dereckson renamed T1039: Renewed Let's encrypt certificate hasn't been deployed to SMTP from openssl s_client -connect mail.nasqueron.org:25 -starttls smtp CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = mail.nasqueron.org verify error:num=10:certificate has expired notAfter=Aug 19 12:17:00 2016 GMT verify return:1 depth=0 CN = mail.nasqueron.org notAfter=Aug 19 12:17:00 2016 GMT verify return:1 --- Certificate chain 0 s:/CN=mail.nasqueron.org i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 i:/O=Digital Signature Trust Co./CN=DST Root CA X3 --- Server certificate -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAwmPgfV3EE3NRzcMsY3/Q7EYMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA1MjExMjE3MDBaFw0x NjA4MTkxMjE3MDBaMB0xGzAZBgNVBAMTEm1haWwubmFzcXVlcm9uLm9yZzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOs1fFUfm4X5Tygisxn01igTlO5P J9e31oma4QBVXMF1515weV2rLiGUCOE7nxOyZGq9N24/5vtu+IieD9V+mosmok7z ci9ANsMwdjmvDjJUQ2jELMhPfE7Dd+8/Ew0ruNqv/d55xTRUxKf9YmbGmQTQDoeO oZBxbPVCfh+NgZsOMEOwlvbSOLHI5fuTDrKi009ql4SxahcCwk510cBx1ZfI9bzO emhSbqoVy4UkhTLScLXe0Qd5MGNKPzH7kmfDe2UNhyS7i7OkM2Vmfj3sUCJTgwCq qEUi3Nq3AyfixMry3ntgrjDitZb9x6Osd+G0jl06apZjlUE+D/RTvtQ0RI0CAwEA AaOCAhMwggIPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUsUXiyIT3quSfpZHKxgEi q2CRyBYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wHQYDVR0RBBYwFIISbWFpbC5uYXNxdWVyb24ub3JnMIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAIkaUL0KebdS1bYEu5hOL+c+QewB OI/U1euJjwsp4lftAKLeX2tzm9pg15nT7h1BFVj0FmaAyuQQOa1arp5Lq9/+SiPg rlgHCg3AzHU7tp8ssRMx8Z8yAT+riTLdheYLnlwPdHo5ZexbD8caSJ0gW82IFdkK DjyrXhXDfQuffgeme1x9KN5LD1ctR57XUpBuk8ZCGFsj5xKdXlMTHeslsVOs0KRD 6XjQPFmRPegGh7dim+2ssNyXDW4K/3ISTNZNLs9AcLU9Qt9ES6Fka9e3o6x4WUHU OQBUpLJ4t8Fyk99qoaeO3ra31wPThfn1Krh947iH6345eAwbrPs7nskAKJo= -----END CERTIFICATE----- subject=/CN=mail.nasqueron.org issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 3372 bytes and written 466 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: 0A93A8D87FD72B052F94835018362D0B2B0B6A26F921E507B7F4E43C36A09842 Session-ID-ctx: Master-Key: 4CC5AE9D75E879C03741369D086F7882874B18C355150963C05794CBD09F3D9436D67D63C762D9D5EFC9B5E4213A737B Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 3600 (seconds) TLS session ticket: 0000 - 27 1f fe 69 ae ef da e2-6f 26 db ba 33 13 f4 4c '..i....o&..3..L 0010 - f9 08 a2 8e 8d 7a c1 0e-61 07 f8 0e 37 17 45 36 .....z..a...7.E6 0020 - 3f d3 77 cb 0d 95 e4 80-e7 49 27 15 ad 56 1f b5 ?.w......I'..V.. 0030 - 08 2c 53 96 d9 04 51 a6-a6 18 c9 49 19 c7 db 75 .,S...Q....I...u 0040 - 98 db 0e 1c fe 5c 2c 61-57 da e0 88 e6 f4 f9 b8 .....\,aW....... 0050 - d7 35 be 7d cf 37 d1 47-6d f2 8c 85 ee 9c 2a f5 .5.}.7.Gm.....*. 0060 - 07 3e 44 59 61 e0 b5 7f-a1 1e 9b e9 74 a8 37 f1 .>DYa.......t.7. 0070 - 98 b5 bf 8a df a5 2e 66-ab 40 46 e2 5e 59 55 c2 .......f.@F.^YU. 0080 - 03 44 8c 63 15 cd ee 15-19 d1 0c 5b f2 dc bd 81 .D.c.......[.... 0090 - 2c ba b5 b7 d1 a2 09 ed-25 db dd 6d 2f e9 5f ce ,.......%..m/._. Start Time: 1478179147 Timeout : 300 (sec) Verify return code: 10 (certificate has expired) --- 250 DSN to Renewed Let's encrypt certificate hasn't been deployed to SMTP.

Nov 3 2016, 14:24 · Mail

dereckson committed rOPSc356aa59ba95: Allow to update Mumble server certificates (authored by dereckson).

Allow to update Mumble server certificates

Nov 3 2016, 14:13

dereckson closed D691: Allow to update Mumble server certificates by committing rOPSc356aa59ba95: Allow to update Mumble server certificates.

Nov 3 2016, 14:13

Sandlayth accepted D691: Allow to update Mumble server certificates.

Nov 3 2016, 14:09

dereckson updated the diff for D691: Allow to update Mumble server certificates.

Simplify environment declaration

Nov 3 2016, 14:01

Sandlayth requested changes to D691: Allow to update Mumble server certificates.

Nov 3 2016, 13:53

Sandlayth added inline comments to D691: Allow to update Mumble server certificates.

Nov 3 2016, 13:52

dereckson renamed T1038: Renewed Let's encrypt certificate hasn't been deployed to SMTP from openssl s_client -connect mail.nasqueron.org:25 -starttls smtp CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = mail.nasqueron.org verify error:num=10:certificate has expired notAfter=Aug 19 12:17:00 2016 GMT verify return:1 depth=0 CN = mail.nasqueron.org notAfter=Aug 19 12:17:00 2016 GMT verify return:1 --- Certificate chain 0 s:/CN=mail.nasqueron.org i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 i:/O=Digital Signature Trust Co./CN=DST Root CA X3 --- Server certificate -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAwmPgfV3EE3NRzcMsY3/Q7EYMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA1MjExMjE3MDBaFw0x NjA4MTkxMjE3MDBaMB0xGzAZBgNVBAMTEm1haWwubmFzcXVlcm9uLm9yZzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOs1fFUfm4X5Tygisxn01igTlO5P J9e31oma4QBVXMF1515weV2rLiGUCOE7nxOyZGq9N24/5vtu+IieD9V+mosmok7z ci9ANsMwdjmvDjJUQ2jELMhPfE7Dd+8/Ew0ruNqv/d55xTRUxKf9YmbGmQTQDoeO oZBxbPVCfh+NgZsOMEOwlvbSOLHI5fuTDrKi009ql4SxahcCwk510cBx1ZfI9bzO emhSbqoVy4UkhTLScLXe0Qd5MGNKPzH7kmfDe2UNhyS7i7OkM2Vmfj3sUCJTgwCq qEUi3Nq3AyfixMry3ntgrjDitZb9x6Osd+G0jl06apZjlUE+D/RTvtQ0RI0CAwEA AaOCAhMwggIPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUsUXiyIT3quSfpZHKxgEi q2CRyBYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUH AQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wHQYDVR0RBBYwFIISbWFpbC5uYXNxdWVyb24ub3JnMIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAIkaUL0KebdS1bYEu5hOL+c+QewB OI/U1euJjwsp4lftAKLeX2tzm9pg15nT7h1BFVj0FmaAyuQQOa1arp5Lq9/+SiPg rlgHCg3AzHU7tp8ssRMx8Z8yAT+riTLdheYLnlwPdHo5ZexbD8caSJ0gW82IFdkK DjyrXhXDfQuffgeme1x9KN5LD1ctR57XUpBuk8ZCGFsj5xKdXlMTHeslsVOs0KRD 6XjQPFmRPegGh7dim+2ssNyXDW4K/3ISTNZNLs9AcLU9Qt9ES6Fka9e3o6x4WUHU OQBUpLJ4t8Fyk99qoaeO3ra31wPThfn1Krh947iH6345eAwbrPs7nskAKJo= -----END CERTIFICATE----- subject=/CN=mail.nasqueron.org issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 3372 bytes and written 466 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: 0A93A8D87FD72B052F94835018362D0B2B0B6A26F921E507B7F4E43C36A09842 Session-ID-ctx: Master-Key: 4CC5AE9D75E879C03741369D086F7882874B18C355150963C05794CBD09F3D9436D67D63C762D9D5EFC9B5E4213A737B Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 3600 (seconds) TLS session ticket: 0000 - 27 1f fe 69 ae ef da e2-6f 26 db ba 33 13 f4 4c '..i....o&..3..L 0010 - f9 08 a2 8e 8d 7a c1 0e-61 07 f8 0e 37 17 45 36 .....z..a...7.E6 0020 - 3f d3 77 cb 0d 95 e4 80-e7 49 27 15 ad 56 1f b5 ?.w......I'..V.. 0030 - 08 2c 53 96 d9 04 51 a6-a6 18 c9 49 19 c7 db 75 .,S...Q....I...u 0040 - 98 db 0e 1c fe 5c 2c 61-57 da e0 88 e6 f4 f9 b8 .....\,aW....... 0050 - d7 35 be 7d cf 37 d1 47-6d f2 8c 85 ee 9c 2a f5 .5.}.7.Gm.....*. 0060 - 07 3e 44 59 61 e0 b5 7f-a1 1e 9b e9 74 a8 37 f1 .>DYa.......t.7. 0070 - 98 b5 bf 8a df a5 2e 66-ab 40 46 e2 5e 59 55 c2 .......f.@F.^YU. 0080 - 03 44 8c 63 15 cd ee 15-19 d1 0c 5b f2 dc bd 81 .D.c.......[.... 0090 - 2c ba b5 b7 d1 a2 09 ed-25 db dd 6d 2f e9 5f ce ,.......%..m/._. Start Time: 1478179147 Timeout : 300 (sec) Verify return code: 10 (certificate has expired) --- 250 DSN to Renewed Let's encrypt certificate hasn't been deployed to SMTP.

Nov 3 2016, 13:36 · Mail

dereckson created T1038: Renewed Let's encrypt certificate hasn't been deployed to SMTP.

Nov 3 2016, 13:22 · Mail

dereckson created T1039: Renewed Let's encrypt certificate hasn't been deployed to SMTP.

Nov 3 2016, 13:22 · Mail

dereckson committed rAPI659667f3e0e5: Configure Arcanist (authored by dereckson).

Configure Arcanist

Nov 3 2016, 03:20

dereckson closed D693: Configure Arcanist by committing rAPI659667f3e0e5: Configure Arcanist.

Nov 3 2016, 03:20

dereckson updated the test plan for D693: Configure Arcanist.

Nov 3 2016, 03:20

dereckson accepted D693: Configure Arcanist.

Nov 3 2016, 03:19

dereckson retitled D693: Configure Arcanist from to Configure Arcanist.

Nov 3 2016, 03:19

dereckson committed rAPI649ab301fa1d: Add Jenkins to sites map (authored by dereckson).

Add Jenkins to sites map

Nov 3 2016, 03:17

dereckson closed D692: Add Jenkins to sites map by committing rAPI649ab301fa1d: Add Jenkins to sites map.

Nov 3 2016, 03:15

dereckson accepted D692: Add Jenkins to sites map.

Nov 3 2016, 03:14

dereckson retitled D692: Add Jenkins to sites map from to Add Jenkins to sites map.

Nov 3 2016, 03:13

dereckson moved T853: Deploy a Let's encrypt certificate to the Mumble server from Needs Review / Blocked / Waiting to In progress on the User-Dereckson board.

Nov 3 2016, 03:00 · good-first-issue, Mumble, security, Servers

dereckson moved T391: Create a Docker image for mumble-django from Working on to Backlog on the Mumble board.

Nov 3 2016, 02:55 · Docker images, Mumble, Nasqueron Docker deployment squad

dereckson added a comment to T853: Deploy a Let's encrypt certificate to the Mumble server.

Currently, configuration file contains the following instructions:

Nov 3 2016, 02:53 · good-first-issue, Mumble, security, Servers

dereckson added inline comments to D691: Allow to update Mumble server certificates.

Nov 3 2016, 02:06

dereckson added inline comments to D691: Allow to update Mumble server certificates.

Nov 3 2016, 02:03

dereckson retitled D691: Allow to update Mumble server certificates from to Allow to update Mumble server certificates.

Nov 3 2016, 02:01

dereckson updated the language for P221 /usr/local/bin/update-mumble-certificates from autodetect to bash.

Nov 3 2016, 01:47 · Mumble

dereckson added a comment to T853: Deploy a Let's encrypt certificate to the Mumble server.

In T853#9085, @dereckson wrote:

We need a script to automate the process.

Nov 3 2016, 01:40 · good-first-issue, Mumble, security, Servers

dereckson edited P221 /usr/local/bin/update-mumble-certificates.

Nov 3 2016, 01:39 · Mumble

Oct 26 2016

dereckson archived P220 ip6tables.txt.

Oct 26 2016, 21:35 · Servers

dereckson added a project to P220 ip6tables.txt: Servers.

Probably the IPv6 iptables entries for Dwellers, from a 2015-04-06 text file in my /home.

Oct 26 2016, 21:35 · Servers

dereckson edited P220 ip6tables.txt.

Oct 26 2016, 21:34 · Servers

Oct 25 2016

dereckson committed rOPSee6932ac3020: New SSH key for dereckson (xyrogh) (authored by dereckson).

New SSH key for dereckson (xyrogh)

Oct 25 2016, 17:42

dereckson closed D690: New SSH key for dereckson (xyrogh) by committing rOPSee6932ac3020: New SSH key for dereckson (xyrogh).

Oct 25 2016, 17:41

dereckson accepted D690: New SSH key for dereckson (xyrogh).

Key manually added to Ysul, works.

Oct 25 2016, 17:40

dereckson updated D690: New SSH key for dereckson (xyrogh).

Oct 25 2016, 17:38

dereckson retitled D690: New SSH key for dereckson (xyrogh) from to New SSH key for dereckson (xyrogh).

Oct 25 2016, 17:33

dereckson closed T1037: nginx can't reinstall correctly on Eglide as Resolved.

apache2 package was installed, and so blocked service restart (and so package registration).

Oct 25 2016, 16:53 · Servers

dereckson created T1037: nginx can't reinstall correctly on Eglide.

Oct 25 2016, 15:47 · Servers

dereckson added a comment to T1033: Allow to easily compile test an eggdrop on Eglide.

Eglide

$ ./configure
[…]
checking for Tcl library... not found
checking for Tcl header... not found
checking whether the Tcl system has changed... yes
configure: error:

Oct 25 2016, 15:46 · User-Dereckson, Servers, Eglide

dereckson committed rOPS4165c74b624e: New SSH key for amj (thinbiam) (authored by dereckson).

New SSH key for amj (thinbiam)

Oct 25 2016, 15:11

dereckson closed D689: New SSH key for amj (thinbiam) by committing rOPS4165c74b624e: New SSH key for amj (thinbiam).

Oct 25 2016, 15:10

dereckson accepted D689: New SSH key for amj (thinbiam).

Oct 25 2016, 15:10

dereckson retitled D689: New SSH key for amj (thinbiam) from to New SSH key for amj (thinbiam).

Oct 25 2016, 15:09

dereckson created T1034: Switch from root@ SSH login to sudo capabilities on every server.

Oct 25 2016, 02:32 · Operations sprints (Consolidate them all), Servers, Eglide