Author: skp

Xiphos

Xiphos on Ubuntu 20.04

I have been using Xiphos as my Bible app on my laptop for quite a while. Ubuntu 20.04 left me with quite a surprise when it wasn’t found!

$ sudo apt install xiphos
[sudo] password for skp: 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
E: Unable to locate package xiphos

I’m thinking that it has to do with some dependencies that are outdated, but I’m not sure.

Read More

Updating Let’s Encrypt Client

I got an email from Let’s Encrypt saying that I am using an old protocol to update my certificates:

According to our records, the software client you’re using to get Let’s Encrypt TLS/SSL certificates issued or renewed at least one HTTPS certificate in the past two weeks using the ACMEv1 protocol. Here are the details of one recent ACMEv1 request from each of your account(s):

Looking on my server, I found that I have version 0.23.0 installed:

$ certbot --version
certbot 0.23.0

When I checked to see if it was upgradeable, I did find certbot in the list:

$ sudo apt list --upgradeable
...
certbot/bionic-updates,bionic-updates,bionic-updates,bionic-updates 0.27.0-1~ubuntu18.04.1 all [upgradable from: 0.23.0-1]
...
python3-acme/bionic-updates,bionic-updates,bionic-updates,bionic-updates 0.31.0-2~ubuntu18.04.1 all [upgradable from: 0.22.2-1ubuntu0.1]
python3-certbot/bionic-updates,bionic-updates,bionic-updates,bionic-updates 0.27.0-1~ubuntu18.04.1 all [upgradable from: 0.23.0-1]
p

So, I updated it with the apt command:

$ sudo apt dist-upgrade

After it ran to completion, the version was 0.27.0:

$ certbot --version
certbot 0.27.0

I tried to verify with this command:

$ sudo certbot renew --dry-run

Resources

OneNote, I’m Done With You?

Long ago, I was using a Google Notebook that has since been killed by Google and migrated into Google Docs. Then, I switched to Evernote for tracking all manner of information. When Evernote decided to limit the number of devices you could use, I switched to OneNote. I was already paying for the Office 365 subscription so it just made sense to me rather than paying for another product from Evernote.

OneNote has never worked on Linux. The saving grace is that they have a webapp that works just fine. I simply pin my work notebook and my personal notebook tabs in Chrome. It gets the job done. Plus, I have the android app so that I can access the information from my phone while out and about.

What’s changed? I’ve gotten frustrated with sync errors. It’s at the point that OneNote is unreliable, and I can’t depend that it will actually save. I left a question mark on the title of this article because I want to change, but I’m unsure of what to change to. So, the decision isn’t quite made yet.

Read More

Canberra Annoyance

I keep seeing this message periodically when launching things from the command line. For example, I launched keepass2, and I get this message:

Gtk-Message: 20:24:04.576: Failed to load module "canberra-gtk-module"

Here’s the simple fix … install the libcanberra-gtk-module. Here’s the command-line:

sudo apt install libcanberra-gtk-module

That fixed my problem! Note: the only symptom was just the warning on the console. I didn’t notice any other issues caused by not having that module.

Resources

JPG Loading Issue

Unfortunately, this issue is unsolved for me. I found plenty of things that fixed it for other people, so maybe they will help you. If you have an idea of something else to try, please comment.

My laptop will not load jpeg files for some reason. Chrome and Internet browsing works just fine. I can see all images there, but I can’t see jpeg images in Eye of Gnome. The worst is that I can’t see the background. The desktop background is just blue.

Here’s my troubleshooting notes:

Read More

Open SSL Weak Certificate

I have a client’s VPN that was giving me a hard time. It was an Open VPN connection.

There was a comment in the Forum that I was reading about security. It sounds like it would be better to regenerate the certificates, but since I have no control over the server, I couldn’t do that.

Error Messages

There are the error messages that I was seeing in my log:

  • Cannot load certificate file <path removed>COTVPN.crt
  • OpenSSL: error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak
  • Options error: Please correct these errors.

I checked my version:

$ openvpn --version
OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 10 2018
library versions: OpenSSL 1.1.0g  2 Nov 2017, LZO 2.08
Originally developed by James Yonan
Copyright (C) 2002-2017 OpenVPN Technologies, Inc. <sales@openvpn.net>
Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=yes enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_maintainer_mode=no enable_management=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_werror=no enable_win32_dll=yes enable_x509_alt_username=yes with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_sysroot=no

Solution

First, I edited the VPN’s configuration file:

 sudo vi /etc/NetworkManager/system-connections/COTVPN

As the last line under the [vpn] section, I added the line:

tls-cipher=DEFAULT:@SECLEVEL=0

Then, I ran this command to reload the configuration:

sudo nmcli connection reload

After that, it worked.

Missing Packages

Note: Earlier, I was getting these messages:

  • VPN plugin at /usr/lib/NetworkManager/nm-iodine-auth-dialog is not executable
  • VPN plugin at /usr/lib/NetworkManager/nm-vpnc-auth-dialog is not executable

I installed these two packages:

  • network-manager-iodine-gnome
  • network-manager-vpnc-gnome

Those two packages fixed those errors.

Resources