elmussol

not for some time

elmussol

Xerta, Mon, 16 Sep 2019 19:24:15 +0200

music

elmussol

Mon, 16 Sep 2019 19:38:13 +0200 last edited: Mon, 16 Sep 2019 19:39:29 +0200

Hot damn, later in the same Transmission:

That Petrol Emotion -- Creeping To The Cross

https://youtube.com/watch?v=EKLsfD4a9yI

#thatpetrolemotion

relaxing Sunday

elmussol

Xerta, Sun, 15 Sep 2019 16:00:54 +0200

So I've had a "do nothing" day today so far. All I've done is feed the chickens, feed the donkeys, feed the dogs, feed the cats (multiple times), given the dogs their meds, cooked a vegan gluten-free breakfast for the guests, watered the garden, done the washing up, emptied the litter tray and got the dry washing in.

#farmlife

life

show all 5 comments

elmussol

Sun, 15 Sep 2019 17:07:15 +0200

Everything else

Manuel

Sun, 15 Sep 2019 17:21:44 +0200

@elmussol ¿No cavarás también los pies (= limpiar la base, alrededor del tronco) de los olivos, no? Porque si es así, te llevo a hombros hasta Tarragona

elmussol

Sun, 15 Sep 2019 17:35:02 +0200

Mañana hombre.

elmussol

Sat, 14 Sep 2019 18:26:12 +0200

elmussol is now connected with Einer von Vielen

Hedwig

elmussol

Fri, 13 Sep 2019 23:54:06 +0200

Hedwig is the more timid of the pair.

elmussol posted a new photo to /

Tippy

elmussol

Fri, 13 Sep 2019 23:52:19 +0200

Best shot I can manage of Tippy.

elmussol posted a new photo to /

old friend

elmussol

Xerta, Thu, 12 Sep 2019 19:00:43 +0200

Excellent but bizzare experience to spend the afternoon chatting with someone you've known for forty years, but not seen for thirty. Thanks for the visit Marcus!

life

object of desire

elmussol

Xerta, Tue, 10 Sep 2019 00:30:29 +0200

I'm not a material things person (would I live in a 6x5m wooden shed in the middle of nowhere if I was?), but every once in a while...

The Roadbook 2019

I have not been this lustful of a thing since the Make Catalonia Anarchist Again cap from Working Class History.

#workingclasshistory #theroadbook

cycling anarchism catalunya

show all 6 comments

whistlewright (zap)

Wed, 11 Sep 2019 00:21:18 +0200

@Adam Robertson I don't know if he can but I see your comment

Adam Robertson

Wed, 11 Sep 2019 00:27:43 +0200

well, that is an improvement at any rate

elmussol

Thu, 12 Sep 2019 20:04:04 +0200

Wasn't expecting a dislike.

back

elmussol

Thu, 05 Sep 2019 14:33:31 +0200

Someone was meditating on backs.

elmussol posted a new photo to /

show all 5 comments

elmussol

Thu, 05 Sep 2019 19:47:16 +0200

Facing roughly north east.

elmussol

Thu, 05 Sep 2019 21:05:11 +0200

This photo was actually a reply to a RL friend who asked how my dreads were doing.

el veciet

Fri, 06 Sep 2019 05:27:10 +0200

it's too easy with you: you are a Puli Dog

definitely

elmussol

Xerta, Wed, 04 Sep 2019 09:16:26 +0200

Mike Macgirvin wrote the following post Wed, 04 Sep 2019 06:29:53 +0200

#gotzot?

elmussol

Tue, 03 Sep 2019 21:13:24 +0200

elmussol is now connected with whistlewright (zap)

middle-class wankers

elmussol

Xerta, Sun, 01 Sep 2019 21:52:59 +0200

I'm not going to go into details but I have had my absolute fill of a certain class of people this week.

Those people are middle-class wanker socialists who bleat on about the oppressed; those alienated, crushed and fucked up by capitalism and so on; but when it actually comes to hands on, concrete help for those folks, won't actually have them in the house.

Today, I am an angry bod.

show all 4 comments

Haakon Meland Eriksen (Parlementum)

Mon, 02 Sep 2019 07:45:00 +0200

Care to elaborate, @elmussol ?

elmussol

Tue, 03 Sep 2019 21:14:21 +0200

Sorry I can't.

elmussol

Tue, 03 Sep 2019 22:42:22 +0200

I want to, but no... I am an adult, I have self control...

back from the dead

elmussol

Xerta, Sun, 01 Sep 2019 19:09:50 +0200

This makes me joyous. Seriously, the last few years of coming second in everything has been tough.

Mister Baseball wrote the following post Sun, 01 Sep 2019 18:43:10 +0200

Holland Series 2019: L&D Amsterdam completes Comeback to win Championship

L&D Amsterdam 130 000 200 6 10 0 Curacao Neptunus 000 000 000 0 5 3 Boxscore L&D Amsterdam completed its improbable comeback in the best-of-seven Holland Series to win the Dutch Baseball Championship 2019. Down 0-3 after the first three game, the Pirates won four consecutive games against Curacao Neptunus to claim the title. […]

View article

#gopirates

baseball

idle thought

elmussol

Xerta, Fri, 23 Aug 2019 01:06:12 +0200

Did the Orange One just want to buy Greenland because he thought it was one big golf course?

Mike Macgirvin

Fri, 23 Aug 2019 01:27:35 +0200

There is a newly revived nuclear arms race between the USA and Russia. Denmark is nuclear free - and by extension Greenland; although the USA had hidden nuclear facilities there for a number of years. It caused an international shitstorm when this was discovered. If they own it, they will surely turn it into one big nuclear facility. This serves two purposes - it puts the nukes closer to where they are to be delivered and it also would make Greenland the first choice of the Russians to annihilate in a conflict. Thus theoretically saving the continental USA from the brunt of the damage.

ivan zlax

Fri, 23 Aug 2019 08:57:38 +0200 last edited: Fri, 23 Aug 2019 08:58:34 +0200

Did the Orange One just want to buy Greenland because he thought it was one big golf course?

Orange One will not be able to buy Greenland, it does have very little RAM for this: http://www.orangepi.org/orangepione/

elmussol

Thu, 22 Aug 2019 13:47:19 +0200

elmussol is now connected with Víctor Gabriel

warning

elmussol

Wed, 21 Aug 2019 17:38:22 +0200

Kitten A and Kitten B are coming for you soon rodent types.

elmussol posted a new photo to /

show all 7 comments

Manuel

Wed, 21 Aug 2019 18:02:06 +0200

elmussol

Wed, 21 Aug 2019 18:06:16 +0200

Our existing cat, Nunka, has reached the grand old age of twelve and has decided to retire from hunting duties.

Manuel

Wed, 21 Aug 2019 18:45:42 +0200

Los gatos en el campo son felices pero tienen una vida dura. Un gato también longevo, que he visto crecer en el campo al que me voy en verano, murió este año, con la nariz y un ojo destrozados. Tenía la cola rota por varios sitios y múltiples cicatrices... Imagino que Nunka estará muy cansado de cazar y evitar ser cazado

Como bien sabes, la vida campesina tiene momentos idílicos, pero en general es muy dura y cansada. "Puerca tierra" tituló John Berger su famosa trilogía sobre los campesinos de los Alpes franceses con los que convivió mucho tiempo.

elmussol

Fri, 23 Aug 2019 01:01:35 +0200

First kitten chaos incident. Kitten clambers on to shelf on which there is a small basket containing today's #egg production. Kitten dislodges said basket and the eggs smash. Unfortunately they smash all over the double socket below said shelf and the house electric trips out.

Mike Macgirvin

Fri, 23 Aug 2019 01:59:05 +0200

First kitten chaos incident.

#andcertainlynotthelast

Iron Monkey

Sat, 24 Aug 2019 22:58:31 +0200

What are the chances of that? A perfect shot, Kitty 1 House 0.

elmussol

Tue, 03 Sep 2019 21:23:16 +0200

The one with the white head is Tippy the one with the black cap is Hedwig.

sing it

elmussol

Tue, 20 Aug 2019 11:03:43 +0200

elmussol posted a new photo to /

elmussol

Tue, 10 Sep 2019 00:44:58 +0200

You are all Philistines.

mini rant

elmussol

Xerta, Sun, 18 Aug 2019 01:06:31 +0200

Maybe not a popular opinion, but hey ho. I am bored and irritated, nay angered by exceptionalism. I don't care if it's USofAmerican, British or European. I am reading so much at the moment by folks who get their view of the world through a (probably plastic) straw. The inability to see the world in anything more than binary terms is a character flaw.

life

Diario de argifonte. Víctor Gabriel

Sun, 18 Aug 2019 02:15:58 +0200

Lamento que te encuentres así. Es normal que todos, los del norte y los del sur, los del este y los del oeste vean el mundo con las herramientas que tienen a mano. Los que no son de Estados Unidos, Gran Bretaña o "resto" de Europa tienen más herramientas para tener una visión más global. Pero no se libran de la mentalidad corrompida desde el siglo XIX. Historias de odio heredadas.

Todos necesitamos un baño de humildad, desde el norte hasta el sur, desde el este al oeste.

elmussol

Fri, 16 Aug 2019 16:27:55 +0200

elmussol is now connected with Diario de argifonte. Víctor Gabriel

milestone

elmussol

Xerta, Thu, 15 Aug 2019 23:24:18 +0200

@els Mussols Today we passed 6MWh of consumption since we went #offgrid in July 2008. #solar

life

Buster bust IMAP

elmussol

Xerta, Tue, 13 Aug 2019 12:31:38 +0200

The upgrade from Stretch to Buster for the most part went well. I did however break something on email. Thunderbird tells me:

Thunderbird wrote:

The IMAP server mail.elsmussols.net does not support the selected authentication method.

My T'Bird settings pre-upgrade (which worked):

Connecttion security: STARTTLS
Authentication method: Normal password
Port: 143

Stretch to Buster involved moving from dovecot 2.2 to 2.3 and I got the following emails from apt:

dovecot (1:2.3.2-1) unstable; urgency=medium

  Upgrading to the 2.3 series may require manual configuration changes.
  Some settings have been removed, while others have had their defaults
  changed. Please see

    /usr/share/doc/dovecot-core/wiki/Upgrading.2.3.txt.gz

  or the online version at

    https://wiki2.dovecot.org/Upgrading/2.3

  for more information and review your configuration accordingly.

 -- Apollon Oikonomopoulos <apoikos@debian.org>  Sat, 24 Mar 2018 00:34:07 +0200

dovecot (1:2.2.31-1) unstable; urgency=medium

  TLS is now enabled by default, using the ssl-cert-snakeoil certificate
  provided by the ssl-cert package. Upgrades from older versions will be
  prompted to accept the new configuration and enable TLS. If you have already
  configured TLS yourself, you'll most probably want to keep your settings
  intact.

  See /usr/share/doc/dovecot-core/README.Debian for more information on the
  certificate's default location and how to install your own certificates.

 -- Apollon Oikonomopoulos <apoikos@debian.org>  Sun, 25 Jun 2017 01:09:28 +0300

On the server I am getting the following errors in /var/log/mail.err:

Aug 13 12:21:20 pendle dovecot: imap-login: Error: Failed to initialize SSL server context: Can't load DH parameters: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small: user=<>, rip=XX, lip=XX

So I am lost. I know that this means I have to adjust some DH config to make a bigger key but I am have mangled my head on how to untangle all the various settings in all the various dovecot config files.

Comments please. I can do this but just need a few weeds clearing out of the way first. I have said this before "Email makes my head hurt".

dovecot

show all 5 comments

elmussol

Tue, 13 Aug 2019 12:50:19 +0200

Additional useful info:

root@pendle:/etc/dovecot/conf.d# grep -r ssl_
10-auth.conf:#auth_ssl_require_client_cert = no
10-auth.conf:#auth_ssl_username_from_cert = no
10-ssl.conf:ssl_cert = </etc/dovecot/private/dovecot.pem
10-ssl.conf:ssl_key = </etc/dovecot/private/dovecot.key
10-ssl.conf:# root owned 0600 file by using ssl_key_password = <path.
10-ssl.conf:#ssl_key_password =
10-ssl.conf:# ssl_verify_client_cert=yes. The file should contain the CA certificate(s)
10-ssl.conf:# followed by the matching CRL(s). (e.g. ssl_ca = </etc/ssl/certs/ca.pem)
10-ssl.conf:#ssl_ca = 
10-ssl.conf:#ssl_require_crl = yes
10-ssl.conf:ssl_client_ca_dir = /etc/ssl/certs
10-ssl.conf:#ssl_client_ca_file =
10-ssl.conf:# auth_ssl_require_client_cert=yes in auth section.
10-ssl.conf:#ssl_verify_client_cert = no
10-ssl.conf:# auth_ssl_username_from_cert=yes.
10-ssl.conf:#ssl_cert_username_field = commonName
10-ssl.conf:# gives on startup when ssl_dh is unset.
10-ssl.conf:ssl_dh = </usr/share/dovecot/dh.pem
10-ssl.conf:#ssl_min_protocol = TLSv1
10-ssl.conf:#ssl_cipher_list = ALL:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
10-ssl.conf:#ssl_cipher_list = ALL:!DH:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
10-ssl.conf:#ssl_curve_list =
10-ssl.conf:#ssl_prefer_server_ciphers = no
10-ssl.conf:#ssl_crypto_device =
10-ssl.conf:#ssl_options =

elmussol

Tue, 13 Aug 2019 12:56:53 +0200 last edited: Tue, 13 Aug 2019 13:12:31 +0200

From Upgrading Dovecot v2.2 to v2.3:

ssl_protocols setting was replaced by ssl_min_protocol. Now you only specify the minimum ssl protocol version Dovecot accepts, defaulting to TLSv1.

ssl_parameters was replaced with ssl_dh. See Diffie-Hellman Parameters for SSL.

SSLv2 is no longer supported in ssl_protocols.

elmussol

Tue, 13 Aug 2019 13:57:48 +0200

After further reading I have run openssl dhparam -out /etc/dovecot/dh.pem 4096 and this file exists:

root@pendle:~# ls -al /etc/dovecot/ | grep dh
-rw-r--r--   1 root root     769 Aug 13 13:34 dh.pem

Then: service dovecot stop && service dovecot start with no errors. Still no cigar and the same errors in mail.err.

el veciet

Tue, 13 Aug 2019 16:00:06 +0200

IMH and stupid O, Debian in the last times changed: stable became testing - testing became unstable--unstable became hell.

elmussol

Wed, 14 Aug 2019 16:01:36 +0200

Fixed at last, with massive help from @boneidol. Seems that the config snippets in /etc/dovecot/conf.d/ weren't respected if different settings existed within /etc/dovecot/dovecot.conf. I had done all the right things in /etc/dovecot/conf.d/ but not /etc/dovecot/dovecot.conf.