« first day (1508 days earlier)      last day (3430 days later) » 

10:00 PM
You've got mail @DaveRandom
 
moment
 
sure
 
Hey @NikiC, why is there nothing in ReflectionFunction/Parameter for variadics?
@NikiC mageekguy on #php.pecl was wondering.
 
ok, reading the GC code, I think I see some pretty significant cases where we could tweak for better performance
as it, I may be able to construct code that would cause the GC to thrash
 
@ircmaxell what was the real issue with composer though (in context of that fix)? Is it just an overhead of GC or GC that tried to collect something that it shouldn't?
 
10:12 PM
@zerkms I am writing a blog post on it
 
cool
 
@PeeHaa sorry got distracted, doin' shit now
 
no worries. Just fix it and all will be good :)
 
lol =]
 
We're sending humans to Mars! Watch our #JourneytoMars briefing live today at 12pm ET: http://www.nasa.gov/nasatv #Orion http://t.co/wrf89sn35A
HAPPENING
 
10:16 PM
@AndreaFaulds is it somehow connected with composer fix?
 
huh?
 
@zerkms ofc
 
like composer was the only thing that stopped human beings from sending people to Mars
@ircmaxell ^ ^ ^
 
@PeeHaa it definitely works for me
 
Goddamnit
You added them to your nginx config?
 
10:20 PM
I've just put them on to a vhost on my server under you domain name and pointed my hosts file at it
194.14.179.149
check it out, make sure it's the cert you are expecting ^
 
Yep you are better than me :(
 
:-P
Start from the beginning: rm those two files from your server and then copy/paste the data back up there
 
yeah going to do that now
 
@LeviMorrison okay, that's fine then
 
Also @PeeHaa I generally think you have some weird include going on in your nginx conf or something because of the SSL3 problems you were having, it's possible that the problem is in some other vhost config file
i.e. some other file is reading old key/new cert or vice-versa
 
10:25 PM
@DaveRandom Yeah that would have been my second call for help :P
 
@LeviMorrison Thanks :)
 
I'm moving my entire conf.d file now and double check the nginx global conf and start from the start
 
@DaveRandom Annotations make people stupid. It doesn't solve that problem, it just works around it.
 
@DaveRandom Annotations make people stupid. It doesn't solve that problem, it just works around it.
 
10:29 PM
Lots of "Protocol or cipher suite mismatch" fails though
 
@PeeHaa You seem to only support TLS 1.2
 
> (3) Only first connection attempt simulated. Browsers tend to retry with a lower protocol version.
TLS1.2 or GTFO :P
 
Unfortunately that's not really viable for a public service, at the moment
if you don't care about that then knock yourself out though
 
@DaveRandom What android version are you running?
 
4.3
 
10:32 PM
does it worky?
 
I need to update but rooting was such a pita first time round that I can't bring myself ot do it
moment
ugh, phone is dead
hang on
 
:)
 
@PeeHaa it does
 
Phone will not turn on...
 
@zerkms What android version are you on?
 
10:35 PM
@zerkms On what browser/version/OS?
 
*bit strange you don't get a chain error btw
 
win 7 x64 latest chrome
btw, you also checked ssllabs - how nice :-)
 
@zerkms I have been for the last 2 weeks ;)
 
@zerkms Yeh we're trying to see if it works with something that doesn't support TLS 1.2
 
Why should I get an error?
if you don't include something into a chain - it will be requested
 
10:36 PM
@zerkms I haven't added the intermediate yet
@zerkms requested from where?
 
from comodo?
 
@PeeHaa Chrome won't complain about that on Windows
FF will
 
booting ff
update is imminent
 
Chrome uses the Windows native cert store, which doesn't complain about chain issues as long as it can get the certs
It also has a set of trusted intermediates pre-loaded
Which means that in PHP 5.6 there are cases where an SSL connection will work out of trhe box on Win but not on *nix
 
BTW now that I got your attention dave :P Which one is the intermediate in that zip?
Or do I have to chain both?
 
10:39 PM
which is kind of annoying, although arguably Windows is doing it better than *nix in this case
I only found this out the other day when it happened to @Fabor
 
Good god FF is finally booted
> The certificate is not trusted because no issuer chain was provided.
Yeap
 
you put key + crt + bundle in this order to get .pem
then you use that pem in nginx
 
In your cert file you should have (in this order from top to bottom):
<your cert>
COMODORSADomainValidationSecureServerCA.crt
COMODORSAAddTrustCA.crt
 
How the fuck do you know which sequence the last two are in??
 
Look at the chain on ssllabs
 
10:42 PM
ow wow lol.
You are good :D
 
I also highly recommend these settings:
 
was thinking of building something to schedule running ssllabs for my domains and reporting
 
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers   ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128:AES256:HIGH:
 
anyone keen to build it faster?
 
I generally put those ^ in a file called /etc/nginx/ssl_defaults and then in each SSL-enabled vhost I do include ssl_defaults; directly underneath the cert/key config
Those settings should get you an A grade and support everything except IE6/XP
 
10:45 PM
Used this list for haproxy ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH‌​+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!‌​3DES:!MD5:!EXP:!PSK:!SRP:!DSS:+RC4:RC4
got A+ in total
 
/me tries it out
 
@DaveRandom Ah noice. That one fixes all the incompatibility issues with user agents / oses
Now to put it in a config file
 
@PeeHaa yup, and fyi (not that you care/it matters) you can't support IE6 without SSLv3, it doesn't do TLS
 
@DaveRandom I'm cool with that. I don't care and neither do my clients
 
It looks like this will finally kill it off, which is nice
 
10:54 PM
DAMN I am soooo happy I you finally sorted this \o/
<3
 
:-)
@zerkms other than your cipher list supports RC4, no complaints
 
Next beer is on me :D
 
I wish I had some beer
 
@DaveRandom that's what I spotted exactly right after I copied it here
 
So I should use that instead?
Also I found a vhost in the list called friday.conf
You know what it did ;)
 
10:57 PM
a redirect to youtube?
 
yes
:)
 
@DaveRandom btw, is it already required to disable RC4? If so I'm wondering why ssllabs don't complain on that
they usually tend to be aware of such things, sometimes even too much
 
@PeeHaa Well it's certainly shorter
 
@DaveRandom I have no idea what I am doing. Just say either yes or no :p
 
11:00 PM
@zerkms They don't consider it a problem to support it in itself, but they'll cap you to A if any of the reference browsers negotiate something that uses it (I think)
 
@DaveRandom I have A+ with that cipher suite
 
@PeeHaa Let's go with yes :-P
 
:)
 
why the hell ssllabs don't cache my results, argh
it re-runs it every time
 
ha! I think I got the asshole vhost that was screwing with me
 
11:04 PM
@zerkms Only thing that negotiated RC4 was IE8/XP, not a reference browser
I think I shall borrow shamelessly steal your list for my servers
 
Do I have to disable rc4 in that list?
 
I've got it somewhere from ssllabs iirc
 
@PeeHaa no, leave it there for now
brb food
 
Enjoy
 
hello all
having problem with php script update.
after making changes and saving file web page that references script seems to be running script before changes.
 
11:18 PM
@rancho therefore you aren't saving it
if it's remote then check if you could upload it or even overwrite it
 
@rancho hmm.. sure you remembered to save the file? Did you copy the file/project at some point and might be looking at a old copy... I have seen people do this a million times (maybe a bit less)
 
im changing it from my hostgator cpanel
 
@rancho wth
 
their built in code editor
i can close file and reopen and see changes have been made
 
Also always do a hard refresh because of cashing! In some browsers it's ctrl+f5
 
11:19 PM
but web page runs old script
tried that
im guessing its a hostgator problem
 
An alligator is a crocodilian in the genus Alligator of the family Alligatoridae. The two living species are the American alligator (A. mississippiensis) and the Chinese alligator (A. sinensis). In addition, several extinct species of alligator are known from fossil remains. Alligators first appeared during the Oligocene epoch about 37 million years ago. The name "alligator" is probably an anglicized form of el lagarto, the Spanish term for "the lizard", which early Spanish explorers and settlers in Florida called the alligator. Later English spellings of the name included allagarta and alagarto...
 
ive also noticed that after deleting records from db they still show up in later query
 
@rancho maybe.. you should not be using the build in editor anyway.. maybe it is a form of punishment
 
^^^ that
 
whatever it is it is driving me nuts. wasted hours trying to figure out what the hell is goin on
damn internet witches!
 
11:22 PM
@rancho try connecting via a ftp client, download your files, start a local server. Make your stuff. When it is done, upload it
 
you every query return results already deleted from db?
 
no, do not let hostagator waste more of your time.
 
very very strange
 
Why are you not developing locally? Need a hand with setting something up?
 
ending development. launching my friend.
 
11:27 PM
haha
You didn't finish yet since you still need to edit something
 
well..some testing has to be done on live page?? i thought?
 
@rancho sounds like you developed on a live page. There are alot of options with the testing and alot of different tests that can be performed.
But basicly you never want to code on the live page.
I am not saying that to make you feel bad about it, but because, when you stop doing it, and start developing locally, I am sure, you will be happy you made the switch
 
sounds like you are making a couple of incorrect assumptions
 
but we all do that sometimes
 
11:35 PM
I am just pulling facts out of my ass =]
Next fact, out of it is, it is build with wordpress? (now I am really just guessing)
 
uhhhh no
 
okay [= Anyway did not want to offend you
 
actually i am using a few other services with site that require extra setup to run locally.
 
@rancho I guess you will need to learn it the hard way...
 
so at some point it made more sense to work out kinks on page not connected to main page
your the second person in the last 10 min to ask me if this is a wordpress site.
 
11:44 PM
I did not ask if you're using WP. Just saying that the way you're working is not the best and that you might learn it the hard way
 
i have everything set up locally exactly as set up on line. I am not sure what you mean.
file structure is exactly the same
 
Alrighty. Have fun
 
[= Anyways, does the site have any kind of cache it stores? Maybe you are looking at the cache (not the browser one)
 
i am checking now.
and to be not sooo vague....i am using amazons cloud front and S3 bucket, as well as Raphael.js vector graphics library that has a few issues when running locally.
 
What kind of challanges are you having running Raphael.js locally? I thought you where using hostagator..
 

« first day (1508 days earlier)      last day (3430 days later) »