Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Mick
On Saturday 19 Apr 2014 19:41:02 Dale wrote: > Mick wrote: > > and look for this info: > > > > New, TLSv1/SSLv3, Cipher is RC4-SHA > > Server public key is 2048 bit > > Secure Renegotiation IS NOT supported > > Compression: NONE > > Expansion: NONE > > > > SSL-Session: > > Protocol : TLSv1

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Mick
On Sunday 20 Apr 2014 01:18:43 Peter Humphrey wrote: > On Saturday 19 Apr 2014 18:43:50 Matti Nykyri wrote: > > Well you can use ssllabs.com. I use it for debuging. Here is what Bank of > > America uses: > > > > https://www.ssllabs.com/ssltest/analyze.html?d=www.bankofamerica.com&hide > > Res ults

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Dale
Mick wrote: > On Saturday 19 Apr 2014 19:41:02 Dale wrote: >> Mick wrote: > >>> and look for this info: >>> >>> New, TLSv1/SSLv3, Cipher is RC4-SHA >>> Server public key is 2048 bit >>> Secure Renegotiation IS NOT supported >>> Compression: NONE >>> Expansion: NONE >>> >>> SSL-Session: >>> Prot

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Matti Nykyri
On Apr 20, 2014, at 11:49, Mick wrote: > On Sunday 20 Apr 2014 01:18:43 Peter Humphrey wrote: >> On Saturday 19 Apr 2014 18:43:50 Matti Nykyri wrote: >>> Well you can use ssllabs.com. I use it for debuging. Here is what Bank of >>> America uses: >>> >>> https://www.ssllabs.com/ssltest/analyze.ht

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Mick
On Sunday 20 Apr 2014 10:21:08 Matti Nykyri wrote: > On Apr 20, 2014, at 11:49, Mick wrote: > > On Sunday 20 Apr 2014 01:18:43 Peter Humphrey wrote: > >> On Saturday 19 Apr 2014 18:43:50 Matti Nykyri wrote: > >>> Well you can use ssllabs.com. I use it for debuging. Here is what Bank > >>> of Ameri

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Mick
On Sunday 20 Apr 2014 10:10:42 Dale wrote: > Mick wrote: > > SSL-Session: > > Protocol : TLSv1 > > Cipher: RC4-MD5 > > > > == > > > > RC4 is considered completely broken today, even for Microsoft! :-) > > > > http://en.wikipedia.org/wiki/RC4 >

Re: [gentoo-user] Weird Screen-Overlay problems after update

2014-04-20 Thread meino . cramer
Walter Dnes [14-04-14 17:23]: > On Mon, Apr 14, 2014 at 05:20:12AM +0200, meino.cra...@gmx.de wrote > > > was updated and I installed Linux 3.12.17 (vanilla) and recompiled > > the nvidia-drivers and finally the X11-modules, a really annoying > > thing happened: > > > > When a program uses the s

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Matti Nykyri
On Apr 20, 2014, at 15:38, Mick wrote: > On Sunday 20 Apr 2014 10:10:42 Dale wrote: > > Just a 1/3 of all websites offer TLSv1.2 at the moment and hardly any public > sites offer it as an exclusive encryption protocol, because they would lock > out most of their visitors. This is because most

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Joe User
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 20.04.2014 18:40, Matti Nykyri wrote: > On Apr 20, 2014, at 15:38, Mick wrote: > >> On Sunday 20 Apr 2014 10:10:42 Dale wrote: >> >> Just a 1/3 of all websites offer TLSv1.2 at the moment and hardly >> any public sites offer it as an exclusive

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Dale
Mick wrote: > On Sunday 20 Apr 2014 10:10:42 Dale wrote: >> Mick wrote: > >>> SSL-Session: >>> Protocol : TLSv1 >>> Cipher: RC4-MD5 >>> >>> == >>> >>> RC4 is considered completely broken today, even for Microsoft! :-) >>> >>> http://en.wikipedia.o

Re: [gentoo-user] Output of "mount" and "cat /etc/mtab" inside install chroot?

2014-04-20 Thread yac
On Sat, 19 Apr 2014 13:54:07 +0100 Peter Humphrey wrote: > On Saturday 19 Apr 2014 07:43:18 Walter Dnes wrote: > > I've got another thread going called... > > "Strange behaviour with LILO on new install on old laptop". Before > > I file a bug report, I want to check first whether it's my fault

Re: [gentoo-user] Re: Heartbleed fix - question re: replacing self-signed certs with real ones

2014-04-20 Thread Matti Nykyri
On Apr 20, 2014, at 20:20, Joe User wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 20.04.2014 18:40, Matti Nykyri wrote: >> On Apr 20, 2014, at 15:38, Mick wrote: >> >>> On Sunday 20 Apr 2014 10:10:42 Dale wrote: >>> >>> Just a 1/3 of all websites offer TLSv1.2 at the momen