New short notes and new order for the documents.
This commit is contained in:
David Soulayrol
parent
5f44177695
commit
e048f8779b
|
|
@ -0,0 +1,34 @@
|
|||
---
|
||||
title: Escape characters
|
||||
date: 2009-12-01
|
||||
lang: en
|
||||
layout: document.njk
|
||||
---
|
||||
|
||||
Useful escape sequences for SSH and Telnet that I always forget.
|
||||
|
||||
---
|
||||
|
||||
SSH
|
||||
===
|
||||
|
||||
<kbd>~</kbd> is the escape character for **ssh** connections for the standard ssh
|
||||
client. Supported escape sequences:
|
||||
|
||||
- <kbd>~.</kbd> — terminate connection (and any multiplexed sessions)
|
||||
- <kbd>~B</kbd> — send a BREAK to the remote system
|
||||
- <kbd>~C</kbd> — open a command line
|
||||
- <kbd>~R</kbd> — Request rekey (SSH protocol 2 only)
|
||||
- <kbd>~^Z</kbd> — suspend ssh
|
||||
- <kbd>~#</kbd> — list forwarded connections
|
||||
- <kbd>~&</kbd> — background ssh (when waiting for connections to terminate)
|
||||
- <kbd>~?</kbd> — this message
|
||||
- `~~` — send the escape character by typing it twice
|
||||
|
||||
(Note that escapes are only recognized immediately after newline.)
|
||||
|
||||
Telnet
|
||||
======
|
||||
|
||||
<kbd>Ctrl-]</kbd> is the escape character for connections with the
|
||||
standard telnet client.
|
||||
|
|
@ -0,0 +1,59 @@
|
|||
---
|
||||
title: SSL Handshake with OVH
|
||||
date: 2012-05-26
|
||||
lang: en
|
||||
layout: document.njk
|
||||
---
|
||||
|
||||
All products using **[libneon](http://www.webdav.org/neon/)** fail
|
||||
their SSL handshake with OVH shared hosting servers. It seems that the
|
||||
server hates that the versions from the SSL Record layer and the
|
||||
handshake protocol differ.
|
||||
|
||||
---
|
||||
|
||||
Assuming **libneon** is compiled with
|
||||
**[openssl](http://www.openssl.org)**, this can be fixed by replacing
|
||||
the `SSLv23_client_method` with, say, `TLSv1_client_method`. Here is
|
||||
the patch.
|
||||
|
||||
::diff
|
||||
Index: ne_openssl.c
|
||||
===================================================================
|
||||
--- ne_openssl.c (révision 1884)
|
||||
+++ ne_openssl.c (copie de travail)
|
||||
@@ -558,7 +558,7 @@
|
||||
{
|
||||
ne_ssl_context *ctx = ne_calloc(sizeof *ctx);
|
||||
if (mode == NE_SSL_CTX_CLIENT) {
|
||||
- ctx->ctx = SSL_CTX_new(SSLv23_client_method());
|
||||
+ ctx->ctx = SSL_CTX_new(TLSv1_client_method());
|
||||
ctx->sess = NULL;
|
||||
/* set client cert callback. */
|
||||
SSL_CTX_set_client_cert_cb(ctx->ctx, provide_client_cert);
|
||||
|
||||
**Revised in September 2012:**
|
||||
|
||||
A friend pointed out the following in
|
||||
[RFC5246](http://tools.ietf.org/html/rfc5246), appendix E:
|
||||
|
||||
> TLS versions 1.0, 1.1, and 1.2, and SSL 3.0 are very similar, and
|
||||
> use compatible ClientHello messages; thus, supporting all of them is
|
||||
> relatively easy. Similarly, servers can easily handle clients trying
|
||||
> to use future versions of TLS as long as the ClientHello format
|
||||
> remains compatible, and the client supports the highest protocol
|
||||
> version available in the server.
|
||||
|
||||
And also:
|
||||
|
||||
> Note: some server implementations are known to implement version
|
||||
> negotiation incorrectly. For example, there are buggy TLS 1.0
|
||||
> servers that simply close the connection when the client offers a
|
||||
> version newer than TLS 1.0. Also, it is known that some servers will
|
||||
> refuse the connection if any TLS extensions are included in
|
||||
> ClientHello. Interoperability with such buggy servers is a complex
|
||||
> topic beyond the scope of this document, and may require multiple
|
||||
> connection attempts by the client."
|
||||
|
||||
I also had opened a ticket at OVH in the meantime. But the problem
|
||||
disappeared quite mysteriously.
|
||||
20
web/index.md
20
web/index.md
|
|
@ -41,16 +41,18 @@ Les documents que j'ai conservés ou que j'exhume peu à peu de mon disque dur..
|
|||
|
||||
* [La traduction](documents/le-monde-merveilleux-de-linux-2.6) du document [Wonderful World of Linux 2.6](http://www.kniggit.net/wwol26.html), Copyright 2003, Joseph Pranevich (jpranevich AT kniggit.net).
|
||||
* [Un exposé sur le langage SGML](documents/le-langage-sgml), réalisé en 2003 pour une journée d'échanges autour des langages de description.
|
||||
* [Un logiciel pour accéder au Web par courriel](documents/webtunnel.py), écrit en 2004 lorsque je fus confronté à l'interdiction d'accéder à Internet durant une mission...
|
||||
* [Un outil pour générer un site statique](documents/achille), développé au gré de mes besoins et de mes idées presque depuis la fin de mes études jusque vers 2006.
|
||||
* [Un article sur l'utilisation des *micro-summaries* dans Firefox](documents/using-firefox-micro-summaries) écrit en 2007, en anglais.
|
||||
* [Un court mémo](documents/escape-characters) en anglais pour les caractères d'échappement dans **ssh** et **telnet**, rédigé en 2009.
|
||||
* [Une astuce pour masquer les longs entêtes d'un fichier source dans Emacs](documents/how-to-hide-long-c-headers) rédigée en 2010 en anglais.
|
||||
* [Un outil pour créer des assistants](documents/wizpym), développé à la fin des années 2000, en python et décrit ici en anglais. Je crois me souvenir que je l'utilisais en particulier pour traiter des photographies par lots...
|
||||
* [Un article sur l'utilisation des *micro-summaries* dans Firefox en 2007](documents/using-firefox-micro-summaries), en anglais.
|
||||
* [Un script Python pour isoler des blocs dans un long fichier de *logs* ](documents/identifying-logical-contexts-in-logs), en anglais.
|
||||
* [Une astuce pour masquer les longs entêtes d'un fichier source dans Emacs](documents/how-to-hide-long-c-headers) en anglais.
|
||||
* [Un logiciel pour accéder au Web par courriel](documents/webtunnel.py), écrit lorsque je fus confronté à l'interdiction d'accéder à Internet durant une mission...
|
||||
* [Un script Python pour isoler des blocs dans un long fichier de *logs* ](documents/identifying-logical-contexts-in-logs) qui date de 2012 semble-t-il, en anglais.
|
||||
* [Une note curieuse au sujet d'un problème avec SSH](documents/ssl-handshake-with-ovh) que je rencontrai en 2012 avec OVH (en anglais).
|
||||
|
||||
[APRIL]: <https://april.org>
|
||||
[CPE]: <http://www.presences-d-esprits.com>
|
||||
[ENIB]: <http://www.enib.fr>
|
||||
[NOOSFERE]: <https://noosfere.org>
|
||||
[TINUAGE]: <https://ti-nuage.fr>
|
||||
[APRIL]: <https://april.org>
|
||||
[CONSERVATOIRE]: <https://www.conservatoire.lannion-tregor.com>
|
||||
[CPE]: <http://www.presences-d-esprits.com>
|
||||
[ENIB]: <http://www.enib.fr>
|
||||
[NOOSFERE]: <https://noosfere.org>
|
||||
[TINUAGE]: <https://ti-nuage.fr>
|
||||
|
|
|
|||
Loading…
Reference in New Issue