I’ve temporarily fixed the SSL cert on tolaris.com by rolling back to an older still-valid cert that lacks some DNS names I don’t really need. In the next few months, I intend to upgrade this server and then configure Let’s Encrypt. I’ve had enough of manually dealing with SSL certs.
Thanks to everyone who warned me that my SSL certificate is broken. I’ll find a new issuer soon.
This happened because Google and Mozilla have distrusted my SSL issuer, StartSSL, for very good reasons. I was unaware of this action – StartSSL apparently took no effort to warn its customers – until the warning appeared in recent releases of their browsers.
Shame on you, Wosign and StartSSL.
I’m seeking a new TV. This is a hard problem because my use case is atypical (I can’t imagine why), and because the features that interest me are not in the comparison matrix of most sites.
My user stories:
- I want to watch Plex, Netflix, Youtube, and iPlayer.
- I want a 10-foot interface (sit on sofa, use remote control) for most watching.
- I want to Chromecast/Google Cast at any time. I want the TV to switch automatically from whatever it is doing once casting starts.
- I don’t care about broadcast / freeview. I will never use this.
- I want good sound, and am willing to buy a sound bar.
- I want to play Wii, and will soon upgrade to a Wii U.
If you are like me, you are notified of both email and syslog errors from your Linux hosts. If you aren’t, you don’t know what’s wrong with your computers. But if you are, you sometimes have to deal with noise, like this totally useless message:
From: Anacron <firstname.lastname@example.org>
Subject: Anacron job 'cron.daily' on host
gzip: stdin: file size changed while zipping
This is caused by a logrotate definition using “compress” without “delaycompress”. The error message is especially unhelpful because it doesn’t contain the filename causing the problem, due to the way logrotate invokes gzip as a pipeline.
It’s that time again! $happy $holidays, everyone! We have a special card just for you:
After years of fun with the “madlib”-style card, we tried something very different this year!
I use an advanced ping template with Cacti to monitor ICMP latency. Advanced Ping is based on a template originally found on the Cacti forums, but modified to look more like Smoke Ping. My thanks go to my colleague at Talia, Enno, for making it look beautiful as well as functional.
It’s that time again! Merry Christmas, everyone! We have a special card just for you:
(In case you miss it the first time, try reloading or clicking the button.)
One limitation of Mikrotik‘s DNS and DHCP implementations is that you cannot easily sync hostnames from DHCP requests into DNS. This is a standard feature of many routers. On OpenWRT routers (which use dnsmasq), if a PC called “pc1” requests an IP address, any other PC can then “ping pc1”. Fortunately, we can script this behaviour on Mikrotik.
APT, the package manager for Debian/Ubuntu has had the ability to use a proxy for many years. However, proxy support is tricky. Suppose you have a proxy at your work, but not at your home? When you take your laptop home, APT won’t be able to update.
Enter apt-find-proxy, my tool to do just that.