Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread Grant Taylor
On 6/1/21 3:38 PM, Michael Orlitzky wrote: *Any* CA can just generate a new key and sign the corresponding certificate. This is where what can /technically/ be done diverges from what is /allowed/ to be done. CAs adhering to the CA/B Forum's requirements on CAA records mean that they

Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread William Kenworthy
On 1/6/21 9:29 pm, Rich Freeman wrote: > On Tue, Jun 1, 2021 at 7:59 AM Adam Carter wrote: >>> And another "wondering" - all the warnings about trusting self signed >>> certs seem a bit self serving. Yes, they are trying to certify who you >>> are, but at the expense of probably allowing access

Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread Fannys
On June 1, 2021 4:45:45 AM UTC, "J. Roeleveld" wrote: >On Saturday, May 29, 2021 8:26:57 AM CEST Walter Dnes wrote: >> On Sat, May 29, 2021 at 03:08:39AM +0200, zca...@gmail.com wrote >> >> > 125 config files in /etc/ssl/certs needs update. >> > >> > For certificates I would expect the old and

Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread Michael Orlitzky
On Tue, 2021-06-01 at 15:25 -0600, Grant Taylor wrote: > > The proper way configure certificates is: > > 1) Create a key on the local server. > 2) Create a Certificate Signing Request (a.k.a. CSR) which references, > but does not include, the key. > 3) As a CA to sign the CSR. > 4) Use the

Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread Grant Taylor
On 5/31/21 11:15 PM, William Kenworthy wrote: And another "wondering" - all the warnings about trusting self signed certs seem a bit self serving. No, it's not self serving. Considerably more people than public certificate authorities bemoan self signed certificates. Consider this: 1)

Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread Grant Taylor
On 5/29/21 12:26 AM, Walter Dnes wrote: Looking through them is "interesting". There seem to be a lot of /etc/ssl/certs/.0 files, where "?" is either a random number or a lower case letter. They aren't random at all. They are a fingerprint (hash) of signing (?) certificates. The

Re: [gentoo-user] pango failed to build

2021-06-01 Thread Daniel Frey
On 6/1/21 12:29 PM, n952162 wrote: on two different machines.  Is there some new USE variable I need? I hit this and had to rebuild a package, but I forget which one... I looked in my log and: 1622312280: *** emerge --oneshot --regex-search-auto=y Locale-gettext I had to emerge

[gentoo-user] pango failed to build

2021-06-01 Thread n952162
on two different machines.  Is there some new USE variable I need?

Re: [gentoo-user] it keeps growing

2021-06-01 Thread John Blinka
On Tue, Jun 1, 2021 at 11:23 AM Mark Knecht wrote: > > > On Tue, Jun 1, 2021 at 7:14 AM Dale wrote: > > > > Hund wrote: > > > On June 1, 2021 3:38:30 PM GMT+02:00, n952162 wrote: > > >> 337 packages this month to be updated. It keeps getting more and > more. > > >> Pretty soon, gentoo will

Re: [gentoo-user] [Solved] gtk+ package question

2021-06-01 Thread Jack
On 2021.06.01 07:40, Mart Raudsepp wrote: Ühel kenal päeval, L, 29.05.2021 kell 16:28, kirjutas Jack: > I just noticed that the package x11-libs/gtk+ has slots 2 and 3  > (nothing new there) however, it seems that version 4 has a totally > new package gui-libs/gtk with only slot 0 (no explicit

Re: [gentoo-user] it keeps growing

2021-06-01 Thread Dale
Mark Knecht wrote: > > > On Tue, Jun 1, 2021 at 7:14 AM Dale > wrote: > > > > Hund wrote: > > > On June 1, 2021 3:38:30 PM GMT+02:00, n952162 > wrote: > > >> 337 packages this month to be updated.  It keeps getting more and > more. > > >>

Re: [gentoo-user] it keeps growing

2021-06-01 Thread Neil Bothwick
On Tue, 1 Jun 2021 15:38:30 +0200, n952162 wrote: > 337 packages this month to be updated.  It keeps getting more and more.  > Pretty soon, gentoo will overtake Bitcoin in energy use. Is this because of the switch from Python 3.8 to 3.9 as the default? If so, there's a news item that covers this

Re: [gentoo-user] Re: is "scp" reliable?

2021-06-01 Thread thelma
On 6/1/21 9:57 AM, Grant Edwards wrote: > On 2021-05-29, Mark Knecht wrote: > >> Different revisions of md5sum possibly? > > No, not unless md5sum is seriosly and fatally broken. > > MD5 is MD5. > > The entire point of a hash algorithm is that it's precisely and > completely defined and the

Re: [gentoo-user] is "scp" reliable?

2021-06-01 Thread n952162
On 6/1/21 6:42 AM, J. Roeleveld wrote: If there are differences, I would definitely suspect memory and CPU. -- Joost CPU?  USB was mentioned which set off alarm bells for me.  In general though, I would suspect the media  - either source of destination.

[gentoo-user] Re: is "scp" reliable?

2021-06-01 Thread Grant Edwards
On 2021-05-29, Mark Knecht wrote: > Different revisions of md5sum possibly? No, not unless md5sum is seriosly and fatally broken. MD5 is MD5. The entire point of a hash algorithm is that it's precisely and completely defined and the answer never varies from one implementation to another. --

Re: [gentoo-user] it keeps growing

2021-06-01 Thread n952162
On 6/1/21 5:22 PM, Mark Knecht wrote: On Tue, Jun 1, 2021 at 7:14 AM Dale mailto:rdalek1...@gmail.com>> wrote: > > Hund wrote: > > On June 1, 2021 3:38:30 PM GMT+02:00, n952162 mailto:n952...@web.de>> wrote: > >> 337 packages this month to be updated.  It keeps getting more and more. > >>

Re: [gentoo-user] it keeps growing

2021-06-01 Thread Mark Knecht
On Tue, Jun 1, 2021 at 7:14 AM Dale wrote: > > Hund wrote: > > On June 1, 2021 3:38:30 PM GMT+02:00, n952162 wrote: > >> 337 packages this month to be updated. It keeps getting more and more. > >> Pretty soon, gentoo will overtake Bitcoin in energy use. > >> > >> > > One might then ask why you

Re: [gentoo-user] can anybody recommend any VoIP package?

2021-06-01 Thread n952162
On 6/1/21 4:52 PM, n952162 wrote: Has anybody good luck with any gentoo VoIP package? I imagine the skype package is binary, right? I've tried linphone and some others over the years, but they didn't perform acceptably.  Has there been any progress in that regard? Okay, thanks to this

[gentoo-user] can anybody recommend any VoIP package?

2021-06-01 Thread n952162
Has anybody good luck with any gentoo VoIP package? I imagine the skype package is binary, right? I've tried linphone and some others over the years, but they didn't perform acceptably.  Has there been any progress in that regard?

Re: [gentoo-user] Can Portage be used with FreeBSD or NetBSD?

2021-06-01 Thread Michael
On Tuesday, 1 June 2021 10:59:27 BST Thomas Mueller wrote: > Can Portage be used as a package manager with anything other than Linux? Yes, it used to be, but from what I know the *BSD projects were abandoned due to lack of maintainers. > I like some features of Portage; think it might be

Re: [gentoo-user] it keeps growing

2021-06-01 Thread Dale
Hund wrote: > On June 1, 2021 3:38:30 PM GMT+02:00, n952162 wrote: >> 337 packages this month to be updated.  It keeps getting more and more.  >> Pretty soon, gentoo will overtake Bitcoin in energy use. >> >> > One might then ask why you have so many packages? And why you have a computer > that

Re: [gentoo-user] it keeps growing

2021-06-01 Thread Hund
On June 1, 2021 3:38:30 PM GMT+02:00, n952162 wrote: >337 packages this month to be updated.  It keeps getting more and more.  >Pretty soon, gentoo will overtake Bitcoin in energy use. > > One might then ask why you have so many packages? And why you have a computer that consumes enough power

Re: [gentoo-user] it keeps growing

2021-06-01 Thread Rich Freeman
On Tue, Jun 1, 2021 at 9:38 AM n952162 wrote: > > 337 packages this month to be updated. It keeps getting more and more. > Pretty soon, gentoo will overtake Bitcoin in energy use. Really it is a somewhat recent thing that Bitcoin overtook Gentoo in energy use... :) -- Rich

[gentoo-user] it keeps growing

2021-06-01 Thread n952162
337 packages this month to be updated.  It keeps getting more and more.  Pretty soon, gentoo will overtake Bitcoin in energy use.

Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread Rich Freeman
On Tue, Jun 1, 2021 at 7:59 AM Adam Carter wrote: >> >> And another "wondering" - all the warnings about trusting self signed >> certs seem a bit self serving. Yes, they are trying to certify who you >> are, but at the expense of probably allowing access to your >> communications by "authorised

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Rich Freeman
On Tue, Jun 1, 2021 at 8:16 AM Michael Orlitzky wrote: > > On Tue, 2021-06-01 at 13:02 +0100, Peter Humphrey wrote: > > > > So what would you recommend for someone in the case Joost cites? I'm in that > > position, being a home user of a small network but no registered Internet > > name. > > > >

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread karl
Karl: > Michael Orilitzky: Sorry, I mistyped, it should be: Peter Humphrey > ... > > * The LetsEncrypt certificates expire after three months, as opposed  > > to 10+ years for a self-signed certificate. You're supposed to  > > automate this... by running a script as root that takes input

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread karl
Michael Orilitzky: ... > * The LetsEncrypt certificates expire after three months, as opposed  > to 10+ years for a self-signed certificate. You're supposed to  > automate this... by running a script as root that takes input from  > the web? I'd rather not do that. You can run most part

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread karl
Joost: > On Tuesday, June 1, 2021 12:44:47 PM CEST k...@aspodata.se wrote: ... [ about letsencrypt ] ... > It's not that easy to do it with internal-only systems as Let's Encrypt > requires the hostname to be known externally. > And there are plenty of devices you do not want the whole internet

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Peter Humphrey
On Tuesday, 1 June 2021 13:16:59 BST Michael Orlitzky wrote: > On Tue, 2021-06-01 at 13:02 +0100, Peter Humphrey wrote: > > So what would you recommend for someone in the case Joost cites? I'm in > > that position, being a home user of a small network but no registered > > Internet name. > > A

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Michael Orlitzky
On Tue, 2021-06-01 at 13:02 +0100, Peter Humphrey wrote: > > So what would you recommend for someone in the case Joost cites? I'm in that > position, being a home user of a small network but no registered Internet > name. > A self-signed certificate combined with a browser extension that lets

Re: [gentoo-user] is "scp" reliable?

2021-06-01 Thread Adam Carter
On Tue, Jun 1, 2021 at 2:46 PM J. Roeleveld wrote: > On Saturday, May 29, 2021 11:04:44 PM CEST Mark Knecht wrote: > > On Sat, May 29, 2021 at 1:33 PM wrote: > > > > > > > Another mystery. > > > I copied the file to USB 1TB sandisk. > > > md5sum check OK same as my computer > > > > > > > > >

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Peter Humphrey
On Tuesday, 1 June 2021 12:40:28 BST Michael Orlitzky wrote: > On Tue, 2021-06-01 at 13:17 +0200, J. Roeleveld wrote: > > It's not that easy to do it with internal-only systems as Let's Encrypt > > requires the hostname to be known externally. > > And there are plenty of devices you do not want

Re: [gentoo-user] app-misc/ca-certificates

2021-06-01 Thread Adam Carter
> > And another "wondering" - all the warnings about trusting self signed > certs seem a bit self serving. Yes, they are trying to certify who you > are, but at the expense of probably allowing access to your > communications by "authorised parties" (such as commercial entities > purchasing access

Re: [gentoo-user] gtk+ package question

2021-06-01 Thread Mart Raudsepp
Ühel kenal päeval, L, 29.05.2021 kell 16:28, kirjutas Jack: > I just noticed that the package x11-libs/gtk+ has slots 2 and 3  > (nothing new there) however, it seems that version 4 has a totally > new package gui-libs/gtk with only slot 0 (no explicit slot listed) > with currently ~4.2.0 and

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Michael Orlitzky
On Tue, 2021-06-01 at 13:17 +0200, J. Roeleveld wrote: > > It's not that easy to do it with internal-only systems as Let's Encrypt > requires the hostname to be known externally. > And there are plenty of devices you do not want the whole internet to know > about. > And in this situation

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread J. Roeleveld
On Tuesday, June 1, 2021 12:44:47 PM CEST k...@aspodata.se wrote: > BillK: > ... > > > And another "wondering" - all the warnings about trusting self signed > > certs seem a bit self serving. Yes, they are trying to certify who you > > are, but at the expense of probably allowing access to your >

Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread karl
BillK: ... > And another "wondering" - all the warnings about trusting self signed > certs seem a bit self serving. Yes, they are trying to certify who you > are, but at the expense of probably allowing access to your > communications by "authorised parties" (such as commercial entities >

[gentoo-user] Can Portage be used with FreeBSD or NetBSD?

2021-06-01 Thread Thomas Mueller
Can Portage be used as a package manager with anything other than Linux? I like some features of Portage; think it might be better than FreeBSD ports or NetBSD pkgsrc, or is just a case of the grass being greener on the other side? I like the option "--with-bdeps=y", wish FreeBSD's synth and

Re: [gentoo-user] Qustions re Dell M.2 PCIe NVMe Solid State Drives under Gentoo

2021-06-01 Thread J. Roeleveld
On Thursday, May 27, 2021 11:35:33 PM CEST Alarig Le Lay wrote: > On Thu 27 May 2021 17:05:07 GMT, Walter Dnes wrote: > > * do NVMe drives function well under Gentoo (driver issues, etc)? > > I have a NVMe drive on my corporate laptop (a lenovo) and I don’t have > any issue with it. > > PS: I