Archive for February, 2011
Needless to say Adobe had an update today.
Since we’re running a windows 2008 server with users that don’t have administrator rights, Adobe is very annoying to start with.
<Adobe>”Hey I have an update! Oh, I can’t install it because you need administrator rights, but I’ll keep bugging you with it anyway, MWHOAHAHHAHA”
So if that isn’t enough already (and they have an update about every week … if not more often), the piece of cancer can’t even update. Even when running the updater as administrator:
Of course it would be terrible to state what the problem is, so they only give you “Error: 1403” to work with.
Thanks Adobe, really useful. It’s unfortunate that some morons here insist on needing it (Because some idiot customers send us PDF files with chinese fonts and other rubbish that isn’t handled well in better pdf readers).
If you’re like me you probably already hate the scumm that’s called Sony.
For installing rootkits on your pc. For taking away the ability to run linux on your PS3.
For being a Sony Cancer.
They’ve been assholes for as long as I can remember. Just check out their latest Playstation network agreement if you want to see how they trample your rights.
Anyhow, the guy being sued by them today (geohot – the one giving back linux on the ps3) has now setup a donation place to get some good lawyers.
So if you have a bit of coin to spare for a good cause, this is it. Anti Cancer! Pro Linux! What else could you want to spend your money on? 🙂
Last week I upgraded our fileserver at work from Debian Lenny to Debian Squeeze.
Obviously a ton of stuff got ‘new’ (read: less ancient) versions, including Apache.
Apart from a reboot or two for new kernels and some config fixes everything went pretty smooth.
This week lotjuh ran into the problem that she couldn’t push to the mercurial repository from windows.
Strange, because everything worked fine from linux. Tested from both the windows 2008 server we have here and another windows 7 machine at home, the both broke with the same cryptic message:
c:\tmp> hg clone --insecure https://fileserver/repository
abort: error: _ssl.c:1325: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
Huh. That’s weird.
Obviously google doesn’t help with this, you get some garbage results on how mercurial didn’t do jack with https certificates before version 1.7 and their struggle to implement it.
After some digging I found this in the apache logs:
[Thu Feb 17 12:10:51 2011] [error] [client 192.168.123.321] Re-negotiation request failed
[Thu Feb 17 12:10:51 2011] [error] SSL Library Error: 336068931 error:14080143:SSL routines:SSL3_ACCEPT:unsafe legacy renegotiation disabled
Feh. Somewhere old SSL libraries are being used! Windows… .always the same.
In your apache ssl configuration (mods-enabeld/ssl.conf on Debian), add this:
Note that this obviously isn’t a great solution, but it’s the only way to get it to work on windows at the moment.