Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
Re: Server migration - status, discussion
uli: more follow up, what do you get if you visit www.howsmyssl.com ?
Offline
#32 2018-08-23 22:26:36
- uli
- Moderator
- From: Cologne
- Registered: 2006-08-15
- Posts: 4,316
Re: Server migration - status, discussion
gaekwad wrote #313578:
Something to try – reset Chrome SSL state
I’ve tried this but to no avail. I’ve also tried the about:config method for TLS.VER you’ve recommended later on. My values were all default, so I couldn’t improve a thing.
From this test here www.howsmyssl.com I got six times a green “good”. In case it tells you something, here’s the cipher suits my FF supports:
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
- TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
- TLS_DHE_RSA_WITH_AES_128_CBC_SHA
- TLS_DHE_RSA_WITH_AES_256_CBC_SHA
- TLS_RSA_WITH_AES_128_CBC_SHA
- TLS_RSA_WITH_AES_256_CBC_SHA
- TLS_RSA_WITH_3DES_EDE_CBC_SHA
The forum profile links I found didn’t work (forum links to the .com forum) came from a post where I handcoded links to spammer profiles in the moderation forum. There may be more such links with .com hardcoded in them in the forum archives, in case someone copied and pasted manually. But the forum script builds the User X wrote links to posts in a different manner (e.g. ./viewtopic.php?pid=313578#p313578), so there’s no tld involved, at least in recent times.
Is it feasible to clear your browser history for the Textpattern sites to check if that helps?
I’ve set up a whole new FF profile for that reason, and I get the same results here, too, SSL_ERROR_NO_CYPHER_OVERLAP on the first screen, and then SSL_ERROR_PROTOCOL_VERSION_ALERT on the second.
Pete, I appreciate all your tips and hints to get my browser back on the tracks. Thank you very much!!
(Have I forgotten to answer something? Sorry if so, it’s late here. Ah yes, my OS is Mountain Lion, 10.8.)
In bad weather I never leave home without wet_plugout, smd_where_used and adi_form_links
Offline
Re: Server migration - status, discussion
uli: please try now, I’ve changed the cipher suite at the server.
Offline
#34 2018-08-24 11:04:32
- uli
- Moderator
- From: Cologne
- Registered: 2006-08-15
- Posts: 4,316
Re: Server migration - status, discussion
Yay, it’s back for me! Thank you, Pete!! :)
In bad weather I never leave home without wet_plugout, smd_where_used and adi_form_links
Offline
Re: Server migration - status, discussion
uli wrote #313613:
Yay, it’s back for me! Thank you, Pete!! :)
Great news! I may end up calling on you again as we fine-tune the settings. The selection of ciphers used has been increased, and should cover modern browsers. It’s a balancing act, but it’s a fun one!
Offline
#36 2018-08-24 11:30:51
- uli
- Moderator
- From: Cologne
- Registered: 2006-08-15
- Posts: 4,316
Re: Server migration - status, discussion
gaekwad wrote #313614:
I may end up calling on you again as we fine-tune the settings.
Don’t hesitate, I’m glad to give anything back.
In bad weather I never leave home without wet_plugout, smd_where_used and adi_form_links
Offline
Re: Server migration - status, discussion
gaekwad wrote #313614:
The selection of ciphers used has been increased, and should cover modern browsers.
Just out of curiosity, what is the before / after list?
Where is that emoji for a solar powered submarine when you need it ?
Sand space – admin theme for Textpattern
phiw13 on Codeberg
Offline
Re: Server migration - status, discussion
phiw13 wrote #313616:
Just out of curiosity, what is the before / after list?
All the gory details here – before was the list from cipherli.st which with hindsight was too restrictive for older browsers.
Current situation outlined here if you’re curious. The cipher strength has gone from 100/100 to 90/100 with the change, but I’m happy with an A+ overall.
Offline
Re: Server migration - status, discussion
gaekwad wrote #313620:
All the gory details here – before was the list from cipherli.st which with hindsight was too restrictive for older browsers.
Thanks !
Where is that emoji for a solar powered submarine when you need it ?
Sand space – admin theme for Textpattern
phiw13 on Codeberg
Offline
Re: Server migration - status, discussion
gaekwad wrote #313593:
This period of transition is taking some time because of legacy & custom code in a number of Textpattern sites. There’s a bunch of work to do to get things running on modern code, and keep the flagship sites up-to-date.
Is that something we could help with? I’ve no idea about the forum software, but if you need someone to, say, help rid textpattern.org of the many errors it’s showing, I could probably help out.
And … thanks for all the hard work and consolidation you and others have been doing in the background!
TXP Builders – finely-crafted code, design and txp
Offline
Re: Server migration - status, discussion
jakob wrote #313634:
Is that something we could help with? I’ve no idea about the forum software, but if you need someone to, say, help rid textpattern.org of the many errors it’s showing, I could probably help out.
Likely, yes – and thank you for the offer of help. The forum is on an up-to-date codebase thanks to the dev team, but textpattern.org and rpc.textpattern.com are in need of some attention.
Your abilities with plugins will be valuable and appreciated. I’ll be back in the office Monday and I’ll get some things in order then drop you a line.
Offline
Re: Server migration - status, discussion
It’s the RPC and the .org site that need work, as they haven’t been touched for a few years. The .com site and forum are both fully up-to-date codebases (as is the docs site).
Although the .org site will be replaced as soon as I get a decent amount of spare time, so it just really needs some band-aids to keep it running until then. I’m sure Pete can give you a login Jakob (I’m hoping to look at it next week myself once I get a couple of big work deadlines out the way). I think I will export the .org site as a theme and make a temporary Github repo for it so we can work on it in some sort of version control.
Offline
Re: Server migration - status, discussion
philwareham wrote #313663:
Although the .org site will be replaced as soon as I get a decent amount of spare time, so it just really needs some band-aids to keep it running until then. I’m sure Pete can give you a login Jakob (I’m hoping to look at it next week myself once I get a couple of big work deadlines out the way). I think I will export the .org site as a theme and make a temporary Github repo for it so we can work on it in some sort of version control.
Yep, I know you’re planning something altogether better and more focused. But in the meantime, I’d be happy to remove errors and neaten up what we have so it’s usable as a reference resource until then.
TXP Builders – finely-crafted code, design and txp
Offline
Re: Server migration - status, discussion
Hi Jakob,
Thanks for the offer of help. I’ve just exported the .org site as a theme and uploaded to a repo. You can either fork it – or, if you prefer, I can give you direct commit access to it.
Offline
Re: Server migration - status, discussion
It looks like the www.textpattern.com migration is going to be reasonably straightforward, so I’ve started on that today.
I will update the OP after I’ve posted this. I’ve spun up a test site with the textpattern.com contents on the latest codebase (thanks, philwareham) and it should be ready for testing by some keen eyes in a few hours or less. I have some redirects to map, then I think we’re good for some user testing.
As of the time of this post:- textpattern.com is running on a Joyent server and nothing has changed
- www-dev.textpattern.com is a tweaked version of textpattern.com (Textpattern 4.7.1, PHP 7.2, Percona 5.7) running on the new server
If the testing with www-dev.textpattern.com goes well, then that will become textpattern.com shortly after any bugs are ironed out, and go live on the new server. The www-dev.textpattern.com URL is just for testing, and it will disappear after the migration completes.
Have questions? Please ask, I’ll be here for a few hours minimum.
Last edited by gaekwad (2018-08-29 19:16:25)
Offline