**** BEGIN LOGGING AT Fri Mar 11 02:59:58 2016
Mar 11 10:40:17 <Sicelo> using N900 sucks sometimes ... like now I need to use Pulse Secure
Mar 11 11:01:31 <bencoh> wth is that?
Mar 11 11:23:21 <ceene> propietary vpn?
Mar 11 12:26:03 <Sicelo> it's software used with Juniper firewalls. vpn as ceene indicated.
Mar 11 12:26:23 <Sicelo> there are clients for android & ios, as usual :)
Mar 11 12:27:35 <Sicelo> there is client for linux desktop (binary), but even that is not trivial to use. most reports indicate failure, unless you're on redhat (no surprise, i guess?)
Mar 11 12:43:27 <Sicelo> regarding ssl3, i have just been helping a friend with his server, and for IMAPS i had to temporarily enable ssl3.  in general we understand that  to be vulnerable (poodle), right? then i ran the test on google imap server, and they also have ssl3 enabled. am i missing something?
Mar 11 12:55:24 <enyc> Sicelo: oooer... what mailclient  required ssl3 ???
Mar 11 12:57:35 <enyc> my courier-imap-ssl has TLS_PROTOCOL="TLS1.2"
Mar 11 12:57:45 <enyc> and i believe it works with the n900 mailclient
Mar 11 12:58:03 <enyc> i.e. not allowing SSL2 SSL3 TLS1.0 TLS1.1
Mar 11 12:58:23 <Sicelo> not sure
Mar 11 12:58:40 <enyc> well, how did you come to "for IMAPS i had to temporarily enable ssl3"
Mar 11 12:59:22 <enyc> I did indeed hear google  have  lax  ssl allowance on inbound connections,  though that doesn't mean your client  has to be set to allow  low-grade encryption
Mar 11 12:59:31 <Sicelo> testing with openssl s_client -connect server:993
Mar 11 13:00:23 <enyc> using 'openssl' binary on maemo ?
Mar 11 13:00:28 <Sicelo> yes
Mar 11 13:00:31 <enyc> that might just be outdated or somesuch
Mar 11 13:00:41 <Sicelo> hmm, possible
Mar 11 13:00:45 <enyc> i'd ignore that and test with the maemo mailclient
Mar 11 13:01:00 <Sicelo> 0.9.8zf
Mar 11 13:01:03 <enyc> aaaaaaaaah
Mar 11 13:01:18 <enyc> yes old tool
Mar 11 13:01:24 <enyc> definitely don't use that
Mar 11 13:01:47 <enyc> though raises questions what  (unpatched?)  openssl / gnutls   libraries the maemo browser and mailclient  are linked against
Mar 11 13:01:56 <Sicelo> let me check what's inside ED
Mar 11 13:02:03 <enyc> ??ED??
Mar 11 13:02:38 <Sicelo> easy debian :)
Mar 11 13:02:49 <enyc> there is a talk.maemo.org thread about that easy deiban
Mar 11 13:02:59 <enyc> somebody did the needed hacks to make a  jessie armhf  image 
Mar 11 13:03:22 <enyc> wheezy armel architecture (old images) is not included in debian long term support
Mar 11 13:03:36 <enyc> squeeze (older!) armel image is now also debian archived
Mar 11 13:04:22 <Sicelo> okay :)
Mar 11 13:04:28 <Sicelo> let me ssh to my home pc
Mar 11 13:05:19 <enyc> http://talk.maemo.org/showpost.php?p=1446540&postcount=3138
Mar 11 13:06:12 <enyc> they had to patch for older pulseaudio and older linux kernel
Mar 11 13:06:22 <enyc> but now armhf, will run faster and up-to-date / supported
Mar 11 13:06:31 <enyc> also it looks likely jessie-armhf will be -lts supported
Mar 11 13:24:20 <bencoh> Sicelo: try openconnect
Mar 11 13:24:50 <bencoh> it has support for cisco anyconnect and iirc they were working on juniper suff as well
Mar 11 13:26:42 <Sicelo> bencoh: looks good indeed. will try it :)
Mar 11 13:57:40 <Sicelo> enyc: thanks for the nudge. disabled ssl3 again, and tls working even with maemo's openssl
Mar 11 14:42:49 <enyc> Sicelo: hard to sort out at first, not always know what change(s) you actually needed etc etc!
Mar 11 23:43:03 <Luke-Jr> Pali: new kdepim-noakonadi kmail fails to build :<
Mar 11 23:47:29 <Luke-Jr> nm, I think I'm doing osmething wrong
Mar 12 01:11:49 <Pali> Luke-Jr: it builds fine for me...
**** ENDING LOGGING AT Sat Mar 12 02:59:58 2016