Time |
Nickname |
Message |
14:11
🔗
|
ersi |
Is jjonas the 'famous' jonas? |
14:13
🔗
|
Schbirid |
do you mean if he has a brother? :} |
14:14
🔗
|
ersi |
No, I'm asking if jonas == jonas. |
14:45
🔗
|
SmileyG |
if I was him, I'd be asking "Famous for what?" ;) |
14:46
🔗
|
ersi |
Indeed |
15:22
🔗
|
SketchCow |
Yeah, REALLY need more info |
18:29
🔗
|
SmileyG |
SketchCow: I erm. Ok ? |
18:29
🔗
|
SmileyG |
:/ |
18:30
🔗
|
SmileyG |
btw. what is "SF" in relation to talking about IA.org? |
18:30
🔗
|
SmileyG |
SourceForge? San Fan? |
18:30
🔗
|
SmileyG |
fran* |
18:31
🔗
|
underscor |
sanfran |
18:32
🔗
|
SketchCow |
You know what's really aspy? |
18:32
🔗
|
SketchCow |
I mean, really just cooking with aspbergers? |
18:32
🔗
|
underscor |
mmm, I could go for some burgers right now |
18:32
🔗
|
SketchCow |
When someone says "stop pasting bullshit in the channel" |
18:32
🔗
|
SketchCow |
And you go "a-hilt! Actually I'm pasting it using output from a script! a hyuk!" |
18:33
🔗
|
underscor |
lol |
18:33
🔗
|
joepie91 |
lolol |
18:33
🔗
|
SketchCow |
That makes me want to put you in 45 different unnumbered boxes and make you a geocache puzzle |
18:33
🔗
|
underscor |
hahahahahahahah |
18:33
🔗
|
underscor |
SketchCow has the most fantastic insults |
18:33
🔗
|
joepie91 |
^\ |
18:35
🔗
|
yipdw |
sounds tricky |
18:35
🔗
|
yipdw |
I could use a hand with that |
18:36
🔗
|
SmileyG |
SketchCow: w0w cool |
18:36
🔗
|
SmileyG |
I wondered a few times if I'm aspy |
18:37
🔗
|
SmileyG |
but in reality I'm not high enough I think :( |
18:37
🔗
|
SmileyG |
I'm just broken. |
18:37
🔗
|
SketchCow |
I have no idea if you're aspy |
18:37
🔗
|
SketchCow |
And frankly, uninterested in really determining it |
18:37
🔗
|
underscor |
did you guys hear the trololol guy died? |
18:37
🔗
|
SketchCow |
But stop acting like it |
18:40
🔗
|
SmileyG |
underscor: yeah :( |
18:40
🔗
|
SmileyG |
SketchCow: its hard to stop being me :< |
18:40
🔗
|
yipdw |
huh, if you google "bull feces" and hit I'm Feeling Lucky, you get to the Wikipedia article on bullshit |
18:40
🔗
|
yipdw |
I guess that shouldn't be surprising |
18:40
🔗
|
yipdw |
but I find it interesting |
18:40
🔗
|
SmileyG |
hmmm |
18:40
🔗
|
underscor |
I think "<SketchCow> That makes me want to put you in 45 different unnumbered boxes and make you a geocache puzzle" should be part of the topic too |
18:40
🔗
|
SmileyG |
you mean google returns a relevent result o_O |
18:41
🔗
|
* |
SmileyG remembers something he heard, thinks of his asperations and realises he doesn't mind if SketchCow wants to chop him up |
18:42
🔗
|
SmileyG |
at least I get remembered! |
18:43
🔗
|
ersi |
who's the aspy? only saw underscor pastin' stuff |
18:43
🔗
|
ersi |
we all know underscor is special, but I'm guessing it's referring to someone else ;) |
18:43
🔗
|
ersi |
underscor <3 |
18:43
🔗
|
SmileyG |
me. |
18:43
🔗
|
SmileyG |
:D |
18:44
🔗
|
SmileyG |
I'm just.... I dunno |
18:44
🔗
|
SmileyG |
broken, in so many ways |
18:44
🔗
|
SmileyG |
but if I don't talk about it, no one knows and thinks I'm trying to be something |
18:44
🔗
|
SmileyG |
and If I do, they think I'm trying to make a point o_O |
18:45
🔗
|
ersi |
bah, everyone was active just a moment ago :( |
18:47
🔗
|
yipdw |
speaking of aspies, I have a question |
18:47
🔗
|
yipdw |
I'm trying to get curl to recognize symlinked certs in /etc/pki/tls/certs as trusted |
18:47
🔗
|
yipdw |
because I don't want to overwrite the system-provided bundle |
18:47
🔗
|
yipdw |
is there any way to actually do that, or is curl hardcoded to just look at one file? |
18:47
🔗
|
ersi |
gently ignoring the subject are we ;o |
18:48
🔗
|
yipdw |
this is CentOS 6.2, btw |
18:48
🔗
|
SmileyG |
hmmmm |
18:48
🔗
|
yipdw |
ersi: no, this just seems like something an aspie would snort at and tell me the answer to |
18:48
🔗
|
SmileyG |
centos.... |
18:48
🔗
|
SmileyG |
well yipdw if it IS hardcoded yo ucan just build a curl bin... |
18:48
🔗
|
yipdw |
SmileyG: we're trying to stick to vendor-provided packages as much as possible |
18:48
🔗
|
yipdw |
for maintenance purposes |
18:49
🔗
|
ersi |
oh, I have SmileyG on ignore :D He's the aspie, isn't it? ^_^ |
18:49
🔗
|
yipdw |
I have a symlink from /etc/pki/tls/certs to the actual cert, which gets OpenSSL recognizing it as trusted |
18:49
🔗
|
yipdw |
but it looks like curl doesn't use OpenSSL's verification routines, or something |
18:49
🔗
|
SmileyG |
i guess it doesn't work with --certs |
18:50
🔗
|
yipdw |
no, it works fine if I pass the certificate with --cacert |
18:50
🔗
|
SmileyG |
right..... |
18:50
🔗
|
yipdw |
but that's not what I want -- I want a way to recognize a certificate as trusted without mucking up the vendor-provided bundle |
18:50
🔗
|
yipdw |
curl -v indicates that, yes, it is reading from /etc/pki/tls/certs/ca-bundle.crt |
18:50
🔗
|
SmileyG |
:/ |
18:51
🔗
|
* |
SmileyG is too confused |
18:52
🔗
|
yipdw |
well hm |
18:53
🔗
|
SmileyG |
put the ca-bundle.crt in the "default" location? |
18:53
🔗
|
yipdw |
it is in the default location |
18:53
🔗
|
SmileyG |
but ignores it unless you specify it manually? |
18:53
🔗
|
yipdw |
no, it uses it fine |
18:54
🔗
|
yipdw |
however, the certificate I want to trust is not in the bundle, and that's intentional |
18:54
🔗
|
SmileyG |
O. |
18:54
🔗
|
yipdw |
because the bundle is provided by CentOS packages and I don't want to overwrite it |
18:54
🔗
|
SmileyG |
Oh, you just want to overwrite "one" cert, which is in the bundle? |
18:54
🔗
|
yipdw |
rather, I want curl to be able to use the same verification mechaisms that OpenSSL does |
18:54
🔗
|
yipdw |
no, I do not want to overwrite anything |
18:54
🔗
|
yipdw |
one second |
18:54
🔗
|
SmileyG |
override* |
18:55
🔗
|
yipdw |
https://gist.github.com/ae813158dff50b12668f |
18:55
🔗
|
yipdw |
that's the problem |
18:55
🔗
|
SmileyG |
this strangely sounds like something I had an argument about at work many months ago |
18:55
🔗
|
yipdw |
I realize the CN is wrong, but for now that isn't the issue |
18:56
🔗
|
SmileyG |
? |
18:56
🔗
|
SmileyG |
so you pass --cacert <cert to use> |
18:56
🔗
|
yipdw |
no, I don't -- as I said, it works fine if I point it at the cert to use |
18:56
🔗
|
SmileyG |
right |
18:56
🔗
|
SmileyG |
by default it'll only use the bundle |
18:56
🔗
|
SmileyG |
else you need to rebuild it iirc |
18:56
🔗
|
SmileyG |
and then you can link in other certs to try. |
18:57
🔗
|
SmileyG |
OR you pass --cacert |
18:57
🔗
|
yipdw_ |
huh, my system droppde |
18:57
🔗
|
yipdw_ |
anyway |
18:58
🔗
|
SmileyG |
lol |
18:58
🔗
|
yipdw_ |
yeah, I want curl to be able to figure out "oh, there's another cert I should use *in addition to* the bundle" |
18:58
🔗
|
SmileyG |
rebuild it. :/ |
18:58
🔗
|
yipdw_ |
I'm reading curl's source code, though, and I'm not even sure it's possible |
18:58
🔗
|
SmileyG |
o |
18:58
🔗
|
yipdw_ |
ugh |
18:58
🔗
|
yipdw_ |
I already said |
18:58
🔗
|
yipdw_ |
rebuilding is not a useful alternative |
18:59
🔗
|
yipdw_ |
nor would it make much difference if curl can't even do it without modifications to its verification code |
19:00
🔗
|
ersi |
rebuild it just in case! It'll be faster if you recompile it! |
19:00
🔗
|
ersi |
remember to add -funroll-loops |
19:00
🔗
|
SmileyG |
+_+ |
19:00
🔗
|
underscor |
I read that as fun roll |
19:02
🔗
|
SmileyG |
yipdw: surround it in a script which calls the default one, and if that fails calls it with --cacert? :< |
19:02
🔗
|
SmileyG |
I don't understand what you think your going to do to be honest. |
19:03
🔗
|
yipdw_ |
I figured it out |
19:04
🔗
|
yipdw_ |
like most OpenSSL-using systems, curl accepts a --capath option |
19:04
🔗
|
SmileyG |
oh |
19:04
🔗
|
yipdw_ |
which can be configured in a config file |
19:04
🔗
|
SmileyG |
hahaha |
19:04
🔗
|
SmileyG |
so you want it to use BOTH? |
19:04
🔗
|
SmileyG |
Gah, If I understood that i'd of told you |
19:04
🔗
|
yipdw_ |
that is what I've been saying |
19:04
🔗
|
SmileyG |
its the next option in the man file after --cacert |
19:05
🔗
|
SmileyG |
man pages, they are the WIN! |
19:05
🔗
|
yipdw_ |
FYI |
19:05
🔗
|
yipdw_ |
http://www.myaspergerschild.com/2010/12/aspergers-students-and-poor-reading.html |
19:07
🔗
|
yipdw_ |
I just realized, too, that the JVM (which is what I ultimately need to make work) uses its own fucking trust store |
19:07
🔗
|
yipdw_ |
so while curl is a nice diagnostic there's an entirely different thing to set up |
19:07
🔗
|
SmileyG |
:D |
19:07
🔗
|
yipdw_ |
I hate Linux |
19:08
🔗
|
yipdw_ |
and Windows |
19:08
🔗
|
yipdw_ |
and everything |
19:09
🔗
|
yipdw_ |
seriously, what the fuck is wrong with the idea of ONE trusted certificate store |
19:09
🔗
|
yipdw_ |
is it too simple? |
19:09
🔗
|
SmileyG |
see the reading stuff doesn't make sense for me |
19:09
🔗
|
SmileyG |
i can look at words and figure out what they mean when I don't know the word :/ |
19:10
🔗
|
SmileyG |
I sometimes find I read things differently to other people |
19:10
🔗
|
SmileyG |
But both ways will be correct, english is especially ambigious. |
19:22
🔗
|
* |
ersi fun rolls underscor |
21:18
🔗
|
SmileyG |
lolk |
21:18
🔗
|
SmileyG |
well, wow. |
21:18
🔗
|
SmileyG |
Geode is slow to unpack my packages :/ |