pleroma.debian.social

pleroma.debian.social

Wouter Verhelst | @wouter@pleroma.debian.social

Debian Developer. husband. FOSDEM organizer. Tennis lover. Amateur musician.

If it ain't fun, you're not doing it right.

@wolfr
Ik woon in Zuid Afrika en heb al jaaaren een desktop sip-telefoon aangesloten bij 3starsnet (grandstream hardware)

Zijn sindsdien wel overgenomen en heten nu anders, maar werkt gewoon goed, ook met andere sip providers.

@neverpanic I found out in the mean time through a quickly whipped up docker container that 15.6 doesn't support it, but 16 does (at least as far as "rpm --import" not complaining with "rpm -qa|grep gpg" listing the key).

I'm fine with dropping RHEL9 and OpenSUSE <15 from our supported distributions 🤷

@neverpanic actually we're supposed to have already dropped 15.5 since... January. Heh.

@neverpanic yes, it does seem to work on RHEL10. Also on Fedora 41, but not on OpenSUSE 15.5 (I don't have VMs for the other RPM-based systems we support). So we'll probably have to drop support for RHEL9 and openSUSE 15.5 then, I guess (provided 15.6 works, will test soon).

Is there a workaround for this that you're aware of? Other than "generate RSA keys instead", which technically we could do but which I'd like to avoid if at all possible.

@neverpanic Good question! Absolutely zero clue. This is the standard RPM as shipped with RHEL9 (haven't tried on fedora or opensuse yet)

[wouter@rhel rpm-gpg]$ sudo rpm --import RPM-GPG-KEY-BEID-RELEASE
[wouter@rhel rpm-gpg]$ sudo rpm --import RPM-GPG-KEY-BEID-RELEASE-2025
fout: RPM-GPG-KEY-BEID-RELEASE-2025: key 1 import failed.
[wouter@rhel rpm-gpg]$ sudo rpm --import RPM-GPG-KEY-BEID-CONTINUOUS

The only differences are that -2025 is recent and ECDSA NIST P-384, the other two are over 10 years old and need to be rotated, and are RSA.

Does RPM not support ECDSA for code signatures? Or am I doing something wrong?

@evan
My eyes! Take take the DN away!

@xeraa
I don't know the man, but if you say so I'll take your word for it

@fanf42
Source? I don't see any news updates related to that, but ICBW

@CyrilBrulebois
Congrats! I co owned a business for 15 years, before moving across continents.

It's hard, it's stressful, but it's also rewarding if you can make it work. And boy do I miss being able to say "sorry, our company doesn't do that"!
@debamax

@babe
I don't have a cat, but here's Stormy waiting for me to throw her ball.
a picture of my border collie, Stormy, looking excitedly at the camera

@xeraa
Can't help but feel that these bullet points were written by an LLM. The style matches, that's for sure.

@futtta
Is daar geen ussd code voor?

@jmtd
ISO all the way. ANSI doesn't let me type HTML.

Dear country between Canada and Mexico that is a failed experiment. Please keep within your existing borders and implode quietly.

@fazalmajid
Getting lawyerly is instant goodbye for me. Interacting with my open source project is a privilege, not a right. If you take up my time doing anything other than 'oh sorry' after I said that what you did is not welcome... Thanks but no thanks
@ariadne @androcat

@thattommyhall
Something as versatile as curl can never be "mostly done", there's always new protocols being added
@bagder

@sotolf
No need to swear. I thought we were having a friendly conversation, but apparently not 🤷

Bye
@paul @rl_dane @justin

@justin
Instead of all this awfulness, I could imagine an LLM being trained on the downloads from dumps.wikimedia.org and it then being released under a CC-SA license, for instance.
@paul @rl_dane @sotolf

»