Re: [gentoo-dev] friendly reminder wrt net virtual in init scripts

2013-11-05 Thread Daniel Campbell
On 11/05/2013 10:39 AM, Michael Orlitzky wrote: > On 11/05/2013 09:49 AM, mingdao wrote: >> >> Flameeyes wrote the following blog post concerning this issue: >> >> http://blog.flameeyes.eu/2012/10/may-i-have-a-network-connection-please >> >> and the link gives me a (Error code: sec_error_ocsp_unkno

Re: [gentoo-dev] friendly reminder wrt net virtual in init scripts

2013-11-05 Thread mingdao
On Tue, Nov 05, 2013 at 11:39:10AM -0500, Michael Orlitzky wrote: > > You should disable OCSP anyway. In Firefox, it's under, > > Edit -> Preferences -> Advanced -> Encryption -> Validation > > The OCSP protocol is itself is vulnerable to MITM attacks, which is cute > when you consider its pur

Re: [gentoo-dev] friendly reminder wrt net virtual in init scripts

2013-11-05 Thread Michael Orlitzky
On 11/05/2013 09:49 AM, mingdao wrote: > > Flameeyes wrote the following blog post concerning this issue: > > http://blog.flameeyes.eu/2012/10/may-i-have-a-network-connection-please > > and the link gives me a (Error code: sec_error_ocsp_unknown_cert). > You should disable OCSP anyway. In Fire

Re: [gentoo-dev] Re: Official way to do rolling update (Was: Re: Releng breakage with respect to move from dev-python/python-exec to dev-lang/python-exec)

2013-11-05 Thread Daniel Campbell
On 11/04/2013 03:46 PM, Duncan wrote: > Martin Vaeth posted on Mon, 04 Nov 2013 11:17:49 + as excerpted: > >> Duncan <1i5t5.dun...@cox.net> wrote: >>> >>> and the default is oneshot >> >> I would always recommend to put -1 into EMERGE_DEFAULT_OPTS; >> you can still use --select if you really w

Re: [gentoo-dev] friendly reminder wrt net virtual in init scripts

2013-11-05 Thread Tom Wijsman
On Tue, 5 Nov 2013 08:49:15 -0600 mingdao wrote: > and the link gives me a (Error code: sec_error_ocsp_unknown_cert). The certificate expired; I guess it'll be fixed soon, as he gets back. -- With kind regards, Tom Wijsman (TomWij) Gentoo Developer E-mail address : tom...@gentoo.org GPG Pub

Re: [gentoo-dev] friendly reminder wrt net virtual in init scripts

2013-11-05 Thread mingdao
On Mon, Nov 04, 2013 at 09:30:07PM -0600, William Hubbs wrote: > All, > > I would like to remind everyone about the tracker for services that are > misusing "need net" in their OpenRC init scripts [1]. > > "need net" should be removed from our init scripts, because it is bogus > and breaks things