[14:11] Is jjonas the 'famous' jonas? [14:13] do you mean if he has a brother? :} [14:14] No, I'm asking if jonas == jonas. [14:45] if I was him, I'd be asking "Famous for what?" ;) [14:46] Indeed [15:22] Yeah, REALLY need more info [18:29] SketchCow: I erm. Ok ? [18:29] :/ [18:30] btw. what is "SF" in relation to talking about IA.org? [18:30] SourceForge? San Fan? [18:30] fran* [18:31] sanfran [18:32] You know what's really aspy? [18:32] I mean, really just cooking with aspbergers? [18:32] mmm, I could go for some burgers right now [18:32] When someone says "stop pasting bullshit in the channel" [18:32] And you go "a-hilt! Actually I'm pasting it using output from a script! a hyuk!" [18:33] lol [18:33] lolol [18:33] That makes me want to put you in 45 different unnumbered boxes and make you a geocache puzzle [18:33] hahahahahahahah [18:33] SketchCow has the most fantastic insults [18:33] ^\ [18:35] sounds tricky [18:35] I could use a hand with that [18:36] SketchCow: w0w cool [18:36] I wondered a few times if I'm aspy [18:37] but in reality I'm not high enough I think :( [18:37] I'm just broken. [18:37] I have no idea if you're aspy [18:37] And frankly, uninterested in really determining it [18:37] did you guys hear the trololol guy died? [18:37] But stop acting like it [18:40] underscor: yeah :( [18:40] SketchCow: its hard to stop being me :< [18:40] huh, if you google "bull feces" and hit I'm Feeling Lucky, you get to the Wikipedia article on bullshit [18:40] I guess that shouldn't be surprising [18:40] but I find it interesting [18:40] hmmm [18:40] I think " That makes me want to put you in 45 different unnumbered boxes and make you a geocache puzzle" should be part of the topic too [18:40] you mean google returns a relevent result o_O [18:41] * SmileyG remembers something he heard, thinks of his asperations and realises he doesn't mind if SketchCow wants to chop him up [18:42] at least I get remembered! [18:43] who's the aspy? only saw underscor pastin' stuff [18:43] we all know underscor is special, but I'm guessing it's referring to someone else ;) [18:43] underscor <3 [18:43] me. [18:43] :D [18:44] I'm just.... I dunno [18:44] broken, in so many ways [18:44] but if I don't talk about it, no one knows and thinks I'm trying to be something [18:44] and If I do, they think I'm trying to make a point o_O [18:45] bah, everyone was active just a moment ago :( [18:47] speaking of aspies, I have a question [18:47] I'm trying to get curl to recognize symlinked certs in /etc/pki/tls/certs as trusted [18:47] because I don't want to overwrite the system-provided bundle [18:47] is there any way to actually do that, or is curl hardcoded to just look at one file? [18:47] gently ignoring the subject are we ;o [18:48] this is CentOS 6.2, btw [18:48] hmmmm [18:48] ersi: no, this just seems like something an aspie would snort at and tell me the answer to [18:48] centos.... [18:48] well yipdw if it IS hardcoded yo ucan just build a curl bin... [18:48] SmileyG: we're trying to stick to vendor-provided packages as much as possible [18:48] for maintenance purposes [18:49] oh, I have SmileyG on ignore :D He's the aspie, isn't it? ^_^ [18:49] I have a symlink from /etc/pki/tls/certs to the actual cert, which gets OpenSSL recognizing it as trusted [18:49] but it looks like curl doesn't use OpenSSL's verification routines, or something [18:49] i guess it doesn't work with --certs [18:50] no, it works fine if I pass the certificate with --cacert [18:50] right..... [18:50] but that's not what I want -- I want a way to recognize a certificate as trusted without mucking up the vendor-provided bundle [18:50] curl -v indicates that, yes, it is reading from /etc/pki/tls/certs/ca-bundle.crt [18:50] :/ [18:51] * SmileyG is too confused [18:52] well hm [18:53] put the ca-bundle.crt in the "default" location? [18:53] it is in the default location [18:53] but ignores it unless you specify it manually? [18:53] no, it uses it fine [18:54] however, the certificate I want to trust is not in the bundle, and that's intentional [18:54] O. [18:54] because the bundle is provided by CentOS packages and I don't want to overwrite it [18:54] Oh, you just want to overwrite "one" cert, which is in the bundle? [18:54] rather, I want curl to be able to use the same verification mechaisms that OpenSSL does [18:54] no, I do not want to overwrite anything [18:54] one second [18:54] override* [18:55] https://gist.github.com/ae813158dff50b12668f [18:55] that's the problem [18:55] this strangely sounds like something I had an argument about at work many months ago [18:55] I realize the CN is wrong, but for now that isn't the issue [18:56] ? [18:56] so you pass --cacert [18:56] no, I don't -- as I said, it works fine if I point it at the cert to use [18:56] right [18:56] by default it'll only use the bundle [18:56] else you need to rebuild it iirc [18:56] and then you can link in other certs to try. [18:57] OR you pass --cacert [18:57] huh, my system droppde [18:57] anyway [18:58] lol [18:58] yeah, I want curl to be able to figure out "oh, there's another cert I should use *in addition to* the bundle" [18:58] rebuild it. :/ [18:58] I'm reading curl's source code, though, and I'm not even sure it's possible [18:58] o [18:58] ugh [18:58] I already said [18:58] rebuilding is not a useful alternative [18:59] nor would it make much difference if curl can't even do it without modifications to its verification code [19:00] rebuild it just in case! It'll be faster if you recompile it! [19:00] remember to add -funroll-loops [19:00] +_+ [19:00] I read that as fun roll [19:02] yipdw: surround it in a script which calls the default one, and if that fails calls it with --cacert? :< [19:02] I don't understand what you think your going to do to be honest. [19:03] I figured it out [19:04] like most OpenSSL-using systems, curl accepts a --capath option [19:04] oh [19:04] which can be configured in a config file [19:04] hahaha [19:04] so you want it to use BOTH? [19:04] Gah, If I understood that i'd of told you [19:04] that is what I've been saying [19:04] its the next option in the man file after --cacert [19:05] man pages, they are the WIN! [19:05] FYI [19:05] http://www.myaspergerschild.com/2010/12/aspergers-students-and-poor-reading.html [19:07] I just realized, too, that the JVM (which is what I ultimately need to make work) uses its own fucking trust store [19:07] so while curl is a nice diagnostic there's an entirely different thing to set up [19:07] :D [19:07] I hate Linux [19:08] and Windows [19:08] and everything [19:09] seriously, what the fuck is wrong with the idea of ONE trusted certificate store [19:09] is it too simple? [19:09] see the reading stuff doesn't make sense for me [19:09] i can look at words and figure out what they mean when I don't know the word :/ [19:10] I sometimes find I read things differently to other people [19:10] But both ways will be correct, english is especially ambigious. [19:22] * ersi fun rolls underscor [21:18] lolk [21:18] well, wow. [21:18] Geode is slow to unpack my packages :/