#wordpress 2018-01-01

2018-01-01 UTC
[kevinmarks], [dgold], [miklb] and [colinwalker] joined the channel
#
[colinwalker] Thanks gRegorLove
#
Loqi [colinwalker]: gRegorLove left you a message 4 hours, 13 minutes ago: Updated snippet and note about it: https://gregorlove.com/2017/12/ive-updated-this-so-it/
tantek, [kevinmarks] and [xavierroy] joined the channel
#
aaronpk [xavierroy]: did you see my latest comment on your issue? https://github.com/snarfed/wordpress-micropub/issues/80#issuecomment-354615778
#
Loqi [aaronpk] hmm I don't see a request to the token endpoint at that timestamp. That indicates to me that there's a problem with the Wordpress server hitting `tokens.indieauth.com`. I'm guessing it's an https error, that's usually the most common. Can you check w...
tantek, [kevinmarks] and [xavierroy] joined the channel
#
[xavierroy] aaronpk I'm on a shared hosting, so no access to shell. Is there a PHP code that I can host to check this?
#
aaronpk sure, one sec
#
[xavierroy] But I have no access to a laptop. Will try to connect from my phone to check
#
aaronpk can you upload a php file to the server?
#
[xavierroy] I can
#
aaronpk okay upload this code somewhere and then view it in a browser https://gist.github.com/aaronpk/001a5c91c823017241e8e2f66da7dd07
#
aaronpk it should either output a JSON response from tokens.indieauth.com or give you an error message with more info
#
[xavierroy] Tried and got this
#
[xavierroy] Response
#
[xavierroy] 35
#
[xavierroy] Error Info
#
[xavierroy] Unknown SSL protocol error in connection to tokens.indieauth.com:443
#
[xavierroy] http://xavierroy.com/curltest.php
#
aaronpk cool, that's a little more helpful :)
#
aaronpk I didn't think I was using that bleeding edge of a cipher list, is your web host super old or something?
#
[xavierroy] Yes. It is a bit old. Planning to shift away once my current plan runs out
#
[xavierroy] The strange thing is that when I was using Known earlier last year, I had no micropub issues
#
aaronpk was that before April perhaps?
#
[xavierroy] Faced this once I jumped to WP
#
[xavierroy] Think ao
#
sknebel known probably has it's own endpoints
#
[xavierroy] *so
#
aaronpk I updated the list of ssl ciphers on April 27th
#
[xavierroy] Oh.
#
aaronpk just switched to an old list and sure enough your server can connect now
#
[xavierroy] Let me check that
#
sknebel Known has it's own token-endpoint, so indieauth.com didn't matter to it
#
GWG I haven't gotten around to writing a token endpoint for WordPress yet
#
GWG Sorry
#
[xavierroy] Still getting the same error http://xavierroy.com/curltest.php
#
aaronpk that's ...
#
aaronpk remembers something about ssl session caching
#
aaronpk I hate it when http breaks
#
aaronpk I changed ssl_session_timeout to 1m instead of 1d and now it seems to be still working
#
[xavierroy] Response
#
[xavierroy] <html>
#
[xavierroy] <head><title>301 Moved Permanently</title></head>
#
[xavierroy] <body bgcolor="white">
#
[xavierroy] <center><h1>301 Moved Permanently</h1></center>
#
[xavierroy] <hr><center>nginx/1.12.2</center>
#
[xavierroy] </body>
#
[xavierroy] </html>
#
[xavierroy] Error Info
#
[xavierroy] 0
#
aaronpk oh wait
#
aaronpk I think this just isn't going to work
#
aaronpk I think your server isn't sending the SNI header
#
aaronpk and I can't really fix that without getting new IP addresses for each server name which is not something I want to do
#
aaronpk okay, well at least we know what the problem is. this just isn't going to work on such an old server.
#
[xavierroy] Oh ok. Then I guess I'll just move to a different host once my current billing ends
#
[xavierroy] And I'll wait till you add an copy option in Quill and do things manually 😀
#
[xavierroy] @aaronpk++
#
Loqi aaronpk has 4 karma in this channel (1521 overall)
#
GWG [xavierroy]: When does your cycle end?
#
[xavierroy] May or Jun I think
#
GWG Okay
#
GWG [xavierroy]: While I have you, any other problems you are experiencing I might have contributed to?
#
[xavierroy] End of June.. just checked
#
aaronpk [xavierroy]: you could also file a support request with the host to request that they upgrade their OpenSSL version
#
aaronpk if it's that old, chances are it's full of security issues
#
[xavierroy] Ok. Will do that
#
aaronpk is not super sympathetic to hosting companies not keeping their software up to date
#
[xavierroy] I think I'll not wait till Jun to switch
#
[xavierroy] Will start looking for a better one
#
aaronpk there's a few listed here: https://indieweb.org/web_hosting#Shared_Hosting
#
aaronpk I'm a fan of DreamHost :)
#
[xavierroy] I really want to use Teacup as I wanted to track my food intake this year
#
[xavierroy] Right now, I'm just tracking that manually
#
[xavierroy] Though as private posts on my site
#
[xavierroy] Just to tell my host, is there a specific version of OpenSSL version that they should support?
#
aaronpk the latest?
#
GWG Aren't they up to 1.02?
#
GWG Oh good, pfefferle signed off on my IndieAuth stuff
#
[xavierroy] OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 that's the version my host uses
#
aaronpk lol 2008
#
sebsel lol
#
aaronpk at least that's so old that some of the recent vulnerabilities weren't even written yet
#
[xavierroy] Ha ha
#
GWG Rhel5?
#
aaronpk redhat enterprise linux 5
#
GWG aaronpk: I know. I'm surprised they haven't upgraded
[pfefferle] joined the channel
#
[pfefferle] I can highly recommend https://uberspace.de
#
GWG HI, [pfefferle]
#
GWG [pfefferle]: While you are here, can I ask a favor?
#
[pfefferle] Hey
#
[pfefferle] Sure
#
[pfefferle] Hmm uberspace is only available in german right now 😔
#
GWG [pfefferle]: Would you be able to set up the same script-based deployment script for IndieAuth as you use your other plugins?
#
[pfefferle] Sure, will do later today!
#
[pfefferle] Thanks for your work
#
GWG [pfefferle]: I think since you pushed the original plugin, even though you changed the repo, it would be your credentials we'd need, wouldn't it?
#
GWG [pfefferle]: More coming.
#
[pfefferle] I will setup the credentials for the indieweb wp account
#
GWG I am going to try unit testing if I can be successful
#
GWG [pfefferle]: Good point.
#
[pfefferle] I already added it as a committee for the wp plugin
#
GWG [pfefferle]: And you usually set it up so Circle CI tells me my 25 lines of code are too complex.
#
[pfefferle] :)
#
GWG [pfefferle]: Either way, I'm very pleased with the IndieAuth stuff so far.
#
[pfefferle] 👍
#
[pfefferle] GWG++
#
Loqi gwg has 36 karma in this channel (299 overall)
#
GWG Once it goes stable, which I still want to do some things before we release 1.2, I'll be able to post from my phone to my site using a bearer token received from Gimme a Token, through the REST API interface to Post Kinds.
#
GWG I tested that, and it does work.
#
GWG The REST API interface to Post Kinds is a 'poor man's' Micropub
#
GWG It takes the kind, a URL, and plaintext content as parameters. Will allow me to post Likes, Notes, and Bookmarks from my phone.
#
GWG I really need to write that up as a blog post
tantek, gRegorLove, ben_thatmustbeme and [miklb] joined the channel