users September 2013

users@lists.fedoraproject.org

185 participants
243 discussions

Re: tls
by Patrick Dupre 09 Sep '13

09 Sep '13

HELLO, I may have make some progress. I can SSL/TLS on a local machine but it does not work on a remote. I get (filezilla): Disconnected from server Status: Resolving address of homere Status: Connecting to 193.49.194.196:21... Status: Connection attempt failed with "EHOSTUNREACH - No route to host". Error: Could not connect to server Status: Waiting to retry... Status: Resolving address of homere Status: Connecting to 193.49.194.196:21... Status: Connection attempt failed with "EHOSTUNREACH - No route to host". Error: Could not connect to server ssh works fine. However, I have a possible explaination. This machine is behind a firewall and to be able to make ssh, I add to ask to have the ssh port open. Probably, the ftp port is closed. Should I ask to have it open to use ssl/tls? Is it port 21? or 990? how can I check the port 22 is open while the other ones are closed on the firewall (I do not have admin access to this machine). Thank. =========================================================================== Patrick DUPRÉ | | email: pdupre(a)gmx.com Laboratoire de Physico-Chimie de l'Atmosphère | | Université du Littoral-Côte d'Opale | | Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44 189A, avenue Maurice Schumann | | 59140 Dunkerque, France ===========================================================================

3 2

Re: Fedora/Redhat and perfect forward secrecy
by Reindl Harald 09 Sep '13

09 Sep '13

Am 09.09.2013 12:55, schrieb Florian Weimer: > On 09/09/2013 11:58 AM, Andrew Haley wrote: >> On 09/07/2013 12:52 AM, Gregory Maxwell wrote: >>> Regardless, I think that argument would be an ignorant one: >>> Approximately no one runs non-ECDH PFS on the web: it's insanely slow >>> and it breaks clients. >> >> Hmm. Isn't non-ECDH PFS just straight integer (mod N) Diffie-Hellman? > > Yes, it is. > >> And that's what is insanely slow? > > I don't get it, either google "dhe versus ecdhe performance" http://vincent.bernat.im/en/blog/2011-ssl-perfect-forward-secrecy.html >> Let’s focus on the server part. Enabling DHE-RSA-AES128-SHA cipher suite >> hinders the performance of TLS handshakes by a factor of 3. Using >> ECDHE-RSA-AES128-SHA instead only adds an overhead of 27%. However, if we >> use the 64bit optimized version, the cost is only 15% is that enough to understand why nobody on this world is using DHE and so your "Current Fedora supports perfect forward secrecy just fine" is *far* away from the reality? it does not help much support forward secrecy in a way *nobody* else on this planet is supporting it and so you repsonse below is uneducated - period -------- Original-Nachricht -------- Betreff: Re: Fedora/Redhat and perfect forward secrecy Datum: Mon, 26 Aug 2013 11:07:29 +0200 Von: Florian Weimer <fweimer(a)redhat.com> An: Development discussions related to Fedora <devel(a)lists.fedoraproject.org> Kopie (CC): Reindl Harald <h.reindl(a)thelounge.net>, Mailing-List fedora-users <users(a)lists.fedoraproject.org> On 08/24/2013 11:38 AM, Reindl Harald wrote: > https://bugzilla.redhat.com/show_bug.cgi?id=319901 > > looks like Redhat based systems are the only remaining > which does not support EECDHE which is a shame these > days in context of PRISM and more and more Ciphers > are going to be unuseable (BEAST/CRIME weakness) Current Fedora supports perfect forward secrecy just fine. It's just that web server operators routinely refuse to offer it. (The situation is different with mail servers.) Operational benefits look rather marginal to me. It may discourage interested parties from requesting server private keys, but even that isn't assured.

1 0

Re: Fedora/Redhat and perfect forward secrecy
by Andrew Haley 09 Sep '13

09 Sep '13

On 09/07/2013 12:52 AM, Gregory Maxwell wrote: > Regardless, I think that argument would be an ignorant one: > Approximately no one runs non-ECDH PFS on the web: it's insanely slow > and it breaks clients. Hmm. Isn't non-ECDH PFS just straight integer (mod N) Diffie-Hellman? And that's what is insanely slow? Andrew.

1 0

Macbook touchpad 2/3 button madness
by Lonni J Friedman 08 Sep '13

08 Sep '13

I've got a Macbook Pro 10,1 (retina, 2012 vintage), on which I recently installed Fedora19. Most everything is working fine, except the touchpad in X. The problem that I'm having is when I attempt to use two or three fingers on the touchpad to simulate a right or middle (button) click of a mouse. Sometimes it works fine. Other times, it doesn't work at all (clicking with 2 or 3 fingers on the touchpad does nothing). Most frustrating is when the two & three finger clicks are inverted completely. In other words, I will put two fingers on the touchpad, click, and see behavior as if I had placed 3 fingers on the touchpad. Or I'll place three fingers on the touchpad, click, and see behavior as if I had placed just 2 fingers on the touchpad. I'm not able to find any obvious pattern or means of predicting which behavior I'm going to get at any given time. I'm not new to using a Macbook with Linux (I had a 2010 vintage macbook where this same multi-finger touch/click functionality worked perfectly 100% of the time with Fedora 14-16). I'm fairly confident that this isn't user error, and something is definitely either misconfigured or badly broken. There's nothing weird about my hand, I don't have unusually small or large fingers. I don't have any other part of my hand or any other part of my body (other hand, palm, etc) resting on the touchpad. I'm using XFCE, however I've verified that the same problem reproduces with other window managers, and also reproduces if I create a brand new user from scratch for testing purposes. I'm hoping that this is some bizarre synaptics driver quirk that can be worked around by tweaking some synclient settings, but I'm not sure which. I did notice that I seem to be defaulting to unusually high values for FingerLow & FingerHigh (70 & 75 respectively), as compared to other older versions of Fedora (25 & 30 respectively), but when I tried using those lower values, it didn't seem to make any difference. All the other values appear identical to older Fedora versions: ##### Parameter settings: LeftEdge = -3898 RightEdge = 4428 TopEdge = 434 BottomEdge = 6146 FingerLow = 70 FingerHigh = 75 MaxTapTime = 180 MaxTapMove = 535 MaxDoubleTapTime = 180 SingleTapTimeout = 180 ClickTime = 100 EmulateMidButtonTime = 0 EmulateTwoFingerMinZ = 283 EmulateTwoFingerMinW = 7 VertScrollDelta = 243 HorizScrollDelta = 243 VertEdgeScroll = 0 HorizEdgeScroll = 0 CornerCoasting = 0 VertTwoFingerScroll = 1 HorizTwoFingerScroll = 0 MinSpeed = 1 MaxSpeed = 1.75 AccelFactor = 0.0164447 TouchpadOff = 0 LockedDrags = 0 LockedDragTimeout = 5000 RTCornerButton = 0 RBCornerButton = 0 LTCornerButton = 0 LBCornerButton = 0 TapButton1 = 0 TapButton2 = 0 TapButton3 = 0 ClickFinger1 = 1 ClickFinger2 = 3 ClickFinger3 = 2 CircularScrolling = 0 CircScrollDelta = 0.1 CircScrollTrigger = 0 PalmDetect = 0 PalmMinWidth = 10 PalmMinZ = 200 CoastingSpeed = 20 CoastingFriction = 50 PressureMotionMinZ = 30 PressureMotionMaxZ = 160 PressureMotionMinFactor = 1 PressureMotionMaxFactor = 1 GrabEventDevice = 1 TapAndDragGesture = 1 AreaLeftEdge = 0 AreaRightEdge = 0 AreaTopEdge = 0 AreaBottomEdge = 0 HorizHysteresis = 40 VertHysteresis = 27 ClickPad = 1 RightButtonAreaLeft = 0 RightButtonAreaRight = 0 RightButtonAreaTop = 0 RightButtonAreaBottom = 0 MiddleButtonAreaLeft = 0 MiddleButtonAreaRight = 0 MiddleButtonAreaTop = 0 MiddleButtonAreaBottom = 0 ##### Any ideas & suggestions are appreciated. thanks!

1 0

Freedesktop.org vs. LibreOffice.org
by Jonathan Ryshpan 08 Sep '13

08 Sep '13

What is the connection, if any, between Freedesktop.org and LibreOffice.org? I have found a small bug in Libre Office Calc and have reported it to the Freedesktop bugzilla, where it is languishing. Should it have been submitted to LibreOffice instead? Would it be extremely rude to submit it to both places? Thanks - jon

3 2

convert wmv files
by g 08 Sep '13

08 Sep '13

greets, what is needed to convert .wmv file to mp4 or what ever? tia. -- peace out. in a world with out fences, who needs gates. sl6.3 linux tc.hago. g .

11 13

F19- Totem doesn't play a film to the end
by antonio montagnani 08 Sep '13

08 Sep '13

I recorded a bike-ride with a Go-Pro action camera, then I downloaded the Mp4 to my laptop: Totem starts playing it fine but after 5 minutes stops playing. Same file is played fine by VLC. Format is Mp4 Any idea?? -- Antonio M Skype: amontag52 Linux Fedora F19(Schroedinger's cat) on Acer 5720 http://lugsaronno.altervista.org http://www.campingmonterosa.com

1 0

fedora19 and samsung syncmaster 2493hm
by Walter Cazzola 08 Sep '13

08 Sep '13

Dear Fedora Expert, I've just reinstalled my old desktop with Fedora 19 and I've several troubles to fix right now. The most annoying is that it doesn't recognize my Samsung Syncmaster 2493HM with the result of a lower resolution (it should be "full hd" but it is more or less "HD ready") and a wrong dpi aspect ratio with the effect that image borders go out of the visible part of the screen. I've googled around but I didn't found something really usefull. Most are related to manually configure it in xorg configurration file but seems that I don't have xorg anymore. Do you know how to solve it? Thank you in advance Walter --

1 0

problems in installing Fedora 19
by Walter Cazzola 07 Sep '13

07 Sep '13

Dear Fedora experts, I was going to install the new Fedora 19 on a old desktop computer but it hangs after "starting Live Fedora" message. I have tried both x64 and x32 version without any luck. My computer is an Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz with 2 cores and probably 64bit. 4Gb of RAM and 1Tb of disk. The graphic card is a nVidia GeForce 9600 GT Right now the pc is running a old mandriva installation so the hw was supported at that time. Any suggestion? Many thanks in advance. Walter --

4 5

Re: tls
by Patrick Dupre 07 Sep '13

07 Sep '13

> ----- Original Message ----- > From: Mike Wright > Sent: 09/07/13 08:11 PM > To: Community support for Fedora users > Subject: Re: tls > > 09/07/2013 11:07 AM, Patrick Dupre wrote: > > HELLO, > > > > I may have make some progress. > > I can SSL/TLS on a local machine but it does not work on a remote. > > I get (filezilla): > > Disconnected from server > > Status: Resolving address of homere > > Status: Connecting to 193.49.194.196:21... > > Status: Connection attempt failed with "EHOSTUNREACH - No route to host". > > Error: Could not connect to server > > Status: Waiting to retry... > > Status: Resolving address of homere > > Status: Connecting to 193.49.194.196:21... > > Status: Connection attempt failed with "EHOSTUNREACH - No route to host". > > Error: Could not connect to server > > > > > > ssh works fine. However, I have a possible explaination. > > This machine is behind a firewall and to be able to make ssh, I > > add to ask to have the ssh port open. Probably, the ftp port is > > closed. Should I ask to have it open to use ssl/tls? > > Is it port 21? or 990? how can I check the port 22 is open > > while the other ones are closed on the firewall (I do not have > > admin access to this machine). > > > > Maybe you could use "tcpdump" in order to see which ports are used while > making a connection on the local machine. That may show which ports > need to be opened on the firewall. > Does it help? 21:10:02.902287 IP sophocle.60380 > Homere.ftp: Flags [S], seq 505285150, win 14600, options [mss 1460,sackOK,TS val 42253104 ecr 0,nop,wscale 7], length 0 21:10:02.988377 IP 193.51.250.170 > sophocle: ICMP host Homere unreachable - admin prohibited filter, length 36 21:10:02.988795 IP sophocle.55174 > ns1.bouygtel.net.domain: 415+ PTR? 170.250.51.193.in-addr.arpa. (45) 21:10:03.048518 IP ns1.bouygtel.net.domain > sophocle.55174: 415 NXDomain 0/1/0 (106) 21:10:07.995654 IP sophocle.60381 > Homere.ftp: Flags [S], seq 245048817, win 14600, options [mss 1460,sackOK,TS val 42258197 ecr 0,nop,wscale 7], length 0 21:10:08.998299 IP sophocle.60381 > Homere.ftp: Flags [S], seq 245048817, win 14600, options [mss 1460,sackOK,TS val 42259200 ecr 0,nop,wscale 7], length 0 21:10:09.068427 IP 193.51.250.170 > sophocle: ICMP host Homere unreachable - admin prohibited filter, length 36 > -- > users mailing list > users(a)lists.fedoraproject.org > To unsubscribe or change subscription options: > https://admin.fedoraproject.org/mailman/listinfo/users > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines > Have a question? Ask away: http://ask.fedoraproject.org =========================================================================== Patrick DUPRÉ | | email: pdupre(a)gmx.com Laboratoire de Physico-Chimie de l'Atmosphère | | Université du Littoral-Côte d'Opale | | Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44 189A, avenue Maurice Schumann | | 59140 Dunkerque, France ===========================================================================

2 1

← Newer
1
...
17
18
19
20
21
22
23
24
25
Older →

Jump to page: