XSF Discussion - 2014-02-22

https://news.ycombinator.com/item?id=7281237

note: https://xmpp.net/ has a problem: Code d'erreur : ssl_error_no_cypher_overlap I am not alone to have this problem.

How is everyone's test day going?

Too early to tell for j.org, I only just flipped the switch.

intosi: excellent!

now all are good for me :)

for S2S

I've basically left all the buddycloud server set to force since the last test day.

I have only problems with: xmpp:dev@muc.jappix.org (Metronome) xmpp:support@muc.jappix.org (Metronome) xmpp:grimoire@muc.metronome.im (Metronome) xmpp:beem@conference.elyzion.net (?)

Is Metronome the Prosody fork?

yes!

So far, the usual suspects are failing on my home interop testing servers.

gmail.com and?

gmail, cisco.

"about rooms"

Neustradamus: from your own server? No need reporting unrelated issues that have been reported before and are looked into. That only muddles the feedback on the TLS testing day.

reply from Metronome dev: [12:23:37] <Marco Cirillo> you have a problem only joining mucs on Metronome servers which run bidi [12:24:02] <Marco Cirillo> try with your account on jappix.com [12:24:13] <Marco Cirillo> you'll see it works

it is a bug before the switch like I have sent

*** 2014-02-21 [08:43:05] <Neustradamus> *** 2014-02-21 [01:54:23] <Maranda> stpeter btw, j.o's seems to have some blocking issues regarding bidi, some users (e.g. Neustradamus) can't join mucs on my server because, even if it requested bidi & authenticated, j.o still bounces the incoming stanzas it receives on the bidi enabled stream.

Neustradamus: stop doing that. The jabber.org admins know about the issue, and you know that. It is not related to the TLS testing day.

no problem, strange that it is a little hours before...

As expected, the number of active s2s connections on jabber.org is dropping, where on normal Saturdays, the number should still be increasing. Still too early to tell the difference between this day and the previous one.

intosi - are you or Peter going to fix the cipher list on jabber.org?

Eventually, yes.

Though not today.

With eventually, I really mean Real Soon Now™ ;)

great. I always notice it in the test results.

There is some discussion on what impact this will have on older clients and clients that cannot do HGE.

HGE?

High Grade Encryption

And whether we should care about that.

There's a high chance that older clients are set to autoconnect and have sat untouched in the background of a machine for years.

xnyhps, is xmpp.net broken? submit.php and result.php gives empty replies

Yes.

You're welcome.

.

But it's more secure that way ;)

fippo, did you see this update: https://code.google.com/p/webrtc/issues/detail?id=2923

ralphm: yeah... we should probably work on giving them a... say swiften-based... example :-)

Sounds like something for the XSF to fund ;)

nah, for google!

damn, that would have been a nice gsoc project actually

It was on the list of ones I was going to put up for Swift, until I didn't have time to mentor.

ralphm: i'd actually say that the signalling components of libjingle are not useful :-)

:-D

That's kinda funny

xnyhps if you are there, - running a test against any domain on xmpp.net is failing. some Secruity test day folks are confused.

Yeah.

Peter asked if the OS could be updated. Turns out that the observatory doesn't like the new packages much.

I've been looking at it, but I've got stuff to do this afternoon.

Thijs knows about it (but I think is AFK, hasn't been responding for a few hours).

Thanks Kev.

If there is anything I can do, I'm happy to jump on.

I don't think so, thanks.

At least we're A on ssllabs now.

Weren't looking so good with openssl0.9.8

I understand. And if I remember correctly, upgrading openSSL basically implies a new distro version.

Nothing more relaxing after a long week at work than a remote dist-upgrade on an old old machine.

Other than, you know, not that.

OS did OK in the end...other than that the only thing running on the machine doesn't run on the new packages.

That's got things a /little/ better.

Thanks Kev!

It's hard not to hate PHP sometimes.

only sometimes?

I don't spend much of my time thinking about it.

Still a load of errors in the logs, but I don't know if they're normal or not.

Yeah, a number of them seem to be general bugs - errors in the logs going back days.

Not others, though.

Oh, no, that error's been there for days too.

Right. I can't find any errors in the logs that haven't shown up before.