elmussol

sing it

elmussol

Tue, 20 Aug 2019 11:03:43 +0200

elmussol posted a new photo to /

mini rant

elmussol

Xerta, Sun, 18 Aug 2019 01:06:31 +0200

Maybe not a popular opinion, but hey ho. I am bored and irritated, nay angered by exceptionalism. I don't care if it's USofAmerican, British or European. I am reading so much at the moment by folks who get their view of the world through a (probably plastic) straw. The inability to see the world in anything more than binary terms is a character flaw.

life

Diario de argifonte. Víctor Gabriel

Sun, 18 Aug 2019 02:15:58 +0200

Lamento que te encuentres así. Es normal que todos, los del norte y los del sur, los del este y los del oeste vean el mundo con las herramientas que tienen a mano. Los que no son de Estados Unidos, Gran Bretaña o "resto" de Europa tienen más herramientas para tener una visión más global. Pero no se libran de la mentalidad corrompida desde el siglo XIX. Historias de odio heredadas.

Todos necesitamos un baño de humildad, desde el norte hasta el sur, desde el este al oeste.

elmussol

Fri, 16 Aug 2019 16:27:55 +0200

elmussol is now connected with Diario de argifonte. Víctor Gabriel

milestone

elmussol

Xerta, Thu, 15 Aug 2019 23:24:18 +0200

@els Mussols Today we passed 6MWh of consumption since we went #offgrid in July 2008. #solar

life

Buster bust IMAP

elmussol

Xerta, Tue, 13 Aug 2019 12:31:38 +0200

The upgrade from Stretch to Buster for the most part went well. I did however break something on email. Thunderbird tells me:

Thunderbird wrote:

The IMAP server mail.elsmussols.net does not support the selected authentication method.

My T'Bird settings pre-upgrade (which worked):

Connecttion security: STARTTLS
Authentication method: Normal password
Port: 143

Stretch to Buster involved moving from dovecot 2.2 to 2.3 and I got the following emails from apt:

dovecot (1:2.3.2-1) unstable; urgency=medium

  Upgrading to the 2.3 series may require manual configuration changes.
  Some settings have been removed, while others have had their defaults
  changed. Please see

    /usr/share/doc/dovecot-core/wiki/Upgrading.2.3.txt.gz

  or the online version at

    https://wiki2.dovecot.org/Upgrading/2.3

  for more information and review your configuration accordingly.

 -- Apollon Oikonomopoulos <apoikos@debian.org>  Sat, 24 Mar 2018 00:34:07 +0200

dovecot (1:2.2.31-1) unstable; urgency=medium

  TLS is now enabled by default, using the ssl-cert-snakeoil certificate
  provided by the ssl-cert package. Upgrades from older versions will be
  prompted to accept the new configuration and enable TLS. If you have already
  configured TLS yourself, you'll most probably want to keep your settings
  intact.

  See /usr/share/doc/dovecot-core/README.Debian for more information on the
  certificate's default location and how to install your own certificates.

 -- Apollon Oikonomopoulos <apoikos@debian.org>  Sun, 25 Jun 2017 01:09:28 +0300

On the server I am getting the following errors in /var/log/mail.err:

Aug 13 12:21:20 pendle dovecot: imap-login: Error: Failed to initialize SSL server context: Can't load DH parameters: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small: user=<>, rip=XX, lip=XX

So I am lost. I know that this means I have to adjust some DH config to make a bigger key but I am have mangled my head on how to untangle all the various settings in all the various dovecot config files.

Comments please. I can do this but just need a few weeds clearing out of the way first. I have said this before "Email makes my head hurt".

dovecot

show all 5 comments

elmussol

Tue, 13 Aug 2019 12:50:19 +0200

Additional useful info:

root@pendle:/etc/dovecot/conf.d# grep -r ssl_
10-auth.conf:#auth_ssl_require_client_cert = no
10-auth.conf:#auth_ssl_username_from_cert = no
10-ssl.conf:ssl_cert = </etc/dovecot/private/dovecot.pem
10-ssl.conf:ssl_key = </etc/dovecot/private/dovecot.key
10-ssl.conf:# root owned 0600 file by using ssl_key_password = <path.
10-ssl.conf:#ssl_key_password =
10-ssl.conf:# ssl_verify_client_cert=yes. The file should contain the CA certificate(s)
10-ssl.conf:# followed by the matching CRL(s). (e.g. ssl_ca = </etc/ssl/certs/ca.pem)
10-ssl.conf:#ssl_ca = 
10-ssl.conf:#ssl_require_crl = yes
10-ssl.conf:ssl_client_ca_dir = /etc/ssl/certs
10-ssl.conf:#ssl_client_ca_file =
10-ssl.conf:# auth_ssl_require_client_cert=yes in auth section.
10-ssl.conf:#ssl_verify_client_cert = no
10-ssl.conf:# auth_ssl_username_from_cert=yes.
10-ssl.conf:#ssl_cert_username_field = commonName
10-ssl.conf:# gives on startup when ssl_dh is unset.
10-ssl.conf:ssl_dh = </usr/share/dovecot/dh.pem
10-ssl.conf:#ssl_min_protocol = TLSv1
10-ssl.conf:#ssl_cipher_list = ALL:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
10-ssl.conf:#ssl_cipher_list = ALL:!DH:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
10-ssl.conf:#ssl_curve_list =
10-ssl.conf:#ssl_prefer_server_ciphers = no
10-ssl.conf:#ssl_crypto_device =
10-ssl.conf:#ssl_options =

elmussol

Tue, 13 Aug 2019 12:56:53 +0200 last edited: Tue, 13 Aug 2019 13:12:31 +0200

From Upgrading Dovecot v2.2 to v2.3:

ssl_protocols setting was replaced by ssl_min_protocol. Now you only specify the minimum ssl protocol version Dovecot accepts, defaulting to TLSv1.

ssl_parameters was replaced with ssl_dh. See Diffie-Hellman Parameters for SSL.

SSLv2 is no longer supported in ssl_protocols.

elmussol

Tue, 13 Aug 2019 13:57:48 +0200

After further reading I have run openssl dhparam -out /etc/dovecot/dh.pem 4096 and this file exists:

root@pendle:~# ls -al /etc/dovecot/ | grep dh
-rw-r--r--   1 root root     769 Aug 13 13:34 dh.pem

Then: service dovecot stop && service dovecot start with no errors. Still no cigar and the same errors in mail.err.

el veciet

Tue, 13 Aug 2019 16:00:06 +0200

IMH and stupid O, Debian in the last times changed: stable became testing - testing became unstable--unstable became hell.

elmussol

Wed, 14 Aug 2019 16:01:36 +0200

Fixed at last, with massive help from @boneidol. Seems that the config snippets in /etc/dovecot/conf.d/ weren't respected if different settings existed within /etc/dovecot/dovecot.conf. I had done all the right things in /etc/dovecot/conf.d/ but not /etc/dovecot/dovecot.conf.

elmussol

Wed, 07 Aug 2019 10:30:18 +0200

elmussol is now connected with Gustavo S. Ulloa

who do we want?

elmussol

Thu, 01 Aug 2019 23:58:24 +0200

Strictly speaking I don't want a Prime Minister at all, but this is difficult to argue with.

elmussol posted a new photo to /

elmussol

Thu, 01 Aug 2019 16:36:29 +0200

elmussol is now connected with Iron Monkey

els Mussols PSA

elmussol

Xerta, Tue, 30 Jul 2019 23:37:02 +0200 last edited: Wed, 31 Jul 2019 12:09:25 +0200

I intend to do two server tasks this Thursday afternoon.

1: Do a dist-upgrade from Debian Stretch to Debian Buster.

2: Upgrade from PHP7.0 to PHP7.3.

Therefore Hubzilla at elsmussols.net, nextcloud.elsmussols.net and email will be down from about 1300CEST (1100UCT) 1500CEST (1300UCT) on Thursday, 01 August 2019. I hope to be down for a maximum of three hours.

update: timeframe moved two hours later (can't turn down paid work).

hubzilla debian php

elmussol

Wed, 31 Jul 2019 00:29:07 +0200

If all goes tremendously well, there will also be

3: Upgrade Nextcloud 15 > 16

But this not a priority.

elmussol

Thu, 01 Aug 2019 16:35:31 +0200

1 and 2 completed. 3 is for another day. Please let me know if you have issues.

elmussol

Thu, 01 Aug 2019 19:24:20 +0200

I wrote:

3 is for another day.

'Tis a lie, I've just done that one too.

if this doesn't make you smile...

elmussol

Xerta, Tue, 30 Jul 2019 10:37:27 +0200

...I have a "Miserable Bugger" t-shirt just for you.

Clandestino | Playing For Change | Song Around The World

https://youtube.com/watch?v=Wm0hI0aJanc

#manuchao

music

Haakon Meland Eriksen (Parlementum)

Tue, 30 Jul 2019 11:43:42 +0200

Sophie

Tue, 30 Jul 2019 21:34:18 +0200

This is awesome!

extreme close up

elmussol

Thu, 18 Jul 2019 18:28:27 +0200

elmussol posted a new photo to /

Alimentazione e quello che sta intorno

Thu, 18 Jul 2019 18:50:06 +0200

Wonderful !

Thu, 18 Jul 2019 20:47:59 +0200

NullSpaceOddity

Fri, 19 Jul 2019 06:53:58 +0200

Impressive!

talented partner alert

elmussol

Thu, 18 Jul 2019 17:31:30 +0200

Ben's been making this for a couple of years. She says it might be nearing completion.

elmussol posted a new photo to /

show all 5 comments

Sophie

Fri, 19 Jul 2019 04:39:31 +0200

Wow!

Maria Karlsen

Fri, 19 Jul 2019 16:04:38 +0200

Emanuel

Wed, 14 Aug 2019 11:56:54 +0200

good job!

early evening

elmussol

Mon, 15 Jul 2019 22:50:18 +0200

The view from outside our house, from the platform.

elmussol posted a new photo to /

show all 4 comments

el veciet

Tue, 16 Jul 2019 00:33:46 +0200

Haakon Meland Eriksen (Parlementum)

Tue, 16 Jul 2019 01:01:37 +0200

Beautiful

Alimentazione e quello che sta intorno

Tue, 16 Jul 2019 13:49:45 +0200

I can hear the call of the cicadas

elmussol

Fri, 12 Jul 2019 23:56:27 +0200

elmussol is now connected with Stefan Haydn

elmussol

Sun, 07 Jul 2019 13:36:49 +0200

elmussol is now connected with Adriano Maini

elmussol

Sun, 07 Jul 2019 13:36:33 +0200

elmussol is now connected with Condamina

one of my kids definitely is

elmussol

Xerta, Tue, 02 Jul 2019 22:38:16 +0200

Charles Roth MPC wrote the following post Tue, 02 Jul 2019 20:09:59 +0200

Know the Signs!

els Mussols PSA

elmussol

Xerta, Mon, 01 Jul 2019 13:24:27 +0200

My server provider is fixing the MDS (ZombieLoad) CPU vulnerability later today. My maintenance window is 2300 UCT 01 July 2019 to 0100 UCT 02 July 2019. This hub will therefore be down for some or all of that time.

hubzilla

elmussol

Tue, 02 Jul 2019 22:38:53 +0200

Nothing to see here.

signage

elmussol

Fri, 28 Jun 2019 14:08:07 +0200

Even though the fires are away from us, this sign has gone on the track to the village. We are in lockdown people.

elmussol posted a new photo to /

show all 14 comments

elmussol

Sat, 29 Jun 2019 17:22:45 +0200

We hit 45C today. Undoubtedly the hottest I've ever experienced. Humidity is 45%.

Sun, 30 Jun 2019 01:31:07 +0200

CNN says the fire was probably started by the self combustion of a pile of manure.

Mike Macgirvin

Sun, 30 Jun 2019 03:19:01 +0200

That's a threat I hadn't considered.

the joy of hosting

elmussol

Xerta, Fri, 28 Jun 2019 11:43:35 +0200

It never fails to amaze me how oblivious the vast majority of folks are when using them there smart phones. The conversation went something like:

Guest: It's really hot, is there somewhere we can swim in the mountains?
Me: Sure, there's a place called Caramella with waterfalls and pools about 12km away. You have a GPS in the car, right?
Guest: Yes, and on my phone.
Me: Here are the latitude and longitude co-ordinates... (on a piece of paper with co-ordinates in decimal form)
Guest: What are co-ordinates/latitude/longitude?
Me explains...
Twenty minutes pass and guest returns.
Guest: My GPS doesn't work with co-ordinates.
Me: You may need to convert to degrees/minutes/seconds format.
Guest: What are degrees, minutes and seconds? And what do N, S, E and W mean?
This is the point at which it just becomes easier to take the guest's car keys and programme the GPS myself. I predict a "We're lost!" phone call later in the day.

life

show all 4 comments

el veciet

Fri, 28 Jun 2019 12:46:16 +0200

ana

Fri, 28 Jun 2019 14:22:22 +0200

ana

Fri, 28 Jun 2019 14:23:00 +0200

Oh the patience!