED> |
| 19:32.53 | KotCzarny | ahm, mine's uptime is 19 days 4.47h |
| 19:36.05 | Sicelo | i'd be happy with that .. my N900 has not gone higher than 12 days in a loooong time, due to silly issues that crop up (e.g. this silent earpiece thing) |
| 19:37.48 | *** join/#maemo SpeedEvil (~quassel@tor/regular/SpeedEvil) |
| 19:37.48 | KotCzarny | i dont know, mine is flashed with stock 1.3.1 and i didnt have any issues since 2009 |
| 19:38.41 | Sicelo | most recent restart was due to my stupidity though, haha. had enabled swap on uSD, and 7 days later opened the cover to store a micro-sim temporarily (from the N9 when i gave it back) |
| 19:39.11 | KotCzarny | for me its usually 'low battery', 'no, i won't charge you yet' |
| 19:51.25 | *** join/#maemo Vajb (~Vajb@85-76-69-79-nat.elisa-mobile.fi) |
| 20:07.01 | *** join/#maemo KotCzarny (ariel@31.135.195.239) |
| 20:19.15 | *** join/#maemo darkschneider (~gab@93-32-51-166.ip32.fastwebnet.it) |
| 20:20.17 | *** join/#maemo realitygaps (~realityga@unaffiliated/realitygaps) |
| 20:34.44 | *** join/#maemo SpeedEvil (~quassel@tor/regular/SpeedEvil) |
| 20:39.26 | *** join/#maemo trumee (~trumee@c-50-175-121-86.hsd1.tx.comcast.net) |
| 21:02.32 | *** join/#maemo jonwil (~jonwil@27-33-80-219.tpgi.com.au) |
| 21:03.33 | jonwil | hi |
| 21:12.27 | *** join/#maemo pozitrono (~nu@46.166.190.130) |
| 21:34.35 | *** join/#maemo zGrr (~GrR@178235245220.warszawa.vectranet.pl) |
| 21:40.16 | jonwil | http://talk.maemo.org/showthread.php?p=1492921#post1492921 |
| 21:41.13 | *** join/#maemo Natch (~Natch@h-155-122.a444.priv.bahnhof.se) |
| 21:48.49 | Pali | jonwil: hi, I have problem with internet wifi indicator... this is in your RE package? |
| 21:49.08 | Pali | connui-internet? |
| 21:49.29 | jonwil | wifi indicator where? On status bar or on the select network dialog? |
| 21:50.43 | Pali | on both |
| 21:51.01 | Pali | I'm connected to wifi, but indicator is not visible in status area |
| 21:51.32 | Pali | and when I'm open menu there is "internet connections" button with subtitle "not connected" |
| 21:51.54 | Pali | but when I click on it I see button "disconnect <wifi network> |
| 21:52.03 | Pali | and I'm really connected to wifi network |
| 21:52.06 | Pali | internet is working |
| 21:52.10 | jonwil | weird |
| 21:52.33 | Pali | jonwil: both are parts of connui-internet package? |
| 21:52.49 | jonwil | I think so |
| 21:52.59 | Pali | looks like "sudo killall -9 icd2" can cause this state |
| 21:53.21 | Pali | after that upstart (or dsme) start icd2 again |
| 21:53.35 | Pali | and autoconnect cause scanning and connecting to preferred wifi network |
| 21:53.40 | Pali | but indicator is not updated |
| 21:54.05 | Pali | jonwil: can you look at it? |
| 21:54.33 | jonwil | Its a clone of stock so it should do whatever stock does |
| 21:54.50 | Pali | then it is bug :-) which is now possible to fix |
| 21:55.11 | Pali | I'm not sure if this is present in stock version |
| 22:45.06 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 23:05.58 | *** join/#maemo louisdk (~louisdk@static-5-103-130-65.seas-nve.net) |
| 23:16.06 | *** join/#maemo esaym153 (~esaym153@75-1-182-8.lightspeed.snantx.sbcglobal.net) |
| 23:22.10 | jonwil | ok, I think I have a plan on how we can update maemo-security-certman with the latest set of root certificates. But before I can do that I need to somehow identify where the filenames of the certificates come from (the long strings of numbers) |
| 23:24.45 | *** join/#maemo realitygaps (~realityga@2a01:4a0:3::5096:aeb) |
| 23:24.45 | *** join/#maemo realitygaps (~realityga@unaffiliated/realitygaps) |
| 23:46.29 | *** join/#maemo louisdk (~louisdk@static-5-103-130-65.seas-nve.net) |