| 00:07.51 | Sicelo009N | any idea how to recover? :/ |
| 00:08.36 | Sicelo009N | trying to apt get reinstall those packages gives me "reinstallation is not possible, it cannot be downloaded" |
| 00:08.45 | Sicelo009N | let me look for debs |
| 00:16.48 | Sicelo009N | solved reinstallation, but my cert manager still only with invalid certs |
| 00:31.55 | jonwil | What version of maemosec-certman-applet do you have installed? |
| 00:36.06 | Sicelo009N | now install 0.2.3 |
| 00:36.23 | Sicelo009N | maybe must reboot after reinstalling? |
| 00:37.16 | jonwil | yeah maybe |
| 00:37.49 | *** join/#maemo Kabouik (~quassel@154.29.83.79.rev.sfr.net) |
| 00:39.09 | Sicelo | didn't help |
| 00:40.29 | *** join/#maemo Sicelo009N (~sicelo@unaffiliated/sicelo) |
| 00:40.53 | Sicelo009N | i hope there's a way to fix this without reflash. not keen on doing that |
| 00:41.05 | jonwil | Ok try this. dpkg -P on each of the maemosec-certman packages |
| 00:41.25 | jonwil | Then remove /etc/certs/* and /etc/secure/* |
| 00:41.27 | jonwil | then reinstall |
| 00:41.36 | jonwil | Thats the only thing I can suggest |
| 00:41.36 | Sicelo009N | what does dpkg -P do? |
| 00:42.06 | jonwil | Remove the package and all its config files |
| 00:42.52 | Sicelo009N | mp-fremantle... tied to it. cannot be removed :) |
| 00:43.14 | Sicelo009N | i'll remove the /etc/ stuff as you suggest and do a reinstall. let's see |
| 00:43.28 | jonwil | yeah try that |
| 00:43.33 | jonwil | Thats the only suggestion I have |
| 00:45.05 | Sicelo009N | absolutely no certs now |
| 00:45.30 | jonwil | ok, try reinstalling libnss3 and libss3-certs |
| 00:45.32 | jonwil | that might do something |
| 00:45.50 | jonwil | also try reinstalling maemosec-certman-applet and libmaemosec-certman-applet0 |
| 00:48.06 | Sicelo009N | peop.e must not delete /etc/certs/* or /etc/secure/* it seems |
| 00:48.34 | jonwil | hmmm, I have no idea how to fix then, sorrry |
| 00:48.36 | Sicelo009N | when installing libmaemosec* now there's 'list' of certs that gets updated. |
| 00:48.50 | Sicelo009N | i guess i'll copy it over from 2nd N900 |
| 00:49.02 | jonwil | yeah try that |
| 00:49.04 | jonwil | see what happens |
| 00:50.25 | Sicelo009N | jonwil: could it be that some of the postinst scripts in the debs has problem? |
| 00:50.36 | jonwil | Those haven' |
| 00:50.43 | jonwil | Haven't been touched from the Nokia originals |
| 00:52.05 | Sicelo | before copying over from 2nd N900, trying to downgrade back to 0.2.3 in case that makes a difference |
| 00:52.20 | jonwil | yeah try that |
| 00:52.41 | Sicelo | seems to be working .. pem files are coming in :) |
| 00:53.18 | Sicelo | okay.. seems good. let's see what applet seed |
| 00:53.47 | Sicelo | still blank. hmm |
| 00:55.56 | *** join/#maemo N-Mi (~nicolas@calvix/staff/N-Mi) |
| 00:56.10 | Sicelo | jonwil: seems to me that some sort of "link" is missing/not being created? |
| 00:56.23 | jonwil | no idea |
| 00:57.52 | *** join/#maemo N-Mi (~nicolas@calvix/staff/N-Mi) |
| 01:01.31 | Sicelo | cmcli -T common-ca -L gives no output. |
| 01:02.37 | *** join/#maemo TTilus (terotil@idan.ihme.org) |
| 01:07.28 | jonwil | Whats in /etc/secure/s? |
| 01:09.26 | Sicelo | certman.blacklist and certman.common-ca |
| 01:09.39 | Sicelo | this is really weird :-/ |
| 01:10.06 | jonwil | whats the md5sum of those files? |
| 01:11.45 | *** join/#maemo Sicelo009N (~sicelo@unaffiliated/sicelo) |
| 01:12.30 | Sicelo009N | 91794a35d379f34c89cf1599009d1f10 /etc/secure/s/certman.blacklist |
| 01:12.38 | Sicelo009N | ee7333ca72a2fe3d84406e0f9e37cb8b /etc/secure/s/certman.common-ca |
| 01:12.44 | jonwil | ok, those are what I have |
| 01:12.50 | jonwil | what do you have in /etc/certs |
| 01:12.58 | jonwil | trusted, common-ca, blacklist, right? |
| 01:13.34 | Sicelo009N | yes |
| 01:13.45 | jonwil | and in trusted you have? |
| 01:14.24 | Sicelo009N | nothing. hmm |
| 01:15.04 | jonwil | yeah that's your problem |
| 01:15.11 | jonwil | you should have root.ca and root.key there |
| 01:15.38 | Sicelo009N | comes from libmaemosec0, let me reinstall that |
| 01:15.50 | jonwil | yep |
| 01:15.50 | Sicelo009N | but this was there before.. |
| 01:16.09 | jonwil | I am totally out of ideas to fix your system... |
| 01:16.34 | DocScrutinizer05 | fwiw: 'default' CSSU system: http://paste.opensuse.org/99788683 |
| 01:18.32 | Sicelo009N | wtf! reinstalling doesn't restore root.ca & root.key |
| 01:18.34 | Sicelo009N | :/ |
| 01:18.41 | jonwil | weird |
| 01:18.46 | jonwil | copy from your other N900... |
| 01:24.23 | *** join/#maemo msava (~mircea@nl112-156-14.student.uu.se) |
| 01:24.44 | DocScrutinizer05 | I can't find any root.ca and root.key in http://oss.fruct.org/repository/pool/maemo5.0/non-free/m/maemo-security-certman/libmaemosec-certman0_0.1.6+0m5_armel.deb |
| 01:24.51 | Sicelo009N | good now :) |
| 01:25.09 | Sicelo009N | certificates showing in applet |
| 01:25.20 | Sicelo009N | and looking the same as other N900. |
| 01:26.06 | DocScrutinizer05 | http://maemo.org/packages/view/libmaemosec0/ also sucks |
| 01:26.45 | jonwil | and do microsoft etc work or fail? |
| 01:27.04 | jonwil | since both should now be running the new set of root CA certs I believe |
| 01:27.30 | Sicelo009N | fail :( |
| 01:28.46 | *** join/#maemo krnlyng (~liar@178.112.231.100.wireless.dyn.drei.com) |
| 01:29.54 | Sicelo009N | rebooting, although this doesn't seem to really help ... |
| 01:30.37 | DocScrutinizer05 | jonwil: whats the problem with gdb? |
| 01:32.04 | DocScrutinizer05 | missing source? |
| 01:32.28 | jonwil | no |
| 01:33.57 | jonwil | I connect to browserd with gdb --pid then break on the function I want then trigger it and gdb prints "Program terminated with signal SIGTRAP, Trace/breakpoint trap." |
| 01:34.17 | DocScrutinizer05 | err |
| 01:34.26 | DocScrutinizer05 | o.O |
| 01:35.18 | jonwil | very weird |
| 01:36.09 | DocScrutinizer05 | >> I partially solved the issue by starting the application with GDB (instead of attaching the process)... Then its working fine.. No idea abt the root cause though..<< |
| 01:36.29 | jonwil | Starting with gdb wont work because of how browserd is started |
| 01:36.41 | DocScrutinizer05 | maemo-launcher? |
| 01:36.45 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 01:38.39 | DocScrutinizer05 | ooh /sbin/dsme -p /usr/lib/dsme/libstartup.so |
| 01:38.51 | *** join/#maemo Sicelo009N (~sicelo@unaffiliated/sicelo) |
| 01:39.38 | DocScrutinizer05 | hmmmm, I think you could patch the dsmetool command that starts browserd |
| 01:40.00 | jonwil | yeah probably |
| 01:40.11 | jonwil | not sure how though |
| 01:40.46 | DocScrutinizer05 | or simply stop the browserd process via dsmetool and start it plain in gdb instead - after all dsme is only a glorified process monitor |
| 01:41.57 | DocScrutinizer05 | friggin dsmetool has no option to list active processes |
| 01:42.35 | DocScrutinizer05 | -k --stop=<cmd> Stop a process started with cmd |
| 01:43.57 | jonwil | that doesn't seem to work |
| 01:44.07 | DocScrutinizer05 | stopping doesn't work? |
| 01:44.22 | jonwil | it says "not found, not root or kill failed" |
| 01:44.56 | DocScrutinizer05 | wrong <cmd> |
| 01:45.00 | DocScrutinizer05 | IroN900:~# dsmetool -k blabla |
| 01:45.01 | DocScrutinizer05 | Process not killed: not found, not root or kill failed |
| 01:45.08 | jonwil | I dont know what to pass |
| 01:45.13 | jonwil | tried browserd |
| 01:45.17 | jonwil | and /usr/sbin/browserd |
| 01:45.18 | jonwil | no go |
| 01:45.39 | DocScrutinizer05 | try /usr/sbin/browserd -d |
| 01:45.55 | jonwil | nope, no error but nothing is killed either |
| 01:46.38 | DocScrutinizer05 | killall browserd until dsme gives up? dunno if it reboots system then |
| 01:47.07 | jonwil | yeah system reboot |
| 01:48.17 | DocScrutinizer05 | find the cmdline "dsmetool.*browserd" in /etc |
| 01:48.26 | DocScrutinizer05 | and /lib etc |
| 01:48.45 | DocScrutinizer05 | or even xsession |
| 01:50.44 | DocScrutinizer05 | <PROTECTED> |
| 01:52.20 | DocScrutinizer05 | simply remove/rename/chmod >>if test -x /usr/sbin/dsmetool; then<< ;-) -- then reboot |
| 01:52.30 | DocScrutinizer05 | or edit that file |
| 01:53.01 | DocScrutinizer05 | actually it starts browserd classical way when there's no dsmetool available |
| 01:54.06 | DocScrutinizer05 | if test -x /usr/sbin/dsmetool; then /usr/sbin/dsmetool -c 3 -T 180 -m -17 -t "/usr/sbin/browserd -d" else |
| 01:54.08 | DocScrutinizer05 | <PROTECTED> |
| 01:54.11 | DocScrutinizer05 | sheet |
| 01:54.14 | *** join/#maemo robbiethe1st (~robbiethe@50.37.245.85) |
| 01:55.08 | DocScrutinizer05 | anyway I can see how dsmetool might be doing things to browserd process that are not compatible with gdb |
| 01:55.21 | DocScrutinizer05 | iirc there can only be one process monitor |
| 01:55.48 | DocScrutinizer05 | dunno if dsme is a process monitor in that sense |
| 01:56.42 | *** join/#maemo LauRoman|Phone (~yaaic@5-14-33-187.residential.rdsnet.ro) |
| 02:06.51 | *** join/#maemo Oksana_ (~chatzilla@Maemo/community/ex-council/Wikiwide) |
| 02:11.10 | *** join/#maemo heroux_ (sandroco@gateway.insomnia247.nl) |
| 02:21.19 | jonwil | Not even sure that is the right browserd instance, my system is running 3 of them |
| 02:21.53 | jonwil | -d, -s 1512 -n RTComMessagingServer and -s 1539 -n browserui |
| 02:22.20 | *** join/#maemo stevenm (~stevenm@195.62.218.30) |
| 02:22.32 | jonwil | hildon-application-manager.launch also references browserd |
| 02:23.36 | jonwil | as does rtcom-messaging-ui |
| 02:26.42 | jonwil | if I can figure out what to do with a couple maemo-local patches for NSPR I might have another play at throwing in the most recent NSS/NSPR code (whatever is currently in mozilla-central mainline) and see if it builds or not |
| 02:27.07 | jonwil | but right now I gotta go out, got an appointment with a hairdresser :) |
| 02:29.37 | *** join/#maemo eMHa__ (~mh@p579DB522.dip0.t-ipconnect.de) |
| 02:36.15 | DocScrutinizer05 | jonwil: http://wstaw.org/m/2016/02/11/plasma-desktophj3616.png all those browserd instances are childs of one parent process. That's the essential 'trick' with browserd |
| 02:38.19 | *** join/#maemo Ex-Opesa (~Ex-Opesa@unaffiliated/ex-opesa) |
| 02:38.52 | *** join/#maemo Humpelstilzchen (erik@f054099255.adsl.alicedsl.de) |
| 03:05.01 | Maxdamantus | They're basically "threads". |
| 03:15.30 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 03:21.22 | *** join/#maemo RedW (~redw@89-76-164-87.dynamic.chello.pl) |
| 03:29.25 | *** join/#maemo krnlyng (~liar@178.112.231.100.wireless.dyn.drei.com) |
| 03:58.26 | *** join/#maemo Venusaur (~wdwrwf@wikipedia/Antonio-Lopez) |
| 04:02.11 | *** join/#maemo lxp (~lxp@unaffiliated/lxp) |
| 04:17.20 | *** join/#maemo DocScrutinizer05 (~saturn@openmoko/engineers/joerg) |
| 05:04.27 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 05:31.33 | *** join/#maemo RedM (~redw@89-76-164-87.dynamic.chello.pl) |
| 05:49.21 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 06:01.14 | *** join/#maemo githogori (~githogori@c-73-70-12-67.hsd1.ca.comcast.net) |
| 06:09.38 | *** join/#maemo disco_stu_droid (~wrt54gl@190.211.82.70) |
| 06:18.25 | brolin_empey | KotCzarny: Other than more connectors, is there any disadvantage to using an mSATA card on an mSATA â 2.5-inch SATA adapter board instead of using a 2.5-inch SATA SSD? |
| 06:19.51 | *** join/#maemo shamus (~shmaus@ip-206-192-194-12.marylandheights.ip.cablemo.net) |
| 06:26.01 | brolin_empey | Theoretically, an mSATA SSD installed on an mSATA â 2.5-inch SATA adapter board is functionally equal to a 2.5-inch SATA SSD. However, I know from my personal experience that a CompactFlash (not CompactMagnetic) card installed on a CompactFlash card â PATA adapter board is often not a drop-in replacement for a PATA HDD while a PATA SSD (not CompactFlash) is a drop-in replacement for a PATA HDD. |
| 06:30.22 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 06:59.56 | KotCzarny | brolin_empey: if you see at the benchmarks of the same model of ssd, they are the same for ssd and msata (because connectors are just sata pins) |
| 07:01.03 | KotCzarny | one thing to note, if you install in pata--(m)sata adapter there is always controller chip issue |
| 07:02.21 | KotCzarny | but as i said, msata allows you to choose almost any drive model, and ssd with pata interface is almost always old and/or overpriced (2-3x) |
| 07:02.37 | Sicelo | freemangordon: please help jonwil with certificates :) |
| 07:02.58 | Sicelo | my daily N900 can no longer open https sites. |
| 07:04.47 | Sicelo | i remember you did some certificate magic for nokia supl server. maybe you would know what's going on here. by the way, the maemosec packages he produced work just fine for a user with cssu-thumb, work fine on my cssu-testing n900, but not on my thumb device, nor on jonwil's device. |
| 07:06.23 | freemangordon | Sicelo: it was more than 2 years i played with that. However, what I remember is that certificate order is very important |
| 07:08.32 | freemangordon | also, I don't understand what he does and why so many problems, iirc what one needs is essentially - use cmcli to import or remove the certificates, then copy the result in the source tree and rebuild |
| 07:10.18 | KotCzarny | well, he learns on-the-go |
| 07:12.49 | freemangordon | ok, here is what a certificate change commit looks like https://github.com/community-ssu/maemo-security-certman/commit/2cbd96e89d7529e1ce25801824fb76f39b05b836 |
| 07:12.53 | freemangordon | I see nothing specia |
| 07:12.56 | freemangordon | l |
| 07:13.33 | freemangordon | see https://github.com/community-ssu/maemo-security-certman/commit/0be038825a98dae2d80fd411a02cb4c86ed1b36a too |
| 07:13.45 | Sicelo | he updated certificates, and all is good. but microb won't "see" them |
| 07:14.02 | freemangordon | does openssl see them? |
| 07:14.23 | freemangordon | openssl s_client that is |
| 07:14.27 | Sicelo | let me check. what's the command-u for that? |
| 07:14.53 | freemangordon | search google fro openssl s_client connect |
| 07:15.08 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 07:15.09 | freemangordon | also, make sure to give CApath to openssl |
| 07:16.41 | Sicelo | what should that be? |
| 07:16.56 | freemangordon | /etc/$something |
| 07:17.02 | freemangordon | the certificates location |
| 07:18.43 | Wizzup | https://packages.debian.org/sid/ca-certificates perhaps this is somehow useful? |
| 07:18.50 | Wizzup | I am not sure if the took the certificates from there? |
| 07:19.10 | Sicelo | working |
| 07:22.12 | Sicelo | hmm,testing microsoft.com says "unable to get issuer certificate" .. so i guess that means not working? |
| 07:22.30 | KotCzarny | sicelo, i get that message also on stock n900 |
| 07:22.49 | KotCzarny | and also on my laptop i think |
| 07:25.48 | Sicelo | hmm, well 2nd N900 does not return such message. |
| 07:26.03 | Sicelo | freemangordon: so looks like openssl not happy with them either :/ |
| 07:26.31 | KotCzarny | it might be that my cert store on laptop is broken too |
| 07:26.45 | KotCzarny | is your 2nd n900 stock? |
| 07:27.25 | freemangordon | Sicelo: could you tell openssl to be verbose and pastebin the output? |
| 07:27.36 | *** join/#maemo jonwil (~jonwil@27-33-80-219.tpgi.com.au) |
| 07:27.42 | freemangordon | jonwil: hi! |
| 07:28.00 | jonwil | hi |
| 07:28.11 | freemangordon | jonwil: which gdb do you use for debugging microb? |
| 07:28.30 | freemangordon | jonwil: also, read the backscroll |
| 07:29.08 | freemangordon | Sicelo: also tell openssl to dump the certificate chain |
| 07:29.39 | Sicelo | got to go see man page. no idea about those things haha |
| 07:30.05 | jonwil | gdb -v sayhs " |
| 07:30.13 | freemangordon | hmm? |
| 07:30.18 | jonwil | gdb -v says "6.8.50.20090417-debian" |
| 07:30.30 | freemangordon | try 7.1 from extras-devel |
| 07:30.39 | freemangordon | I put it there on a reason :( |
| 07:30.43 | jonwil | ok |
| 07:31.12 | freemangordon | jonwil: also, see my comment on certman commit |
| 07:33.02 | jonwil | FYI, cmcli -T verifies the chain of trust properly |
| 07:33.17 | freemangordon | jonwil: and what about openssl? |
| 07:33.21 | jonwil | I mean cmcli -T common-ca -v www.blah.com:443 |
| 07:33.25 | jonwil | and yes openssl s_client does work |
| 07:33.34 | jonwil | so that means the certificates themselves are correct |
| 07:33.48 | freemangordon | hmm, "( 9,26,03) Sicelo: freemangordon: so looks like openssl not happy with them either :/" |
| 07:34.03 | freemangordon | though he might be using incorrect cmd |
| 07:34.07 | jonwil | yeah probably |
| 07:34.34 | freemangordon | jonwil: do you use openssl from cssu? |
| 07:35.35 | Sicelo | jonwil: what's the correct openssl cmd? |
| 07:35.46 | jonwil | If I run openssl s_client -CApath /etc/certs/common-ca -connect www.blah.com:443 it works for the sites that fail in microb |
| 07:36.10 | Sicelo | that's same command i ran. doesn't work for my 'bad' N900, but works on 2nd one |
| 07:36.22 | jonwil | what does it say when you run it on your failing N900? |
| 07:36.59 | Sicelo | unable to get local issuer certificate |
| 07:37.06 | Sicelo | let me try with cmcli |
| 07:37.22 | jonwil | yeah try cmcli -T common-ca -v www.blah.com:443 |
| 07:37.52 | Sicelo | 35ce3296a4a08fe1aa8d09650a9b3acb2cc1da64 www.entrust.net Verification failed: unable to get local issuer certificate |
| 07:38.02 | jonwil | weird |
| 07:38.41 | jonwil | so you are doing cmcli -T common-ca -v www.entrust.net:443 and its giving that error? |
| 07:38.50 | Sicelo | yes |
| 07:39.06 | jonwil | Ok can you grab the entire contents of /etc/certs and /etc/secure on your N900 and get them to me? |
| 07:39.17 | jonwil | I can see if they match my device (where that command I just typed works) |
| 07:40.22 | jonwil | Or I can help you undo all your changes and go back to what you had before you fiddled with maemo-security-certman earlier |
| 07:40.32 | Sicelo | http://paste.debian.net/379881/ .. this is output of |
| 07:40.33 | jonwil | Then you have a 100% working N900 again |
| 07:40.44 | Sicelo | openssl s_client -connect www.entrust.net:443 -CApath /etc/certs/common-ca/ -showcerts > MyDocs/openssl.txt |
| 07:41.39 | Sicelo | i can help a bit more :) will let you know when i can't take it anymore, haha. just this is my daily device where certs refused to work. Murphy's law |
| 07:42.03 | jonwil | Ok so get me the contents of /etc/certs and /etc/secure and I will see how that differs from what it should be |
| 07:42.24 | jonwil | Once we get cmcli working correctly then at least we know that that bit is working again |
| 07:43.59 | jonwil | Wizzup: the certificates came from the Mozilla certdata.txt file (the mozilla root CA store) and were updated following instructions and other bits given to me by Juhani Mäkelä (original Nokia author of maemo-security-certman package) |
| 07:44.17 | Sicelo | tar'red them up. where can i upload? |
| 07:45.02 | jonwil | You could post in http://talk.maemo.org/showthread.php?t=96433 and attach to the post? |
| 07:45.02 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 07:45.04 | jonwil | That would work |
| 07:45.37 | Sicelo | jonwil: in case you, or i, disappear for some reason ... please document the 'recovery' method for whenever i may need it |
| 07:46.35 | jonwil | Its not something that can be easily documented since at various points in the process it would require you to do certain things then me to make decisions on what to do next based on certain information you give me :) |
| 07:46.50 | Wizzup | jonwil: ah, ok |
| 07:47.07 | jonwil | dont worry I wont be leaving IRC for houors (even if I go afk for a bit to e.g. have food) |
| 07:47.09 | jonwil | hours |
| 07:47.11 | Wizzup | jonwil: I was just wondering because it seems many linux distros take the certs from that package (including gentoo) |
| 07:47.34 | Wizzup | but they may just take it from mozilla as well |
| 07:49.49 | jonwil | Yep they do |
| 07:50.33 | jonwil | Lots of places get it from Mozilla because they trust the vetting process Mozilla uses |
| 07:50.34 | Sicelo | jonwil: posted to tmo |
| 07:50.56 | jonwil | Not sure where Chrome gets its root certificates from |
| 07:51.48 | *** join/#maemo eijk (~eijk@x4db31b09.dyn.telefonica.de) |
| 07:55.29 | *** join/#maemo bruce_lee (~neo@x4db1db3e.dyn.telefonica.de) |
| 07:55.43 | *** join/#maemo bruce_lee (~neo@unaffiliated/bruce-lee/x-7462768) |
| 07:55.58 | jonwil | ok so do you want me to help you get your system back to a functional state or do you want me to help you get the certificates to the same "working with cmcli etc but failing with microb" state I am in? |
| 07:56.26 | Wizzup | jonwil: one question, are all, or only some certificates failing with microb |
| 07:56.31 | jonwil | only some |
| 07:56.45 | Wizzup | And might that be related to perhaps using stronger crypto/hashes that are not supported by nss at that time |
| 07:56.56 | Wizzup | like some old browser having trouble with sha2 |
| 07:57.16 | jonwil | Yes thats why I am looking into updating NSPR and NSS |
| 07:57.17 | Wizzup | that is, perhaps it will only be fixed by upgrading nss |
| 07:57.19 | Wizzup | Okay |
| 07:57.27 | Wizzup | Just wanted to point that possibility out :) |
| 07:57.34 | jonwil | Just need to deal with some microb-local patches to NSPR somehow |
| 07:57.43 | Wizzup | I see |
| 07:57.59 | jonwil | Sicello: Which option do you want? |
| 07:58.12 | kerio | Wizzup: no way, microb supports sha-256 signatures |
| 07:58.34 | Wizzup | kerio: okay, well, I'm guessing something out there may be missing |
| 07:58.35 | jonwil | Back to fully working or up to "works with cmcli but not with microb"? |
| 07:58.43 | jonwil | Updating NSS cant hurt anyway |
| 07:58.44 | Wizzup | I guess my sha2 example was a bad one :) |
| 07:58.48 | Wizzup | jonwil: indeed! |
| 07:58.50 | jonwil | and we need to do it if we want TLS1.2 etc |
| 07:58.51 | kerio | is there a more specific error message? |
| 07:58.56 | kerio | jonwil: +1 |
| 07:58.57 | Wizzup | jonwil: +1 |
| 07:59.02 | Wizzup | :) |
| 07:59.03 | kerio | and yes, we DEFINETELY want tls 1.2 |
| 07:59.36 | kerio | "This seems like a good moment to reiterate that everything less than TLS 1.2 with an AEAD cipher suite is cryptographically broken." -- agl |
| 07:59.58 | jonwil | In terms of what we enable and disable there, we should trust Mozilla on that one |
| 08:00.11 | Sicelo | jonwil: out of which options? :) |
| 08:00.26 | jonwil | well we know Mozilla turns off SSL3 |
| 08:00.29 | jonwil | and doesn't support it anymore |
| 08:00.37 | jonwil | so we should do the same when we update NSS |
| 08:00.58 | jonwil | But for example we should trust Mozilla when it comes to which versions of TLS to turn on and which to turn off |
| 08:01.18 | kerio | yeah just go with what firefox does |
| 08:01.58 | jonwil | I suspect trusting Firefox on issues related to SSL/TLS/HTTPS/CAs/etc is probably a fairly safe and sane thing to do |
| 08:01.58 | kerio | i mean, there's something to be said about disabling aes-256 ciphersuites |
| 08:02.07 | jonwil | Especially if we are using all their codebase for this stuff :) |
| 08:02.11 | kerio | because we're kinda lacking in... everything |
| 08:02.21 | Sicelo | okay. hmm, can't make up my mind. part of me wants to go on with the testing, but this is my daily device, so maybe let's just get it back to working state |
| 08:02.41 | jonwil | Ok so you are running what version of CSSU on this device? |
| 08:03.44 | jonwil | ? |
| 08:04.04 | Sicelo | cssu thumb |
| 08:09.11 | jonwil | latest version of cssu-thumb? |
| 08:09.42 | jonwil | what version of mp-fremantle-community-pr does the system say you have? |
| 08:12.20 | jonwil | ? |
| 08:18.30 | jonwil | Looks like Sicelo went AFK :P |
| 08:22.26 | Sicelo | sorry |
| 08:22.28 | Sicelo | at work |
| 08:22.33 | jonwil | oh ok |
| 08:22.43 | jonwil | but yeah what version of mp-fremantle-community-pr do you have? |
| 08:23.35 | Sicelo | *** 21.2011.38-1Tmaemo11+thumb0 |
| 08:24.27 | jonwil | Ok so that's the most recent |
| 08:24.37 | jonwil | What you want to do is to open a root terminal |
| 08:24.54 | Sicelo | sure |
| 08:25.02 | jonwil | You want to do dpkg -r mp-fremantle-community-pr |
| 08:25.08 | jonwil | then dpkg -P libmaemosec-certman0 |
| 08:25.14 | jonwil | then dpkg -P libmaemosec0 |
| 08:25.21 | jonwil | then dpkg -P maemosec-certman-common-ca |
| 08:25.27 | jonwil | then dpkg -P maemosec-certman-tools |
| 08:25.39 | jonwil | Then tell me what, if anything, is left in /etc/certs or /etc/secure |
| 08:26.24 | jonwil | You will be reinstalling all those packages including mp-fremantle-community-pr in a sec, don't worry |
| 08:26.48 | Sicelo | dependency problems with that .. wants to remove almost everything, due to mp-fremantle* |
| 08:27.15 | jonwil | hmmm ok |
| 08:27.24 | Sicelo | dpkg: error processing libmaemosec-certman0 (--purge): dependency problems - not removing |
| 08:27.29 | *** join/#maemo geaaru (~geaaru@host170-152-static.43-88-b.business.telecomitalia.it) |
| 08:27.29 | jonwil | ok |
| 08:27.32 | ceene | you can always do find /etc/certs -exec dpkg -S {} \; |
| 08:27.42 | ceene | and then compare it with the output of find /etc/certs |
| 08:27.50 | jonwil | Ok so remove /etc/certs completly |
| 08:27.54 | jonwil | and also /etc/secure |
| 08:28.23 | jonwil | Then download the .deb files in this paste |
| 08:28.24 | jonwil | http://pastebin.com/CSzTrD61 |
| 08:28.29 | jonwil | and install them with dpkg -i in the order listed |
| 08:28.46 | jonwil | it may complain about certain packages being a downgrade but it should install them anyway |
| 08:28.48 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 08:30.15 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 08:32.10 | Sicelo | ok. doing it now |
| 08:36.45 | *** join/#maemo hashcore (~hashcore@unaffiliated/hashcore) |
| 08:36.49 | kerio | hold on why are those in community-thumb |
| 08:36.53 | kerio | instead of community-devel |
| 08:36.54 | kerio | :| |
| 08:38.48 | bencoh | I think he wants to rollback to a working state |
| 08:38.55 | bencoh | (on a thumb device) |
| 08:38.57 | *** join/#maemo LauRoman (~LauRoman@5-14-33-187.residential.rdsnet.ro) |
| 08:39.09 | jonwil | They are in community-thumb because there is no thumb specific version of those |
| 08:39.24 | kerio | oooh i see |
| 08:39.25 | jonwil | and yes he wants to back to what he had before he started |
| 08:39.32 | jonwil | hence the need to go back to those packages |
| 08:39.49 | ceene | talking about certs, i think yappari registration is failing due to non compatible ciphering between WA servers and n900 supported protocols |
| 08:40.00 | Sicelo | why 0.2.2 though? why not 0.2.3 |
| 08:40.14 | kerio | ceene: compile it with a static, more-recent openssl? |
| 08:41.15 | jonwil | 0.2.2 is what cssu-thumb shipped |
| 08:41.24 | jonwil | and what mp-fremantle-community-pr for thumb points to |
| 08:41.48 | jonwil | why 0.3.2 isn't in cssu-thumb you will have to ask the maintainer of that |
| 08:42.04 | jonwil | I mean 0.2.3 |
| 08:43.10 | ceene | kerio: i'm on it... i've already created an openssl deb package for n900, backported from debian |
| 08:43.19 | ceene | qt is smart enough to use latest installed openssl |
| 08:43.22 | kerio | hm, that would mess up with things tho |
| 08:43.29 | ceene | it won't |
| 08:43.40 | ceene | i've got both openssl packages installed on my n900 right now |
| 08:43.45 | Sicelo | ok |
| 08:43.47 | kerio | have you removed the symlink between libssl.so and libssl.so.yourversion |
| 08:43.51 | ceene | without any problem in a couple months or so |
| 08:44.39 | ceene | the thing is, most apps will search for the exact version of the library they were compiled against |
| 08:44.55 | ceene | but QT searches for all libssl.so* versions and dlopen()s it |
| 08:44.57 | bencoh | kerio: qt dlopens |
| 08:45.38 | kerio | D: |
| 08:45.43 | kerio | that sounds like a horrible way to do things |
| 08:45.50 | bencoh | qt inside. |
| 08:46.12 | kerio | lol |
| 08:47.02 | ceene | horrible or not, it's just what we need :) |
| 08:47.14 | ceene | i've still got to do a couple things |
| 08:47.16 | ceene | to disable ssl3 |
| 08:47.32 | ceene | so i may have to patch qt itself |
| 08:48.01 | *** join/#maemo TriztAway (~user@ukko.aho.hk) |
| 08:51.37 | jonwil | Sicelo: Does your system work again now? |
| 08:53.23 | *** join/#maemo shamus (~shmaus@ip-206-192-194-12.marylandheights.ip.cablemo.net) |
| 08:54.06 | kerio | ceene: how does qt know how to use all the versions of openssl, though? |
| 08:56.49 | Sicelo | jonwil: mp-fremantle-community-pr depends on maemosec-certman-tools (>= 0.2.3); however: Version of maemosec-certman-tools on system is 0.2.2. |
| 08:57.09 | ceene | kerio: by finding /lib/libssl* and parsing the filename |
| 08:57.14 | ceene | i mean |
| 08:57.19 | ceene | you have to add support to the functions it will use |
| 08:57.29 | ceene | if there's some api change, then it has to implement it |
| 08:57.31 | Sicelo | crazy stuff going on here, lol. you found that we should be having 0.2.2? |
| 08:57.50 | *** join/#maemo geaaru (~geaaru@host170-152-static.43-88-b.business.telecomitalia.it) |
| 08:58.50 | jonwil | ok, try http://repository.maemo.org/community-testing/pool/fremantle/free/m/maemo-security-certman/libmaemosec-certman0_0.2.3_armel.deb http://repository.maemo.org/community-testing/pool/fremantle/free/m/maemo-security-certman/libmaemosec0_0.2.3_armel.deb http://repository.maemo.org/community-testing/pool/fremantle/free/m/maemo-security-certman/maemosec-certman-common-ca_0.2.3_all.deb... |
| 08:58.52 | jonwil | ...http://repository.maemo.org/community-testing/pool/fremantle/free/m/maemo-security-certman/maemosec-certman-tools_0.2.3_armel.deb |
| 08:59.07 | jonwil | That should work |
| 08:59.24 | Sicelo | can i just use apt-get install :) specifying version? |
| 08:59.37 | jonwil | no since you already have a more recent version |
| 08:59.48 | jonwil | I dont know if apt-get can downgrade a package |
| 08:59.52 | jonwil | if it can, feel free to try it |
| 09:00.03 | Sicelo | it can |
| 09:05.04 | Sicelo | few certs in /etc/certs/common-ca/ |
| 09:05.11 | Sicelo | less than 10 |
| 09:05.32 | Sicelo | nothing in /etc/certs/trusted |
| 09:08.44 | ceene | can you find /etc/certs/common-ca/ -exec dpkg -S {} \; ? |
| 09:08.51 | ceene | I'm curious as to what is kept ther |
| 09:08.55 | ceene | *there |
| 09:18.53 | jonwil | They only come from maemosec-certman-common-ca |
| 09:19.04 | jonwil | what do you see if you dpkg -L maemosec-certman-common-ca? |
| 09:19.53 | jonwil | Also you may want to try manually downloading the deb files and installing them with dpkg, that will probably restore the missing files |
| 09:20.08 | Sicelo | i did |
| 09:20.10 | jonwil | apt-get may not install the files when downgrading for some reason |
| 09:20.27 | Sicelo | dpkg -L lists all of the certs, but they are definitely not there |
| 09:20.32 | Sicelo | now that's crazy |
| 09:20.52 | jonwil | Very weird |
| 09:21.22 | jonwil | I am out of ideas |
| 09:21.39 | Sicelo | even the install process doesn't show the rest being installed |
| 09:21.49 | Sicelo | re-doing it make no difference |
| 09:22.20 | Sicelo | lemme reboot |
| 09:24.28 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 09:28.19 | *** join/#maemo hashcore (~hashcore@unaffiliated/hashcore) |
| 09:29.40 | jonwil | freemangordon: ping |
| 09:38.41 | Sicelo | dpkg -L is likely just spitting out contents of /var/lib/dpkg/info/maemosec-certman-common-ca.list even though the files themselves aren't there. let me extract the deb |
| 09:40.48 | jonwil | ok |
| 09:43.34 | Sicelo | so i dpkg -x the package, and manually ran its postinst. cmcli is happy now. |
| 09:43.41 | Sicelo | let me check microb |
| 09:47.52 | Sicelo | seems okay. loading entrust website successfully. |
| 09:48.01 | Sicelo | yhansuthanks for the help :) |
| 09:48.11 | Sicelo | bad typing :( |
| 09:48.44 | Sicelo | i'll play with your 0.2.4 stuff in the evening :) |
| 09:49.01 | *** join/#maemo Vajb (~Vajb@85-76-138-125-nat.elisa-mobile.fi) |
| 09:52.51 | *** join/#maemo bruce__lee (~neo@x4db29743.dyn.telefonica.de) |
| 09:53.24 | jonwil | ok, great :) |
| 09:54.44 | jonwil | Might help if I download the armel version of gdb 7.3.1 and not the i386 version :) |
| 09:54.48 | jonwil | Lets try that agaon |
| 09:54.50 | jonwil | again |
| 09:54.54 | Sicelo | this is going to be 'fun' one to debug i guess, as there is no consistency of behaviour |
| 09:55.28 | jonwil | Not really, once I actually get GDB working I should be able to see whats up |
| 09:56.29 | jonwil | right now if I visit www.entrust.com I get a SEC_ERROR_UNKNOWN_ISSUER error from microb |
| 09:57.03 | jonwil | so I intend to break on the function that spits out the error (PORT_SetError in nss) and from there work backwards |
| 09:57.13 | jonwil | and eventually I will be at some function I can single step or trace and see just what is going on |
| 09:58.03 | Sicelo | :) |
| 09:59.29 | jonwil | hmmm. newer version of GDB doesn't help |
| 10:15.33 | Sicelo | installed 0.2.4 again .. now i'm at least in same situation as you. no worse |
| 10:16.48 | Sicelo | openssl and cmcli both happy |
| 10:22.11 | kerio | jonwil: does https://nethack.dank.ninja/ work |
| 10:23.31 | Sicelo | yes |
| 10:23.33 | jonwil | That works for me |
| 10:24.47 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 10:26.47 | jonwil | hmmm, I wonder if there is some sort of way to run microb-engine but not browserd |
| 10:27.23 | jonwil | Let me see what these other packages I get when building microb-engin edo |
| 10:28.22 | bencoh | ? |
| 10:28.27 | *** join/#maemo LauRoman|Alt (~LauRoman@5-14-33-187.residential.rdsnet.ro) |
| 10:28.52 | jonwil | microb-engine builds a bunch of packages that aren't installed in the phone |
| 10:29.12 | *** join/#maemo bruce__lee (~neo@unaffiliated/bruce-lee/x-7462768) |
| 10:29.29 | bencoh | how would you run microb-engine without browserd? |
| 10:30.15 | jonwil | I dont mean using the browser UI |
| 10:30.25 | jonwil | browserd links to several libraries |
| 10:30.38 | jonwil | which contain the actual rendering engine and stuff |
| 10:30.50 | *** join/#maemo LauRoman (~LauRoman@5-14-33-187.residential.rdsnet.ro) |
| 10:31.25 | jonwil | There are things built from the microb-engine source package that might provide a way to load that actual gecko code and pull web pages and stuff without going through browserd, browser-neteal or the normal browser UI |
| 10:33.24 | Maxdamantus | There's microb-xulrunner already in the repository fwiw |
| 10:33.52 | Maxdamantus | It's able to run things like an old version of Conkeror. |
| 10:34.30 | Maxdamantus | or maybe a newer one having manually added some promises library, iirc |
| 10:35.10 | jonwil | Yeah thats what I mean, getting microb-xulrunner and things from my microb-engine tree |
| 10:35.41 | *** join/#maemo capitanocrunch (~capitanoc@host90-32-dynamic.51-79-r.retail.telecomitalia.it) |
| 10:41.47 | Maxdamantus | http://maxdamantus.eu.org/c900.png |
| 10:42.13 | Maxdamantus | It's reasonably usable tbh |
| 10:42.50 | Maxdamantus | The issue I had with Conkeror on my desktop is that the UI is convenient enough to have hundreds of tabs open. |
| 10:43.42 | Maxdamantus | which was kind of okay while I only had 3 GiB of RAM, since once it got to 120 or so tabs I'd just close a bunch of them to avoid unnecessary swapping. |
| 10:44.31 | Maxdamantus | now with 32 GiB of RAM it bottlenecks on the CPU at around 500 tabs, and cbf cleaning up 500 tabs. |
| 10:44.45 | Maxdamantus | Don't really want to have that issue on my phone. |
| 10:50.42 | *** part/#maemo capitanocrunch (~capitanoc@host90-32-dynamic.51-79-r.retail.telecomitalia.it) |
| 10:54.40 | *** join/#maemo clopez (~tau@neutrino.es) |
| 10:58.24 | KotCzarny | o.o |
| 10:58.33 | KotCzarny | i usually have ~10-20 tabs at most |
| 10:59.03 | KotCzarny | if i want to read the site but dont want the tab i just bookmark it into 'to read' folder |
| 11:00.51 | jonwil | ok, the plot thickens... |
| 11:01.07 | Wizzup | hm? |
| 11:03.49 | KotCzarny | nobody expected spanish inquisition |
| 11:05.10 | jonwil | If I access https://www.entrust.net/ in microb, it gives an error. If I access the same domain via microb-refui (built alongside the microb-engine bits I am using) the URL loads just fine |
| 11:05.29 | jonwil | by "in microb", I mean in the standard Maemo web UI |
| 11:08.43 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 11:08.55 | *** join/#maemo zGrr (~GrR@188.146.72.226.nat.umts.dynamic.t-mobile.pl) |
| 11:09.39 | zGrr | moin |
| 11:33.44 | *** join/#maemo eMHa__ (~mh@185.36.21.1) |
| 11:38.51 | Sicelo | still doesn't answer why microb in other devices doesn't mind the new certs :/ |
| 11:45.30 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 11:56.47 | jonwil | HOLY CRAP I found the problem |
| 11:57.19 | bencoh | ? |
| 11:57.31 | jonwil | making a forum post now |
| 11:57.42 | bencoh | suspens... |
| 11:58.09 | KotCzarny | ;) |
| 12:00.17 | kerio | woop |
| 12:01.01 | jonwil | http://talk.maemo.org/showthread.php?t=96433&page=2 |
| 12:02.25 | kerio | jonwil: i strongly doubt anyone actually uses personal certificates in microb |
| 12:02.55 | kerio | so you can probably just delete it |
| 12:03.06 | bencoh | ? |
| 12:04.10 | bencoh | some people add exceptions, I guess (?) |
| 12:04.12 | kerio | how did they end up being stale, though? |
| 12:06.24 | jonwil | No idea |
| 12:06.33 | kerio | hold on gimme the debs |
| 12:06.56 | jonwil | I suspect they are intermediate certificates chaining off a specific root that is not in the new root CA store |
| 12:07.05 | kerio | makes sense |
| 12:07.18 | jonwil | but when the intermediates aren't in cert8.db, microb uses some newer intermediates chaining off a newer root that is in the new root CA store |
| 12:07.48 | jonwil | as for the debs of the new root CA stuff, http://talk.maemo.org/showthread.php?t=96430 has what you need |
| 12:08.35 | kerio | yeah but gimme some links i can wget |
| 12:09.11 | jonwil | I dont have the files uploaded anywhere you can wget |
| 12:09.22 | jonwil | unless you can wget forum attachements |
| 12:09.32 | Sicelo | i do use personal cert in microb |
| 12:09.37 | KotCzarny | i think you can |
| 12:10.38 | kerio | ;-; |
| 12:10.48 | jonwil | At least I have the cause now |
| 12:11.05 | jonwil | Although that doesn't mean I wont keep trying to update NSS, we do want TLS1.2 support after all :) |
| 12:11.39 | Sicelo | \m/ |
| 12:12.05 | Sicelo | jonwil: quick fix available? |
| 12:12.38 | jonwil | quick fix for what? |
| 12:12.43 | jonwil | the cert8.db problem? |
| 12:12.47 | jonwil | no, I dont have a fix yet |
| 12:12.50 | Sicelo | okay |
| 12:12.54 | jonwil | other than deleting the file and risking problems |
| 12:13.09 | jonwil | We need to find a proper way to clean out the crap without deleting anything important |
| 12:13.17 | Sicelo | agreed |
| 12:14.46 | kerio | how do i verify that jonwil's package isn't backdoored |
| 12:15.51 | jonwil | You cant really, but you have to trust the people who wrote CSSU for example didn't backdoor things |
| 12:16.06 | jonwil | or for that matter that original Nokia packages dont have backdoors |
| 12:16.16 | jonwil | Not that I would intentionally backdoor something |
| 12:16.21 | jonwil | I think backdoors are bad |
| 12:16.23 | kerio | suuuuuuure ;) |
| 12:16.35 | bencoh | kerio: does his package contain machine code? |
| 12:16.40 | bencoh | isn't it just certificates? |
| 12:16.47 | kerio | yes, it's "just" certificates |
| 12:16.58 | bencoh | """just""" ;] |
| 12:17.06 | kerio | what if now my n900 is trusting "jonwil's super legit root CA" |
| 12:17.17 | Sicelo | i use personal certto access Outlook Web Access for work emails. can't use exchange activesync due to provisioning, and no imap/pop enabled |
| 12:17.24 | kerio | oh god i have to update like 8 billion things |
| 12:17.40 | bencoh | it isn't worse than, say, states CA :) |
| 12:17.41 | kerio | Sicelo: you should most definetely not delete cert8.db |
| 12:18.12 | KotCzarny | :) |
| 12:18.15 | KotCzarny | why not? |
| 12:19.13 | kerio | because it's likely that he has a client certificate stored there |
| 12:19.36 | kerio | do we have certutil? |
| 12:20.22 | kerio | yep, cert8.db has the certificates, key3.db has the keys |
| 12:20.33 | jonwil | The set of root certificates in my updated maemo-security-certman is an unchanged set from mozilla certdata.txt as of http://hg.mozilla.org/mozilla-central/rev/64df3815df9c |
| 12:21.15 | kerio | did you do a conversion to it, or do the package scripts do that? |
| 12:21.36 | jonwil | Or rather its that set of certificates minus whichever ones cmcli decided not to import (would need to dig deep into openssl source code to find out exactly the criteria for rejecting a certificate for import) |
| 12:21.42 | kerio | :| |
| 12:21.51 | jonwil | This commit https://github.com/community-ssu/maemo-security-certman/commit/9076865275fb4e78578276afdff45f6f47389872 contains a backport of a fix from Harmattan |
| 12:21.58 | jonwil | plus a new set of root CA certificates |
| 12:22.24 | jonwil | plus the tool and instructions for importing mozilla certdata.txt file |
| 12:23.06 | Sicelo | kerio: i still have the original pfx files ;) |
| 12:23.54 | jonwil | You can thank Juhani Mäkelä (original author of maemo-security-certman) for their help in getting all this working |
| 12:24.56 | jonwil | They provided the parse-certdata-txt.c file and some very useful info on how to get things going (including the right cmcli commands to run and the right stuff to backport from Harmattan) |
| 12:25.19 | jonwil | I dont know enough about finnish names to tell if that is a man or a woman :P |
| 12:27.12 | kerio | entrust.com worksforme |
| 12:27.16 | kerio | or rather |
| 12:27.19 | kerio | i think it works for me |
| 12:27.22 | kerio | the page is very slow to load |
| 12:27.42 | jonwil | you must not have whatever bogus certificates are in my cert8.db file then |
| 12:27.53 | jonwil | does ib.boq.mobi work for you? |
| 12:27.57 | kerio | do we have a package with the nss certutil in |
| 12:28.15 | jonwil | I haven't figured out how to build the nss command line tools although I would really like to do that |
| 12:29.38 | *** join/#maemo erlehmann_ (~erlehmann@x55b39c44.dyn.telefonica.de) |
| 12:30.00 | jonwil | anyhow, my phone is running out of juice after all this testing, better go plug it in to charge up :) |
| 12:33.09 | kerio | jonwil: libnss3-tools in debina? |
| 12:33.10 | kerio | debian |
| 12:33.58 | kerio | certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format. |
| 12:34.09 | jonwil | We need to build the tools from the same nss source tree we have in microb-engine |
| 12:34.10 | kerio | this makes things a bit harder |
| 12:34.44 | jonwil | I am sure there is a way to modify the microb-engine build tree to build libnss3-tools or something similar |
| 12:34.47 | jonwil | Do that and we are golden |
| 12:35.50 | *** join/#maemo krnlyng (~liar@178.112.231.100.wireless.dyn.drei.com) |
| 12:43.24 | *** join/#maemo msava (~mircea@nl112-156-14.student.uu.se) |
| 12:44.23 | *** join/#maemo ecloud (quassel@nat/digia/x-icnszlwfwhjgabvq) |
| 12:45.49 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 12:47.51 | Maxdamantus | wonders why he wasn't able to copy his bootloader from one N900 to another by just reading/writing from/to /dev/mtd3 |
| 12:50.40 | KotCzarny | maybe it was something else broken too |
| 12:51.09 | Maxdamantus | What sort of thing? |
| 12:51.34 | KotCzarny | fs corruption? kernel corrupted? config partition corrupted? |
| 12:51.38 | Maxdamantus | Everything worked the first time once it was able to load by u-boot build. |
| 12:51.40 | KotCzarny | dont know what were you doing |
| 12:52.04 | Maxdamantus | Copying my existing setup to another N900 I acquired. |
| 12:52.29 | KotCzarny | hmm, different revisions? |
| 12:52.48 | Maxdamantus | I just zeroed out the eMMC and emptied ubifs, repartition the eMMC and copied a backup of the main filesystem in. |
| 12:53.13 | Maxdamantus | and copied my boot directory and ubifs as it currently was on my existing one. |
| 12:53.37 | Maxdamantus | Who needs flasher? |
| 12:54.02 | KotCzarny | why do we care about ubifs anyway? |
| 12:54.10 | KotCzarny | it eats cycles and memory |
| 12:54.48 | KotCzarny | i remember using overlay fs long time ago on ancient 586 200mhz box, and it was noticably slower in disk operations |
| 12:54.49 | Maxdamantus | I'm still using kernel-power, which doesn't have built-in support for omap-hsmmc or ext4. |
| 12:55.04 | Maxdamantus | Don't really want to bother with an initramfs. |
| 12:55.11 | Maxdamantus | ubifs is basically my initramfs. |
| 12:55.20 | KotCzarny | who needs initramfs |
| 12:55.30 | Hurrian | nah, don't dd from one device to another - it doesn't handle the bad blocks quite right |
| 12:55.59 | Maxdamantus | Hm. That'd probably explain it. |
| 12:56.08 | KotCzarny | :) |
| 12:56.09 | Hurrian | you should prolly use "flasher --local" |
| 12:56.11 | Hurrian | :3 |
| 12:56.33 | Maxdamantus | also noticed a bunch of messages about ECC when doing `rm -rf *` in the ubifs. |
| 12:57.13 | Maxdamantus | should probably have just recreated the filesystem, though he's not really familiar with ubifs/mtd. |
| 12:58.37 | DocScrutinizer05 | ((<ceene> but QT searches for all libssl.so* versions and dlopen()s it)) now that explains some nasty effects. e.g. why Silego GreenPack3 software mostly works on my OpenSuse system but simply blows chunks on "Save as..." |
| 12:59.08 | Hurrian | now, off to go and find myself another N900. |
| 12:59.30 | Maxdamantus | is meant to be getting a third one soon too. |
| 12:59.46 | Maxdamantus | then I'll have five N9* devices. |
| 12:59.54 | KotCzarny | :) |
| 12:59.59 | KotCzarny | i have 3.5 |
| 13:00.03 | jonwil | I have just the one although I wish I had a second one for if/when this one stops working |
| 13:00.09 | Hurrian | mine croaked aaaaaaageeees ago, but it was way, way more useful than pretty much any other mobile device I have now |
| 13:00.26 | jonwil | but right now I dont have the funds for anything even vaguely related to tech stuff |
| 13:00.31 | Hurrian | if only I could find one on eBay that wasn't a refurb for $200... |
| 13:00.33 | Maxdamantus | I haven't confirmed that the $2 N97 works yet though .. I think the guy mailed the battery in a separate package. |
| 13:01.05 | Maxdamantus | and it seems like it's in fairly bad condition. |
| 13:01.16 | Maxdamantus | came with a 16 GB microSD card though. |
| 13:02.12 | Maxdamantus | sleeps. |
| 13:06.22 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 13:17.12 | DocScrutinizer05 | https://en.wikipedia.org/wiki/Juhani |
| 13:17.22 | DocScrutinizer05 | male |
| 13:18.59 | jonwil | ok |
| 13:20.40 | Sicelo | didn't someone offer you N900 jonwil? :) |
| 13:20.45 | jonwil | possibly |
| 13:20.52 | jonwil | but I never followed it up |
| 13:23.58 | Sicelo | around the time you had bad USB port |
| 13:24.09 | jonwil | yeah that |
| 13:24.36 | jonwil | My phone works at the moment so I have no urgency to worry about replacing it or dealing with it |
| 13:25.48 | KotCzarny | if one would setup usb-fixing shop, there would be a lot of good n900s |
| 13:26.37 | kerio | KotCzarny: why shouldn't we care about ubifs? |
| 13:26.49 | kerio | the mtd is the fastest storage unit in the n900 |
| 13:27.10 | KotCzarny | kerio, use nand only for booting part and move everything else to emmc/sd |
| 13:27.21 | kerio | which makes things waaaaaay slower |
| 13:28.55 | KotCzarny | does it? |
| 13:29.05 | KotCzarny | the slowest part is swapping |
| 13:29.09 | KotCzarny | not fs |
| 13:31.46 | KotCzarny | also, i run bpi/opi from sd card, and its fast enough (stride/stripe helps) |
| 13:32.33 | jonwil | wishes it wasn't so hard to find people who actually understand the inner workings of the Gecko rendering engine... :( |
| 13:34.25 | DocScrutinizer05 | kerio: indeed I always wondered how much sense it would make to have a - say - 200MB swap on mtd and move the whole rootfs (modulo a stub pivotroot aka "initrd" of sorts) to mmc |
| 13:34.48 | kerio | it would probably make a lot of sense for the purpose of convenience |
| 13:34.53 | kerio | but it *is* a performance hit |
| 13:35.19 | KotCzarny | kerio, did you measure it? |
| 13:35.34 | DocScrutinizer05 | nah, fast swap (particularly on write) way better for system performance on a system starving on RAM than a faster rootfs |
| 13:35.40 | kerio | not personally but i don't remember who did |
| 13:35.51 | kerio | someone did, tho |
| 13:36.01 | KotCzarny | 10%? 50%? |
| 13:38.35 | DocScrutinizer05 | suspects a nasty global-action TBIC button on jonwil's devices |
| 13:38.58 | DocScrutinizer05 | how else comes he never says bye |
| 13:39.32 | KotCzarny | ~greetings |
| 13:39.32 | infobot | greetomgs! |
| 13:39.41 | KotCzarny | ~hello |
| 13:39.41 | infobot | Howdy Bub |
| 13:39.52 | KotCzarny | ~internet time |
| 13:44.10 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 13:44.25 | DocScrutinizer05 | for some of you geeks this is possibly a nice read: http://www.dwheeler.com/essays/fixing-unix-linux-filenames.html |
| 13:44.39 | bencoh | ~ugt |
| 13:44.39 | infobot | methinks ugt is Universal Greeting Time. Created in #mipslinux, it is a rule that states that whenever somebody enters an IRC channel it is always morning, and it is always late when the person leaves. The local time of any other people in the channel, including the greeter, is irrelevant. http://www.total-knowledge.com/~ilya/mips/ugt.html |
| 13:45.40 | DocScrutinizer05 | and the links like http://www.dwheeler.com/essays/filenames-in-shell.html |
| 13:46.05 | DocScrutinizer05 | this guy actually knows what he's talking about |
| 14:01.25 | *** join/#maemo troulouliou_div2 (~troulouli@unaffiliated/troulouliou-div2/x-0271439) |
| 14:20.32 | *** join/#maemo sparetire (~sparetire@unaffiliated/sparetire) |
| 14:27.47 | *** join/#maemo heroux (~heroux@gateway.insomnia247.nl) |
| 14:52.05 | *** join/#maemo krnlyng (~liar@178.112.231.100.wireless.dyn.drei.com) |
| 14:57.10 | *** join/#maemo Avasz (~N900@unaffiliated/avasz) |
| 14:58.12 | Avasz | hi, I was happily browsing site in the afternoon (talk.maemo.org) and reviving my old n900. I haven't posted or done anything at all, just browsing the forum. And, now it says my ip is blocked. Can anyone help please? |
| 14:58.23 | Avasz | also, would like to know the reason why it was blocked. |
| 14:59.10 | KotCzarny | as for reviving: |
| 14:59.12 | KotCzarny | ~flashing |
| 14:59.19 | infobot | well, maemo-flashing is http://wiki.maemo.org/Updating_the_tablet_firmware, or - on linux PC - download&extract http://maemo.cloud-7.de/maemo5/patches_n_tools/maemo-my-private-workdir.tgz, cd into it, do sudo ./flash-it-all.sh |
| 14:59.19 | Avasz | no. |
| 14:59.39 | Avasz | I mean, I need to unblock my ip, such that I can visit the forums. :) |
| 15:00.04 | Avasz | reviving = using it as server :D |
| 15:00.53 | KotCzarny | ~unbanip |
| 15:00.53 | infobot | unbanip is probably please contact techstaff <at> maemo <dot> org with your request, or see ~techstaff |
| 15:01.25 | Avasz | sure, thanks. |
| 15:01.44 | Avasz | it said to contact staff in #maemo too, don't know who is the staff here though. |
| 15:01.48 | KotCzarny | and most likely your ip is in some spam db |
| 15:02.00 | Avasz | Sorry, it seems that you are using an IP address or a proxy that is listed in the forum anti spam blacklist. |
| 15:02.03 | Avasz | Feel free to contact our staff on irc freenode #maemo channel. |
| 15:02.07 | KotCzarny | change <at> into @ and <dot> into . |
| 15:02.17 | Avasz | sure, understood that. |
| 15:03.12 | Avasz | was browsing around 30 mins earlier, and next time trying to check a post about python 2.75 and it gets blocked. :( |
| 15:03.21 | KotCzarny | and if you are on dynamic ip try reconnecting modem |
| 15:06.57 | *** join/#maemo heroux (~heroux@gateway.insomnia247.nl) |
| 15:46.51 | DocScrutinizer05 | Avasz: please ping chem|st, your IP is on some anti-sorum-spam blacklist |
| 15:46.58 | DocScrutinizer05 | forum even |
| 15:47.47 | DocScrutinizer05 | chem|st: staff (for all that matters to talk.maemo.org |
| 15:48.45 | DocScrutinizer05 | it's a pretty weird concept to have forum block users from *reading* stuff, but it seems nobody is willing to implement a better approach to only block login |
| 15:51.16 | DocScrutinizer05 | Avasz: anyway not your fault |
| 15:56.47 | *** join/#maemo parazyd (~parazyd@unaffiliated/parazyd) |
| 15:57.05 | *** join/#maemo heroux (~heroux@gateway.insomnia247.nl) |
| 15:57.22 | chem|st | !ipunblock |
| 15:58.15 | bencoh | ? |
| 15:59.08 | DocScrutinizer05 | ~ |
| 15:59.10 | chem|st | DocScrutinizer05: it is not only login, we got ddos'ed, and registration spammed, you cannot prevent a crowd attack from asia as those are real people |
| 15:59.15 | chem|st | ~ipunblock |
| 15:59.29 | chem|st | ~+bosnack |
| 15:59.34 | chem|st | ~botnack |
| 15:59.42 | chem|st | nvm |
| 15:59.52 | chem|st | I did not set it and do not remember |
| 15:59.56 | DocScrutinizer05 | ~unbanip |
| 15:59.56 | infobot | methinks unbanip is please contact techstaff <at> maemo <dot> org with your request, or see ~techstaff |
| 16:00.06 | bencoh | ~techstaff |
| 16:00.06 | infobot | it has been said that techstaff is techstaff(AT)maemo.org - the folks that keep your maemo infra running. Devotion to Duty http://xkcd.com/705/ |
| 16:00.25 | *** join/#maemo NIN101 (~core@mail2.quitesimple.org) |
| 16:01.27 | chem|st | and that is what the block page should read too |
| 16:02.37 | chem|st | xes: maybe you can setup a nicer notification to the blocking, incl mentioning that most bigger TOR nodes are blocked for obvious reasons |
| 16:03.01 | *** join/#maemo capitanocrunch (~capitanoc@host4-196-dynamic.211-62-r.retail.telecomitalia.it) |
| 16:03.10 | capitanocrunch | hi |
| 16:03.19 | *** join/#maemo Gizmokid2005 (~Gizmokid2@dedi2.gizmokid2005.com) |
| 16:03.28 | chem|st | capitanocrunch: hi |
| 16:03.28 | *** join/#maemo fk_lx (~fk_lx@37.187.81.152) |
| 16:03.56 | DocScrutinizer05 | on unrelated OT sidenote: deadbeef is an awesome music player |
| 16:04.02 | capitanocrunch | i noticed issue for navit packages in maemo repos when apt-upgrade |
| 16:04.07 | capitanocrunch | iled to fetch http://repository.maemo.org/extras-devel/pool/fremantle/free/n/navit/navit_0.5.0+dfsg.1-1maemo1-6563_armel.deb Size mismatch |
| 16:04.11 | capitanocrunch | Failed to fetch http://repository.maemo.org/extras-devel/pool/fremantle/free/n/navit/navit-data_0.5.0+dfsg.1-1maemo1-6563_all.deb Size mismatch |
| 16:04.51 | bencoh | size mismatch? |
| 16:05.04 | DocScrutinizer05 | that's what they saud |
| 16:05.09 | DocScrutinizer05 | said* |
| 16:05.25 | bencoh | do you need to update your catalogue? |
| 16:05.46 | DocScrutinizer05 | apt upgrade is *strongly* deprecated |
| 16:05.58 | *** join/#maemo yosafbridge (~yosafbrid@105.ip-167-114-152.net) |
| 16:06.08 | DocScrutinizer05 | PARTICULARLY from maemo-devel |
| 16:06.32 | DocScrutinizer05 | almost sure bet to bork your system |
| 16:06.34 | capitanocrunch | im using apt-get update and then apt-get upgrade |
| 16:06.46 | DocScrutinizer05 | see ^^^^ |
| 16:07.17 | capitanocrunch | why deprecated? |
| 16:08.27 | *** join/#maemo fk_lx (~fk_lx@37.187.81.152) |
| 16:08.33 | *** join/#maemo alexey (~alexey@ocaml.nl) |
| 16:08.38 | *** join/#maemo inz (inz@inz.fi) |
| 16:08.56 | capitanocrunch | so we have to use fapman? |
| 16:09.24 | DocScrutinizer05 | top ten things to know about maemo: #1 maemo is almost a plain debian #2 maemo is NOT a plain debain #3 NEVER do apt-get upgarde or apt-get dist-upgrade when you got any but the basic repos enabled #4 never do apt-get upgrade at all #5... $yourcall |
| 16:09.34 | DocScrutinizer05 | ~fapman |
| 16:09.34 | infobot | hmm... fapman is Faster Application Manager, a frontend for apt which uses own repositories catalog, and shouldn't be used to do system upgrades (like CSSU), or actually for anything since ~speedyHAM. It also does "apt-get autoremove" after every operation, by default. In short, it's been identified as source of system corruption and thus deprecated, or see ~hamvsfam |
| 16:10.00 | DocScrutinizer05 | ~speedyham |
| 16:10.00 | infobot | hmm... speedyham is 30 times faster than HAM http://maemo.merlin1991.at/cssu/community-devel/pool/free/h/hildon-application-manager/hildon-application-manager_2.2.73-2_armel.deb |
| 16:10.34 | DocScrutinizer05 | infobot: speedyham is also SpeedyHAM is included in CSSU now |
| 16:10.34 | infobot | DocScrutinizer05: okay |
| 16:11.11 | bencoh | nope, not in -stable |
| 16:11.16 | DocScrutinizer05 | ok |
| 16:11.25 | DocScrutinizer05 | ~literal speedyham |
| 16:11.25 | infobot | "speedyham" is "30 times faster than HAM http://maemo.merlin1991.at/cssu/community-devel/pool/free/h/hildon-application-manager/hildon-application-manager_2.2.73-2_armel.deb. SpeedyHAM is included in CSSU now" |
| 16:11.41 | *** join/#maemo xkr47 (xkr47@2001:14b8:141:5926:5358:9793:2384:6264) |
| 16:12.59 | DocScrutinizer05 | infobot: no, speedyham is <reply>SpeedyHAM is 30 times faster than HAM http://maemo.merlin1991.at/cssu/community-devel/pool/free/h/hildon-application-manager/hildon-application-manager_2.2.73-2_armel.deb. SpeedyHAM is included in CSSU-testing now |
| 16:12.59 | infobot | okay, DocScrutinizer05 |
| 16:16.05 | *** join/#maemo arcean (~arcean@nat1-3.finemedia.pl) |
| 16:17.59 | capitanocrunch | never knew of speedyham |
| 16:18.57 | *** join/#maemo Pali (~pali@Maemo/community/contributor/Pali) |
| 16:19.05 | capitanocrunch | since im on cssu-stable, should i dpkg install the deb and give it a try? |
| 16:19.42 | DocScrutinizer05 | sure, go ahead |
| 16:20.15 | freemangordon | I guess you can't, it has dependency to a newer glib |
| 16:20.21 | DocScrutinizer05 | dang |
| 16:20.26 | bencoh | iirc I had to rebuild |
| 16:20.30 | freemangordon | :nod: |
| 16:20.39 | bencoh | I might have it around |
| 16:20.44 | freemangordon | maybe bencoh could hand you the .deb |
| 16:20.52 | DocScrutinizer05 | but wait, you say testing has new glib, stable doesn't? |
| 16:20.57 | freemangordon | :nod: |
| 16:21.14 | DocScrutinizer05 | capitanocrunch: move to testing ;-) |
| 16:21.17 | bencoh | new revision |
| 16:21.21 | DocScrutinizer05 | it's the new stable :-P |
| 16:21.37 | freemangordon | or pester merlin1991 to issue a new -stable |
| 16:21.53 | DocScrutinizer05 | "testing is the new stable" being a common meme in all $FOSS |
| 16:22.04 | freemangordon | it is about time already |
| 16:22.09 | DocScrutinizer05 | indeed |
| 16:22.13 | bencoh | indeed :) |
| 16:22.41 | bencoh | hmm, I wonder where it comes from, I cant find it on my server or my sb |
| 16:22.49 | DocScrutinizer05 | lol |
| 16:23.05 | *** join/#maemo heroux (~heroux@gateway.insomnia247.nl) |
| 16:23.05 | bencoh | maybe it didn't depend on newer glib in the end |
| 16:23.48 | DocScrutinizer05 | well, I'd strongly hope new glib wouldn't breal $all-old-packages |
| 16:24.03 | *** join/#maemo eijk (~eijk@x55b2c538.dyn.telefonica.de) |
| 16:24.09 | DocScrutinizer05 | break even |
| 16:24.23 | bencoh | dpkg-deb -I shows "libglib2.0-0 >= 2.20.0" |
| 16:24.44 | freemangordon | DocScrutinizer05: it is in -testing for umm... 2 years? |
| 16:24.46 | DocScrutinizer05 | wouldn't make much sense to give a new lib to cssu-testing that renders all closed stuff borked and needs recomile for all open stuff |
| 16:25.15 | capitanocrunch | btw the top 10 things to know about maemo seem to be five not ten :0 and what $yourcall stands for? |
| 16:25.30 | bencoh | capitanocrunch: I suggest you give the .deb link a try |
| 16:25.38 | DocScrutinizer05 | it's a vebose elipsis |
| 16:25.48 | bencoh | you know how to use dpkg/apt-get in case of trouble anyway ;p |
| 16:26.15 | *** join/#maemo Vajb (~Vajb@85-76-86-206-nat.elisa-mobile.fi) |
| 16:26.16 | freemangordon | DocScrutinizer05: https://github.com/community-ssu/glib/commit/c197df81ced094816f116ccd8d63d5fc507bf1ac |
| 16:26.30 | DocScrutinizer05 | just rename the ham binary and copy the new one into place |
| 16:26.44 | bencoh | yuk |
| 16:26.47 | DocScrutinizer05 | hrhr |
| 16:27.13 | DocScrutinizer05 | quick&dirty, easy to revert |
| 16:27.54 | freemangordon | iirc it is not that easy |
| 16:27.57 | DocScrutinizer05 | well, maybe not THAT easy, HAM might be under maemo-launcher |
| 16:28.08 | freemangordon | there are more binaries |
| 16:28.20 | DocScrutinizer05 | plus a few other unexpected little fancies |
| 16:28.23 | freemangordon | like apt-worker |
| 16:28.29 | DocScrutinizer05 | :nod: |
| 16:29.11 | DocScrutinizer05 | the correct method would prolly be to temporarily add cssu-testing repo and then do an apt-get install |
| 16:30.00 | bencoh | you'd need to do some apt-pinning for that to work |
| 16:30.07 | bencoh | otherwise, you're doomed |
| 16:30.21 | DocScrutinizer05 | or move to cssu-testing right away. it's really stable enough, as long as you can live with stock camera and a few other getting replaced by FOSS versions without real need for such update |
| 16:31.08 | DocScrutinizer05 | bencoh: hiuh? why? isn't that supposed to only install 'new' version of HAM? |
| 16:31.45 | DocScrutinizer05 | NB I didn't suggest apt-get upgrade but apt-get install $HAM |
| 16:32.31 | DocScrutinizer05 | of course it *might* pull in dependencies you don't want, but then... what are your options, other than moving to cssu-t anyway |
| 16:32.36 | freemangordon | I wouldn;t recommend that, it will pull newer glib and there are some packages which are known to be broken (fixed in -testing) |
| 16:33.22 | DocScrutinizer05 | so MEH, upgrade to testing, by simply installing cssu-testing over the cssu-stable version on your device |
| 16:33.55 | bencoh | :] |
| 16:34.21 | DocScrutinizer05 | the instructions on ~cssu apply |
| 16:35.22 | capitanocrunch | ok, im going for testing |
| 16:35.30 | DocScrutinizer05 | ~cssu |
| 16:35.30 | infobot | i guess cssu is http://wiki.maemo.org/Community_SSU, or (Community Seamless Software Update) |
| 16:35.49 | DocScrutinizer05 | one click and you're basically done ;-) |
| 16:36.44 | DocScrutinizer05 | ~hamvsfam |
| 16:36.44 | infobot | somebody said hamvsfam was https://mg.pov.lt/maemo-irclog/%23maemo.2013-10-28.log.html#t2013-10-28T10:44:33, or http://talk.maemo.org/showthread.php?t=93227 |
| 16:39.02 | *** join/#maemo ecc3g (blc@r.jajcs.net) |
| 16:50.07 | *** join/#maemo heroux (~heroux@gateway.insomnia247.nl) |
| 17:05.29 | *** join/#maemo xkr47 (xkr47@2001:14b8:141:5926:5358:9793:2384:6264) |
| 17:10.12 | *** join/#maemo ashneo76 (~ashneo76@204.14.154.168) |
| 17:11.01 | *** join/#maemo futpib (~futpib@37.113.254.198) |
| 17:36.02 | *** join/#maemo msava (~mircea@nl112-156-14.student.uu.se) |
| 17:37.58 | *** join/#maemo heroux (~heroux@gateway.insomnia247.nl) |
| 17:39.12 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 18:21.34 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 18:22.36 | *** join/#maemo vakkov (~vakkov@s3n104.brunel.ac.uk) |
| 18:29.26 | *** join/#maemo ecloud (quassel@nat/digia/x-flqzfxzjptkrqvyd) |
| 18:31.53 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 18:31.54 | *** join/#maemo eMHa__ (~mh@p579DB522.dip0.t-ipconnect.de) |
| 18:36.10 | *** join/#maemo ecloud (quassel@nat/digia/x-knufygfbbnzviihp) |
| 18:40.39 | *** join/#maemo xelo (~xelo@ip-109-91-134-15.hsi12.unitymediagroup.de) |
| 18:45.26 | *** join/#maemo ecloud (quassel@nat/digia/x-rsramqzqziiolsei) |
| 19:07.59 | Maxdamantus | 02:44:25 < DocScrutinizer05> for some of you geeks this is possibly a nice read: http://www.dwheeler.com/essays/fixing-unix-linux-filenames.html |
| 19:08.18 | Maxdamantus | You should be able to easily pass around arbitrary strings from shells to programs without it interpreting them in special ways. |
| 19:08.28 | Maxdamantus | anyway, gtg |
| 19:08.40 | Maxdamantus | has been thinking of writing a more sensible shell recently. |
| 19:29.37 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 19:33.47 | *** join/#maemo vakkov (~vakkov@ic-s221n22.brunel.ac.uk) |
| 19:35.33 | ecc3g | <sarcasm>I want to name my files with carriage returns and beeps so they stand out in ls -l ... </sarcasm> |
| 19:36.13 | *** join/#maemo florian (~fuchs@Maemo/community/contributor/florian) |
| 19:42.31 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 19:48.13 | DocScrutinizer05 | ecc3g: not far from reality, with path names like >>file:///home/jr/Musik/King Crimson/King Crimson - 40th Anniversary Series/1974 - King Crimson - Red (2009, 40th Anniversary Series, CD+DVD-A, Discipline Global Mobile, UK, KCSP7)/DVD-A/KC_RED/KC_RED.iso<< |
| 19:48.54 | DocScrutinizer05 | I got stuff with +;,{}()*?!$% in it |
| 19:50.42 | DocScrutinizer05 | yes, *generally* you get away just with proper quoting |
| 19:51.03 | DocScrutinizer05 | but proper quoting easily gets annoyingly complicated |
| 19:51.40 | DocScrutinizer05 | particularly when you want to parse filenames, e.g. for a scripted renaming |
| 19:52.59 | DocScrutinizer05 | at times even regex in sed turn into gibberish |
| 19:55.15 | *** join/#maemo ArGGu^^ (~ArGGu^^@89.106.52.253) |
| 20:08.00 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 20:12.25 | peetah | :xa |
| 20:12.38 | peetah | :xa |
| 20:13.00 | bencoh | Not and editorcommand |
| 20:13.21 | bencoh | (huhu, looks like I cant type) |
| 20:17.48 | *** join/#maemo pagurus (~user@pD950C21A.dip0.t-ipconnect.de) |
| 20:24.33 | *** join/#maemo pagurus (~user@pD950C21A.dip0.t-ipconnect.de) |
| 20:36.43 | *** join/#maemo M4rtinK2 (~M4rtinK@ip-37-188-235-26.eurotel.cz) |
| 20:38.20 | *** join/#maemo vectis3 (~user@79-65-221-138.host.pobb.as13285.net) |
| 20:38.30 | *** join/#maemo vectis (~phil@79-65-221-138.host.pobb.as13285.net) |
| 20:39.45 | *** join/#maemo jonwil (~jonwil@27-33-80-219.tpgi.com.au) |
| 20:41.12 | jonwil | hi |
| 20:51.26 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 20:57.07 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 20:59.07 | Sicelo | hi jonwil :) |
| 21:01.14 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 21:08.05 | *** join/#maemo arcean (~arcean@nat1-2.finemedia.pl) |
| 21:10.05 | *** join/#maemo at1as (~at1as@2601:404:c600:c21f:898c:2a02:bc5f:d395) |
| 21:15.01 | *** join/#maemo krnlyng (~liar@83.175.90.24) |
| 21:15.20 | *** join/#maemo SmilybOrg (~SmilzOrg@93-103-95-89.dynamic.t-2.net) |
| 21:15.30 | *** join/#maemo KotCzarny (ariel@31.135.195.239) |
| 21:44.05 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 21:48.44 | *** join/#maemo andril (~andril@c-66-229-28-40.hsd1.fl.comcast.net) |
| 21:52.02 | *** join/#maemo SmilybOrg (~SmilzOrg@93-103-95-89.dynamic.t-2.net) |
| 22:07.35 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 22:14.33 | *** join/#maemo phlixi (~phlixi@host-188-174-221-236.customer.m-online.net) |
| 22:26.58 | jonwil | is still no closer to getting the NSS tools to build for maemo microb-engine :( |
| 22:27.16 | bencoh | what's wrong? |
| 22:31.24 | jonwil | It seems like the build process for microb-engine just doesn't compile them and I cant find anything in the build system to indicate why |
| 22:31.38 | jonwil | or how to get the build system to compile them |
| 22:32.06 | *** join/#maemo sid14726 (~sid14726@c-73-224-87-206.hsd1.fl.comcast.net) |
| 22:33.41 | jonwil | it doesn't help that the microb-engine/mozilla build system isn't exactly easy to understand |
| 22:34.15 | bencoh | you could fetch nss and build them from there |
| 22:34.27 | bencoh | (a fresh independant copy of nss) |
| 22:34.50 | bencoh | and yeah, mozilla build system is a mess ... probably a joke |
| 22:34.58 | bencoh | something to make us feel bad after using it |
| 22:35.56 | jonwil | We need them to build from the micro-engine source (which is a specific revision of the mozilla tree with a bunch of local patches) and not just some random nss source from somewhere |
| 22:36.04 | *** join/#maemo LauRoman (~LauRoman@5-14-33-187.residential.rdsnet.ro) |
| 22:36.16 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 22:36.52 | jonwil | only way to get tools that will actually run on-device |
| 22:37.24 | bencoh | why? |
| 22:37.50 | bencoh | are there that many patches to the nss utils themselves? |
| 22:38.15 | jonwil | there are patches to the way the build system builds stuff |
| 22:38.31 | jonwil | There is no gaurantee that something build elsewhere will work the way we need it to |
| 22:39.07 | jonwil | Plus there is no gaurantee that if I took the unmodified mozilla code matching microb-engine and built that, I would get a set of nss tools out of that either |
| 22:39.22 | jonwil | And we need it to be the same codebase as the nss version we are using otherwise it wont be compatible |
| 22:42.16 | *** join/#maemo SpeedEvil (~quassel@tor/regular/SpeedEvil) |
| 22:51.09 | *** join/#maemo pagurus (~user@pD950C21A.dip0.t-ipconnect.de) |
| 23:09.00 | *** join/#maemo yerik (~ircchatte@81.56.220.11) |
| 23:10.54 | *** join/#maemo _LauRoman (~LauRoman@5-14-33-187.residential.rdsnet.ro) |
| 23:11.23 | *** join/#maemo strohalm (~smoofi@unaffiliated/strohi) |
| 23:16.49 | *** join/#maemo LauRoman|Alt (~LauRoman@5-14-33-187.residential.rdsnet.ro) |
| 23:18.34 | brolin_empey | KotCzarny: I know what mSATA is. Which âcontroller chip issueâ do you mean? |
| 23:25.14 | *** join/#maemo heroux (sandroco@gateway.insomnia247.nl) |
| 23:40.49 | *** join/#maemo pagurus (~user@pD950C21A.dip0.t-ipconnect.de) |
