Re: [10.6.8] certbot & pyOpenSSL problems

[Jason Liu]

>
> One reason, I'm staying on 10.6.8 is that I really like Spaces. I'm
> (primarily) using Remote Desktop to admin them as they are "head-less".


> Another reason not going the Linux way is, that I find the macOS
> desktop to be far superior to the Linux desktops.
>

You might be surprised. There have been a lot of advancements in terms of
Linux desktop polish, and you can even turn your entire desktop environment
into an (almost) exact clone of macOS' behavior, including Exposé and
Spaces, and even the application dock along the bottom.

If you've ever heard of Linus Tech Tips, they're even currently doing a
multi-part video series on "daily computing and gaming on Linux by a couple
of people who have never used Linux" challenge.

-- 
Jason Liu


On Sun, Dec 19, 2021 at 9:41 AM Bjarne D Mathiesen 
wrote:

> Ken Cunningham wrote:
> >> System Version: Mac OS X 10.6.8 (10K549) Kernel Version: Darwin 10.8.0
> >
> > It appears that you are running a 10.6.8 system (on a macmini, I think I
> saw?)
>
> Correct, I've got three of those :
> PowerMac10,1 w/ PowerPC 7447A (G4)
> Presently, I don't use it
>
> MacMini1,1 (originally Intel Core Duo 1.66 GHz)
> MacMini2,1
> both of these have been upgraded to
> Intel Core 2 Duo 2 GHz
> 4 GB RAM
> although the MacMini1,1 is only able to see 2 GB [crying]
> and the MacMini2,1 can only use 3 GB of the 4 GB
>
> All of them have 2 x original OWC miniStack w/ the HDs in AppleRAID-1
>
>
> > and I think you appear to be using it as a server for various things.
>
> Correct - they have the full xAMP stack
> Apache 2.4 - MySQL 5.7 - PHP 8.1
> Postfix - Dovecot - sqlgrey
>
> >
> > In another spot, I see that it is a 32bit EFI Mac:
> >
> >> platform: macOS-10.6.8-i386-64bit
>
> Also correct
>
> >
> > If you are not using for much else beyond being a server, I thought I
> would let you know that this tiny like c program:
> >
> > https://github.com/demonicsweaters/make_single_eltorito.c
> >
> > that compiles in 10 seconds or so, will slightly modify an Ubuntu 64 bit
> installer image to properly boot a 32bit EFI Mac, and you can then install
> Ubuntu 64 bit on there.
> >
> > Once it is installed, you’re good to go, and you can use 64bit software
> everywhere, including any 64 bit software you download rather than get from
> the main repo, like Spotify, Google Chrome, etc.
> >
> > I have this now running on 3 older Macs with 32bit EFI, and it works
> just beautifully. And if you are just using that as a server, you would be
> most likely many miles ahead to be running Ubuntu 20.04 with webmin than
> trying to keep teasing SnowLeopard along as a server.
> >
> > Just my $0.02 for whatever.
>
> [thumbs-up][nerd] Thank you for the hint [nerd][thumbs-up]
>
> Presently, I'm very much satisfied with my setup, but going to Linux on
> them is definitely one of the options I'm considering if I get into too
> many problems w/ being up-to-date. This is the 1st really serious
> problem I've had where I've had to abandon the MacMini for an
> alternative solution. Of course, not being able to upgrade to MySQL 8 is
> a bit of a nuisance, but not something I'm presently worrying about.
>
> One reason, I'm staying on 10.6.8 is that I really like Spaces.
> I'm (primarily) using Remote Desktop to admin them as they are "head-less".
>
> Another reason not going the Linux way is, that I find the macOS desktop
> to be far superior to the Linux desktops.
>
> >
> > Ken
> >
> > (PS - dual booting a MacOSX install of 10.6 or 10.7 works just fine too,
> using ReFIND: https://www.rodsbooks.com/refind/ )
> >
>
> Thanks.
> One reason to originally staying on 10.6.8 was that the MacMini1,1 isn't
> able to go to 10.7 without some hacking - at least not before upgrading
> the CPU. And I like to keep them at par on the software as the
> MacMini1,1 is my testing platform and backup.
>
> --
> Bjarne D Mathiesen
> Korsør ; Danmark ; Europa
> ---
> denne besked er skrevet i et totalt M$-frit miljø
> MacPro 2010 ; OpenCore + macOS 10.15.7 Catalina
> 2 x 3,46 GHz 6-Core Intel Xeon ; 256 GB 1333 MHz DDR3 ECC RDIMM
> ATI Radeon RX 590 8 GB
>

Re: [10.6.8] certbot & pyOpenSSL problems

[Ken Cunningham]

I used this set of instructions and the tool referenced in the first 
comment myself:


https://www.youtube.com/watch?v=EJA4OUIDa7Q

to upgrade the firmware in a macmini 1,1 to 2,1, to allow it to see the 
rest of the installed RAM. It was, for me, very quick and very painless.


As you noted, many macOS systems of this vintage (and other makes using 
the same Intel chipsets) can only use a little over 3GB of the 4GB of 
RAM due to hardware addressing constraints, even when running other 
operating systems like linux.



Best,


Ken

Re: [10.6.8] certbot & pyOpenSSL problems

[Bjarne D Mathiesen]

Ken Cunningham wrote:
>> System Version: Mac OS X 10.6.8 (10K549) Kernel Version: Darwin 10.8.0 
> 
> It appears that you are running a 10.6.8 system (on a macmini, I think I 
> saw?) 

Correct, I've got three of those :
PowerMac10,1 w/ PowerPC 7447A (G4)
Presently, I don't use it

MacMini1,1 (originally Intel Core Duo 1.66 GHz)
MacMini2,1
both of these have been upgraded to
Intel Core 2 Duo 2 GHz
4 GB RAM
although the MacMini1,1 is only able to see 2 GB [crying]
and the MacMini2,1 can only use 3 GB of the 4 GB

All of them have 2 x original OWC miniStack w/ the HDs in AppleRAID-1


> and I think you appear to be using it as a server for various things.

Correct - they have the full xAMP stack
Apache 2.4 - MySQL 5.7 - PHP 8.1
Postfix - Dovecot - sqlgrey

> 
> In another spot, I see that it is a 32bit EFI Mac:
> 
>> platform: macOS-10.6.8-i386-64bit 

Also correct

> 
> If you are not using for much else beyond being a server, I thought I would 
> let you know that this tiny like c program:
> 
> https://github.com/demonicsweaters/make_single_eltorito.c
> 
> that compiles in 10 seconds or so, will slightly modify an Ubuntu 64 bit 
> installer image to properly boot a 32bit EFI Mac, and you can then install 
> Ubuntu 64 bit on there.
> 
> Once it is installed, you’re good to go, and you can use 64bit software 
> everywhere, including any 64 bit software you download rather than get from 
> the main repo, like Spotify, Google Chrome, etc.
> 
> I have this now running on 3 older Macs with 32bit EFI, and it works just 
> beautifully. And if you are just using that as a server, you would be most 
> likely many miles ahead to be running Ubuntu 20.04 with webmin than trying to 
> keep teasing SnowLeopard along as a server.
> 
> Just my $0.02 for whatever.

[thumbs-up][nerd] Thank you for the hint [nerd][thumbs-up]

Presently, I'm very much satisfied with my setup, but going to Linux on
them is definitely one of the options I'm considering if I get into too
many problems w/ being up-to-date. This is the 1st really serious
problem I've had where I've had to abandon the MacMini for an
alternative solution. Of course, not being able to upgrade to MySQL 8 is
a bit of a nuisance, but not something I'm presently worrying about.

One reason, I'm staying on 10.6.8 is that I really like Spaces.
I'm (primarily) using Remote Desktop to admin them as they are "head-less".

Another reason not going the Linux way is, that I find the macOS desktop
to be far superior to the Linux desktops.

> 
> Ken
> 
> (PS - dual booting a MacOSX install of 10.6 or 10.7 works just fine too, 
> using ReFIND: https://www.rodsbooks.com/refind/ )
> 

Thanks.
One reason to originally staying on 10.6.8 was that the MacMini1,1 isn't
able to go to 10.7 without some hacking - at least not before upgrading
the CPU. And I like to keep them at par on the software as the
MacMini1,1 is my testing platform and backup.

-- 
Bjarne D Mathiesen
Korsør ; Danmark ; Europa
---
denne besked er skrevet i et totalt M$-frit miljø
MacPro 2010 ; OpenCore + macOS 10.15.7 Catalina
2 x 3,46 GHz 6-Core Intel Xeon ; 256 GB 1333 MHz DDR3 ECC RDIMM
ATI Radeon RX 590 8 GB

Re: [10.6.8] certbot & pyOpenSSL problems

[Ken Cunningham]

> System Version: Mac OS X 10.6.8 (10K549) Kernel Version: Darwin 10.8.0 

It appears that you are running a 10.6.8 system (on a macmini, I think I saw?) 
and I think you appear to be using it as a server for various things.

In another spot, I see that it is a 32bit EFI Mac:

> platform: macOS-10.6.8-i386-64bit 

If you are not using for much else beyond being a server, I thought I would let 
you know that this tiny like c program:

https://github.com/demonicsweaters/make_single_eltorito.c

that compiles in 10 seconds or so, will slightly modify an Ubuntu 64 bit 
installer image to properly boot a 32bit EFI Mac, and you can then install 
Ubuntu 64 bit on there.

Once it is installed, you’re good to go, and you can use 64bit software 
everywhere, including any 64 bit software you download rather than get from the 
main repo, like Spotify, Google Chrome, etc.

I have this now running on 3 older Macs with 32bit EFI, and it works just 
beautifully. And if you are just using that as a server, you would be most 
likely many miles ahead to be running Ubuntu 20.04 with webmin than trying to 
keep teasing SnowLeopard along as a server.

Just my $0.02 for whatever.

Ken


(PS - dual booting a MacOSX install of 10.6 or 10.7 works just fine too, using 
ReFIND: https://www.rodsbooks.com/refind/ )

Re: [10.6.8] certbot & pyOpenSSL problems

[Bjarne D Mathiesen]

Joshua Root wrote:
> For simple use cases, acme-tiny may be a better alternative to certbot:
> 
> 

My use case is complicated :
https://github.com/BjarneDM/letsencrypt-gratisdns
I've got (lots of) * domains, so I have to modify dns TXT records.
I've had to write my own functions to interface with my dns provider.

Certificate Name: mathiesen.info
Serial Number: 44550aa094ab2669e53545744b46f42aa49
Key Type: RSA
Domains: mathiesen.info
 *.mathiesen.info
 *.dtu.mathiesen.info
 *.magento.mathiesen.info
 *.typo3.mathiesen.info
 *.zbc.mathiesen.info
Expiry Date: 2022-02-12 22:19:13+00:00 (VALID: 57 days)
Certificate Path:
/opt/local/etc/letsencrypt/live/mathiesen.info/fullchain.pem
Private Key Path:
/opt/local/etc/letsencrypt/live/mathiesen.info/privkey.pem


-- 
Bjarne D Mathiesen
Korsør ; Danmark ; Europa
---
denne besked er skrevet i et totalt M$-frit miljø
MacPro 2010 ; OpenCore + macOS 10.15.7 Catalina
2 x 3,46 GHz 6-Core Intel Xeon ; 256 GB 1333 MHz DDR3 ECC RDIMM
ATI Radeon RX 590 8 GB

Re: [10.6.8] certbot & pyOpenSSL problems

[Bjarne D Mathiesen]

My work-around for now is to do the admin on my
  System Version: macOS 10.15.7 (19H1519)
  Kernel Version: Darwin 19.6.0
and then rsync to the server :

/opt/local/bin/rsync \
-aHv \
-e 'ssh -p 22022 -i ~bjarne/.ssh/id_rsa.minier' \
/opt/local/etc/letsencrypt/ \
root@miniserver.local:/opt/local/etc/letsencrypt

-- 
Bjarne D Mathiesen
Korsør ; Danmark ; Europa
---
denne besked er skrevet i et totalt M$-frit miljø
MacPro 2010 ; OpenCore + macOS 10.15.7 Catalina
2 x 3,46 GHz 6-Core Intel Xeon ; 256 GB 1333 MHz DDR3 ECC RDIMM
ATI Radeon RX 590 8 GB

Re: [10.6.8] certbot & pyOpenSSL problems

[Bjarne D Mathiesen]

Marius Schamschula wrote:
> What does
> 
> port installed py39-openssl
> 
> say? On my machine I get 21.00.0_0.
> 
> Also, IIRC there was a change in py-cryptography versioning. On my
> machine I have 35.0.0_3.
> 
> Mixing pip with MacPorts will guarantee a broken installation within
> weeks.if not within days.
> 
> Marius
> --
> Marius Schamschula

less $( port file py39-cryptography )

gives :

set cryptography_darwin_min_ver 13

# legacy support
if {${python.version} eq 27
|| ${os.platform} eq "darwin" && ${os.major} <
${cryptography_darwin_min_ver}} {
github.setuppyca cryptography 2.9.2
revision2

So for my
  System Version: Mac OS X 10.6.8 (10K549)
  Kernel Version: Darwin 10.8.0
it looks af if I'm toast

-- 
Bjarne D Mathiesen
Korsør ; Danmark ; Europa
---
denne besked er skrevet i et totalt M$-frit miljø
MacPro 2010 ; OpenCore + macOS 10.15.7 Catalina
2 x 3,46 GHz 6-Core Intel Xeon ; 256 GB 1333 MHz DDR3 ECC RDIMM
ATI Radeon RX 590 8 GB

Re: [10.6.8] certbot & pyOpenSSL problems

[Bjarne D Mathiesen]

Marius Schamschula wrote:
> What does
> 
> port installed py39-openssl
> 
> say? On my machine I get 21.00.0_0.
> 
> Also, IIRC there was a change in py-cryptography versioning. On my
> machine I have 35.0.0_3.
> 
> Mixing pip with MacPorts will guarantee a broken installation within
> weeks.if not within days.
> 
> Marius
> --
> Marius Schamschula
> 

So, on my
  System Version: macOS 10.15.7 (19H1519)
  Kernel Version: Darwin 19.6.0
I get :
#=> port -q installed py39-cryptography
  py39-cryptography @35.0.0_3 (active)

On my
  System Version: Mac OS X 10.6.8 (10K549)
  Kernel Version: Darwin 10.8.0
I get :
#=> port -q installed py39-cryptography
  py39-cryptography @2.9.2_2 (active)

#=> port -f -cuNp uninstall py39-cryptography
--->  Unable to uninstall py39-cryptography @2.9.2_2, the following
ports depend on it:
...
root@MiniWeb 08:56:20 ~
#=> port -cuNp install py39-cryptography
--->  Computing dependencies for py39-cryptography
--->  Fetching archive for py39-cryptography
--->  Attempting to fetch
py39-cryptography-2.9.2_2.darwin_10.x86_64.tbz2 from
http://cph.dk.packages.macports.org/py39-cryptography
--->  Attempting to fetch
py39-cryptography-2.9.2_2.darwin_10.x86_64.tbz2.rmd160 from
http://cph.dk.packages.macports.org/py39-cryptography
--->  Installing py39-cryptography @2.9.2_2
--->  Activating py39-cryptography @2.9.2_2
--->  Cleaning py39-cryptography
--->  Scanning binaries for linking errors
--->  No broken files found.
--->  No broken ports found.
--->  Some of the ports you installed have notes:
  py39-cryptography has the following notes:
This is a legacy version of cryptography that contains CVE
CVE-2020-36242.

So, it seams as if on 10.6.8 only an outdated legacy version is
available [thinking][thumbs-down]

-- 
Bjarne D Mathiesen
Korsør ; Danmark ; Europa
---
denne besked er skrevet i et totalt M$-frit miljø
MacPro 2010 ; OpenCore + macOS 10.15.7 Catalina
2 x 3,46 GHz 6-Core Intel Xeon ; 256 GB 1333 MHz DDR3 ECC RDIMM
ATI Radeon RX 590 8 GB

Re: [10.6.8] certbot & pyOpenSSL problems

[Marius Schamschula]

What does

port installed py39-openssl

say? On my machine I get 21.00.0_0.

Also, IIRC there was a change in py-cryptography versioning. On my machine I 
have 35.0.0_3.

Mixing pip with MacPorts will guarantee a broken installation within weeks.if 
not within days.

Marius
--
Marius Schamschula




> On Dec 16, 2021, at 5:17 PM, Bjarne D Mathiesen  
> wrote:
> 
> System Version: Mac OS X 10.6.8 (10K549)
> Kernel Version: Darwin 10.8.0
> 
> Ok, I've got certbot installed, but a recent upgrade of something has
> broken it :
> 
> #=> certbot certificates
> 
> gives the following error-message :
> 
> pkg_resources.ContextualVersionConflict: (cryptography 2.9.2
> (/opt/local/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages),
> Requirement.parse('cryptography>=3.3'), {'PyOpenSSL'})
> 
> which to me indicates, that PyOpenSSL needs to be upgraded.
> So, I installed py39-pip, and did the following :
> 
> #=> pip install pyopenssl
> Requirement already satisfied: pyopenssl in
> /opt/local/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages
> (21.0.0)
> Collecting cryptography>=3.3
>  Downloading cryptography-36.0.1.tar.gz (572 kB)
> || 572 kB 1.0 MB/s
>  Installing build dependencies ... done
> 
> which resulted in the following error-message :
> 
>  running build_rust
> 
>  =DEBUG
> ASSISTANCE=
>  If you are seeing a compilation error please try the following
> steps to
>  successfully install cryptography:
>  1) Upgrade to the latest pip and try again. This will fix errors
> for most
> users. See: https://pip.pypa.io/en/stable/installing/#upgrading-pip
>  2) Read https://cryptography.io/en/latest/installation/ for specific
> instructions for your platform.
>  3) Check our frequently asked questions for more information:
> https://cryptography.io/en/latest/faq/
>  4) Ensure you have a recent Rust toolchain installed:
> https://cryptography.io/en/latest/installation/#rust
> 
>  Python: 3.9.9
>  platform: macOS-10.6.8-i386-64bit
>  pip: n/a
>  setuptools: 59.6.0
>  setuptools_rust: 1.1.2
>  =DEBUG
> ASSISTANCE=
> 
>  error: can't find Rust compiler
> 
> So, it's missing the rust compiler !
> OK, let me install that one :
> 
> --->  Fetching distfiles for rust-compiler-wrap
> Error: rust is only supported on macOS 10.7 or later.
> Error: Failed to fetch rust-compiler-wrap: unsupported platform version
> Error: See
> /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_lang_rust/rust-compiler-wrap/main.log
> for details.
> Error: Follow https://guide.macports.org/#project.tickets if you believe
> there is a bug.
> Error: Processing of port rust failed
> 
> 
> Any ideas as to how I can upgrade PyOpenSSL -or- the cryptography ?
> Or am I just lost ???
> 
> 
> -- 
> Bjarne D Mathiesen
> Korsør ; Danmark ; Europa
> ---
> denne besked er skrevet i et totalt M$-frit miljø
> MacPro 2010 ; OpenCore + macOS 10.15.7 Catalina
> 2 x 3,46 GHz 6-Core Intel Xeon ; 256 GB 1333 MHz DDR3 ECC RDIMM
> ATI Radeon RX 590 8 GB