Re: [tor-relays] Congrats to Nullvoid

[Santiago R.R.]

El 04/09/18 a las 17:12, nusenu escribió:
> 
> 
> Paul:
> > 
> > For me running several FreeBSD relays this is a great hint!
> > 
> > Maybe it will find its way to
> > https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/FreeBSD
> > 
> 
> http replaced with https
> https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/FreeBSD?sfp_email=_mail==diff=6_version=5

Trying that, but I am currently getting this:

 % sudo pkg update
Updating FreeBSDlatest repository catalogue...
pkg: Repository FreeBSDlatest load error: access repo 
file(/var/db/pkg/repo-FreeBSDlatest.sqlite) failed: No such file or directory
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt 
Authority X3
34405378632:error:14090086:SSL routines:ssl3_get_server_certificate:certificate 
verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt 
Authority X3
34405378632:error:14090086:SSL routines:ssl3_get_server_certificate:certificate 
verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt 
Authority X3
34405378632:error:14090086:SSL routines:ssl3_get_server_certificate:certificate 
verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
pkg: https://pkg.FreeBSD.org/FreeBSD:11:amd64/latest/meta.txz: Authentication 
error
repository FreeBSDlatest has no meta file, using default settings
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt 
Authority X3
34405378632:error:14090086:SSL routines:ssl3_get_server_certificate:certificate 
verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt 
Authority X3
34405378632:error:14090086:SSL routines:ssl3_get_server_certificate:certificate 
verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
Certificate verification failed for /C=US/O=Let's Encrypt/CN=Let's Encrypt 
Authority X3
34405378632:error:14090086:SSL routines:ssl3_get_server_certificate:certificate 
verify failed:/usr/src/crypto/openssl/ssl/s3_clnt.c:1269:
pkg: https://pkg.FreeBSD.org/FreeBSD:11:amd64/latest/packagesite.txz: 
Authentication error
Unable to update repository FreeBSDlatest
Error updating repositories!

Is there something missing I am missing?

 -- Santiago


signature.asc
Description: PGP signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Congrats to Nullvoid

[nusenu]

Paul:
> 
> For me running several FreeBSD relays this is a great hint!
> 
> Maybe it will find its way to
> https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/FreeBSD
> 

http replaced with https
https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/FreeBSD?sfp_email=_mail==diff=6_version=5

-- 
https://twitter.com/nusenu_
https://mastodon.social/@nusenu



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Congrats to Nullvoid

[Paul]

For me running several FreeBSD relays this is a great hint!

Maybe it will find its way to
https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/FreeBSD


> Not a problem with FreeBSD.
> 
> Switch over to https and latest...
> 
> /etc/pkg/FreeBSD.conf:
> 
>   url: "pkg+https://pkg.FreeBSD.org/${ABI}/latest;,
> 
> and run 'pkg upgrade' .
> 

Could you please explain a bit more on this - what exactly to do ?

> If it's a shared box, you probably also want
> devcpu-data,  and optionally cpupdate.

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Congrats to Nullvoid

[grarpamp]

>> devcpu-data

> Luckily, the instances aren’t running on shared boxes, each user runs on
> their own XenServer HVM instance, so they have dedicated control of their
> own instance.

Seem to recall, as with most re Spectre Meltdown FPU Etc,
the Xen fixes require pairing of microcode and kernel support.
Didn't look at it much so DYOR as needed.

Regardless, unless local testing indicates otherwise,
running any CPU / hw without latest ucode firmware
could be foolhardy.

As is continuing to clamor for, publicly support, and buy,
anything that isn't...

#OpenFabs , #OpenHW , #OpenSW , #OpenDev , #OpenBiz

That's another topic elsewhere.


>>  url: "pkg+https://pkg.FreeBSD.org/${ABI}/latest;

> Egads. I had no idea HTTPS wasn't the default for pkg.

To bootstrap with that you'll have to install ca_root_nss manually.
There's way to do that and other bits automagically over TLS,
but it takes much setup, isn't ideal, nor free of various trust.


Some opensource OS's still resist even the most basic
of things privacy / integrity / traceability / reproducible,
for no unsolvable reasons, for years.

Ditto topic.


At least people are starting to progress both topics now.
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Congrats to Nullvoid

[Michael Brodhead]

Egads. I had no idea HTTPS wasn't the default for pkg. I've just updated my 
relays to fix that.

--mkb

> On Aug 26, 2018, at 10:43 AM, grarpamp  > wrote:
> 
> Switch over to https and latest...
> 
> /etc/pkg/FreeBSD.conf:
> 
>  url: "pkg+https://pkg.FreeBSD.org/${ABI}/latest 
> https://pkg.FreeBSD.org/$%7BABI%7D/latest>",
> 

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Congrats to Nullvoid

[Conrad Rockenhaus]

> On Aug 26, 2018, at 12:43 PM, grarpamp  wrote:
> 
> On 8/26/18, nusenu  wrote:
>> Conrad Rockenhaus:
>>> I just wanted to say congratulations to Nullvoid, who is currently running
>>> the second fastest exit in France in my colo in Europe.
> 
>> allowing port 25 on purpose or accidentally?
> 
> Either way, up to the operator, some do it for the lols.
> 
>>> Also, go FreeBSD!
>> 
>> consider updating that tor version
> 
> Not a problem with FreeBSD.
> 
> Switch over to https and latest...
> 
> /etc/pkg/FreeBSD.conf:
> 
>  url: "pkg+https://pkg.FreeBSD.org/${ABI}/latest;,
> 
> and run 'pkg upgrade' .
> 
> If it's a shared box, you probably also want
> devcpu-data,  and optionally cpupdate.

Luckily, the instances aren’t running on shared boxes, each user runs on their 
own XenServer HVM instance, so they have dedicated control of their own 
instance. What Nullvoid does is basically up to him at this point, but I 
strongly agree with the recommendations that everyone is recommending.

-Conrad



signature.asc
Description: Message signed with OpenPGP
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Congrats to Nullvoid

[grarpamp]

On 8/26/18, nusenu  wrote:
> Conrad Rockenhaus:
>> I just wanted to say congratulations to Nullvoid, who is currently running
>> the second fastest exit in France in my colo in Europe.

> allowing port 25 on purpose or accidentally?

Either way, up to the operator, some do it for the lols.

>> Also, go FreeBSD!
>
> consider updating that tor version

Not a problem with FreeBSD.

Switch over to https and latest...

/etc/pkg/FreeBSD.conf:

  url: "pkg+https://pkg.FreeBSD.org/${ABI}/latest;,

and run 'pkg upgrade' .

If it's a shared box, you probably also want
devcpu-data,  and optionally cpupdate.
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Congrats to Nullvoid

[nusenu]

Conrad Rockenhaus:
> I just wanted to say congratulations to Nullvoid, who is currently running 
> the second fastest exit in France in my colo in Europe.
> 
> https://metrics.torproject.org/rs.html#details/51420DFB2047A33803A9A6E456D627937DD6E316

allowing port 25 on purpose or accidentally?
 
> Also, go FreeBSD!

consider updating that tor version

-- 
https://twitter.com/nusenu_
https://mastodon.social/@nusenu



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

[tor-relays] Congrats to Nullvoid

[Conrad Rockenhaus]

I just wanted to say congratulations to Nullvoid, who is currently running the 
second fastest exit in France in my colo in Europe.

https://metrics.torproject.org/rs.html#details/51420DFB2047A33803A9A6E456D627937DD6E316

Also, go FreeBSD!

Thanks,

Conrad


signature.asc
Description: Message signed with OpenPGP
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays