Hodžův blog

24 Bře

The following signatures were invalid: EXPKEYSIG B188E2B695BD4743

Error:
root@mailgw:~# apt update
Hit:1 http://deb.debian.org/debian buster InRelease
Hit:2 http://security.debian.org/debian-security buster/updates InRelease
Hit:3 http://downloads.metasploit.com/data/releases/metasploit-framework/apt lucid InRelease
Hit:4 https://packages.sury.org/php buster InRelease
Err:4 https://packages.sury.org/php buster InRelease
The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://packages.sury.org/php buster InRelease: The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key
W: Failed to fetch https://packages.sury.org/php/dists/buster/InRelease The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key
W: Some index files failed to download. They have been ignored, or old ones used instead.

Quick fix:
# apt-key del 95BD4743; wget -nv -O - "https://packages.sury.org/php/apt.gpg" | apt-key add -
# apt-get update

08 Úno

Xorg a rozlišení 2560×1440

Koupil jsem si nový monitor s rozlišením 2560×1440 pixelů, ale Xorg ho nerozpoznal korektně

xrandr --listmonitors
Monitors: 1
0: +*HDMI-1 1920/725x1440/428+0+0 HDMI-1

…takže jsem musel rozlišení nastavit ručně. Nejdříve jsem si vygeneroval adekvátní modeline (rozlišení 2560×1400 pixelů při 60Hz):

$ cvt 2560 1440 60
# 2560x1440 59.96 Hz (CVT 3.69M9) hsync: 89.52 kHz; pclk: 312.25 MHz
Modeline "2560x1440_60.00" 312.25 2560 2752 3024 3488 1440 1443 1448 1493 -hsync +vsync

a ten následně nacpal do xrandr

xrandr --newmode "2560x1440_60.00" 312.25 2560 2752 3024 3488 1440 1443 1448 1493 -hsync +vsync
xrandr --addmode HDMI-1 2560x1440_60.00
xrandr --output HDMI-1 --mode 2560x1440_60.00

04 Úno

.CSR, .CRT a .KEY aneb patří k sobě?

Dnes jsem zákazníkovi obnovoval certifikáty. Jelikož jsem generování a stažení certifikátů dělal z různých počítačů, chtěl jsem mít 100% jistotu, že soubory k sobě patří. S OpenSSL to lze naštěstí velmi snadno ověřit:

# CSR
$ openssl req -in domena.cz.csr -pubkey -noout -outform pem | sha256sum
a9a2390ea6ea6a3d5a186b5ee137f89909f533031fab9e2010a8f2c237fb9b7e -

# Certifikát
$ openssl x509 -in domena.cz.crt -pubkey -noout -outform pem | sha256sum
a9a2390ea6ea6a3d5a186b5ee137f89909f533031fab9e2010a8f2c237fb9b7e -

# Privátní klíč
$ openssl pkey -in domena.cz.key -pubout -outform pem | sha256sum
a9a2390ea6ea6a3d5a186b5ee137f89909f533031fab9e2010a8f2c237fb9b7e -

Takže patří…

24 Lis

FortiGate – Problem with license information

After renewing a contract license, the kicense information widget indicates that all or some of the licenses are not available.

QuickFix: Run the following commands in the CLI
diag debug app update -1
diag debug en
exec update-now

28 Srp

Odstranění diakritiky ze souboru

# sudo apt install recode
# recode -f utf8..flat soubor.txt

24 Čvc

HowTo: Nextcloud – Syntax error or access violation: 1071 Specified key was too long; max key length is 767 bytes

# mysql -u root -p
MariaDB [(none)]> use nextcloud;
MariaDB [nextcloud]> set global innodb_large_prefix=on;
MariaDB [nextcloud]> set global innodb_file_format=Barracuda;
MariaDB [nextcloud]> quit;
# sudo -u www-data php occ maintenance:repair

30 Dub

HowTo: Uninstalling Windows Defender with PowerShell

Uninstall-WindowsFeature -Name Windows-Defender

20 Led

Error installing VMware Remote Console plugin – (k)ubuntu 18.04

Quick Fix
# apt-get install desktop-file-utils

17 Led

„The Ext Drive has been disabled due to a detected fault“ Lenovo SR570 & Lenovo DE4000H

1. Power off (all) servers
2. Change the volume LUN ID to ID 0 on DE4000H
3. Power on (all) servers

05 Říj

UBNT UniFi AP (UAP) Upgrade Loop

1. Forgot device from UniFi
2. SSH to UniFi AP (default credential ubnt/ubnt)
ssh root@ip_of_unifi_ap
3. Upload latest firmware image from UniFi web site (https://www.ui.com/download/unifi/unifi-ap)
cd /tmp
wget https://dl.ubnt.com/unifi/firmware/BZ2/4.0.15.9872/BZ.ar7240.v4.0.15.9872.181229.0259.bin --no-check-certificate
mv BZ.ar7240.v4.0.15.9872.181229.0259.bin fwupdate.bin

4. Run upgrade process
syswrapper.sh upgrade2 &
5. Wait a moment & adopt device in controller

Hodžův blog is is proudly powered by Wordpress and the Magellan Theme