#archiveteam-bs 2012-06-04,Mon

↑back Search

Time Nickname Message
14:11 🔗 ersi Is jjonas the 'famous' jonas?
14:13 🔗 Schbirid do you mean if he has a brother? :}
14:14 🔗 ersi No, I'm asking if jonas == jonas.
14:45 🔗 SmileyG if I was him, I'd be asking "Famous for what?" ;)
14:46 🔗 ersi Indeed
15:22 🔗 SketchCow Yeah, REALLY need more info
18:29 🔗 SmileyG SketchCow: I erm. Ok ?
18:29 🔗 SmileyG :/
18:30 🔗 SmileyG btw. what is "SF" in relation to talking about IA.org?
18:30 🔗 SmileyG SourceForge? San Fan?
18:30 🔗 SmileyG fran*
18:31 🔗 underscor sanfran
18:32 🔗 SketchCow You know what's really aspy?
18:32 🔗 SketchCow I mean, really just cooking with aspbergers?
18:32 🔗 underscor mmm, I could go for some burgers right now
18:32 🔗 SketchCow When someone says "stop pasting bullshit in the channel"
18:32 🔗 SketchCow And you go "a-hilt! Actually I'm pasting it using output from a script! a hyuk!"
18:33 🔗 underscor lol
18:33 🔗 joepie91 lolol
18:33 🔗 SketchCow That makes me want to put you in 45 different unnumbered boxes and make you a geocache puzzle
18:33 🔗 underscor hahahahahahahah
18:33 🔗 underscor SketchCow has the most fantastic insults
18:33 🔗 joepie91 ^\
18:35 🔗 yipdw sounds tricky
18:35 🔗 yipdw I could use a hand with that
18:36 🔗 SmileyG SketchCow: w0w cool
18:36 🔗 SmileyG I wondered a few times if I'm aspy
18:37 🔗 SmileyG but in reality I'm not high enough I think :(
18:37 🔗 SmileyG I'm just broken.
18:37 🔗 SketchCow I have no idea if you're aspy
18:37 🔗 SketchCow And frankly, uninterested in really determining it
18:37 🔗 underscor did you guys hear the trololol guy died?
18:37 🔗 SketchCow But stop acting like it
18:40 🔗 SmileyG underscor: yeah :(
18:40 🔗 SmileyG SketchCow: its hard to stop being me :<
18:40 🔗 yipdw huh, if you google "bull feces" and hit I'm Feeling Lucky, you get to the Wikipedia article on bullshit
18:40 🔗 yipdw I guess that shouldn't be surprising
18:40 🔗 yipdw but I find it interesting
18:40 🔗 SmileyG hmmm
18:40 🔗 underscor I think "<SketchCow> That makes me want to put you in 45 different unnumbered boxes and make you a geocache puzzle" should be part of the topic too
18:40 🔗 SmileyG you mean google returns a relevent result o_O
18:41 🔗 * SmileyG remembers something he heard, thinks of his asperations and realises he doesn't mind if SketchCow wants to chop him up
18:42 🔗 SmileyG at least I get remembered!
18:43 🔗 ersi who's the aspy? only saw underscor pastin' stuff
18:43 🔗 ersi we all know underscor is special, but I'm guessing it's referring to someone else ;)
18:43 🔗 ersi underscor <3
18:43 🔗 SmileyG me.
18:43 🔗 SmileyG :D
18:44 🔗 SmileyG I'm just.... I dunno
18:44 🔗 SmileyG broken, in so many ways
18:44 🔗 SmileyG but if I don't talk about it, no one knows and thinks I'm trying to be something
18:44 🔗 SmileyG and If I do, they think I'm trying to make a point o_O
18:45 🔗 ersi bah, everyone was active just a moment ago :(
18:47 🔗 yipdw speaking of aspies, I have a question
18:47 🔗 yipdw I'm trying to get curl to recognize symlinked certs in /etc/pki/tls/certs as trusted
18:47 🔗 yipdw because I don't want to overwrite the system-provided bundle
18:47 🔗 yipdw is there any way to actually do that, or is curl hardcoded to just look at one file?
18:47 🔗 ersi gently ignoring the subject are we ;o
18:48 🔗 yipdw this is CentOS 6.2, btw
18:48 🔗 SmileyG hmmmm
18:48 🔗 yipdw ersi: no, this just seems like something an aspie would snort at and tell me the answer to
18:48 🔗 SmileyG centos....
18:48 🔗 SmileyG well yipdw if it IS hardcoded yo ucan just build a curl bin...
18:48 🔗 yipdw SmileyG: we're trying to stick to vendor-provided packages as much as possible
18:48 🔗 yipdw for maintenance purposes
18:49 🔗 ersi oh, I have SmileyG on ignore :D He's the aspie, isn't it? ^_^
18:49 🔗 yipdw I have a symlink from /etc/pki/tls/certs to the actual cert, which gets OpenSSL recognizing it as trusted
18:49 🔗 yipdw but it looks like curl doesn't use OpenSSL's verification routines, or something
18:49 🔗 SmileyG i guess it doesn't work with --certs
18:50 🔗 yipdw no, it works fine if I pass the certificate with --cacert
18:50 🔗 SmileyG right.....
18:50 🔗 yipdw but that's not what I want -- I want a way to recognize a certificate as trusted without mucking up the vendor-provided bundle
18:50 🔗 yipdw curl -v indicates that, yes, it is reading from /etc/pki/tls/certs/ca-bundle.crt
18:50 🔗 SmileyG :/
18:51 🔗 * SmileyG is too confused
18:52 🔗 yipdw well hm
18:53 🔗 SmileyG put the ca-bundle.crt in the "default" location?
18:53 🔗 yipdw it is in the default location
18:53 🔗 SmileyG but ignores it unless you specify it manually?
18:53 🔗 yipdw no, it uses it fine
18:54 🔗 yipdw however, the certificate I want to trust is not in the bundle, and that's intentional
18:54 🔗 SmileyG O.
18:54 🔗 yipdw because the bundle is provided by CentOS packages and I don't want to overwrite it
18:54 🔗 SmileyG Oh, you just want to overwrite "one" cert, which is in the bundle?
18:54 🔗 yipdw rather, I want curl to be able to use the same verification mechaisms that OpenSSL does
18:54 🔗 yipdw no, I do not want to overwrite anything
18:54 🔗 yipdw one second
18:54 🔗 SmileyG override*
18:55 🔗 yipdw https://gist.github.com/ae813158dff50b12668f
18:55 🔗 yipdw that's the problem
18:55 🔗 SmileyG this strangely sounds like something I had an argument about at work many months ago
18:55 🔗 yipdw I realize the CN is wrong, but for now that isn't the issue
18:56 🔗 SmileyG ?
18:56 🔗 SmileyG so you pass --cacert <cert to use>
18:56 🔗 yipdw no, I don't -- as I said, it works fine if I point it at the cert to use
18:56 🔗 SmileyG right
18:56 🔗 SmileyG by default it'll only use the bundle
18:56 🔗 SmileyG else you need to rebuild it iirc
18:56 🔗 SmileyG and then you can link in other certs to try.
18:57 🔗 SmileyG OR you pass --cacert
18:57 🔗 yipdw_ huh, my system droppde
18:57 🔗 yipdw_ anyway
18:58 🔗 SmileyG lol
18:58 🔗 yipdw_ yeah, I want curl to be able to figure out "oh, there's another cert I should use *in addition to* the bundle"
18:58 🔗 SmileyG rebuild it. :/
18:58 🔗 yipdw_ I'm reading curl's source code, though, and I'm not even sure it's possible
18:58 🔗 SmileyG o
18:58 🔗 yipdw_ ugh
18:58 🔗 yipdw_ I already said
18:58 🔗 yipdw_ rebuilding is not a useful alternative
18:59 🔗 yipdw_ nor would it make much difference if curl can't even do it without modifications to its verification code
19:00 🔗 ersi rebuild it just in case! It'll be faster if you recompile it!
19:00 🔗 ersi remember to add -funroll-loops
19:00 🔗 SmileyG +_+
19:00 🔗 underscor I read that as fun roll
19:02 🔗 SmileyG yipdw: surround it in a script which calls the default one, and if that fails calls it with --cacert? :<
19:02 🔗 SmileyG I don't understand what you think your going to do to be honest.
19:03 🔗 yipdw_ I figured it out
19:04 🔗 yipdw_ like most OpenSSL-using systems, curl accepts a --capath option
19:04 🔗 SmileyG oh
19:04 🔗 yipdw_ which can be configured in a config file
19:04 🔗 SmileyG hahaha
19:04 🔗 SmileyG so you want it to use BOTH?
19:04 🔗 SmileyG Gah, If I understood that i'd of told you
19:04 🔗 yipdw_ that is what I've been saying
19:04 🔗 SmileyG its the next option in the man file after --cacert
19:05 🔗 SmileyG man pages, they are the WIN!
19:05 🔗 yipdw_ FYI
19:05 🔗 yipdw_ http://www.myaspergerschild.com/2010/12/aspergers-students-and-poor-reading.html
19:07 🔗 yipdw_ I just realized, too, that the JVM (which is what I ultimately need to make work) uses its own fucking trust store
19:07 🔗 yipdw_ so while curl is a nice diagnostic there's an entirely different thing to set up
19:07 🔗 SmileyG :D
19:07 🔗 yipdw_ I hate Linux
19:08 🔗 yipdw_ and Windows
19:08 🔗 yipdw_ and everything
19:09 🔗 yipdw_ seriously, what the fuck is wrong with the idea of ONE trusted certificate store
19:09 🔗 yipdw_ is it too simple?
19:09 🔗 SmileyG see the reading stuff doesn't make sense for me
19:09 🔗 SmileyG i can look at words and figure out what they mean when I don't know the word :/
19:10 🔗 SmileyG I sometimes find I read things differently to other people
19:10 🔗 SmileyG But both ways will be correct, english is especially ambigious.
19:22 🔗 * ersi fun rolls underscor
21:18 🔗 SmileyG lolk
21:18 🔗 SmileyG well, wow.
21:18 🔗 SmileyG Geode is slow to unpack my packages :/

irclogger-viewer