Re: More fun with SSL certificates
On Tue, 2023-05-02 at 14:31 +0200, Peter Boy wrote: > > > > Am 02.05.2023 um 12:23 schrieb Patrick O'Callaghan > > : > > > > # httpd -S > > VirtualHost configuration: > > *:80 bree.org.uk (/etc/httpd/conf.d/bree.conf:1) > > *:443 is a NameVirtualHost > > default server bree.org.uk (/etc/httpd/conf.d/bree-le- > > ssl.conf:2) > > port 443 namevhost bree.org.uk (/etc/httpd/conf.d/bree-le- > > ssl.conf:2) > > port 443 namevhost bree.org.uk > > (/etc/httpd/conf.d/ssl.conf:56) > > ServerRoot: "/etc/httpd" > > Main DocumentRoot: "/var/www/html“ > > We often encounter issues with a configuration as you have. > > The problem is: > Your bree.org.uk address acts as a default server following apache’s > naming convention (it is the first file sorting the file names > alphabetically). At the same time a default vname server is > configured in the default ssl configuration file > (/etc/httpd/conf.d/ssl.conf:56). We often encounter problems in such > a situation, when 2 configurations are effective at the same time. > > You may try either of the following > > (a) define another named host with comes first in the alphabetical > order, e.g. adefault.conf You may configure it minimally so it shows > the default Fedora welcome page. It will only get used, if someone > addresses your server by IP. > > (b) comment out the default server at /etc/httpd/conf.d/ssl.conf:56 > You may comment out all the lines between > and provided you fully configure ssl in > /etc/httpd/conf.d/bree-le-ssl.conf, i.e. include all the > configuration option you find between both former directives of your > own, probably customised, way. Or you may just comment out those > directives leaving the remaining directives as > defaults. But this way sometimes results in conflict between the > different certificate locations. The details of this conflict are not > fully known yet. > > Anyway, it would be helpful for us it you try it and give feedback > about the results. > > Another possible issue is that port 80 is defined as 'main server' > only, and port 443 has defined named server only. A more clean > configuration is to define a port 80 server as a named server for > bree.org.uk as well, that just redirects to port 443. I've attempted to implement suggestion (a) but without success. Clearly there's something I'm not understanding. I copied the standard /etc/httpd/conf.d/welcome.conf to [...]/aaa-default.conf and edited it to include the line: ServerName default.bree.org.uk but still got the same error after restarting Apache. Changing that to 'bree.org.uk' had the same result. Perhaps you could explain in a little more detail. I also tried suggestion (b) by commenting out the lines, but again it made no difference. (I should note that I'm reluctant to edit the standard httpd.conf itself unless there's no alternative. Currently it's exactly as installed. I'm aware that it would be replaced on any update.) poc ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
> Am 03.05.2023 um 12:05 schrieb Patrick O'Callaghan : > > On Tue, 2023-05-02 at 14:31 +0200, Peter Boy wrote: >> >> >>> Am 02.05.2023 um 12:23 schrieb Patrick O'Callaghan >>> : >>> >>> # httpd -S >>> VirtualHost configuration: >>> *:80 bree.org.uk (/etc/httpd/conf.d/bree.conf:1) >>> *:443 is a NameVirtualHost >>>default server bree.org.uk (/etc/httpd/conf.d/bree-le- >>> ssl.conf:2) >>>port 443 namevhost bree.org.uk (/etc/httpd/conf.d/bree-le- >>> ssl.conf:2) >>>port 443 namevhost bree.org.uk >>> (/etc/httpd/conf.d/ssl.conf:56) >>> ServerRoot: "/etc/httpd" >>> Main DocumentRoot: "/var/www/html“ >> >> We often encounter issues with a configuration as you have. >> >> The problem is: >> Your bree.org.uk address acts as a default server following apache’s >> naming convention (it is the first file sorting the file names >> alphabetically). At the same time a default vname server is >> configured in the default ssl configuration file >> (/etc/httpd/conf.d/ssl.conf:56). We often encounter problems in such >> a situation, when 2 configurations are effective at the same time. >> >> You may try either of the following >> >> (a) define another named host with comes first in the alphabetical >> order, e.g. adefault.conf You may configure it minimally so it shows >> the default Fedora welcome page. It will only get used, if someone >> addresses your server by IP. >> >> (b) comment out the default server at /etc/httpd/conf.d/ssl.conf:56 >> You may comment out all the lines between >> and provided you fully configure ssl in >> /etc/httpd/conf.d/bree-le-ssl.conf, i.e. include all the >> configuration option you find between both former directives of your >> own, probably customised, way. Or you may just comment out those >> directives leaving the remaining directives as >> defaults. But this way sometimes results in conflict between the >> different certificate locations. The details of this conflict are not >> fully known yet. >> >> Anyway, it would be helpful for us it you try it and give feedback >> about the results. >> >> Another possible issue is that port 80 is defined as 'main server' >> only, and port 443 has defined named server only. A more clean >> configuration is to define a port 80 server as a named server for >> bree.org.uk as well, that just redirects to port 443. > > I've attempted to implement suggestion (a) but without success. Clearly > there's something I'm not understanding. I copied the standard > /etc/httpd/conf.d/welcome.conf to [...]/aaa-default.conf and edited it > to include the line: > > ServerName default.bree.org.uk > > but still got the same error after restarting Apache. Changing that to > 'bree.org.uk' had the same result. Perhaps you could explain in a > little more detail. Sorry, yes, I probably should have provided more details. Please, wait about 2-3 hours and I’ll publish a complete guide at https://docs.fedoraproject.org/en-US/fedora-server/ I’ll post the exact URL here when I’ve it published. > > I also tried suggestion (b) by commenting out the lines, > but again it made no difference. > > (I should note that I'm reluctant to edit the standard httpd.conf > itself unless there's no alternative. Currently it's exactly as > installed. I'm aware that it would be replaced on any update.) That’s a very good strategy! We know about that bug for some time but never managed to describe it in detail and to file a bug. We’ll do it now so it hopefully gets fixed soon. -- Peter Boy https://fedoraproject.org/wiki/User:Pboy p...@fedoraproject.org Timezone: CET (UTC+1) / CEST (UTC+2) Fedora Server Edition Working Group member Fedora docs team contributor Java developer and enthusiast ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
On Wed, 2023-05-03 at 13:31 +0200, Peter Boy wrote: > > > > Am 03.05.2023 um 12:05 schrieb Patrick O'Callaghan > > : > > > > On Tue, 2023-05-02 at 14:31 +0200, Peter Boy wrote: > > > > > > > > > > Am 02.05.2023 um 12:23 schrieb Patrick O'Callaghan > > > > : > > > > > > > > # httpd -S > > > > VirtualHost configuration: > > > > *:80 bree.org.uk > > > > (/etc/httpd/conf.d/bree.conf:1) > > > > *:443 is a NameVirtualHost > > > > default server bree.org.uk (/etc/httpd/conf.d/bree-le- > > > > ssl.conf:2) > > > > port 443 namevhost bree.org.uk (/etc/httpd/conf.d/bree- > > > > le- > > > > ssl.conf:2) > > > > port 443 namevhost bree.org.uk > > > > (/etc/httpd/conf.d/ssl.conf:56) > > > > ServerRoot: "/etc/httpd" > > > > Main DocumentRoot: "/var/www/html“ > > > > > > We often encounter issues with a configuration as you have. > > > > > > The problem is: > > > Your bree.org.uk address acts as a default server following > > > apache’s > > > naming convention (it is the first file sorting the file names > > > alphabetically). At the same time a default vname server is > > > configured in the default ssl configuration file > > > (/etc/httpd/conf.d/ssl.conf:56). We often encounter problems in > > > such > > > a situation, when 2 configurations are effective at the same > > > time. > > > > > > You may try either of the following > > > > > > (a) define another named host with comes first in the > > > alphabetical > > > order, e.g. adefault.conf You may configure it minimally so it > > > shows > > > the default Fedora welcome page. It will only get used, if > > > someone > > > addresses your server by IP. > > > > > > (b) comment out the default server at > > > /etc/httpd/conf.d/ssl.conf:56 > > > You may comment out all the lines between > > _default_:443> > > > and provided you fully configure ssl in > > > /etc/httpd/conf.d/bree-le-ssl.conf, i.e. include all the > > > configuration option you find between both former directives of > > > your > > > own, probably customised, way. Or you may just comment out those > > > directives leaving the remaining directives as > > > defaults. But this way sometimes results in conflict between the > > > different certificate locations. The details of this conflict are > > > not > > > fully known yet. > > > > > > Anyway, it would be helpful for us it you try it and give > > > feedback > > > about the results. > > > > > > Another possible issue is that port 80 is defined as 'main > > > server' > > > only, and port 443 has defined named server only. A more clean > > > configuration is to define a port 80 server as a named server for > > > bree.org.uk as well, that just redirects to port 443. > > > > I've attempted to implement suggestion (a) but without success. > > Clearly > > there's something I'm not understanding. I copied the standard > > /etc/httpd/conf.d/welcome.conf to [...]/aaa-default.conf and edited > > it > > to include the line: > > > > ServerName default.bree.org.uk > > > > but still got the same error after restarting Apache. Changing that > > to > > 'bree.org.uk' had the same result. Perhaps you could explain in a > > little more detail. > > Sorry, yes, I probably should have provided more details. Please, > wait about 2-3 hours and I’ll publish a complete guide at > https://docs.fedoraproject.org/en-US/fedora-server/ > > I’ll post the exact URL here when I’ve it published. > Thanks. I look forward to it. > > > > I also tried suggestion (b) by commenting out the > > lines, > > but again it made no difference. > > > > (I should note that I'm reluctant to edit the standard httpd.conf > > itself unless there's no alternative. Currently it's exactly as > > installed. I'm aware that it would be replaced on any update.) > > > That’s a very good strategy! We know about that bug for some time but > never managed to describe it in detail and to file a bug. We’ll do it > now so it hopefully gets fixed soon. Thanks again. poc ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[Solved, partially] Re: Post F38 upgrade/fresh install: printing text files via paps (a Postscript converter) prints raw postscript
On Tue, 2 May 2023, stan via users wrote: On Tue, 2 May 2023 11:52:47 -0400 Todd Zullinger wrote: stan via users wrote: But, why is this a bug? Stable versions are often at lower release versions for rpms than newer versions. The bug is that 0.8.0 includes a fix which 0.7.9 lacks. That context was only in the github link which Max posted. Until I read that, I had the same reaction. :) Caught! I didn't visit the link. :-) Until the fixed version is approved and pushed out, one way to continue using paps is to downgrade to the F37 version located here: https://dl.fedoraproject.org/pub/fedora/linux/releases/37/Everything/x86_64/os/Packages/p/paps-0.7.1-5.fc37.x86_64.rpm fyi, MP p...@brama.com ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More space needed on the / filesystem to upgrade from F37 to F38
On 5/2/23 20:56, Jeffrey Walton wrote: On Tue, May 2, 2023 at 4:13 AM Roberto Ragusa wrote: [...] My personal system was installed with FC3 in 2005 and then continuously upgraded up to currently FC36. (it has even got metamorphosis from i686 to x86_64, something that was considered impossible to do) That's impressive. Not the same hardware, of course. I am calling "system" the filesystem content, so all the functionality and settings. Hardware has changed a lot of times since then, of course. Regards. -- Roberto Ragusamail at robertoragusa.it ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
How to get system info
I get the system info shown at the bottom of this message by running kinfocenter -> Copy to Clipboard Is there some way to get this info from the console, for machines running remotely, typically connected via ssh? I am tired of running to a remote machine to run kinfocenter on it. System Info: Operating System: Fedora Linux 37 KDE Plasma Version: 5.27.4 KDE Frameworks Version: 5.105.0 Qt Version: 5.15.9 Kernel Version: 6.2.13-200.fc37.x86_64 (64-bit) Graphics Platform: X11 Processors: 8 × Intel® Core™ i7-4790K CPU @ 4.00GHz Memory: 15.5 GiB of RAM Graphics Processor: Mesa Intel® HD Graphics 4600 Manufacturer: ASUS Product Name: All Series -- Sincerely Jonathan Ryshpan Though a program be but three lines long, someday it will have to be maintained. -- The Tao of Programming ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
> Am 03.05.2023 um 13:37 schrieb Patrick O'Callaghan : > > On Wed, 2023-05-03 at 13:31 +0200, Peter Boy wrote: >> >> >>> Am 03.05.2023 um 12:05 schrieb Patrick O'Callaghan >>> : >>> >>> On Tue, 2023-05-02 at 14:31 +0200, Peter Boy wrote: > Am 02.05.2023 um 12:23 schrieb Patrick O'Callaghan > : > > # httpd -S > VirtualHost configuration: > *:80 bree.org.uk > (/etc/httpd/conf.d/bree.conf:1) > *:443 is a NameVirtualHost >default server bree.org.uk (/etc/httpd/conf.d/bree-le- > ssl.conf:2) >port 443 namevhost bree.org.uk (/etc/httpd/conf.d/bree- > le- > ssl.conf:2) >port 443 namevhost bree.org.uk > (/etc/httpd/conf.d/ssl.conf:56) > ServerRoot: "/etc/httpd" > Main DocumentRoot: "/var/www/html“ We often encounter issues with a configuration as you have. The problem is: Your bree.org.uk address acts as a default server following apache’s naming convention (it is the first file sorting the file names alphabetically). At the same time a default vname server is configured in the default ssl configuration file (/etc/httpd/conf.d/ssl.conf:56). We often encounter problems in such a situation, when 2 configurations are effective at the same time. You may try either of the following (a) define another named host with comes first in the alphabetical order, e.g. adefault.conf You may configure it minimally so it shows the default Fedora welcome page. It will only get used, if someone addresses your server by IP. (b) comment out the default server at /etc/httpd/conf.d/ssl.conf:56 You may comment out all the lines between >>> _default_:443> and provided you fully configure ssl in /etc/httpd/conf.d/bree-le-ssl.conf, i.e. include all the configuration option you find between both former directives of your own, probably customised, way. Or you may just comment out those directives leaving the remaining directives as defaults. But this way sometimes results in conflict between the different certificate locations. The details of this conflict are not fully known yet. Anyway, it would be helpful for us it you try it and give feedback about the results. Another possible issue is that port 80 is defined as 'main server' only, and port 443 has defined named server only. A more clean configuration is to define a port 80 server as a named server for bree.org.uk as well, that just redirects to port 443. >>> >>> I've attempted to implement suggestion (a) but without success. >>> Clearly >>> there's something I'm not understanding. I copied the standard >>> /etc/httpd/conf.d/welcome.conf to [...]/aaa-default.conf and edited >>> it >>> to include the line: >>> >>> ServerName default.bree.org.uk >>> >>> but still got the same error after restarting Apache. Changing that >>> to >>> 'bree.org.uk' had the same result. Perhaps you could explain in a >>> little more detail. >> >> Sorry, yes, I probably should have provided more details. Please, >> wait about 2-3 hours and I’ll publish a complete guide at >> https://docs.fedoraproject.org/en-US/fedora-server/ >> >> I’ll post the exact URL here when I’ve it published. >> > > Thanks. I look forward to it. > >>> >>> I also tried suggestion (b) by commenting out the >>> lines, >>> but again it made no difference. >>> >>> (I should note that I'm reluctant to edit the standard httpd.conf >>> itself unless there's no alternative. Currently it's exactly as >>> installed. I'm aware that it would be replaced on any update.) >> >> >> That’s a very good strategy! We know about that bug for some time but >> never managed to describe it in detail and to file a bug. We’ll do it >> now so it hopefully gets fixed soon. > > Thanks again. > The description is now at https://docs.stg.fedoraproject.org/en-US/fedora-server/services/httpd-basic-setup/ at the bottom, Troubleshooting Unfortunately, I had various issues with my test equipment and couldn’t test the steps so far. The next hours I’ve various Fedora team meetings. So I’ll continue later and tomorrow. If you stay with you name your configuration file bre-org-uk.conf you must use aaadefault.con (instead of vhost-aaadefault.conf as in the Fedora server docs. -- Peter Boy https://fedoraproject.org/wiki/User:Pboy p...@fedoraproject.org Timezone: CET (UTC+1) / CEST (UTC+2) Fedora Server Edition Working Group member Fedora docs team contributor Java developer and enthusiast ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://
Re: How to get system info
On Wed, May 3, 2023 at 1:08 PM Jonathan Ryshpan wrote: > I get the system info shown at the bottom of this message by running > kinfocenter -> Copy to Clipboard > Is there some way to get this info from the console, for machines running > remotely, typically connected via ssh? I am tired of running to a remote > machine to run kinfocenter on it. > > System Info: > Operating System: Fedora Linux 37 > KDE Plasma Version: 5.27.4 > KDE Frameworks Version: 5.105.0 > Qt Version: 5.15.9 > Kernel Version: 6.2.13-200.fc37.x86_64 (64-bit) > Graphics Platform: X11 > Processors: 8 × Intel® Core™ i7-4790K CPU @ 4.00GHz > Memory: 15.5 GiB of RAM > Graphics Processor: Mesa Intel® HD Graphics 4600 > Manufacturer: ASUS > Product Name: All Series > % neofetch --off --color_blocks off @ OS: Fedora release 38 (Thirty Eight) x86_64 Host: iMac14,2 1.0 Kernel: 6.2.14-300.fc38.x86_64 Uptime: 1 hour, 40 mins Packages: 3427 (rpm), 6 (flatpak) Shell: zsh 5.9 Resolution: 2560x1440 WM: Mutter WM Theme: Adwaita Theme: Adwaita [GTK2/3] Icons: Adwaita [GTK2/3] Terminal: /dev/pts/2 CPU: Intel i5-4570 (4) @ 3.600GHz GPU: NVIDIA GeForce GT 755M Mac Edition Memory: 1235MiB / 7868Mi -- George N. White III ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: Converting ext4 to btrfs
Thanks, Alex, for your reply. It seems that the safest path is to go for a fresh install of Fedora. Paul On Tue, May 2, 2023 at 11:07 AM Alex Gurenko via users wrote: > > I've forgot to add, that for compression, this, again, works only for newly > created/accesses files only, so after adding compression to fstab (and > reboot), you might want to run a defragmentation `sudo btrfs filesystem > defragment -r `. > > There was a recent article about that too: > https://fedoramagazine.org/working-with-btrfs-compression/ > > --- > Best regards, Alex > > > --- Original Message --- > On Tuesday, May 2nd, 2023 at 12:04, Alex Gurenko > wrote: > > > > There was an article back in the days of btrfs introduction that described > > the process: https://fedoramagazine.org/convert-your-filesystem-to-btrfs/ > > > > I've used it myself without any issues back then, I would assume it's still > > safe to do so now. > > > > I ran it like this for a few more releases without issues, until I decided > > to re-install fresh. > > > > The only downside would probably be (please keep me honest here), the > > defaults might not apply. > > > > There are few things that are done on a fresh install, which will probably > > won't apply on a converted system: > > > > - COW (copy-on-write) disabled for /var/lib/libvirt/images > > - probably on other directories? > > - can be done manually with `chattr -R +C ` but it only works for new > > files in said path, so you might need to move things out and back in > > > > - enable compression by making sure fstab includes `,compress=zstd:1` > > - based on your position on async discard [0], you might want to add > > `nodiscard` to fstab as well, but it seems to be okay with latest fixes > > kernels 6.2.13+ or 6.3.0, at least on a desktop > > > > [0] > > https://discussion.fedoraproject.org/t/btrfs-discard-storm-on-fedora/79997/28 > > > > --- > > Best regards, Alex > > > > > > > > > > --- Original Message --- > > On Tuesday, May 2nd, 2023 at 11:29, Paul Smith phh...@gmail.com wrote: > > > > > > > > > Dear All, > > > > > > I have always upgraded Fedora from the previously installed version. > > > Consequently, I still have ext4. To have btrfs, is it needed to do a > > > Fedora clean install? > > > > > > Thanks in advance, > > > > > > Paul > > > ___ > > > users mailing list -- users@lists.fedoraproject.org > > > To unsubscribe send an email to users-le...@lists.fedoraproject.org > > > Fedora Code of Conduct: > > > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > > List Archives: > > > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org > > > Do not reply to spam, report it: > > > https://pagure.io/fedora-infrastructure/new_issue > ___ > users mailing list -- users@lists.fedoraproject.org > To unsubscribe send an email to users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
On Wed, May 3, 2023 at 12:50 PM Peter Boy wrote: > [...] > The description is now at > https://docs.stg.fedoraproject.org/en-US/fedora-server/services/httpd-basic-setup/ > at the bottom, Troubleshooting > > Unfortunately, I had various issues with my test equipment and couldn’t test > the steps so far. The next hours I’ve various Fedora team meetings. So I’ll > continue later and tomorrow. > > If you stay with you name your configuration file bre-org-uk.conf you must > use aaadefault.con (instead of vhost-aaadefault.conf as in the Fedora server > docs. Re, the info about a fake server: As a workaround, configure a fake server that is never used but is just a decoy for httpd to associate with the default server configured in /etc/httpd/conf.d/ssl.conf... ServerName neverused.org IANA reserves example.com for this sort of thing. I strongly encourage you to use the reserved name. Jeff ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
On Wed, May 3, 2023 at 12:50 PM Peter Boy wrote:
> [...]
> The description is now at
> https://docs.stg.fedoraproject.org/en-US/fedora-server/services/httpd-basic-setup/
> at the bottom, Troubleshooting
>
> Unfortunately, I had various issues with my test equipment and couldn’t test
> the steps so far. The next hours I’ve various Fedora team meetings. So I’ll
> continue later and tomorrow.
>
> If you stay with you name your configuration file bre-org-uk.conf you must
> use aaadefault.con (instead of vhost-aaadefault.conf as in the Fedora server
> docs.
If OCSP stapling is going to be used, then you should also enable
mod_socache_shmcb:
a2enmod ssl
a2enmod socache_shmcb
a2enmod rewrite
and add the following to ssl.conf:
# OCSP Stapling
SSLUseStapling On
SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(8192)
Jeff
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
Jeffrey Walton wrote: > If OCSP stapling is going to be used, then you should also enable > mod_socache_shmcb: > > a2enmod ssl > a2enmod socache_shmcb > a2enmod rewrite a2enmod is a Debian thing, FWIW. -- Todd signature.asc Description: PGP signature ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
Once upon a time, Jeffrey Walton said:
> Re, the info about a fake server:
>
> As a workaround, configure a fake server that is never used but is
> just a decoy for httpd to associate with the default server
> configured in /etc/httpd/conf.d/ssl.conf...
>
> ServerName neverused.org
>
> IANA reserves example.com for this sort of thing. I strongly encourage
> you to use the reserved name.
example.com is not supposed to go in real systems, it's more for
documentation and such.
I'm not very familiar with Apache anymore, as I rarely touch have to
touch it, but with nginx, I do this on Internet-accessible servers:
server {
server_name "";
listen 80 default_server;
listen [::]:80 default_server;
return 404;
}
server {
server_name "" _;
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
ssl_reject_handshake on;
return 404;
}
--
Chris Adams
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
On Wed, May 3, 2023 at 2:25 PM Chris Adams wrote:
>
> Once upon a time, Jeffrey Walton said:
> > Re, the info about a fake server:
> >
> > As a workaround, configure a fake server that is never used but is
> > just a decoy for httpd to associate with the default server
> > configured in /etc/httpd/conf.d/ssl.conf...
> >
> > ServerName neverused.org
> >
> > IANA reserves example.com for this sort of thing. I strongly encourage
> > you to use the reserved name.
>
> example.com is not supposed to go in real systems, it's more for
> documentation and such.
>
> I'm not very familiar with Apache anymore, as I rarely touch have to
> touch it, but with nginx, I do this on Internet-accessible servers:
>
> server {
> server_name "";
> listen 80 default_server;
> listen [::]:80 default_server;
> return 404;
> }
> server {
> server_name "" _;
> listen 443 ssl http2 default_server;
> listen [::]:443 ssl http2 default_server;
> ssl_reject_handshake on;
> return 404;
> }
Would Apache accept example.local or example.localdomain with the
appropriate hosts change? This Q&A seems to indicate it is allowed.[1]
It also seems like it does not run afoul of Apache's ServerName
docs.[2]
My big concern is using a real domain name, like neverused.org. I
don't believe IANA has reserved it. I know example.com is reserved.[3]
The worst case for example.com is, something breaks locally on his
machine.
[1] https://stackoverflow.com/a/12980008
[2] https://httpd.apache.org/docs/2.4/mod/core.html#servername
[3] https://www.iana.org/domains/reserved
Jeff
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
On Wed, 2023-05-03 at 14:50 -0400, Jeffrey Walton wrote: > Would Apache accept example.local or example.localdomain with the > appropriate hosts change? I've never had Apache fail with any hostname as long as it resolves locally. And, yes, my tests make use of names that won't conflict with real world names. -- NB: All unexpected mail to my mailbox is automatically deleted. I will only get to see the messages that are posted to the list. The following system info data is generated fresh for each post: uname -rsvp Linux 6.2.14-100.fc36.x86_64 #1 SMP PREEMPT_DYNAMIC Mon May 1 00:54:35 UTC 2023 x86_64 ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: How to get system info
On Wed, 2023-05-03 at 13:50 -0300, George N. White III wrote: > Is there some way to get this info from the console, for machines > running remotely, typically connected via ssh? I am tired of running > to a remote machine to run kinfocenter on it. ... > % neofetch --off --color_blocks off @ Very nice. -- Thanks - Jonathan Ryshpan The Website you seek Cannot be located, but Countless more exist. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
On Wed, 2023-05-03 at 13:57 -0400, Jeffrey Walton wrote:
> On Wed, May 3, 2023 at 12:50 PM Peter Boy wrote:
> > [...]
> > The description is now at
> > https://docs.stg.fedoraproject.org/en-US/fedora-server/services/httpd-basic-setup/
> > at the bottom, Troubleshooting
> >
> > Unfortunately, I had various issues with my test equipment and
> > couldn’t test the steps so far. The next hours I’ve various Fedora
> > team meetings. So I’ll continue later and tomorrow.
> >
> > If you stay with you name your configuration file bre-org-uk.conf
> > you must use aaadefault.con (instead of vhost-aaadefault.conf as in
> > the Fedora server docs.
>
> If OCSP stapling is going to be used, then you should also enable
> mod_socache_shmcb:
>
> a2enmod ssl
> a2enmod socache_shmcb
> a2enmod rewrite
>
> and add the following to ssl.conf:
>
> # OCSP Stapling
> SSLUseStapling On
> SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(8192)
>
I had to look up what OCSP stapling is, but it doesn't seem to be
something I'll need.
poc
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
On Wed, 2023-05-03 at 18:49 +0200, Peter Boy wrote: > The description is now at > https://docs.stg.fedoraproject.org/en-US/fedora-server/services/httpd-basic-setup/ > > at the bottom, Troubleshooting > > Unfortunately, I had various issues with my test equipment and > couldn’t test the steps so far. The next hours I’ve various Fedora > team meetings. So I’ll continue later and tomorrow. > > If you stay with you name your configuration file bre-org-uk.conf you > must use aaadefault.con (instead of vhost-aaadefault.conf as in the > Fedora server docs. > I did that (copied the config from the web page into aaa-default.conf) and I still get the exact same error (both as is and with example.com). poc ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: F38: GNOME on XORG: Some apps have Windows title bar with Minimize/Maximize Buttons and "lower" function does not work
See also: In GNOME 44, window top bar doesn't work properly under Xorg https://www.reddit.com/r/gnome/comments/12ubuya/in_gnome_44_window_top_bar_doesnt_work_properly Dario Il giorno dom, 30/04/2023 alle 10.28 +0200, Dario Lesca ha scritto: > I have fill this bug: > https://bugzilla.redhat.com/show_bug.cgi?id=2192180 ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
On 5/2/23 05:31, Peter Boy wrote: Am 02.05.2023 um 12:23 schrieb Patrick O'Callaghan : # httpd -S VirtualHost configuration: *:80 bree.org.uk (/etc/httpd/conf.d/bree.conf:1) *:443 is a NameVirtualHost default server bree.org.uk (/etc/httpd/conf.d/bree-le-ssl.conf:2) port 443 namevhost bree.org.uk (/etc/httpd/conf.d/bree-le-ssl.conf:2) port 443 namevhost bree.org.uk (/etc/httpd/conf.d/ssl.conf:56) ServerRoot: "/etc/httpd" Main DocumentRoot: "/var/www/html“ We often encounter issues with a configuration as you have. The problem is: Your bree.org.uk address acts as a default server following apache’s naming convention (it is the first file sorting the file names alphabetically). At the same time a default vname server is configured in the default ssl configuration file (/etc/httpd/conf.d/ssl.conf:56). We often encounter problems in such a situation, when 2 configurations are effective at the same time. You may try either of the following (a) define another named host with comes first in the alphabetical order... Thank you Peter Boy. After only 29 years I finally understand why there is an apache vhost defined by 000-default.conf. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: More fun with SSL certificates
> Am 03.05.2023 um 23:56 schrieb Patrick O'Callaghan : > > On Wed, 2023-05-03 at 18:49 +0200, Peter Boy wrote: >> The description is now at >> https://docs.stg.fedoraproject.org/en-US/fedora-server/services/httpd-basic-setup/ >> >> at the bottom, Troubleshooting >> >> Unfortunately, I had various issues with my test equipment and >> couldn’t test the steps so far. The next hours I’ve various Fedora >> team meetings. So I’ll continue later and tomorrow. >> >> If you stay with you name your configuration file bre-org-uk.conf you >> must use aaadefault.con (instead of vhost-aaadefault.conf as in the >> Fedora server docs. >> > > I did that (copied the config from the web page into aaa-default.conf) > and I still get the exact same error (both as is and with example.com). I just now finished the various Fedora meetings and it is midnight in Europe. I will continue tomorrow at noon, complete and test. Sorry, my test equipment was a mess. -- Peter Boy https://fedoraproject.org/wiki/User:Pboy p...@fedoraproject.org Timezone: CET (UTC+1) / CEST (UTC+2) Fedora Server Edition Working Group member Fedora docs team contributor Java developer and enthusiast ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Thunderbird black at first launch with F38
Hi! Installed F38 about a week ago from scratch (wayland & GNOME). When I launch Thunderbird the first time at every session it starts as a black screen except for the title bar and then... I believe nothing happens but since I cannot see anything I close it. When I relaunch it everything works normally. Not really a life threatening situation but I was wondering if it was possible to fix this. Any idea? Thank you. Fred ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: Thunderbird black at first launch with F38
On 5/3/23 21:07, Frederic Muller wrote: Installed F38 about a week ago from scratch (wayland & GNOME). When I launch Thunderbird the first time at every session it starts as a black screen except for the title bar and then... I believe nothing happens but since I cannot see anything I close it. When I relaunch it everything works normally. Not really a life threatening situation but I was wondering if it was possible to fix this. Any idea? Are you running "Thunderbird" or "Thunderbird on Wayland"? If you don't have the second one, try installing it. "thunderbird-wayland" is the package. ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[solved] Re: Thunderbird black at first launch with F38
On 04/05/2023 12:48, Samuel Sieb wrote: On 5/3/23 21:07, Frederic Muller wrote: Installed F38 about a week ago from scratch (wayland & GNOME). When I launch Thunderbird the first time at every session it starts as a black screen except for the title bar and then... I believe nothing happens but since I cannot see anything I close it. When I relaunch it everything works normally. Not really a life threatening situation but I was wondering if it was possible to fix this. Any idea? Are you running "Thunderbird" or "Thunderbird on Wayland"? If you don't have the second one, try installing it. "thunderbird-wayland" is the package. ___ Yes! That was exactly the problem. Thank you so much. Fred ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
