*** krnlyng has quit IRC | 00:03 | |
*** eijk has quit IRC | 00:04 | |
*** futpib has quit IRC | 00:05 | |
*** sunshavi has joined #maemo | 00:14 | |
*** krnlyng has joined #maemo | 00:19 | |
jonwil | we need to find someone who knows enough about openssl to figure out just what the local patches in the maemo openssl0.9.8n are for and which ones we would need going forward... | 00:31 |
---|---|---|
kerio | how many patches are there? | 00:32 |
jonwil | I dont know what differences/patches there are | 00:32 |
jonwil | I am going to take a look and find out | 00:33 |
*** Pali has quit IRC | 00:34 | |
*** louisdk has joined #maemo | 00:40 | |
jonwil | hmmm, I cant make sense of all this | 00:50 |
Oksanaa | Nice, links? | 00:57 |
jonwil | nice what? | 00:58 |
*** louisdk has quit IRC | 01:06 | |
NIN101 | well one of them is actually harmful | 01:08 |
NIN101 | 12_valgrind.patch | 01:09 |
*** Cor-Ai has quit IRC | 01:10 | |
*** Cor-Ai has joined #maemo | 01:10 | |
*** sunshavi has quit IRC | 01:13 | |
*** krnlyng has quit IRC | 01:14 | |
*** louisdk has joined #maemo | 01:19 | |
*** sunshavi has joined #maemo | 01:24 | |
*** LauRoman has quit IRC | 01:24 | |
*** Cor-Ai_ has joined #maemo | 01:38 | |
*** Cor-Ai has quit IRC | 01:38 | |
*** Cor-Ai_ is now known as Cor-Ai | 01:38 | |
Oksanaa | Nice idea, to upgrade openssl. And opening links is way easier than finding them... | 01:45 |
*** louisdk has quit IRC | 01:47 | |
*** florian has quit IRC | 01:53 | |
sunshavi | mmm, openssl. When You guys finish. I can port it to n800 too | 01:59 |
*** krnlyng has joined #maemo | 02:04 | |
*** louisdk has joined #maemo | 02:04 | |
*** pigeon has quit IRC | 02:15 | |
*** louisdk has quit IRC | 02:17 | |
*** sunshavi has quit IRC | 02:26 | |
*** drawkula has quit IRC | 02:26 | |
*** drawkula has joined #maemo | 02:28 | |
*** pozitrono has quit IRC | 02:28 | |
*** sunshavi has joined #maemo | 02:37 | |
jonwil | bah, I cant find the source code to upstream openssl (debian version 0.9.8n-1) | 02:44 |
*** pozitron has joined #maemo | 02:48 | |
*** louisdk has joined #maemo | 02:57 | |
*** Oksanaa has quit IRC | 03:13 | |
*** Hurrian has quit IRC | 03:27 | |
*** Hurrian has joined #maemo | 03:28 | |
*** louisdk has quit IRC | 03:32 | |
*** xorly has quit IRC | 03:34 | |
*** jonwil has quit IRC | 03:43 | |
*** Oksanaa has joined #maemo | 04:12 | |
*** Hurrian has quit IRC | 04:29 | |
*** vakkov_ has joined #maemo | 04:34 | |
*** vakkov has quit IRC | 04:37 | |
*** LauRoman has joined #maemo | 04:38 | |
*** Hurrian has joined #maemo | 04:43 | |
*** Defiant has quit IRC | 04:46 | |
*** Defiant has joined #maemo | 04:52 | |
*** Hurrian has quit IRC | 05:07 | |
*** LauRoman has quit IRC | 05:14 | |
*** pigeon has joined #maemo | 05:18 | |
*** Hurrian has joined #maemo | 05:37 | |
*** svetlana has joined #maemo | 05:39 | |
*** Hurrian has quit IRC | 05:43 | |
*** DocScrutinizer05 has quit IRC | 06:08 | |
*** DocScrutinizer05 has joined #maemo | 06:09 | |
*** FReaper-PC has joined #maemo | 06:13 | |
*** Roth has joined #maemo | 06:14 | |
*** Hurrian has joined #maemo | 07:13 | |
*** krnlyng has quit IRC | 07:16 | |
*** sunshavi has quit IRC | 07:17 | |
*** Hurrian has quit IRC | 07:27 | |
*** svetlana has quit IRC | 07:47 | |
*** krnlyng has joined #maemo | 08:04 | |
*** Hurrian has joined #maemo | 08:09 | |
*** Roth has quit IRC | 08:24 | |
*** futpib has joined #maemo | 09:04 | |
*** Hurrian has quit IRC | 09:18 | |
*** Hurrian has joined #maemo | 09:21 | |
*** geaaru has joined #maemo | 09:49 | |
*** krnlyng has quit IRC | 09:52 | |
*** futpib has quit IRC | 09:52 | |
*** krnlyng has joined #maemo | 10:06 | |
*** florian has joined #maemo | 10:22 | |
*** freemangordon_ has joined #maemo | 10:27 | |
bencoh | meh, jonwil is offline again | 10:31 |
bencoh | anyway, some of the work (porting / tracking patches) has been done for 0.9.8zf: | 10:33 |
bencoh | http://repository.maemo.org/community-testing/pool/fremantle/free/source/o/openssl/ | 10:34 |
bencoh | it might be a good start | 10:34 |
*** pozitron has quit IRC | 10:35 | |
*** florian has quit IRC | 10:39 | |
*** zGrr has joined #maemo | 10:45 | |
zGrr | moin :) | 10:46 |
*** freemangordon_ has quit IRC | 10:56 | |
*** freemangordon_ has joined #maemo | 11:04 | |
*** krnlyng has quit IRC | 11:25 | |
ceene | ttp://talk.maemo.org/showthread.php?p=1492874#post1492874 | 11:36 |
bencoh | ceene: does openssl s_client work btw? | 11:38 |
*** vahe has joined #maemo | 11:38 | |
ceene | i don't know yet | 11:39 |
*** krnlyng has joined #maemo | 11:40 | |
*** flo_lap has joined #maemo | 11:41 | |
sixwheeledbeast | IIRC our version of 0.9.8n is actually 0.9.8n with 0.9.8o patches applied | 11:45 |
ceene | from the changelog it's in fact 0.9.8zf :/ | 11:46 |
ceene | it's quite complex all this | 11:46 |
ceene | but i think there are no maemo patches | 11:46 |
ceene | except for thumb support, which i've just added | 11:46 |
ceene | openssll s_client works ok | 11:48 |
sixwheeledbeast | I remember compiling the list of CVE patches applied between 0.9.8o - 0.9.8z. | 11:49 |
sixwheeledbeast | The idea then was to backport due to ABI incompatibilities | 11:50 |
bencoh | ceene: it is, in -testing | 11:50 |
bencoh | I dont really understand why jonwil doesnt use apt-get source | 11:50 |
ceene | yeah, that's what i do | 11:51 |
ceene | most of the time at least | 11:51 |
sixwheeledbeast | ah this was the thread http://talk.maemo.org/showthread.php?t=93296 | 11:54 |
*** freemangordon_ has quit IRC | 11:55 | |
ceene | i've just eedited my post with what i think is the difference between maemo and debian versions | 11:56 |
ceene | that is only packaging, not code | 11:56 |
*** Pali has joined #maemo | 12:01 | |
kerio | sixwheeledbeast: there's no ABI incompatibility :\ | 12:04 |
kerio | if there is, it's a bug | 12:04 |
bencoh | as far as we could tell, there was none indeed | 12:05 |
*** jonwil has joined #maemo | 12:08 | |
ceene | what i don't think is doable is patching theclosed source bits to use new openssl | 12:08 |
jonwil | We dont necessarily need to patch them | 12:09 |
kerio | how new | 12:09 |
kerio | ? | 12:09 |
ceene | we could live with two openssl versions i guess | 12:10 |
kerio | they'll happily use openssl 0.9.8zh or whatever the latest 0.9.8 is | 12:10 |
kerio | i don't think any one of us wants to write an openssl shim | 12:10 |
ceene | nope | 12:10 |
jonwil | There is no reason we cant have both 0.9.8zh or whatever it is for the closed source bits and also 1.0.2 for all the FOSS bits | 12:10 |
kerio | indeed | 12:10 |
ceene | that's the way then | 12:10 |
jonwil | as for what we have, CSSU is using 0.9.8zf | 12:10 |
ceene | little by little the closed bits should be getting RE if at all possible and rewritten using new libs and whatever | 12:11 |
sixwheeledbeast | I am only recalling the thread from last time. | 12:11 |
ceene | but that's far away i think | 12:11 |
jonwil | but stock is 9.8.8n-1 from Debian with some local changes | 12:11 |
kerio | cssu is on zf | 12:12 |
kerio | and no further change was done | 12:12 |
bencoh | no need to work on top of 0.9.8n | 12:12 |
jonwil | If I can find the upstream Debian 0.9.8n-1 source, I can figure out exactly whats different between openssl 0.9.9n-1 from Debian and openssl 0.9.8n-1+maemo4+0m5 from Fremantle and then we can identify which of those Maemo-local changes actually matter and need to be somehow handled for any new 1.x.whatever port we may do | 12:14 |
jonwil | CSSU is " | 12:14 |
sixwheeledbeast | cssu testing is zf, stable is still 0.9.8n-1. | 12:14 |
bencoh | jonwil: fmg already "ported" those patches to zf | 12:14 |
jonwil | CSSU is 0.9.8zf with bits from Debian 0.9.8n-1 and bits from Maemo 0.9.8n-1+maemo4+0m5 | 12:14 |
jonwil | I know its been ported to zf | 12:14 |
bencoh | so why bother with n? | 12:14 |
jonwil | I want to know exactly what is different between stock Maemo PR1.3 OpenSSL and upstream Debian OpenSSL (ignoring whatever may have been done in CSSU). That information will confirm once and for all which of the changes Nokia made on top of upstream Debian are necessary in some way for Maemo (and which are just e.g. back-ports from OpenSSL > 0,9.8n or otherwise are no longer necessary with... | 12:17 |
jonwil | ...the latest OpenSSL) | 12:17 |
ceene | jonwil: does it really matter? | 12:18 |
*** eMHa has joined #maemo | 12:18 | |
ceene | i mean, if we're going to stick with the old version for the closed source bits | 12:19 |
ceene | and we're gonna try to port open source apps to use the new lib | 12:19 |
kerio | ceene: no, we're going to "stick with" the latest openssl 0.9.8 version | 12:19 |
ceene | why do we care what was done for things that we're not going to touch? | 12:19 |
kerio | because bugs are things that exist | 12:19 |
ceene | even if nokia did some changes to openssl | 12:19 |
ceene | do we want them? | 12:19 |
ceene | i mean... it's not like openssl is something that should ever be touched without a stick | 12:20 |
bencoh | I'm not even sure we'd want any 3rd-party patch, considering history :* | 12:20 |
bencoh | (hey debian, we're looking at you) | 12:20 |
ceene | my guess is if they did something, chances are they are for worse | 12:20 |
ceene | yeah, that's what i'm saying :) | 12:20 |
ceene | i trust debian more than the nokia guys on this thing, and look at what debian did | 12:21 |
bencoh | btw, iirc the 12_valgrind.patch we have isn't the harmful debian one | 12:21 |
bencoh | but we should check chanlogs | 12:21 |
ceene | that patch is still on debian sid | 12:21 |
bencoh | yeah | 12:21 |
ceene | so i don't think that's the bad one | 12:22 |
bencoh | that's what we thought back then as well | 12:22 |
ceene | really, touching a library like openssl without very profound knowledge of what you are doing doesn't look like a good idea | 12:22 |
ceene | i know that i am not able to understand or asses what risks a little change might pose in ssl | 12:22 |
jonwil | Specifically I am looking at 22_openssl_psk_0.9.8n-lib.dpatch for example, its a Nokia patch (its full of Nokia copyrights) and its adding something we might actually need (PSK cypersuites) | 12:23 |
jonwil | thats just an example of something Nokia added that we may somehow need to care about | 12:23 |
ceene | oh, if that's added functionality then there's little workaround about that :/ | 12:24 |
jonwil | Looks like https://launchpad.net/debian/+source/openssl/0.9.8n-1 is the source I want actually :) | 12:24 |
Pali | freemangordon: looks like that patch for "/revision" DT entry will not be accepted and Arnd want to see that ATAG_REVISION will be parsed in that your hook where is save_atags | 12:25 |
ceene | that's what i thought, yes | 12:25 |
Pali | freemangordon: will you extend your patch? | 12:25 |
jonwil | ok, so now I will do a diff between the source from Debian and the source from Maemo and see whats different between the 2 :) | 12:26 |
bencoh | wtf is a CST (20_load-cert.dpatch) ... | 12:30 |
kerio | where are the nokia patches? | 12:35 |
bencoh | mixed with the others in debian/patches/ | 12:41 |
bencoh | though I suspect they're the .dpatch ones :) | 12:41 |
bencoh | jonwil: psk support has been added in openssl-1.0.0 | 12:45 |
jonwil | ok | 12:46 |
bencoh | the 2005 nokia copyright is a bit surprising | 12:46 |
bencoh | well... the same copyright is present in vanilla openssl-1.0.0 | 12:48 |
bencoh | and the psk code has been around in git since at least 2006 | 12:49 |
*** trumee has joined #maemo | 12:51 | |
bencoh | openssl commit ddac197404f585b8da58df794fc3beb9d08e8cd2, code comes from nokia | 12:51 |
useretail | hey guys, how to extract nolo from firmware image? | 13:00 |
*** krnlyng has quit IRC | 13:01 | |
*** krnlyng has joined #maemo | 13:03 | |
*** krnlyng has quit IRC | 13:06 | |
*** krnlyng has joined #maemo | 13:07 | |
jonwil | new post made http://talk.maemo.org/showthread.php?p=1492878#post1492878 | 13:08 |
jonwil | useretail: There should be a way to extract nolo via flasher-3.5 | 13:11 |
jonwil | What do you want nolo for anyway? | 13:11 |
bencoh | jonwil: you probably still want the CST (20_load-cert.dpatch) patch | 13:12 |
bencoh | apart from that... | 13:12 |
jonwil | ok, post in the thread then | 13:12 |
*** sparetire_ has quit IRC | 13:13 | |
*** krnlyng has quit IRC | 13:15 | |
useretail | recently device went to reboot loop, so i'm trying to figure out how booting works | 13:15 |
jonwil | how will extracting nolo help with that? | 13:16 |
*** krnlyng has joined #maemo | 13:16 | |
useretail | i couldn't find sources for it | 13:17 |
*** Mekkis has quit IRC | 13:29 | |
*** Mekkis has joined #maemo | 13:30 | |
*** Cor-Ai_ has joined #maemo | 13:39 | |
*** Cor-Ai has quit IRC | 13:41 | |
*** Cor-Ai_ is now known as Cor-Ai | 13:41 | |
*** Hurrian has quit IRC | 13:53 | |
*** Wizzup has quit IRC | 13:57 | |
KotCzarny | ~bootloop | 13:59 |
infobot | i guess bootloop is when your device has broken rootfilesystem, so during reboot it fails on some service startup or kernel module load and thus reboots. This *drains* battery! And you can't reflash to stop bootloop when battery is drained. Recharge your battery by other means before reflashing. E.g. using ~rescueOS. Or external charger or BL-5J compatible other device. | 13:59 |
KotCzarny | rule #1, charge your battery | 13:59 |
jonwil | there is no source code for nolo out there btw | 14:01 |
*** Wizzup has joined #maemo | 14:03 | |
*** jon_y_ has joined #maemo | 14:03 | |
*** phlixi has quit IRC | 14:04 | |
*** phlixi has joined #maemo | 14:04 | |
*** Vajb has quit IRC | 14:04 | |
*** Vajb has joined #maemo | 14:05 | |
*** jon_y has quit IRC | 14:05 | |
*** henkjan has quit IRC | 14:08 | |
*** Hurrian has joined #maemo | 14:12 | |
*** Hurrian has quit IRC | 14:14 | |
*** darkschneider has quit IRC | 14:17 | |
*** darkschneider has joined #maemo | 14:17 | |
*** Hurrian has joined #maemo | 14:23 | |
*** at1as has joined #maemo | 14:29 | |
*** sunshavi has joined #maemo | 14:32 | |
*** krnlyng has quit IRC | 14:33 | |
*** SpeedEvil has quit IRC | 14:46 | |
*** SpeedEvil has joined #maemo | 14:48 | |
*** vahe has joined #maemo | 14:53 | |
*** discopig has quit IRC | 14:55 | |
*** Hurrian has quit IRC | 14:56 | |
*** Hurrian has joined #maemo | 14:57 | |
*** pozitrono has joined #maemo | 14:58 | |
ceene | i'm having trouble building qt4 package | 14:59 |
ceene | /tmp/N900/qt4-x11-4.7.4~git20110505+cssu11/include/QtCore/qstringlist.h:1:86: ../../../qt4-x11-4.7.4 | 14:59 |
ceene | ~git20110505\+cssu11/src/corelib/tools/qstringlist.h: No such file or directory | 14:59 |
ceene | which is false | 14:59 |
KotCzarny | are you are you really sure? | 14:59 |
ceene | shouldn't this be straightforward? | 14:59 |
KotCzarny | those paths can be misleading | 15:00 |
ceene | i mean, this is apt-get source'd from scratchbox | 15:00 |
ceene | it should build | 15:00 |
KotCzarny | also, change the name of the directory from ~ to - | 15:00 |
KotCzarny | and reconfigure | 15:00 |
ceene | yeah, i've checked | 15:00 |
KotCzarny | apparently ~ got eaten by bash | 15:00 |
ceene | no, no, it was in the pasting | 15:00 |
ceene | that got cut out to the other line | 15:00 |
KotCzarny | still, remove any special chars from the dir name | 15:01 |
ceene | if i go to /tmp/N900/qt4-x11-4.7.4~git20110505+cssu11/include/QtCore/, i ../../../qt4-x11-4.7.4~git20110505\+cssu11/src/corelib/tools/qstringlist.h exists | 15:01 |
*** eMHa_ has joined #maemo | 15:01 | |
ceene | but that's the name of the deb package, i mean, that should work | 15:01 |
KotCzarny | mv /tmp/N900/qt4-x11-4.7.4~git20110505+cssu11/ /tmp/N900/qt4-x11-4.7.4_git20110505_cssu11/ | 15:01 |
KotCzarny | and redo | 15:01 |
KotCzarny | you may try using bash instead of bb shell | 15:01 |
*** eMHa has quit IRC | 15:02 | |
*** krnlyng has joined #maemo | 15:03 | |
ceene | same thing | 15:03 |
ceene | also, the error comes from gcc | 15:03 |
ceene | so shell shouldn't matter | 15:04 |
bencoh | why would gcc print an escaped +? | 15:04 |
bencoh | "~git20110505\+cssu11" | 15:04 |
ceene | dunno | 15:05 |
KotCzarny | ceene, did you reran ./configure ? | 15:06 |
KotCzarny | and the error msg should be different then | 15:06 |
ceene | i'm trying to build the whole package, so i use dpkg-buildpackage | 15:06 |
ceene | that's what the autobuilder is supposed to do | 15:07 |
KotCzarny | check if patches do something weird | 15:07 |
ceene | get the source code and inke dpkg-buildpackage | 15:07 |
KotCzarny | hardcoded stuff etc | 15:07 |
*** vahe has quit IRC | 15:07 | |
ceene | s/inke/invoke/ | 15:07 |
infobot | ceene meant: get the source code and invoke dpkg-buildpackage | 15:07 |
ceene | i'm gonna remove the + | 15:09 |
freemangordon | jonwil: those Nokia patches were never upstreamed iirc | 15:09 |
freemangordon | (openns that is) | 15:09 |
freemangordon | *openssl | 15:09 |
freemangordon | and we need them for the supl servers | 15:09 |
freemangordon | jonwil: BTW I think it is better to look in CSSU openssl, not in the stock | 15:10 |
ceene | i've had to edit the debian/changelog and replace the + with a - | 15:15 |
jonwil | Which nokia patches? | 15:15 |
KotCzarny | ceene, does it compile now? | 15:15 |
bencoh | freemangordon: which one? | 15:15 |
freemangordon | *psk* ones | 15:16 |
bencoh | they were | 15:16 |
freemangordon | bencoh: upstreamed? | 15:16 |
ceene | i can understand that some script is buggy, but i don't understand how is this compiled by the autobuilder | 15:16 |
bencoh | freemangordon: yeah, see TMO | 15:16 |
ceene | KotCzarny: not yet, but it's gonna compile once i finish renaming these things | 15:16 |
jonwil | https://git.openssl.org/?p=openssl.git;a=commit;h=ddac197404f585b8da58df794fc3beb9d08e8cd2 is the upstream commit for the PSK patches | 15:16 |
KotCzarny | ceene, maybe it uses different shell/env | 15:16 |
bencoh | didnt know we need it for supl though, thx for the info :) | 15:17 |
freemangordon | wait, what? 2006?!? | 15:17 |
bencoh | yeah, kinda ... old | 15:17 |
bencoh | looks like openssl didnt want to release it in the 0.9.x series | 15:18 |
freemangordon | but they are missing in 0.9.8 | 15:18 |
freemangordon | even in the latest | 15:18 |
freemangordon | well even in 0.9.8zf | 15:18 |
bencoh | feature vs bugfix I guess | 15:18 |
freemangordon | hmm, yeah, makes sense | 15:18 |
freemangordon | BTW, AFAIK 0.9.8 and 1.0.x can coexists | 15:19 |
jonwil | yes they can | 15:19 |
bencoh | yeah :) | 15:19 |
bencoh | hmm, dunno about headers, but libs can | 15:19 |
ceene | now it's compiling | 15:19 |
freemangordon | so we should not have much of a problems | 15:19 |
jonwil | headers can't | 15:19 |
KotCzarny | ceene, told ya, special chars confuse configure scripts | 15:20 |
ceene | well, it serves my purpose now, which is to get it compiling against openssl1.0.2e | 15:20 |
ceene | i want then to backport some of the ssl related things of qt5 | 15:20 |
bencoh | ceene: really, qt? well, I guess if this one works, everything will, but... :D | 15:20 |
ceene | to let it support tlsv12, etc | 15:20 |
jonwil | anyhow, we should now have all the info we need to have in order to complete items #1, #2 and #3 from the first post in http://talk.maemo.org/showthread.php?t=96292 | 15:21 |
freemangordon | ceene: we should patch (or backport from newer) qt fot it to support > tls1 | 15:21 |
ceene | freemangordon: yes, that's the idea | 15:21 |
ceene | most apps don't change default ssl options | 15:21 |
freemangordon | as 4.7 is aware of tls1 and ssl3 only | 15:21 |
freemangordon | most in maemo do, as ssl3 is no longer supported :) | 15:22 |
ceene | so probably just modifying qssl::secureprotocols or however it's called, i don't remember, would be enough for apps to use the appropriate protocol | 15:22 |
bencoh | regarding curl and tlsv1, stupid thing (libcurl) will default to sslv3 unless told otherwise | 15:22 |
freemangordon | ant is is the default | 15:22 |
ceene | provided backporting protocol support to qt4 is doable | 15:22 |
freemangordon | bencoh: same for qt | 15:22 |
bencoh | freemangordon: except curl wont try tslv1 by dfault | 15:22 |
freemangordon | qt as well :) | 15:22 |
bencoh | at all | 15:23 |
bencoh | ah | 15:23 |
freemangordon | qt sends ssl3 hello, server rejects it and that's all :) | 15:23 |
freemangordon | or something like that | 15:23 |
freemangordon | I had that problrm with FB sharing plugin | 15:24 |
ceene | ssl3 should just be removed, as far as i know | 15:24 |
bencoh | yeah | 15:24 |
bencoh | freemangordon: something like that with curl as well yeah | 15:24 |
jonwil | Can anyone help make sure the root certificates in https://github.com/community-ssu/maemo-security-certman/commits/master are up to date with what they should be these days? | 15:24 |
bencoh | unless you specify -1 (force tlsv1) | 15:24 |
freemangordon | but our curl should be pretty recent iirc | 15:24 |
bencoh | 7.26 | 15:25 |
jonwil | I dont know where the good set of root certificates are these days | 15:25 |
freemangordon | jonwil: last time I've checked, it was fine | 15:25 |
jonwil | ok | 15:25 |
freemangordon | but it was some 2 years ago :) | 15:25 |
jonwil | where does that set of root certificates come from? Mozilla? NSS? | 15:25 |
freemangordon | "freemangordon committed on 30 Aug 2013" | 15:26 |
freemangordon | mozilla should be ok | 15:26 |
freemangordon | someone with time and patience should check certs if FF agains those in maemo | 15:26 |
freemangordon | *in FF | 15:26 |
ceene | is qt5 something desirable for maemo? | 15:29 |
freemangordon | wayland? | 15:29 |
ceene | or a bump to 4.8 instead of 4.7 | 15:29 |
freemangordon | what for? | 15:30 |
ceene | don't know, just asking | 15:30 |
Wizzup | I would doubt wayland is something that would be useful for maemo now | 15:38 |
*** vahe has joined #maemo | 15:40 | |
*** jon_y_ is now known as jon_y | 15:45 | |
bencoh | not really | 15:46 |
*** flo_lap has quit IRC | 15:48 | |
*** arossdotme has quit IRC | 15:51 | |
jonwil | hmmm, if I knew how all this certificate stuff in maemo-security-certman worked, I would take a look and see if its up-to-date with what it should be. | 15:51 |
*** vahe has quit IRC | 15:51 | |
jonwil | I found http://mxr.mozilla.org/nss/source/lib/ckfw/builtins/certdata.txt which contains the current Mozilla root certificate set | 15:51 |
*** eijk has joined #maemo | 15:51 | |
*** vahe has joined #maemo | 15:52 | |
*** xorly has joined #maemo | 15:58 | |
*** arossdotme has joined #maemo | 16:00 | |
jonwil | Pitty Juhani Mäkelä seems to be gone, otherwise they might be able to tell us how to update the maemo-security-certman certificates using the certdata.txt file | 16:04 |
*** eijk has quit IRC | 16:07 | |
*** jonwil has quit IRC | 16:12 | |
*** vahe has quit IRC | 16:12 | |
sunshavi | can this certificates, can not just only be cped from a working linux workstation? | 16:13 |
*** Vajb has quit IRC | 16:18 | |
*** Vajb has joined #maemo | 16:19 | |
*** KotCzarny has quit IRC | 16:43 | |
*** BCMM has joined #maemo | 16:54 | |
*** pozitrono has quit IRC | 17:04 | |
*** XDS2010 has quit IRC | 17:04 | |
*** XDS2010 has joined #maemo | 17:12 | |
*** Vajb has quit IRC | 17:17 | |
*** Vajb has joined #maemo | 17:17 | |
*** LauRoman has joined #maemo | 17:23 | |
Pali | sunshavi: no it needs to be in format usable for certman | 17:23 |
sunshavi | pali: Mmm. /etc/ssl/certs/ca-certificates.crt, is not in the required format. Then my assumption was wrong. | 17:25 |
*** vakkov_ has quit IRC | 17:26 | |
sunshavi | pali: btw: some people get it from cli see: https://wiki.archlinux.org/index.php/Isync#Step_.231:_Get_the_certificates | 17:26 |
Pali | and? | 17:26 |
Pali | s_client is used for TLS via TCP | 17:27 |
sunshavi | that pem file is in the format required bi certman? | 17:27 |
Pali | of course you must be able to download public server cert and CA from server | 17:27 |
Pali | sunshavi: PEM format is some standard format for storing pkcs stuff | 17:28 |
Pali | certificate is just some asn structure stored either binary or base64 | 17:28 |
*** vakkov has joined #maemo | 17:28 | |
Pali | but certman needs some special storage | 17:28 |
Pali | some indexes or what | 17:29 |
sunshavi | mmm. My assumption was the ca-certificates pkg is just some base-64 encoded files. and it should be the same for all distros, like a plain text file. Am I wrong? | 17:30 |
*** pozitron has joined #maemo | 17:45 | |
Pali | sunshavi: each TLS library needs certificates in own format | 17:46 |
Pali | NSS, OpenSSL, GnuTLS | 17:46 |
Pali | also Certman | 17:46 |
sunshavi | mmm, ok | 17:46 |
Pali | Qt4 too :-) | 17:46 |
sunshavi | they r statically linked then | 17:46 |
kerio | oh yeah about that | 17:47 |
kerio | we should probably update that crap | 17:47 |
kerio | and align with the mozilla trust store as a reasonable default | 17:47 |
Pali | I think that fedora has some project/prgram which take list of CA certificates and generate correct format for NSS, OpenSSL and GnuTLS | 17:47 |
kerio | can't we just copy debian | 17:48 |
kerio | and go from there | 17:48 |
Pali | NSS uses sqlite or db2 for stroring certs (depends on app) | 17:48 |
Pali | firefox uses db2 | 17:48 |
Pali | chromium sqlite3 | 17:48 |
Pali | but both firefox and chromium ses NSS | 17:49 |
bencoh | hmm... firefox doesnt rely on NSS for certs? | 17:49 |
kerio | chromium doesn't use NSS anymore | 17:49 |
kerio | they switched to boringssl | 17:49 |
Pali | kerio: really? | 17:49 |
Pali | and where they store user certs? | 17:49 |
kerio | i'm fairly sure they did | 17:49 |
kerio | i dunno | 17:49 |
Pali | $ readelf -d /usr/lib/chromium-browser/chromium-browser | grep -i nss | 17:50 |
Pali | 0x0000000000000001 (NEEDED) Shared library: [libnss3.so] | 17:50 |
Pali | 0x0000000000000001 (NEEDED) Shared library: [libnssutil3.so] | 17:50 |
Pali | $ chromium-browser --version | 17:50 |
Pali | Chromium 45.0.2454.85 Ubuntu 12.04 | 17:50 |
Pali | no, still uses NSS | 17:50 |
Pali | nothing boring | 17:51 |
kerio | https://code.google.com/p/chromium/issues/detail?id=393317 | 17:51 |
kerio | i don't know lolz | 17:51 |
Pali | $ readelf -d /usr/lib/chromium-browser/chromium-browser | grep -i ssl | 17:52 |
Pali | 0x0000000000000001 (NEEDED) Shared library: [libcrssl.so] | 17:52 |
Pali | $ readelf -d /usr/lib/chromium-browser/chromium-browser | grep -i crypto | 17:52 |
Pali | 0x0000000000000001 (NEEDED) Shared library: [libcrcrypto.so] | 17:52 |
Pali | 0x0000000000000001 (NEEDED) Shared library: [libk5crypto.so.3] | 17:52 |
*** BCMM has quit IRC | 17:52 | |
kerio | literally all the libraries | 17:53 |
Pali | /usr/lib/chromium-browser/libs/libcrcrypto.so | 17:53 |
kerio | i think libcrcrypto is boringssl's libcrypto | 17:53 |
Pali | looks like... | 17:53 |
Pali | but stil uses NSS | 17:53 |
Pali | maybe just for user cert storage? | 17:53 |
sunshavi | pali: then after openssl (0.9.8z) compilation on n900. I can not backport it to n800. cos finding the right certificates is going to be an issue | 17:53 |
kerio | Pali: probably as a backend | 17:53 |
kerio | chrome tends to use whatever the default for the OS is | 17:54 |
kerio | i guess that means libnss on linux | 17:54 |
bencoh | kerio: you're mixing two different "NSS" | 17:54 |
kerio | network software something, right | 17:55 |
kerio | the mozilla tls library | 17:55 |
bencoh | that one isn't particularly "default" on linux OSes | 17:56 |
bencoh | it's, well... used in mozilla products | 17:56 |
kerio | yeah but | 17:57 |
kerio | the mozilla trust store most definetely is | 17:58 |
kerio | what else are you going to use? oracle java's? | 17:58 |
bencoh | what's the "mozilla trust store" | 17:59 |
*** flo_lap has joined #maemo | 18:00 | |
kerio | https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/ | 18:00 |
bencoh | most linux distrib will ship with the certs included in the mozilla "root store" | 18:04 |
bencoh | but it doesn't mean they use libnss in any way | 18:04 |
bencoh | think of the ca-certificates debian package for instance | 18:04 |
bencoh | no libnss there, just a bunch of certs and a wrapper to openssl c_rehash | 18:06 |
kerio | we should do that thing | 18:08 |
bencoh | Pali: do you know where maemosec/certman is used? | 18:09 |
Pali | bencoh: wifi (eapd), modest, paritally microb (browser) and maybe other parts | 18:10 |
bencoh | does microb use it through libnss? | 18:11 |
Pali | microb links to certman libs | 18:11 |
Pali | so something is doing with it | 18:11 |
bencoh | hmm | 18:12 |
bencoh | well, I guess we'd need to read microb-engine source... | 18:13 |
bencoh | funny ldd on browser.launc doesnt give nss | 18:14 |
Pali | because browser does not use nss | 18:15 |
Pali | it is in lower layer in eal | 18:15 |
bencoh | hmm | 18:15 |
Pali | http://browser.garage.maemo.org/docs/browser_paper.html | 18:16 |
Pali | http://browser.garage.maemo.org/docs/eal/index.html | 18:16 |
bencoh | right, browserd is linked against it | 18:16 |
bencoh | browserd is linked against libnss3/libssl3 and openssl but not against maemosec or certman libs | 18:18 |
bencoh | browser is linked against maemosec/certman stuff and openssl, but no libnss3/libssl3 | 18:18 |
*** vakkov has quit IRC | 18:20 | |
freemangordon | Pali: certificates are in standart pem format, there is a cmdline tool to rehash them | 18:20 |
Pali | freemangordon: are you able to update certman package where are certs? | 18:21 |
freemangordon | just a sec | 18:21 |
freemangordon | Pali: https://github.com/community-ssu/maemo-security-certman/blob/master/debian/maemosec-certman-common-ca.postinst | 18:23 |
bencoh | at least that's openssl-"standard" | 18:24 |
freemangordon | Pali: according to https://github.com/community-ssu/maemo-security-certman/commit/0be038825a98dae2d80fd411a02cb4c86ed1b36a merlin1991 should be able to change certificates as well :) | 18:27 |
*** KotCzarny has joined #maemo | 18:27 | |
freemangordon | I already have too much on the plate, sorry | 18:27 |
freemangordon | also, I don;t remember how exactly it is done | 18:27 |
sunshavi | freemangordon: can i get those certs on n800 and just rehash them too?, for openssl use | 18:30 |
freemangordon | yep | 18:30 |
freemangordon | though the tricky part is that you should rename the certificate after rehashing and rehash again or somesuch | 18:31 |
freemangordon | can;t remember exactly | 18:31 |
sunshavi | great, well all of we r on Merlin hands then | 18:31 |
freemangordon | or, you should use cmcli to import the certificate | 18:31 |
*** vakkov has joined #maemo | 18:31 | |
freemangordon | sorry, it was 2 years ago I last played with this | 18:31 |
sunshavi | mmm, I have compiled mbsync aka isync for n800. But i can connect to gmail I think it is a certificate issue | 18:32 |
sunshavi | I would need to dig a little bit about the certificates subject | 18:33 |
sunshavi | s/can/can't/ | 18:33 |
freemangordon | yeah, cmcli is the way | 18:33 |
sunshavi | freemangordon: thanks | 18:33 |
*** zGrr has quit IRC | 18:34 | |
freemangordon | cmcli [-<T|t> <domain>[:<domain>...]] [-<c|p> <domain>] | 18:34 |
freemangordon | -a <cert-file [<cert-file>...]> -i <pkcs12-file> | 18:34 |
freemangordon | -a to add a certificate to the given domain | 18:34 |
bencoh | cmcli? is that the way you add certs in maemo? | 18:34 |
freemangordon | yes | 18:34 |
bencoh | thx :) | 18:34 |
freemangordon | add/remove/etc | 18:34 |
freemangordon | I guess we need "-i to install a PKCS#12 container or a single private key" | 18:35 |
sunshavi | no cmcli on n800, which pkg is part of cmcli? | 18:39 |
freemangordon | maemo-security-certman | 18:40 |
sunshavi | let's search | 18:40 |
sunshavi | freemangordon: "maemo-security-certman" needs to be backported to n800 | 18:49 |
sunshavi | at least we r in the right path :) | 18:50 |
freemangordon | sunshavi: could be, but I don;t have such device, feel free to backport it https://github.com/community-ssu/maemo-security-certman | 18:50 |
sunshavi | nice. thanks | 18:51 |
freemangordon | sunshavi: though i doubt there is no similar tool on n800 | 18:51 |
freemangordon | DocScrutinizer05: what is used to manage ssl certs on n800? | 18:52 |
bencoh | well, Pali said libcst was renamed to maemosec, so ... | 18:52 |
sunshavi | mmm, what would be the name?, where is that pkg right now? | 18:52 |
sunshavi | bencoh: libcst is a lib. So (no cli tools on lib pkg) | 18:53 |
freemangordon | sunshavi: what about maemosec-certman-tools | 18:53 |
*** esaym153 has quit IRC | 18:53 | |
bencoh | yeah, but it might lead you to some other tool | 18:54 |
sunshavi | let's search | 18:54 |
*** zGrr has joined #maemo | 18:54 | |
freemangordon | sunshavi: what is the output of "dpkg -l | grep cst" | 18:55 |
freemangordon | there shoule be some *tools* or *bin* package or somesuch | 18:56 |
sunshavi | --8<---------------cut here---------------start------------->8--- | 18:56 |
sunshavi | ii libcst 1.7.20 X509 certificate manager library, dummy pack | 18:56 |
sunshavi | ii libcst0 1.7.20 X509 certificate manager library | 18:56 |
sunshavi | --8<---------------cut here---------------end--------------->8--- | 18:56 |
sunshavi | 18:56 | |
sunshavi | freemangordon: no match also on "maemosec-certman-tools" | 18:58 |
freemangordon | sec | 18:58 |
*** KotCzarny has quit IRC | 18:59 | |
freemangordon | sunshavi: there is some closed source certificate manager | 18:59 |
freemangordon | check which packages depend on libcst | 18:59 |
*** flo_lap is now known as florian | 19:00 | |
freemangordon | sunshavi: http://maemo.org/development/documentation/manuals/3-x/howto_certificate_storage_bora/ | 19:01 |
freemangordon | or is it maemo4 | 19:02 |
freemangordon | ? | 19:02 |
*** KotCzarny has joined #maemo | 19:02 | |
DocScrutinizer05 | freemangordon: no idea | 19:02 |
DocScrutinizer05 | freemangordon: I think N8x0 had diablo | 19:05 |
DocScrutinizer05 | not bora | 19:05 |
KotCzarny | yes, chinook, then diablo | 19:06 |
bencoh | apt-cache rdepends | 19:07 |
freemangordon | it seems there is no cli | 19:08 |
freemangordon | but UI only | 19:08 |
sunshavi | --8<---------------cut here---------------start------------->8--- | 19:10 |
sunshavi | ~ $ apt-cache rdepends libcst | 19:10 |
sunshavi | libcst | 19:10 |
sunshavi | Reverse Depends: | 19:10 |
sunshavi | certs | 19:10 |
sunshavi | --8<---------------cut here---------------end--------------->8--- | 19:10 |
sunshavi | bencoh: thanks | 19:10 |
freemangordon | what is that package certs? | 19:10 |
sunshavi | debian is not my main distro | 19:10 |
freemangordon | sunshavi: dpkg -L certs | 19:11 |
freemangordon | will list all the files in the package | 19:11 |
sunshavi | --8<---------------cut here---------------start------------->8--- | 19:11 |
sunshavi | ~ $ apt-cache show certs | 19:11 |
sunshavi | Package: certs | 19:11 |
sunshavi | Status: install ok installed | 19:11 |
sunshavi | Priority: optional | 19:11 |
sunshavi | Section: misc | 19:11 |
sunshavi | Installed-Size: 88 | 19:11 |
sunshavi | Maintainer: Yauheni Kaliuta <yauheni.kaliuta@nokia.com> | 19:11 |
sunshavi | Architecture: armel | 19:11 |
sunshavi | Version: 1.6.2 | 19:11 |
sunshavi | Depends: libcst, gconf2 | 19:11 |
sunshavi | Conffiles: | 19:11 |
freemangordon | you'd better use pastebin or something | 19:11 |
sunshavi | /etc/gconf/schemas/certs.schemas 21cf43d5c2d485c6a77cda341ed2b8cf | 19:11 |
DocScrutinizer05 | please use pastebin!! | 19:11 |
sunshavi | Description: A set of X509 certificates | 19:12 |
sunshavi | This package contains a set of CA certificates, understood | 19:12 |
sunshavi | by libcst library. | 19:12 |
*** ChanServ sets mode: +o DocScrutinizer05 | 19:12 | |
sunshavi | --8<---------------cut here---------------end--------------->8--- | 19:12 |
bencoh | no tool? | 19:12 |
DocScrutinizer05 | sunshavi: please don't do that! | 19:12 |
sunshavi | pastebin? | 19:12 |
sunshavi | mmm | 19:12 |
bencoh | and yeah, pastebin if you need to paste long stuff | 19:12 |
sunshavi | ok, mo more lines | 19:12 |
DocScrutinizer05 | ~pastebin | 19:12 |
infobot | A "pastebin" is a web-based service where you should paste anything over 3 lines so you don't flood the channel. Here are links to a few: http://www.pastebin.com, http://pastebin.ca, http://channels.debian.net/paste, http://paste.lisp.org, http://bin.cakephp.org/; or install pastebinit with yum or aptitude. | 19:12 |
sunshavi | ok, let's digest pastebin | 19:13 |
freemangordon | sunshavi: yeah, as you risk doc to kick you :) | 19:13 |
*** ChanServ sets mode: -o DocScrutinizer05 | 19:13 | |
DocScrutinizer05 | also google pastebinit, cmdline tool very useful. python | 19:15 |
sunshavi | mmm, emacs has a pkg 4 pastebin I think | 19:16 |
sunshavi | now, creating a user on paste.lisp.org | 19:16 |
DocScrutinizer05 | https://packages.debian.org/search?keywords=pastebinit | 19:17 |
*** futpib has joined #maemo | 19:18 | |
DocScrutinizer05 | could somebody bored do a lil fancy and package https://packages.debian.org/sid/pastebinit for fremantle, then upload to repos? | 19:19 |
sunshavi | DocScrutinizer05: pastebinit, needs a user? | 19:22 |
KotCzarny | you can use pastebin.com or pastebin.ca | 19:22 |
DocScrutinizer05 | not up til last time I checked | 19:22 |
sunshavi | then let's try it | 19:22 |
KotCzarny | and try to paste 'raw' links (ie. after pasting to the site click 'raw' then paste the link) | 19:22 |
*** zGrr has quit IRC | 19:23 | |
sunshavi | http://pastebin.ca/3307567 | 19:24 |
sunshavi | is that ok? | 19:24 |
KotCzarny | yeah, though i prefer clicking raw on the left and pasting this form: http://pastebin.ca/raw/3307567 | 19:26 |
bencoh | hmm... this package doesnt contain much... | 19:26 |
sunshavi | KotCzarny: nice | 19:27 |
sunshavi | that was my first pastebin post :) | 19:27 |
DocScrutinizer05 | saturn:~ # head -n 100 /etc/services |pastebinit | 19:28 |
DocScrutinizer05 | http://susepaste.org/10297252 | 19:28 |
sunshavi | bencoh: the gtalk plugin from maemo is not working anymore cos cert has expired. :) | 19:31 |
freemangordon | sunshavi: you can import new certificate from control panel | 19:34 |
sunshavi | I should retry it then. Now I am connected by jabber to gtalk | 19:35 |
DocScrutinizer05 | jr@saturn:~/bin> ssh root@iron900 dpkg -l|head -n200|pastebinit | 19:36 |
DocScrutinizer05 | http://susepaste.org/31171592 | 19:36 |
sunshavi | then. what is the equivalent to this file on maemo n800 with os2008 /etc/ssl/certs/ca-certificates.crt? | 19:38 |
*** zGrr has joined #maemo | 19:41 | |
*** futpib_ has joined #maemo | 19:46 | |
*** eijk has joined #maemo | 19:48 | |
*** futpib has quit IRC | 19:50 | |
sunshavi | another question could be: I am getting this error "SSL error connecting imap.gmail.com (173.194.219.109:993): error:00000007:lib(0):func(0):BUF lib", but "openssl s_client -connect imap.gmail.com:993" works, which could be the issue? | 19:58 |
*** trumee has quit IRC | 20:05 | |
*** trumee has joined #maemo | 20:07 | |
*** zGrr has quit IRC | 20:11 | |
*** zGrr has joined #maemo | 20:28 | |
*** sparetire_ has joined #maemo | 20:34 | |
Sicelo | i have no sound out of N900 earpiece during a call now. if i enable loudspeaker that works, and also headset works. device has definitely not been dropped since the last known working state. any ideas? | 20:38 |
KotCzarny | reboot? | 20:39 |
Sicelo | i was about to say without reboot :) | 20:39 |
KotCzarny | :) | 20:39 |
KotCzarny | but it might have given up a ghost | 20:39 |
KotCzarny | earpieces die in cellphones just from use | 20:39 |
Sicelo | going to see if it's not just pulseaudio acting up | 20:42 |
*** geaaru has quit IRC | 20:42 | |
Sicelo | worked :) | 20:43 |
KotCzarny | :) | 20:43 |
KotCzarny | put an info about it on the wiki (or tmo) | 20:43 |
Sicelo | but, i seem to think there's 'bigger' problem somewhere .. i noticed this 'silent earpiece' on sunday, but later that day all was ok. and today i received a call and nothing could be heard. | 20:44 |
Sicelo | dunno really | 20:44 |
*** louisdk has joined #maemo | 20:55 | |
*** heroux has quit IRC | 21:16 | |
*** heroux has joined #maemo | 21:18 | |
Sicelo | KotCzarny: by the way, just hit 7 days uptime =) | 21:21 |
KotCzarny | um, new battery or new hack? | 21:28 |
Sicelo | i don't get you .. not 7 days on single charge | 21:30 |
Sicelo | i charge daily as this is my main phone, and it is in use for internet a lot | 21:30 |
*** mulin0 has joined #maemo | 21:32 | |
DocScrutinizer05 | IroN900:~# uptime | 21:32 |
DocScrutinizer05 | 20:32 10 Tage 23:43 an, 0 Benutzer, Durchschnittslast: 0,12, 0,05, 0,06 | 21:32 |
KotCzarny | ahm, mine's uptime is 19 days 4.47h | 21:32 |
Sicelo | i'd be happy with that .. my N900 has not gone higher than 12 days in a loooong time, due to silly issues that crop up (e.g. this silent earpiece thing) | 21:36 |
*** SpeedEvil has quit IRC | 21:37 | |
*** SpeedEvil has joined #maemo | 21:37 | |
KotCzarny | i dont know, mine is flashed with stock 1.3.1 and i didnt have any issues since 2009 | 21:37 |
Sicelo | most recent restart was due to my stupidity though, haha. had enabled swap on uSD, and 7 days later opened the cover to store a micro-sim temporarily (from the N9 when i gave it back) | 21:38 |
KotCzarny | for me its usually 'low battery', 'no, i won't charge you yet' | 21:39 |
*** mulin0 has quit IRC | 21:48 | |
*** Vajb has quit IRC | 21:49 | |
*** Vajb has joined #maemo | 21:51 | |
*** KotCzarny has quit IRC | 21:59 | |
*** KotCzarny has joined #maemo | 22:07 | |
*** realitygaps has quit IRC | 22:18 | |
*** darkschneider has quit IRC | 22:18 | |
*** darkschneider has joined #maemo | 22:19 | |
*** realitygaps has joined #maemo | 22:20 | |
*** Oksanaa has quit IRC | 22:33 | |
*** SpeedEvil has quit IRC | 22:34 | |
*** SpeedEvil has joined #maemo | 22:34 | |
*** trumee has quit IRC | 22:37 | |
*** florian has quit IRC | 22:38 | |
*** trumee has joined #maemo | 22:39 | |
*** pozitron has quit IRC | 22:54 | |
*** jonwil has joined #maemo | 23:02 | |
jonwil | hi | 23:03 |
*** zGrr has quit IRC | 23:07 | |
*** pozitrono has joined #maemo | 23:12 | |
*** eijk has quit IRC | 23:13 | |
*** Natch has quit IRC | 23:23 | |
*** zGrr has joined #maemo | 23:34 | |
jonwil | http://talk.maemo.org/showthread.php?p=1492921#post1492921 | 23:40 |
*** Natch has joined #maemo | 23:41 | |
*** LauRoman has quit IRC | 23:47 | |
Pali | jonwil: hi, I have problem with internet wifi indicator... this is in your RE package? | 23:48 |
Pali | connui-internet? | 23:49 |
jonwil | wifi indicator where? On status bar or on the select network dialog? | 23:49 |
Pali | on both | 23:50 |
Pali | I'm connected to wifi, but indicator is not visible in status area | 23:51 |
Pali | and when I'm open menu there is "internet connections" button with subtitle "not connected" | 23:51 |
Pali | but when I click on it I see button "disconnect <wifi network> | 23:51 |
Pali | and I'm really connected to wifi network | 23:52 |
Pali | internet is working | 23:52 |
jonwil | weird | 23:52 |
Pali | jonwil: both are parts of connui-internet package? | 23:52 |
jonwil | I think so | 23:52 |
Pali | looks like "sudo killall -9 icd2" can cause this state | 23:52 |
Pali | after that upstart (or dsme) start icd2 again | 23:53 |
Pali | and autoconnect cause scanning and connecting to preferred wifi network | 23:53 |
Pali | but indicator is not updated | 23:53 |
Pali | jonwil: can you look at it? | 23:54 |
jonwil | Its a clone of stock so it should do whatever stock does | 23:54 |
Pali | then it is bug :-) which is now possible to fix | 23:54 |
Pali | I'm not sure if this is present in stock version | 23:55 |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!