Re: [lfs-support] Announcing Basic BLFS (beta)

[Bruce Dubbs]

On 09/26/2018 02:54 PM, Douglas R. Reno wrote:



On Wed, Sep 26, 2018 at 2:44 PM Pierre Labastie > wrote:


On 9/26/18 8:05 PM, Hazel Russman wrote:
 > On Wed, 26 Sep 2018 14:47:23 +0100
 > Richard Melville <6tric...@gmail.com >
wrote:
 >
 >> On 26 September 2018 at 13:59, Xi Ruoyao
 wrote:
 >>
 >>> On 2018-09-26 12:06 +0100, Hazel Russman wrote:
  On Tue, 25 Sep 2018 22:25:33 +0100
  Ken Moffat mailto:zarniwh...@ntlworld.com>> wrote:
 > Second question: can you https:// to google ?
  Yes. And to Linux Questions. It's only the LFS site that's causing
  problems.
 >>>
 >>> Whoa! www.linuxfromscratch.org
 does not have HTTPS support now.
 >>
 >>
 >> It would appear so; I just checked.
 >>
 >> Richard
 > If you have a web page that asks for registration passwords, then
surely it ought to use encryption.
 >

Actually, the registration web page is explicit about this:
"You may enter a privacy password below. This provides only mild
security, but
should prevent others from messing with your subscription. Do not use a
valuable password as it will occasionally be emailed back to you in
cleartext."


Pierre


Does Trac have a notice like this?


No.  We do not mail Trac passwords.  We do not have them at all -- only 
the hash.  The only reason we have passwords at all for Trac is to 
prevent spam via the mailing lists.  All posting in Trac is public.


  -- Bruce


--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Bruce Dubbs]

On 09/26/2018 06:06 AM, Hazel Russman wrote:


Second question: can you https:// to google ?

Yes. And to Linux Questions. It's only the LFS site that's causing problems. 
The message I get when I try to use https on that site is:
[quote]
An error occurred during a connection to www.linuxfromscratch.org. SSL received 
a record that exceeded the maximum permissible length. Error code: 
SSL_ERROR_RX_RECORD_TOO_LONG

 The page you are trying to view cannot be shown because the authenticity 
of the received data could not be verified.
 Please contact the website owners to inform them of this problem.
[/quote]


https is not enabled for the LFS site.  The server provides support for 
multiple sites so port 443 is enabled for those, so that is why you got 
the error.


  -- Bruce

--
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Douglas R. Reno]

On Wed, Sep 26, 2018 at 2:44 PM Pierre Labastie 
wrote:

> On 9/26/18 8:05 PM, Hazel Russman wrote:
> > On Wed, 26 Sep 2018 14:47:23 +0100
> > Richard Melville <6tric...@gmail.com> wrote:
> >
> >> On 26 September 2018 at 13:59, Xi Ruoyao 
> wrote:
> >>
> >>> On 2018-09-26 12:06 +0100, Hazel Russman wrote:
>  On Tue, 25 Sep 2018 22:25:33 +0100
>  Ken Moffat  wrote:
> > Second question: can you https:// to google ?
>  Yes. And to Linux Questions. It's only the LFS site that's causing
>  problems.
> >>>
> >>> Whoa!  www.linuxfromscratch.org does not have HTTPS support now.
> >>
> >>
> >> It would appear so; I just checked.
> >>
> >> Richard
> > If you have a web page that asks for registration passwords, then surely
> it ought to use encryption.
> >
>
> Actually, the registration web page is explicit about this:
> "You may enter a privacy password below. This provides only mild security,
> but
> should prevent others from messing with your subscription. Do not use a
> valuable password as it will occasionally be emailed back to you in
> cleartext."
>
>
> Pierre
>
>
Does Trac have a notice like this?
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Pierre Labastie]

On 9/26/18 8:05 PM, Hazel Russman wrote:
> On Wed, 26 Sep 2018 14:47:23 +0100
> Richard Melville <6tric...@gmail.com> wrote:
> 
>> On 26 September 2018 at 13:59, Xi Ruoyao  wrote:
>>
>>> On 2018-09-26 12:06 +0100, Hazel Russman wrote:  
 On Tue, 25 Sep 2018 22:25:33 +0100
 Ken Moffat  wrote:  
> Second question: can you https:// to google ?  
 Yes. And to Linux Questions. It's only the LFS site that's causing
 problems.  
>>>
>>> Whoa!  www.linuxfromscratch.org does not have HTTPS support now.  
>>
>>
>> It would appear so; I just checked.
>>
>> Richard
> If you have a web page that asks for registration passwords, then surely it 
> ought to use encryption.
> 

Actually, the registration web page is explicit about this:
"You may enter a privacy password below. This provides only mild security, but
should prevent others from messing with your subscription. Do not use a
valuable password as it will occasionally be emailed back to you in cleartext."


Pierre
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Hazel Russman]

On Wed, 26 Sep 2018 14:47:23 +0100
Richard Melville <6tric...@gmail.com> wrote:

> On 26 September 2018 at 13:59, Xi Ruoyao  wrote:
> 
> > On 2018-09-26 12:06 +0100, Hazel Russman wrote:  
> > > On Tue, 25 Sep 2018 22:25:33 +0100
> > > Ken Moffat  wrote:  
> > > > Second question: can you https:// to google ?  
> > > Yes. And to Linux Questions. It's only the LFS site that's causing
> > > problems.  
> >
> > Whoa!  www.linuxfromscratch.org does not have HTTPS support now.  
> 
> 
> It would appear so; I just checked.
> 
> Richard
If you have a web page that asks for registration passwords, then surely it 
ought to use encryption.

-- 
Hazel Russman
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Richard Melville]

On 26 September 2018 at 13:59, Xi Ruoyao  wrote:

> On 2018-09-26 12:06 +0100, Hazel Russman wrote:
> > On Tue, 25 Sep 2018 22:25:33 +0100
> > Ken Moffat  wrote:
> > > Second question: can you https:// to google ?
> > Yes. And to Linux Questions. It's only the LFS site that's causing
> > problems.
>
> Whoa!  www.linuxfromscratch.org does not have HTTPS support now.


It would appear so; I just checked.

Richard
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Xi Ruoyao]

On 2018-09-26 12:06 +0100, Hazel Russman wrote:
> On Tue, 25 Sep 2018 22:25:33 +0100
> Ken Moffat  wrote:
> > Second question: can you https:// to google ?
> Yes. And to Linux Questions. It's only the LFS site that's causing
> problems.

Whoa!  www.linuxfromscratch.org does not have HTTPS support now.
-- 
Xi Ruoyao 
School of Aerospace Science and Technology, Xidian University

-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Hazel Russman]

On Tue, 25 Sep 2018 22:25:33 +0100
Ken Moffat  wrote:

> On Tue, Sep 25, 2018 at 11:51:39AM +0100, Hazel Russman wrote:
> > 
> > I just tried to register for one of the dev lists and Firefox played up
> > because the link isn't secure. So I tried again with https:// and
> > couldn't get a connection. What do I need to do?
> >   
> Hi Hazel,
> 
> I've only just got firefox installed on my latest build (and it
> seems to have been my worst build in ages, for various reasons), so
> I wan't able to look at this until now.
> 
> I'm using a firefox-63 beta version (usually, when things differ the
> beta version decides that certificate chains are broken - but all
> seems good at the moment).
 
> So, first question: which version of firefox ?
It's Firefox 62 Quantum working out of Crux. I don't build FF in LFS any more. 
Too many dependencies! I use Pale Moon instead.

> Second question: can you https:// to google ?
Yes. And to Linux Questions. It's only the LFS site that's causing problems. 
The message I get when I try to use https on that site is:
[quote]
An error occurred during a connection to www.linuxfromscratch.org. SSL received 
a record that exceeded the maximum permissible length. Error code: 
SSL_ERROR_RX_RECORD_TOO_LONG

The page you are trying to view cannot be shown because the authenticity of 
the received data could not be verified.
Please contact the website owners to inform them of this problem.
[/quote]
> One of the early problems in my current build was that I'd
> overlookedAn error occurred during a connection to
> www.linuxfromscratch.org. SSL received a record that exceeded the
> maximum permissible length. Error code:
> SSL_ERROR_RX_RECORD_TOO_LONG

The page you are trying to view cannot be shown because the authenticity of 
the received data could not be verified.
Please contact the website owners to inform them of this problem.
> the need for p11-kit when I install ca-certs before the first boot.
> 
> The certs had apparently ended ok, but in fact did nothing because
> /usr/bin/trust was not present.
It is present in Crux and in my LFS build too.

-- 
Hazel Russman
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Ken Moffat]

On Tue, Sep 25, 2018 at 11:51:39AM +0100, Hazel Russman wrote:
> 
> I just tried to register for one of the dev lists and Firefox played up
> because the link isn't secure. So I tried again with https:// and
> couldn't get a connection. What do I need to do?
> 
Hi Hazel,

I've only just got firefox installed on my latest build (and it
seems to have been my worst build in ages, for various reasons), so
I wan't able to look at this until now.

I'm using a firefox-63 beta version (usually, when things differ the
beta version decides that certificate chains are broken - but all
seems good at the moment).

Obviously I'm already subscribed to both -dev lists, but I went to
'lists.linuxfromscratch.org' (no protocol specified), found a list
which I ought to have subscribed to, and sent the request.  Got the
response, pasted the URL into firefox.  No problem with certs.

So, first question: which version of firefox ?

Second question: can you https:// to google ?

One of the early problems in my current build was that I'd overlooked
the need for p11-kit when I install ca-certs before the first boot.
I'd thought about my later reinstall of certs after nss, but
overlooked that I install them earlier - got as far as trying to
install Sphinx (I keep hoping to retry the kernel docs) and failing
when it went to talk to PyPi for something.  Tried to google from
links, http worked but https failed.

The certs had apparently ended ok, but in fact did nothing because
/usr/bin/trust was not present.  With Python2 moved ahead of the
certs, followed by six, libtasn1, p11-kit I think my future builds
will be ok for that.

I should mention that on my 8.3 build on this machine I lost access
to sourceforge and related sites for similar certificate errors
after one firefox update, although other machines were fine.
Updating firefox to 62.0.2 (and reinstalling the certs as part of my
update) solved that.  But overall, like the builds of rust and
firefox, cert handling in firefox seems to go out to lunch from time to time.

Good luck!

ĸen
-- 
Tout est bien, tout va bien, tout va pour le mieux qu'il soit possible
   -- Candide, de Voltaire
   (Everything is for the best, in the best of all possible worlds)
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Re: [lfs-support] Announcing Basic BLFS (beta)

[Hazel Russman]

On Mon, 24 Sep 2018 13:57:36 -0500
Bruce Dubbs  wrote:

> The LFS team would like to announce a new book, Basic Packages for
> Linux From Scratch
> 
> As always, feedback is appreciated.
> 
> Please direct any comments about this beta release to the LFS 
> development team at lfs-...@linuxfromscratch.org or 
> blfs-...@linuxfromscratch.org. Registration for the mailing lists is 
> required to avoid junk email.
> 
>-- Bruce Dubbs
>   linuxfromscratch.org

I just tried to register for one of the dev lists and Firefox played up
because the link isn't secure. So I tried again with https:// and
couldn't get a connection. What do I need to do?


-- 
If any members of GCHQ are reading this, shame on you! I fought for
your right to belong to a trade union and now you are taking away my
right to privacy?

Hazel Russman
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style