October 2023

Preparing a server for sale – Supermicro 846 – 10 x 5TB HDD

FYI: This server has since gone to a new home. After powering off the server about 8 months ago, I took the first steps to selling it. I opened it up and took out 2x NVMe sticks (1TB each, ZFS mirrored, giving a 930G zpool) INTEL fiber NIC (Intel X540-AT2) I’ll be keeping those items.

Preparing a server for sale – Supermicro 846 – 10 x 5TB HDD Read More »

pg_dump: error: query failed: ERROR: permission denied for sequence cache_clearing_files_id_seq

Skip to the end of this post for the lesson part of this blog post. This email arrived in my inbox yesterday at about 10:00 PM: This is the backup script for my database dumps on my server at home. I immediately recognized it as the follow-on from a table I had just added. It

pg_dump: error: query failed: ERROR: permission denied for sequence cache_clearing_files_id_seq Read More »

Got a pkg vuln you can’t get rid of?

I’ve been working on this for a while. [23:18 r730-01 dvl ~] % pkg audit curl-8.4.0 is vulnerable: curl — SOCKS5 heap buffer overflow CVE: CVE-2023-38545 WWW: https://vuxml.FreeBSD.org/freebsd/d6c19e8c-6806-11ee-9464-b42e991fc52e.html 1 problem(s) in 1 installed package(s) found. [23:18 r730-01 dvl ~] % The original vuxml entry got it wrong. This problem was fixed in 8.4.0 A subsequent

Got a pkg vuln you can’t get rid of? Read More »

acm.esh key ’/var/db/acme/certs.int.unixathome.org.key’ is unreadable

Today, while mucking about with a new cronjob and log file for acme.sh, I stumbled across these error messages: Why was I stumbling around? This email arrived after the daily cert renewal: Three skips. Three error messages. Let’s look at that file: [18:37 certs dan ~] % sudo ls -l /var/db/acme/certs.int.unixathome.org.key -rw-r—– 1 root acme

acm.esh key ’/var/db/acme/certs.int.unixathome.org.key’ is unreadable Read More »

Use of K* file pairs for HMAC is deprecated – acme.sh

On Wednesday Oct 6th, I was greeted by these log messages: This is the output from the cronjob run by the acme user in my jail called certs. This is the daily run to renew any certificates which are soon to expire. This is the job in question: [19:36 certs dan ~] % sudo crontab

Use of K* file pairs for HMAC is deprecated – acme.sh Read More »

Scroll to Top