Re: debian-user-digest Digest V2017 #989

On Tue, Sep 5, 2017 at 10:48 PM, <debian-user-digest-request@lists.debian.org> wrote:

Content-Type: text/plain

debian-user-digest Digest Volume 2017 : Issue 989

Today's Topics:
Re: testing, upgrade of openssl libs [ Gene Heskett <gheskett@shentel.net> ]
Re: Install Debian 9.1 stretch on Pe [ didier gaumet <didier.gaumet@gmail. ]
Re: Strange results with an addition [ deloptes <deloptes@gmail.com> ]
Re: testing, upgrade of openssl libs [ Michael Grant <mgrant@grant.org> ]
Re: Laptop randomly reboots [ Fungi4All <fungilife@protonmail.com ]
Re: Laptop randomly reboots [ Sam Smith <debian@net153.net> ]
Re: testing, upgrade of openssl libs [ Sven Hartge <sven@svenhartge.de> ]

Date: Tue, 5 Sep 2017 14:15:11 -0400
From: Gene Heskett <gheskett@shentel.net>
To: debian-user@lists.debian.org
Subject: Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 )
Message-Id: <[🔎] 201709051415.11273.gheskett@shentel.net">201709051415.11273.gheskett@shentel.net>
Content-Type: Text/Plain;
charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On Tuesday 05 September 2017 13:40:00 Michael Grant wrote:

> I upgraded openssl today in my server running testing. It installed
> version 1.1.0f-5. To my surprise, my mac clients can no longer send
> and receive email!
>
As that is a security related upgrade, I would next push the Mac people
to match it, or if possible, configure the Macs to use the more secure
protocol.

> How do I roll back to the previous version of openssl?
>
> "apt-cache showpkg openssl" only shows version 1.1.0f-5.
>
> apt install openssl=1.1.0f-3
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> E: Version '1.1.0f-3' for 'openssl' was not found
>
> I gather I need to add something to my sources.list to get at the
> older versions.

Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>

Date: Tue, 5 Sep 2017 20:32:15 +0200
From: didier gaumet <didier.gaumet@gmail.com>
To: debian-user@lists.debian.org
Subject: Re: Install Debian 9.1 stretch on Pentium II system: pata_hpt3x2n
required?
Message-ID: <oomqj7$qk0$1@blaine.gmane.org>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Content-Language: fr-FR

Le 05/09/2017 à 11:34, David Max a écrit :
> Hello
>
> I am attempting to install Debian 9.1 stretch on an old Pentium II system.
>
> Setup --
>
> cpu Pentium II 400 MHz
> ram 512 MB
> video card ATI RAGE IIC AGP
> hdd #1 6.8 GB Fujitsu (with Windows installed, also a 1GB Linux swap
> partition)
> hdd #2 80 GB Seagate, attached to Highpoint 133SB Rocket Raid (PCI) card
>
> Install process goes well until the stage of searching for disks. Then
> the first disk is detected fine, but 2nd doesn't show up.
>
> If I pause the installation sequence at disk detection, driver
> pata_hpt37x is shown by lsmod. lspci shows the Highpoint card as "RAID
> bus controller HighPoint Technologies, Inc. HPT302/302N (rev 02)".
>
> As some background, Knoppix 7.2.0 installs okay on the Seagate drive but
> I seem to have broken it by upgrading some packages (and removing
> libreoffice). On boot, Knoppix complains that graphics cannot be
> initialised, I think because package xserver-xorg-video-ati has been
> unpacked but not installed (i.e., on the Knoppix hdd installation).
>
> The aim is to see if this old machine can take on a new life as a
> router. Traffic rates through it are adequate for current needs. If
> Debian install can be completed, I will switch to LXDE for the desktop
> (quite lightweight as I understand).
>
> If Debian can be installed Knoppix will be replaced but the old Windows
> install on hdd #1 will be retained.
>
> After a little research, I believe a driver pata_hpt3x2n might be required?
>
> All help gratefully received.
>
> David Max

didier@hp-dm1:~$ grep -i hpt /boot/config*
CONFIG_SCSI_HPTIOP=m
CONFIG_PATA_HPT366=m
CONFIG_PATA_HPT37X=m
# CONFIG_PATA_HPT3X2N is not set
# CONFIG_PATA_HPT3X3 is not set

It seems you have at least to declare the driver either built-in (=y) or
as a module (=m) and rebuild the kernel
(cf
https://kernel-handbook.alioth.debian.org/ch-common-tasks.html#s-common-building)

Date: Tue, 05 Sep 2017 20:58:57 +0200
From: deloptes <deloptes@gmail.com>
To: debian-user@lists.debian.org
Subject: Re: Strange results with an additional HD -- any idea why?
Message-ID: <ooms3e$m6a$1@blaine.gmane.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit

James H. H. Lampert wrote:

> What can I do about these things?

use a different mount point

/media is used for auto mounting

Date: Tue, 5 Sep 2017 20:29:45 +0100
From: Michael Grant <mgrant@grant.org>
To: Gene Heskett <gheskett@shentel.net>
Cc: "debian-user@lists.debian.org" <debian-user@lists.debian.org>
Subject: Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 )
Message-ID: <CAJCaPNQumS1CkxO4MSdOHpkJ_EhE7RSdtgBMyG+s3NuLKoZHxg@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"

On 5 September 2017 at 19:15, Gene Heskett <gheskett@shentel.net> wrote:
> On Tuesday 05 September 2017 13:40:00 Michael Grant wrote:
>
>> I upgraded openssl today in my server running testing. It installed
>> version 1.1.0f-5. To my surprise, my mac clients can no longer send
>> and receive email!
>>
> As that is a security related upgrade, I would next push the Mac people
> to match it, or if possible, configure the Macs to use the more secure
> protocol.

Any clues how to configure the Mac to use the more secure protocol?
All the software is up-to-date on the Mac side. I don't see any
obvious option in any of the mail settings on the Mac side.

This is the error I see in the mail logs for both dovecot and sendmail:

dovecot:
TLS handshaking: SSL_accept() failed: error:1417D102:SSL
routines:tls_process_client_hello:unsupported protocol, session=<...>

sendmail:
STARTTLS=server: 0:error:1417D102:SSL
routines:tls_process_client_hello:unsupported
protocol:../ssl/statem/statem_srvr.c:974:

I realize this isn't a MacOS forum but the error message here is on
the Debian side. Other mail clients like Windows Mail connect fine.

Is there something I can set on Debian side to force this newer
openssl to accept older 1.x connections?

Date: Tue, 05 Sep 2017 15:42:34 -0400
From: Fungi4All <fungilife@protonmail.com>
To: "rhkramer@gmail.com" <rhkramer@gmail.com>
Cc: "debian-user@lists.debian.org" <debian-user@lists.debian.org>
Subject: Re: Laptop randomly reboots
Message-ID: <qXUgQpJ9Nye64JgFIrSw1owG-DcWhLM6749X9FPeLRBpqQVOOxTxTtIrZn0a5-ML4Qw_oU46txjX3XST-PrfbkLAHgfDGhN1Vnfc3kdeMcQ=@protonmail.com>
Content-Type: multipart/alternative;
boundary="b1_4561fbbbe8d57d9c6e5ff34ca2337d5b"

This is a multi-part message in MIME format.

--b1_4561fbbbe8d57d9c6e5ff34ca2337d5b
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64
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--b1_4561fbbbe8d57d9c6e5ff34ca2337d5b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64

PGRpdj48YnI+PC9kaXY+PGJsb2NrcXVvdGUgY2xhc3M9InByb3Rvbm1haWxfcXVvdGUiIHR5cGU9
ImNpdGUiPjxkaXY+RnJvbTogcmhrcmFtZXJAZ21haWwuY29tPGJyPjwvZGl2PjxkaXY+VG86IGRl
Ymlhbi11c2VyQGxpc3RzLmRlYmlhbi5vcmc8YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5P
biBUdWVzZGF5LCBTZXB0ZW1iZXIgMDUsIDIwMTcgMTI6NDY6NTggQU0gU2FtIFNtaXRoIHdyb3Rl
Ojxicj48L2Rpdj48ZGl2PiZndDsgV2VsbCBJIGd1ZXNzIEkgcmVhbGx5IHNwb2tlIHRvbyBzb29u
Li4uLiBKdXN0IGdvdCBhIHJhbmRvbSByZWJvb3QgYTxicj48L2Rpdj48ZGl2PiZndDsgbWludXRl
IGFnby4uLiBQcmV0dHkgbXVjaCBhdCBhIGxvc3Mgbm93LiBUaGUgb25seSB0aGluZyB0aGF0IGhh
c24idCBiZWVuPGJyPjwvZGl2PjxkaXY+Jmd0OyByZXBsYWNlZCBub3cgaXMgdGhlIENQVSwgYmF0
dGVyeSwgYW5kIHBvd2VyIGFkYXB0ZXIuIEkgZG8gaGF2ZSBhIHNwYXJlPGJyPjwvZGl2PjxkaXY+
Jmd0OyBiYXR0ZXJ5IGFuZCBwb3dlciBhZGFwdGVyLiBHdWVzcyBJImxsIHRyeSBydW5uaW5nIHdp
dGggdGhvc2UgZm9yIGEgbW9udGg8YnI+PC9kaXY+PGRpdj4mZ3Q7IG9yIHNvIGFuZCBzZWUgd2hh
dCBoYXBwZW5zLiBUaG91Z2ggbm90IHJlYWxseSBzdXJlIGhvdyBlaXRoZXIgb25lIG9mPGJyPjwv
ZGl2PjxkaXY+Jmd0OyB0aG9zZSB3b3VsZCBtYWtlIHRoZSBjb21wdXRlciByZWJvb3QgcmFuZG9t
bHkgb25jZSBhIG1vbnRoLiBMYXB0b3AgaXM8YnI+PC9kaXY+PGRpdj4mZ3Q7IG1vdW50ZWQgaW4g
YSBkb2NraW5nIHN0YXRpb24uIEF0IGxlYXN0IGZvciB0aGUgbGFzdCA2IG1vbnRocywgZXZlcnk8
YnI+PC9kaXY+PGRpdj4mZ3Q7IHJlYm9vdCB3YXMgd2hpbGUgaXQgd2FzIGRvY2tlZC4gQnV0IEkg
ZG8gcmVtZW1iZXIgdGltZXMgbGFzdCB5ZWFyPGJyPjwvZGl2PjxkaXY+Jmd0OyBzaXR0aW5nIGF0
IHRoZSBraXRjaGVuIHRhYmxlIHVuZG9ja2VkIGFuZCBnZXR0aW5nIGEgcmVib290IHNvIEkgZG9u
InQ8YnI+PC9kaXY+PGRpdj4mZ3Q7IHRoaW5rIHRoZSBkb2NraW5nIHN0YXRpb24gaXMgdGhlIGlz
c3VlLi4gQnV0IGhhdmUgbm8gaWRlYSBub3cgOi88YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRp
dj5JIGhhdmVuInQgcGFpZCBtdWNoIGF0dGVudGlvbiB0byB0aGlzIGJlZm9yZSB0b2RheSwgYnV0
LCBpZiBJIGhhZCBhIHByb2JsZW0gPGJyPjwvZGl2PjxkaXY+d2l0aCB1bmV4cGxhaW5lZCByZWJv
b3RzLCB0aGUgZmlyc3QgYXJlYSBJImQgbG9vayBhdCBpcyB0aGUgcG93ZXIgc3VwcGx5IDxicj48
L2Rpdj48ZGl2PiJjaGFpbiItLXRoYXQgaXMsIHRoZSBiYXR0ZXJ5LCB0aGUgY29ubmVjdGlvbnMg
YmV0d2VlbiB0aGUgYmF0dGVyeSBhbmQgdGhlIDxicj48L2Rpdj48ZGl2PmxhcHRvcCwgcG93ZXIg
ImdsaXRjaGVzIiB0byB0aGUgaG91c2UsZXRjLjxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2
PkkgcnVuIGEgbGFwdG9wIHdpdGggYSBrbm93biBiYWQgYmF0dGVyeS0taWYgSSBkaXNjb25uZWN0
IHRoZSBwb3dlciBzdXBwbHkgaXQgPGJyPjwvZGl2PjxkaXY+Y3Jhc2hlcyBpbiBzZWNvbmRzLiAg
T1RPSCwgaWYgeW91ciBiYXR0ZXJ5IGlzIGdvb2QsIGl0IHNlcnZlcyBhcyBhIChsb25nIDxicj48
L2Rpdj48ZGl2PmxpdmVkKSBVUFMtLXlvdSBzaG91bGQgYmUgYWJsZSB0byByaWRlIG91dCBob3Vy
cyBsb25nIHBvd2VyIGdsaXRjaGVzLjxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PklmIEkg
aGFkIGEga25vd24gZ29vZCBiYXR0ZXJ5LCBJIG1pZ2h0IHRyeSBleGFtaW5pbmcgdGhlIGNvbnRh
Y3RzIGJldHdlZW4gdGhlIDxicj48L2Rpdj48ZGl2PmJhdHRlcnkgYW5kIHRoZSBsYXB0b3AtLWFy
ZSB0aGV5IGNsZWFuIC8gc2hpbnksIGlzIHRoZSAic3ByaW5neSBzaWRlIiBzdGlsbCA8YnI+PC9k
aXY+PGRpdj4ic3ByaW5neSIsIGRvZXMgdGhlIGJhdHRlcnkgZml0IHNudWdseSBpbiB0aGUgY2Fz
ZSBvciBpcyB0aGVyZSBlbm91Z2ggY2xlYXJhbmNlIDxicj48L2Rpdj48ZGl2PmZvciBpdCB0byBw
b3NzaWJseSBtb3ZlIGFuZCBicmVhayBjb250YWN0IHdpdGggdGhlIGxhcHRvcD8gIEkgbWlnaHQg
ZXZlbiB0cnkgPGJyPjwvZGl2PjxkaXY+cGlja2luZyB1cCB0aGUgbGFwdG9wIGFuZCByZWFzb25h
Ymx5IGdlbnRseSBzaGFraW5nIGl0ICh3aGlsZSBydW5uaW5nKSB0byBzZWUgPGJyPjwvZGl2Pjxk
aXY+aWYgaXQgcmVib290cy4gIChZb3UgZG9uInQgd2FudCB0byBzaGFrZSBpdCBzbyBoYXJkIHRo
YXQgeW91IGRhbWFnZSBzb21ldGhpbmcgPGJyPjwvZGl2PjxkaXY+ZWxzZS4pPGJyPjwvZGl2Pjxk
aXY+PGJyPjwvZGl2PjxkaXY+SWYgeW91IGhhdmUgYSBrbm93biBiYWQgYmF0dGVyeSwgSSJkIGxv
b2sgYXQgdGhlIGNoYWluIGZyb20gdGhlIHBvd2VyIG91dGxldCA8YnI+PC9kaXY+PGRpdj50aHJv
dWdoIHRoZSB2YXJpb3VzIGNvcmRzIGFuZCBjb250YWN0cyBvbiBib3RoIHNpZGVzIG9mIHRoZSBw
b3dlciBhZGFwdGVyLiA8YnI+PC9kaXY+PGRpdj5Ucnkgc2hha2luZyB0aGUgcG93ZXIgYWRhcHRl
ci48YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5JcyB0aGUgcG93ZXIgdG8geW91ciBob3Vz
ZSByZWxpYWJsZS0taXMgdGhlcmUgYW55IGNoYW5jZSB5b3UidmUgaGFkIGJyaWVmIDxicj48L2Rp
dj48ZGl2PnBvd2VyIG91dGFnZXMgb3Zlcm5pZ2h0PyAgKEluIHRoZSBVUywgbW9zdCBlbGVjdHJp
YyB1dGlsaXRpZXMgaGF2ZSBhdXRvbWF0aWMgPGJyPjwvZGl2PjxkaXY+cmVjbG9zZXJzIG9uIHRo
ZSBwb3dlciBsaW5lIGNpcmN1aXQgYnJlYWtlcnMtLWlmIHRoZXkgZGV0ZWN0IGEgZmF1bHQgdGhl
eSA8YnI+PC9kaXY+PGRpdj5vcGVuLCB0aGVuIHRyeSBjbG9zaW5nIGFnYWluIGFmdGVyIGEgZmV3
IHNlY29uZHMgKGluIGhvcGVzIHRoYXQgZWl0aGVyIHRoZSA8YnI+PC9kaXY+PGRpdj5mYXVsdCBo
YXMgY2xlYXJlZCAobWF5YmUgYSBzaG9ydGluZyB0cmVlIGJyYW5jaCBoYXMgZWl0aGVyIGJsb3du
IG9yIGJ1cm5lZCksIDxicj48L2Rpdj48ZGl2PmF3YXksIG9wZW4gYWdhaW4gaWYgdGhlcmUgaXMg
c3RpbGwgYSBmYXVsdCwgYWdhaW4gdHJ5IHRvIHJlY2xvc2UsIGFmdGVyIGEgZmV3IDxicj48L2Rp
dj48ZGl2PnNlY29uZHMuICBJbiBtb3N0IGNhc2VzLCB0aGV5IHRyeSB0aGlzIHNvbWV0aGluZyBs
aWtlIDMgdGltZXMsIHdpdGggYSBzb21ld2hhdCA8YnI+PC9kaXY+PGRpdj5sb25nZXIgZGVsYXkg
YmVmb3JlIHRoZSBsYXN0IHJldHJ5Ljxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pk9oIHdh
aXQsIHlvdSBoYXZlIChwcmVzdW1hYmx5IGtub3duIGdvb2QpIHNwYXJlIGJhdHRlcnkgYW5kIHBv
d2VyIGFkYXB0ZXItLXRyeSA8YnI+PC9kaXY+PGRpdj50aG9zZS48YnI+PC9kaXY+PC9ibG9ja3F1
b3RlPjxkaXY+PGJyPjwvZGl2PjxkaXY+UG93ZXIgaXMgbm90IHRoZSBvbmx5IHRoaW5nIHRoYXQg
d2lsbCBzaHV0ZG93biBhIGxhcHRvcCwgYnV0IHJlYm9vdGluZyBhdXRvbWF0aWNhbGx5PGJyPjwv
ZGl2PjxkaXY+c291bmRzIGEgYml0IHN0cmFuZ2UgaW4gaXRzZWxmLiAmbmJzcDtNb3N0IEkgaGF2
ZSBzZWVuIHRha2UgeW91ciBpbnB1dCB0byBwb3dlci11cCB1bmxlc3M8YnI+PC9kaXY+PGRpdj5h
IHNwZWNpZmljIGluc3RydWN0aW9uIGlzIGdpdmVuIHRvIHJlYm9vdC48YnI+PC9kaXY+PGRpdj5B
cmUgeW91IHN1cmUgeW91IGhhdmUgbm90IHNldCBhIGhvdC1rZXkgZm9yIHJlYm9vdD88YnI+PC9k
aXY+PGRpdj5JcyBpdCBwb3NzaWJsZSBhIGZhbiBvciBhbiBvdmVyaGVhdGluZyBhbGFybSBpcyBu
b3Qgc2h1dHRpbmcgaXQgb2ZmPyBCdXQgdGhlbiBhZ2FpbiwgeW91PGJyPjwvZGl2PjxkaXY+YXJl
IHRhbGtpbmcgYWJvdXQgYSByZWJvb3Qgbm90IGEgc2h1dGRvd24uPGJyPjwvZGl2PjxkaXY+QW55
dGhpbmcgZWxzZSBmcm9tIHRoZSBtYW51ZmFjdHVyZXIgdGhhdCBpcyB0cmlnZ2VyaW5nIGEgcmVi
b290Pzxicj48L2Rpdj48ZGl2PklmIHRoZSBvcGVyYXRpbmcgc3lzdGVtIGlzIGF0IGZhdWx0IGZv
ciBvcmRlcmluZyBhIHJlYm9vdCB0aGF0IHdpbGwgYmUgaW4gdGhlIGxvZ3MuPGJyPjwvZGl2Pjxk
aXY+SWYgaXQgaXMgYSBtZWNoYW5pY2FsIHNodXRkb3duIGl0IG1heSBiZSBpbnN0YW50IGFuZCBu
b3QgZ2l2aW5nIGVub3VnaCB3YXJuaW5nczxicj48L2Rpdj48ZGl2PnRvIHRoZSBzeXN0ZW0gdG8g
bG9nIGFueXRoaW5nLjxicj48L2Rpdj48ZGl2PlNvIHdoeSBpcyBpdCByZWJvb3Rpbmc/ICZuYnNw
O01heWJlIGl0IGdvZXMgdGhyb3VnaCBhbiBpbnRlcnJ1cHRpb24gdGhhdCBpcyBub3QgYSBzaHV0
ZG93bjxicj48L2Rpdj48ZGl2PnNvIGluc3RhbnRseSB0aGUgc3lzdGVtIGlzIHRyeWluZyB0byBy
ZWN1cGVyYXRlIGZyb20gdGhlIGludGVycnVwdGlvbi4gJm5ic3A7UG9zc2libHkgaW5zdWZmaWNp
ZW50PGJyPjwvZGl2PjxkaXY+b3IgdG9vIG11Y2ggdm9sdGFnZSBpcyBnb2luZyB0aHJvdWdoIGEg
c2VsZiBwcm90ZWN0ZWQgY2lyY3VpdCB3aGljaCBjYXVzZXMgdGhlIGludGVycnVwdGlvbjxicj48
L2Rpdj48ZGl2PmFuZCB0aGVuIGFsbG93cyBjdXJyZW50IGJhY2sgdGhyb3VnaCBhZ2FpbiwgZ2l2
aW5nIHlvdSB0aGUgaWxsdXNpb24gb2YgYSByZWJvb3QuPGJyPjwvZGl2PjxkaXY+U29tZXRpbWVz
IGRpc2sgZHJpdmVzIG9uIHRoZWlyIHdheSBvdXQgZHJhdyB0b28gbXVjaCBjdXJyZW50LCBvciBj
ZC9kdmQgZHJpdmVzLCB3aGljaDxicj48L2Rpdj48ZGl2PnRoZSBwb3dlciBzdXBwbHkgY2FuJ3Qg
a2VlcCB1cCB3aXRoIHdoaWNoIGNhdXNlIGFuIGludGVycnVwdGlvbiB0aWxsIGVub3VnaCBqdWlj
ZSBpczxicj48L2Rpdj48ZGl2PmJ1aWx0IHVwIHRvIGdldCB0aGUgbW90b3Igcm9sbGluZyBhZ2Fp
bi4gJm5ic3A7SXQgY291bGQgYmUgYXMgc2ltcGxlIGEgc21hbGwgY2FwYWNpdG9yIGluIG9uZSBv
Zjxicj48L2Rpdj48ZGl2PnRoZSBkcml2ZXMuICZuYnNwO0RvIHlvdXIgZHJpdmUvcyBnbyB0byBz
bGVlcCBpbiBzb21lIHN0YXRlIHRvIHByZXNlcnZlIHBvd2VyPyAmbmJzcDtMb29rIGF0IHlvdXI8
YnI+PC9kaXY+PGRpdj5wb3dlciBzZXR0aW5ncyBhbmQgdHVybiBvZmYgdGhlIGVuZXJneSBjb25z
ZXJ2aW5nIG9wdGlvbnMuPGJyPjwvZGl2PjxkaXY+TWF5YmUgYm9vdCBmcm9tIHVzYiBpbnRvIGEg
bGl2ZSBzeXN0ZW0sIGRpc2FibGUgdGhlIGRyaXZlcyBmcm9tIHRoZSBiaW9zIGFuZCBydW4gYTxi
cj48L2Rpdj48ZGl2PnVzYiBzdGljayBvciBkcml2ZS4gJm5ic3A7SWYgdGhlIHByb2JsZW0gY29t
ZXMgdXAgYWdhaW4gdGhlbiBpdCBpcyBub3QgZHJpdmUgcmVsYXRlZCBvciBvcGVyYXRpbmc8YnI+
PC9kaXY+PGRpdj5zeXN0ZW0gcmVsYXRlZC4gJm5ic3A7T3BlcmF0aW5nIHN5c3RlbXMgYXJlIG11
Y2ggbW9yZSBsaWtlbHkgdG8gZnJlZXplIHVwIHRoYW4gdG8gb3JkZXI8YnI+PC9kaXY+PGRpdj5h
biBhbmF1dGhvcml6ZWQgc2h1dC9yZWJvb3QuICZuYnNwO0kgYW0gd2lsbGluZyB0byBiZXQgaXQg
aXMgYSBtZWNoYW5pY2FsL2VsZWN0cmljIGdsaXRjaCBhbmQ8YnI+PC9kaXY+PGRpdj5ub3QgYW4g
T1MgcHJvYmxlbS48YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5Vbmxlc3MgeW91IGhhdmUg
ZGlzY292ZXJlZCBhIG5ldyBibGFjay1ob2xlIGluIHN5c3RlbWQgJm5ic3A7KHJ1c3QgbmV2ZXIg
c2xlZXBzKS4gOyk8YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj48
YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+

--b1_4561fbbbe8d57d9c6e5ff34ca2337d5b--

Date: Tue, 5 Sep 2017 14:47:28 -0500
From: Sam Smith <debian@net153.net>
To: debian-user@lists.debian.org
Subject: Re: Laptop randomly reboots
Message-ID: <[🔎] 9d2fc55f-fbd2-8ce9-8c80-188906ad43e1@net153.net">9d2fc55f-fbd2-8ce9-8c80-188906ad43e1@net153.net>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit

On 09/05/2017 06:25 AM, rhkramer@gmail.com wrote:
> On Tuesday, September 05, 2017 12:46:58 AM Sam Smith wrote:
>> Well I guess I really spoke too soon.... Just got a random reboot a
>> minute ago... Pretty much at a loss now. The only thing that hasn't been
>> replaced now is the CPU, battery, and power adapter. I do have a spare
>> battery and power adapter. Guess I'll try running with those for a month
>> or so and see what happens. Though not really sure how either one of
>> those would make the computer reboot randomly once a month. Laptop is
>> mounted in a docking station. At least for the last 6 months, every
>> reboot was while it was docked. But I do remember times last year
>> sitting at the kitchen table undocked and getting a reboot so I don't
>> think the docking station is the issue.. But have no idea now :/
>
> I haven't paid much attention to this before today, but, if I had a problem
> with unexplained reboots, the first area I'd look at is the power supply
> "chain"--that is, the battery, the connections between the battery and the
> laptop, power "glitches" to the house,etc.
>
> I run a laptop with a known bad battery--if I disconnect the power supply it
> crashes in seconds. OTOH, if your battery is good, it serves as a (long
> lived) UPS--you should be able to ride out hours long power glitches.
>
> If I had a known good battery, I might try examining the contacts between the
> battery and the laptop--are they clean / shiny, is the "springy side" still
> "springy", does the battery fit snugly in the case or is there enough clearance
> for it to possibly move and break contact with the laptop? I might even try
> picking up the laptop and reasonably gently shaking it (while running) to see
> if it reboots. (You don't want to shake it so hard that you damage something
> else.)
>
> If you have a known bad battery, I'd look at the chain from the power outlet
> through the various cords and contacts on both sides of the power adapter.
> Try shaking the power adapter.
>
> Is the power to your house reliable--is there any chance you've had brief
> power outages overnight? (In the US, most electric utilities have automatic
> reclosers on the power line circuit breakers--if they detect a fault they
> open, then try closing again after a few seconds (in hopes that either the
> fault has cleared (maybe a shorting tree branch has either blown or burned),
> away, open again if there is still a fault, again try to reclose, after a few
> seconds. In most cases, they try this something like 3 times, with a somewhat
> longer delay before the last retry.
>
> Oh wait, you have (presumably known good) spare battery and power adapter--try
> those.
>

The power "chain" imo seems good. Never heard of a power adapter going
bad.. but I do have a spare. The battery I normally use is a smaller 6
cell I bought off of ebay, it is pretty wore out. It reports 50%
capacity loss but runs for about 2 hours. I only bought it because the
stock battery is a bigger 9 cell that is bulky and heavy so around the
house I just leave the smaller one in. I'll use my spares for now. As
for household power, it is normally plugged into my UPS (apc smartups,
not the cheap consumer version).

CPUs seem pretty cheap on ebay, so I could try that. But it seems that
CPU issues would cause more problems than a random reboot once a month.

One other thing, I do run the 'thinkfan' fan control program. You can
set fan levels by temp. It was made for thinkpads made probably 10 years
ago, but still seems to work on the newer models. But I do know the
embedded controller on the T520 series is different than prior models.
So perhaps taking control of the fan causes the EC to detect this as a
fault. And maybe, just maybe, after so many "faults" it will kill power
to the machine. A wild idea but who knows. I've also since disabled the
thinkfan service.

Other than these, not sure what else. Kinda strange, but definitely
annoying.

Regards,

Date: Tue, 5 Sep 2017 23:40:46 +0200
From: Sven Hartge <sven@svenhartge.de>
To: debian-user@lists.debian.org
Subject: Re: testing, upgrade of openssl libssl1.1 ( 1.1.0f-3 => 1.1.0f-4 )
Message-ID: <[🔎] 1dppq9p10spvv8@mids.svenhartge.de">1dppq9p10spvv8@mids.svenhartge.de>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Michael Grant <mgrant@grant.org> wrote:

> Is there something I can set on Debian side to force this newer
> openssl to accept older 1.x connections?

No, you can't.

Kurt Roeckx, the DD maintaining OpenSSL, patched it in such a way that a
program needs to call a special function of OpenSSL to override the
default minimum TLS-version of TLS1.2.

Problem is: next to no program implements this as of yet.

The Dovecot developers may introduce the needed change in some of the
coming versions, with sendmail I believe you will be out of luck.

First help: Grab an older OpenSSL version from snapshots.debian.org to
get going again.

My solution (other than complaining on the debian-devel mailinglist) was
to recompile OpenSSL with the patch in question removed.

Of course in doing so I burdened myself with tracking any new release of
the OpenSSL packages and recompile them until this situation has been
resolved in some other way.

Grüße,
Sven.

--
Sigmentation fault. Core dumped.