2024-08-05 GnuCash IRC logs
00:21:59 *** chris has joined #gnucash
00:21:59 *** ChanServ sets mode: +v chris
01:36:25 *** fell has quit IRC
01:37:45 *** fell has joined #gnucash
01:37:45 *** ChanServ sets mode: +o fell
01:46:58 *** chris has quit IRC
10:45:13 <fell> @tell warlord
10:45:13 <gncbot> fell: (tell <nick> <text>) -- Tells <nick> <text> the next time <nick> is in seen. <nick> can contain wildcard characters, and the first matching nick will be given the note.
10:45:15 <fell> Trying "code.gnucash.org"
10:45:16 <fell> ;; Connection to 2003:df:a702:ac00:e228:6dff:fefa:4f34#53(2003:df:a702:ac00:e228:6dff:fefa:4f34) for code.gnucash.org. failed: host unreachable.
10:46:35 <fell> @tell warlord Trying "code.gnucash.org" ;; Connection to 2003:df:a702:ac00:e228:6dff:fefa:4f34#5 (2003:df:a702:ac00:e228:6dff:fefa:4f34) for code.gnucash.org. failed: host unreachable.
10:46:35 <gncbot> fell: The operation succeeded.
11:26:21 *** warlord has joined #gnucash
11:26:21 *** gncbot sets mode: +o warlord
11:26:45 <warlord> Hi all. It looks like the gnucash.org DNS signatures expired. I've contacted Linas to get this corrected.
11:26:45 <gncbot> warlord: Sent 40 minutes ago: <fell> Trying code.gnucash.org ;; Connection to 2003:df:a702:ac00:e228:6dff:fefa:4f34#5 (2003:df:a702:ac00:e228:6dff:fefa:4f34) for code.gnucash.org. failed: host unreachable.
11:27:47 <fell> Thanks!
11:27:50 <warlord> fell, what is "2003:df:a702:ac00:e228:6dff:fefa:4f34"? That's not an IP Address for code.
11:28:33 <warlord> The failure must've happened over the weekend, because it WAS working as of Aug 3..
11:30:11 <fell> #53 seems to be my local nameserver. ;-)
11:36:14 <warlord> That would validate the NS / DS issues.
11:42:10 <warlord> We need a system to check that the signatures are /about/ to expire and notify BEFORE they expire. *sigh*
11:44:24 <warlord> Sig expired: 20240804202908
13:42:34 *** ArtGravity has joined #gnucash
13:42:34 *** ChanServ sets mode: +v ArtGravity
15:43:30 <jralls> @tell chris What prevents importing a CSV of that layout now?
15:43:30 <gncbot> jralls: The operation succeeded.
15:52:15 <jralls> warlord, how about a simple shell script that checks the signature expiration and sends an email to core.gnucash.org when it's less than n days away with n somewhere between 30 and 90. Set it to run weekly in a cron job on code
16:08:22 <warlord> jralls, Yeah, could probably do something like that..
16:10:17 <warlord> dig +dnssec ... | grep RRSIG | head -1 | awk '{print $9}'
16:10:26 <warlord> results in: 20240804202908
16:21:42 <warlord> Parsing that with: sed -e 's/\([0-9]\{8\}\)\([0-9]\{2\}\)\([0-9]\{2\}\)\([0-9]\{2\}\)/\1 \2:\3:\4/'
16:21:50 <warlord> Results in: 20240804 20:29:08
16:22:03 <warlord> And THAT can be parsed by "date": date -d "20240804 20:29:08"
16:22:03 <warlord> Sun Aug 4 08:29:08 PM EDT 2024
16:22:12 <warlord> So, yeah, I can write a script to monitor it.
16:51:10 <warlord> UPDATE: Linas acknowledged and is looking into the issue.
16:52:02 <warlord> jralls, I wrote a script.. Now I need to figure out how to get it to send email when the domain is expiring soon.
16:52:16 <warlord> (I also don't know how many days ahead it should warn)
17:57:13 *** phebus has joined #gnucash
17:57:13 *** ChanServ sets mode: +v phebus
18:22:14 *** chris has joined #gnucash
18:22:15 *** ChanServ sets mode: +v chris
18:33:14 <jralls> warlord, 30 days is a good place to start. `if [ $date_expires - $date_today lt 86400 * 30 ]; then sendmail gnucash_core@gnucash.org "The domain signature will expire soon!"; done`
18:35:10 <warlord> I think the signatures, by default, are only valid for ~30-40 days.
18:37:16 <warlord> For example, ORG was signed on 20240801192958 and valid until 20240822202958. That's 3 weeks of validity.
18:40:44 <jralls> Good grief. And I thought LetsEncrypt was annoying because you have to renew every 3 months. Linas must have some automation that needs better error handling/reporting.
18:51:55 <warlord> Right.
18:52:32 <warlord> gnucash.org was signed 20240705200201 and expired 20240804202908 -- so 30 days
18:52:45 <warlord> I don't know when it was previously signed.
19:04:05 *** manis has quit IRC
19:19:15 *** chris has quit IRC
19:19:44 *** manis has joined #gnucash
19:27:32 *** warlord has quit IRC
19:58:56 *** chris has joined #gnucash
19:58:56 *** ChanServ sets mode: +v chris
20:13:39 *** warlord has joined #gnucash
20:13:39 *** gncbot sets mode: +o warlord
20:38:57 *** warlord has quit IRC
20:43:56 *** chris has quit IRC
20:55:52 *** ArtGravity has quit IRC
21:34:09 *** warlord2 has joined #gnucash
21:34:13 *** warlord2 is now known as warlord
21:34:50 *** gncbot sets mode: +o warlord
21:55:27 *** fell has quit IRC
21:55:42 *** fell has joined #gnucash
21:55:42 *** ChanServ sets mode: +o fell
21:58:10 *** fell has quit IRC
21:58:49 *** fell has joined #gnucash
21:58:49 *** ChanServ sets mode: +o fell
22:04:22 *** fell_laptop has joined #gnucash
22:04:22 *** ChanServ sets mode: +o fell_laptop
22:04:25 *** fell has quit IRC
22:09:01 *** fell_laptop has quit IRC
22:09:55 *** fell_laptop has joined #gnucash
22:09:56 *** ChanServ sets mode: +o fell_laptop
22:22:46 *** manis has quit IRC
22:45:04 *** fell_laptop has quit IRC
22:46:17 *** fell_laptop has joined #gnucash
22:46:17 *** ChanServ sets mode: +o fell_laptop
22:48:57 *** fell_laptop has quit IRC
22:49:13 *** fell has joined #gnucash
22:49:13 *** ChanServ sets mode: +o fell
23:15:18 *** fell has quit IRC
23:17:06 *** fell has joined #gnucash
23:17:06 *** ChanServ sets mode: +o fell
23:20:28 *** fell has quit IRC
23:21:12 *** fell has joined #gnucash
23:21:13 *** ChanServ sets mode: +o fell
23:53:43 *** fell has quit IRC