< <journal "^\d\d\d\d-\d\d-\d\d.*Web">
> <journal search tag:web>
Stuff about the world wide web (WWW): Structure, history, weirdness.
I got an email, telling me my certificates a number of my domains will expire in 19 days and that I should please make sure to renew my certificates before then. Looking back at my old blog post I found the command to run and it worked. Yay!
I’m still a bit concerned about running the tool with sudo.
I decided to give Let’s Encrypt a try. I’m still running Debian Wheezy:
alex@kallobombus:~$ lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 7.9 (wheezy) Release: 7.9 Codename: wheezy
I followed their instructions for letsencrypt-auto:
git clone https://github.com/letsencrypt/letsencrypt cd letsencrypt
And then I picked the Webroot plugin:
./letsencrypt-auto certonly --webroot -w ~/arabisch-lernen.org/ -d arabisch-lernen.org
I had to provide my email address and agree to their terms and conditions and that seemed to work. I added the necessary config parameters myself. The site’s config file was
/etc/apache2/sites-available/arabisch-lernen.org and the two important parts are the following two points:
As I’m using Debian Wheezy this means I’m using Apache/2.2.22 (Debian) mod_ssl/2.2.22 OpenSSL/1.0.1e.
<VirtualHost *:80> ServerName arabisch-lernen.org ServerAlias www.arabisch-lernen.org Redirect permanent / https://arabisch-lernen.org/ </VirtualHost> <VirtualHost *:443> ServerAdmin email@example.com <Directory /> Options None AllowOverride None Order Deny,Allow Deny from all </Directory> ServerName arabisch-lernen.org ServerAlias www.arabisch-lernen.org DocumentRoot /home/alex/arabisch-lernen.org <Directory /home/alex/arabisch-lernen.org> Options ExecCGI Includes Indexes MultiViews SymLinksIfOwnerMatch AddHandler cgi-script .pl AllowOverride All Order Allow,Deny Allow from all </Directory> SSLEngine on SSLCertificateFile /etc/letsencrypt/live/arabisch-lernen.org/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/arabisch-lernen.org/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/arabisch-lernen.org/chain.pem SSLVerifyClient None </VirtualHost>
For the cron job, it seems that we cannot just run
letsencrypt-auto, we need to specify all the stuff we used in previous calls. If we don’t, we’re told: «No installers seem to be present and working on your system; fix that or try running letsencrypt with the “certonly” command.» If we use the
certonly command, then we’re asked for domain names…
So, these commands all need to be run because I use a different certificate for every domain:
~/src/letsencrypt/letsencrypt-auto certonly --webroot -w ~/alexschroeder.ch/ -d alexschroeder.ch -d www.alexschroeder.ch ~/src/letsencrypt/letsencrypt-auto certonly --webroot -w ~/arabisch-lernen.org/ -d arabisch-lernen.org -d www.arabisch-lernen.org ~/src/letsencrypt/letsencrypt-auto certonly --webroot -w ~/campaignwiki.org/ -d campaignwiki.org -d www.campaignwiki.org ~/src/letsencrypt/letsencrypt-auto certonly --webroot -w ~/communitywiki.org/ -d communitywiki.org -d www.communitywiki.org ~/src/letsencrypt/letsencrypt-auto certonly --webroot -w ~/korero.org/ -d korero.org -d www.korero.org ~/src/letsencrypt/letsencrypt-auto certonly --webroot -w ~/oddmuse.org/ -d oddmuse.org -d www.oddmuse.org ~/src/letsencrypt/letsencrypt-auto certonly --webroot -w ~/orientalisch.info/ -d orientalisch.info -d www.orientalisch.info sudo service apache2 graceful
/home/nicferrier/src/letsencrypt/letsencrypt-auto certonly --webroot -w /home/nicferrier/emacswiki.org/ -d www.emacswiki.org
SNIMissingWarning on this Ubuntu 14.04.1 LTS…
letsencrypt-auto requires root privileges. Yikes!
I changed the fonts used for this website. I liked Noticia Text by JM Solé but loading it from the web was making the site slow on my old phone. It would load the page with invisible text and then add the font with a noticeable delay. Too bad the phone’s browser cache is too limited.
Here’s to faster loading times! 🍷
Well… I think I lost about 12h on all my wikis. I thought: “Upgrade from Debian Wheezy to Jessie? No Problem!” I never saw a big huge blinking warning saying that you shouldn’t do it if you’re a guest on a virtual machine. But systemd replaces sysvinit, which requires a newer kernel, which the host doesn’t have! Everything works until you reboot. At which point the network doesn’t come back up. You can’t switch from systemd to sysvinit because downloading the packages doesn’t work anymore. You can’t scp the deb files to your server because all you have is a serial console. On your end, it looks like ssh. And yet, whatever I tried wouldn’t work. Because networking doesn’t work on the host.
And that’s when I discovered some flaws in my backup. What a disappointment. How exactly was Perl installed? Why doesn’t the backup contain the Apache config files for those sites that had SSL added to them?
Kallobombus. I thought I had documented it all. Not so.
Todo items for tomorrow:
Sometimes I wonder whether I should move Oddmuse away from Perl 5 to something else. Something I would like to learn. An opportunity to redo everything, from scratch. Not many people are using Oddmuse, so I might as well write something else, for myself.
Redirection good. Broken links bad. Cool URIs don't change.
Web Decay Graph. “This is a very sad graph.” – Tim Bray
OK, so apparently I need to look my site’s setup again. I hate these sysadmin problems. I would love to not worry about security issues, trusting my GNU/Linux distro to simply do the right thing. But it can’t upgrade my sites SSL setup. Currently the architecture does no allow that. Each site has config files, each site has its own certificates.
I should probably automate this in some way.
Today I saw two posts on Google+ I found interesting. In the first, Rob said that he would like to finance a zine in order to get all the news but not “the Internet”. I said that back when we all just had websites and used ftp to post new stuff the Internet was a peaceful place!
I wonder about browser extension that hides all the comments, everywhere. I think those are the source of all grief. Yes, it’s sad! I know of the Herp Derp extension for YouTube. I’m sure there are others!
In another post, people were discussing how we react to provocative posts by others. What if they disabled comments? Are we happy because it saves us from wasting our energy? Are we incensed because the medium implies that we’ll only post what we’re also willing to discuss? That’s certainly how I feel! For myself, this is my daily Google+ challenge: not to post any political stuff. For if I did, I wouldn’t want to read the counterpoints. I still feel the need to rant, though! What to do? Because I also hate posts where I cannot comment, I don’t want to post and disable comments. My solution is to keep the political stuff on Twitter. There, I retweet a lot. Or I’ll write a few well chosen words, add a link and post it. If I’m interested in reading the opinions of others, I can follow them on Twitter and read the stuff they link to. Perfect! I remember people saying that 140 characters was not enough. But now I’m seeing that on G+, having more characters doesn’t improve the experience of politics and religion.
CacheEnable mem /wiki/feed/full/RPG MCacheSize 100000000 MCacheMaxObjectSize 1000000 ✎
(This RSS file is about 99k.)✎
The wiki is logging these requests to a file and I’m requesting the URL from the command-line using
curl. Hm, must investigate later.✎
Tried adding this:✎
CacheEnable mem /wiki/feed/full/ MCacheMaxStreamingBuffer 1000000✎
Tried replacing it with:✎
CacheEnable disk /wiki/feed/full/RPG✎
Giving up. Damn you, mod_cache.✎
I’ve been using Chrome for a day now and this wiki doesn’t look as good as it does using Firefox, on Windows.✎
Something about the fonts is not making me happy.✎
Restarting… I am not impressed. 😟✎
Adding Symbola to the site and to the CSS.✎
Fiddling some more. Increased the font size. Getting rid of Arial Narrow or whatever it was for header and footer. Getting rid of bold for the moment and replacing it with small caps. WTF am I doing!?✎
sfnt2woff to convert ttf files to woff. The files are significantly smaller, now. Using Noticia Text and Symbola by George Douros (for the smileys). Everything seems to work on Chrome. Now anti-aliasing for the header and footer looks a bit crummy on Firefox (Windows). Wow. Such pain.✎
At home… Things look pretty good on Firefox (OSX). Oh well. I think this is going to be the new look for a while.✎
Hop on the time machine!✎