Re: cpan problem?

[email protected] ("Linda A. Walsh") Sun, 04 Aug 2019 13:09:36 -0700
Newsgroups perl.cpan.discuss
Message-ID <[email protected]> 
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <style>
/* Linda's Style playground (c) 2011 L. A Walsh (permission given to
   do w/this anything other than claim my original as your own!
   -- <a class=3D"moz-txt-link-abbreviated" href=3D"mailto:dept.playgroun=
[email protected]">[email protected]</a> )
*/
/* margin:(X):=3DT+B+R+L; (V H):V=3DT+B,H=3DR+L; (T H B):T,H=3DR+L, (T R =
B L) */

html, body {
font: 12pt "Lucida Console", monospace, fixed;
font-size-adjust:.50;
background-color:#f8fefb; color:#104060;
max-width:90ex;=20
}

table, tbody, tr, td {font: inherit;font-size 11.4pt; }

p { margin: 1em; text-indent:1em }
p+p { margin-top: .75em;margin-bottom:.75em }

small { font-size:85.18% }
big { font-size:117.4% }

quote { font-style:italic;
=2El quote { font-style:italic; font-family:cursive,sans-serif;}

em { font-variant:small-caps }
h6 { font-size:85.180%/117.398% }
h5 { font-size:100%/132.824% }
h4 { font-size:117.398%/161.803% }
h3 { font-size:132.824%/200.00% }
h2 { font-size:161.803%/234.797% }
h1 { font-size:200.000%/265.648% }

h1, h2, h3, h4, h5 {font-size: inherit; font-weight:bold}

h5, h6 {font-size: inherit; font-variant:small-caps;}
hr {font-family:monospace:fixed; width:90ex; margin:0;left}
h5 {font: inherit; font-weight:800 }
h6 { font: inherit; font-weight:700 }
h1,h2,h3,h4,h5,h6 { margin:1em }

blockquote { margin:1em 1em; font-style:italic; }
blockquote &gt; p, blockquote &gt; blockquote {
 margin-top:0.50em;margin-bottom:0.50em; text-indent:0;}

pre
{
    -moz-tab-size: 4;
    -o-tab-size:   4;
    tab-size:      4;
}
pre, cite { -moz-tab-size:2;-o-tab-size:2;tab-size:2;margin: 1.2em .8em; =
}
pre, cite, tt {font-style:oblique; background-color:#f6f6f0; color:#20204=
0;
font-family:"Lucida Console", monospace;
}
pre+pre {font-inherit; font-style:oblique;=20
background-color:#f6f6f0; color:#202040; margin:1ex .8em }

address {font inherit; font-style:oblique; font-family:"Cambria";}
address {font:inherit; margin:1em 3em; background-color:#f8faff;}
address+address {margin:0 2em}

img { margin:1.6em }

q {quotes:"=C3=A2=C2=80=C2=9C" "=C3=A2=C2=80=C2=9D" "=C3=A2=C2=80=C2=98" =
"=C3=A2=C2=80=C2=99" }
q:before { content:open-quote }
q:after { content:close-quote }

a, a:link, a:focus, a:visited {text-decoration:underline}
a:link { color:#44BB33 }
a:focus { color: #22FF11 }
a:visited { color: #557722 }

=2Esig { font: oblique 15.75pt/84pt "Lucida Handwriting",cursive }
=2Esig:first-letter {
float:left;
font: italic 56pt/84pt "Lucida Calligraphy",cursive;
font-weight:200;
}

#sig_fl {
float:left;font:italic 56pt/84pt "Lucida Calligraphy",cursive;
font-weight:200;
}

@font-face {font-family:Verdana; panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face {font-family:Cambria; panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face {font-family:"Lucida Calligraphy"; panose-1:3 1 1 1 1 1 1 1 1 =
1;}
@font-face {font-family:"Lucida Handwriting"; panose-1:3 1 1 1 1 1 1 1 1 =
1;}

=2EMsoNormal, .MsoNormalTab {
padding:0; margin:0; color:"darkmagenta"; background:"honeydew";
font: oblique 100%/100% "Calibri","Verdana","Arial" !important;
}
span.MsoNormal , span.MsoNormalTable {
font-family: inherit !important; font-size: inherit !important; font-styl=
e:
inherit !important; color: inherit !important;
}
span[font-family=3DArial], span[font-family=3D"Times New Roman"],
font[face=3DArial] ,font[face=3D"Times New Roman"] {
font-family: inherit !important; font-size-adjust:inherit !important;
font-size: inherit !important; line-height: inherit !important;
color: inherit !important;
}
  </style>
<!-- vim: ts=3D1 sw=3D1 et sc fo=3Dcqwa1 tw=3D78 syntax=3Dcss
-->
</head>
<body>
On 2019/08/04 08:50, Lars D=C9=AA=E1=B4=87=E1=B4=84=E1=B4=8B=E1=B4=8F=E1=B4=
=A1 =E8=BF=AA=E6=8B=89=E6=96=AF wrote:
<blockquote id=3D"mid_20190804175002_116dc16c_champion_fmtyew_tk"
 cite=3D"mid:[email protected]" type=3D"cite">
  <pre wrap=3D"">Works for me. What were the results of your diagnosis to=
 before posting?
  </pre>
</blockquote>
My results of my diagnosis 'to'?=C2=A0 I usually believe in reporting
problems<br>
immediately, while investigating the problem on the basis that if I<br>
find out there are problems from other people, I should probably stop<br>=

investigating until I hear more.=C2=A0 If I hear others don't have the
problem and<br>
if I haven't had time to investigate yet, I will move the priority of my<=
br>
investigation 'up' to look at it ASAP (usually when I get to a break
point <br>
in a current task).<br>
<br>
=C2=A0=C2=A0=C2=A0 But I'm not sure what you mean by my results of my dia=
gnosis 'to'.=C2=A0
I<br>
did try to make sure I had current versions of the various perl modules<b=
r>
that seemed to be called, thinking that if it recompiled one, that also
might<br>
make the problem go away.=C2=A0 Having done that, I thought I should ask =
to
see<br>
if it was problematic for anyone else.<br>
<br>
I also looked at perl.orgs security settings.=C2=A0=C2=A0 While it has a =
good
overall<br>
grade, it does have a few problems.<br>
<table class=3D"reportTable">
  <tbody>
    <tr>
      <td class=3D"tableLeft" width=3D"180"><span
 class=3D"greySmall colorF88017 cursor-help"
 title=3D"Browser does not support Server Name Indication.">No SNI <sup>2=
</sup></span>
      </td>
      <td class=3D"tableLeft" colspan=3D"3"> <font color=3D"red">Incorrec=
t
certificate because this client doesn't support SNI</font></td>
    </tr>
  </tbody>
</table>
<br>
<table class=3D"reportTable">
  <tbody>
    <tr>
      <td class=3D"tableLeft" width=3D"180"> =C2=A0 <span
 class=3D"greySmall colorF88017 cursor-help"
 title=3D"Browser effectively does not support Forward Secrecy.">No FS <s=
up>1</sup></span>
=C2=A0 <span class=3D"greySmall colorF88017 cursor-help"
 title=3D"Browser does not support Server Name Indication.">No SNI <sup>2=
</sup></span>
      </td>
      <td class=3D"tableLeft" colspan=3D"3"> <font color=3D"red">Server s=
ent
fatal alert: handshake_failure</font></td>
    </tr>
  </tbody>
</table>
<br>
<table class=3D"reportTable">
  <tbody class=3D"cipher1Block">
    <tr class=3D"tableRow">
      <td class=3D"tableLeft"><font color=3D"#f88017">TLS_ECDHE_RSA_WITH_=
AES_128_CBC_SHA256
(<code>0xc027</code>) =C2=A0 <span class=3D"greySmall">ECDH x25519 (eq. 3=
072
bits RSA) =C2=A0 FS</span> =C2=A0 <b>WEAK</b></font> </td>
      <td class=3D"tableRight"><font color=3D"#f88017">128</font></td>
    </tr>
    <tr class=3D"tableRow">
      <td class=3D"tableLeft"><font color=3D"#f88017">TLS_ECDHE_RSA_WITH_=
AES_128_CBC_SHA
(<code>0xc013</code>) =C2=A0 <span class=3D"greySmall">ECDH x25519 (eq. 3=
072
bits RSA) =C2=A0 FS</span> =C2=A0 <b>WEAK</b></font> </td>
      <td class=3D"tableRight"><font color=3D"#f88017">128</font></td>
    </tr>
    <tr class=3D"tableRow">
      <td class=3D"tableLeft"><font color=3D"#f88017">TLS_ECDHE_RSA_WITH_=
AES_256_CBC_SHA384
(<code>0xc028</code>) =C2=A0 <span class=3D"greySmall">ECDH x25519 (eq. 3=
072
bits RSA) =C2=A0 FS</span> =C2=A0 <b>WEAK</b></font> </td>
      <td class=3D"tableRight"><font color=3D"#f88017">256</font></td>
    </tr>
    <tr class=3D"tableRow">
      <td class=3D"tableLeft"><font color=3D"#f88017">TLS_ECDHE_RSA_WITH_=
AES_256_CBC_SHA
(<code>0xc014</code>) =C2=A0 <span class=3D"greySmall">ECDH x25519 (eq. 3=
072
bits RSA) =C2=A0 FS</span> =C2=A0 <b>WEAK</b></font> </td>
      <td class=3D"tableRight"><font color=3D"#f88017">256</font></td>
    </tr>
    <tr class=3D"tableRow">
      <td class=3D"tableLeft"><font color=3D"#f88017">TLS_DHE_RSA_WITH_AE=
S_128_CBC_SHA256
(<code>0x67</code>) =C2=A0 <span class=3D"greySmall"> <span
 title=3D"p: 256, g: 256, Ys: 256">DH 2048 bits</span> =C2=A0 FS</span> =C2=
=A0 <b>WEAK</b></font>
      </td>
      <td class=3D"tableRight"><font color=3D"#f88017">128</font></td>
    </tr>
    <tr class=3D"tableRow">
      <td class=3D"tableLeft"><font color=3D"#f88017">TLS_DHE_RSA_WITH_AE=
S_128_CBC_SHA
(<code>0x33</code>) =C2=A0 <span class=3D"greySmall"> <span
 title=3D"p: 256, g: 256, Ys: 256">DH 2048 bits</span> =C2=A0 FS</span> =C2=
=A0 <b>WEAK</b></font>
      </td>
      <td class=3D"tableRight"><font color=3D"#f88017">128</font></td>
    </tr>
    <tr class=3D"tableRow">
      <td class=3D"tableLeft"><font color=3D"#f88017">TLS_DHE_RSA_WITH_AE=
S_256_CBC_SHA256
(<code>0x6b</code>) =C2=A0 <span class=3D"greySmall"> <span
 title=3D"p: 256, g: 256, Ys: 256">DH 2048 bits</span> =C2=A0 FS</span> =C2=
=A0 <b>WEAK</b></font>
      </td>
      <td class=3D"tableRight"><font color=3D"#f88017">256</font></td>
    </tr>
    <tr class=3D"tableRow">
      <td class=3D"tableLeft"><font color=3D"#f88017">TLS_DHE_RSA_WITH_AE=
S_256_CBC_SHA
(<code>0x39</code>) =C2=A0 <span class=3D"greySmall"> <span
 title=3D"p: 256, g: 256, Ys: 256">DH 2048 bits</span> =C2=A0 FS</span> =C2=
=A0 <b>WEAK</b></font></td>
    </tr>
  </tbody>
</table>
<br>
Two non-validating=C2=A0 certs in the certification path<br>
<table class=3D"reportTable">
  <tbody>
    <tr class=3D"tableRow">
      <td class=3D"tableLabel"><font color=3D"red">Alternative names</fon=
t></td>
      <td class=3D"tableCell"><font color=3D"red">ingress.local =C2=A0 <b=
>MISMATCH</b></font></td>
    </tr>
  </tbody>
</table>
<br>
<table class=3D"reportTable">
  <tbody>
    <tr class=3D"tableRow">
      <td class=3D"tableLabel"><font color=3D"#f88017">Certificate
Transparency</font></td>
      <td class=3D"tableCell"><font color=3D"#f88017">No</font></td>
    </tr>
  </tbody>
</table>
<table class=3D"reportTable">
  <tbody>
    <tr class=3D"tableRow">
      <td class=3D"tableLabel"><font color=3D"red">Trusted</font></td>
      <td class=3D"tableCell"><font color=3D"red">No =C2=A0 <b>NOT TRUSTE=
D</b> <b><br>
      <span class=3D"greySmall"> <font
 title=3D"Not trusted by Mozilla trust store" class=3D"cursor-help"
 color=3D"red">Mozilla</font>=C2=A0 <font
 title=3D"Not trusted by Apple trust store" class=3D"cursor-help"
 color=3D"red">Apple</font>=C2=A0 <font
 title=3D"Not trusted by Android trust store" class=3D"cursor-help"
 color=3D"red">Android</font>=C2=A0 <font
 title=3D"Not trusted by Java trust store" class=3D"cursor-help" color=3D=
"red">Java</font>=C2=A0
      <font title=3D"Not trusted by Windows trust store"
 class=3D"cursor-help" color=3D"red">Windows</font>=C2=A0 </span></b> </f=
ont></td>
    </tr>
  </tbody>
</table>
<br>
<table class=3D"reportTable cert3Block" style=3D"">
  <tbody id=3D"Mozilla3content" class=3D"tabcontent3 fadeEffect"
 style=3D"display: block;">
    <tr class=3D"tableSeparator">
    </tr>
    <tr class=3D"tableSeparator">
      <td class=3D"tableSubHead" colspan=3D"3">
      <div class=3D"serverKeyCert"> Path #1: Not trusted (path does not
chain to a trusted anchor) </div>
      <a
 href=3D"https://www.ssllabs.com/ssltest/getTestTrustPath?d=3Dperl.org&am=
p;cid=3Df3ad7002ec7520bfc5fae4334888b7d039663f153d902e0d9c2140dd5127a0e3&=
amp;time=3D1564948165870&amp;id=3D1&amp;trustStore=3D1"
 title=3D"Download chain"> </a> </td>
    </tr>
    <tr class=3D"tableRow">
      <td class=3D"tableCell tableCellRight"><b>1</b></td>
      <td class=3D"tableCell tableCellCenter"> Sent by server <br>
=C2=A0 <font color=3D"#f88017">Not in trust store</font> </td>
      <td class=3D"tableCell"
 title=3D"CN=3DKubernetes Ingress Controller Fake Certificate, O=3DAcme C=
o">Kubernetes
Ingress Controller Fake Certificate =C2=A0 <font color=3D"grey">Self-sign=
ed</font>
      <br>
      <span class=3D"greySmall"> Fingerprint SHA256:
7f1f24f5e310c37f96c342ec61d1c49198b86c02990de8095111fc16ed722c1a<br>
Pin SHA256: 6QdPoeWrBas67CYtT56BVDIw2Wird4ZKQRrztEFy124=3D </span> <br>
RSA 2048 bits (e 65537) / SHA256withRSA </td>
    </tr>
  </tbody>
</table>
<br>
and <br>
<table class=3D"reportTable">
  <tbody>
    <tr class=3D"tableRow">
      <td class=3D"tableLabel"><font color=3D"#f88017">DNS CAA</font></td=
>
      <td class=3D"tableCell"><font color=3D"#f88017">No (<a
 class=3D"colorF88017"
 href=3D"https://blog.qualys.com/ssllabs/2017/03/13/caa-mandated-by-cabro=
wser-forum">more
info</a>)</font></td>
    </tr>
  </tbody>
</table>
Which was passed as a standard<br>
and<br>
This site works only in browsers with SNI support. <br>
<br>
(maybe the algorithms on some proxies don't support everything yet).<br>
<br>
(to see the full report, visit
<a class=3D"moz-txt-link-freetext" href=3D"https://www.ssllabs.com/ssltes=
t/analyze.html?d=3Dperl.org">https://www.ssllabs.com/ssltest/analyze.html=
?d=3Dperl.org</a>)<br>
<br>
<br>
Are those the types of item you meant by a diagnosis to?=C2=A0 I still do=
n't
get<br>
what that means.<br>
<br>
Thanks<br>
<br>
<blockquote id=3D"mid_20190804175002_116dc16c_champion_fmtyew_tk"
 cite=3D"mid:[email protected]" type=3D"cite">
  <pre wrap=3D"">
=E2=80=BA perl p5-ssl-tools/analyze-ssl.pl pause.perl.org:443
-- pause.perl.org port 443
 * maximum SSL version  : TLSv1_2 (SSLv23)
 * supported SSL versions with handshake used and preferred cipher(s):
   * handshake protocols ciphers
   * SSLv23    TLSv1_2   AES256-GCM-SHA384
   * TLSv1_2   TLSv1_2   AES256-GCM-SHA384
   * TLSv1_1   TLSv1_1   AES256-SHA
   * TLSv1     TLSv1     AES256-SHA
 * cipher order by      : client
 * SNI supported        : ok
 * certificate verified : ok
 * chain on 147.75.38.228
   * [0/0] bits=3D2048, ocsp_uri=3D<a class=3D"moz-txt-link-freetext" hre=
f=3D"http://ocsp.int-x3.letsencrypt.org">http://ocsp.int-x3.letsencrypt.o=
rg</a>, /CN=3Dpause.perl.org SAN=3DDNS:pause.cpan.org,DNS:pause.perl.org
   * [1/1] bits=3D2048, ocsp_uri=3D<a class=3D"moz-txt-link-freetext" hre=
f=3D"http://isrg.trustid.ocsp.identrust.com">http://isrg.trustid.ocsp.ide=
ntrust.com</a>, /C=3DUS/O=3DLet's Encrypt/CN=3DLet's Encrypt Authority X3=

   * [-/2] bits=3D2048, ocsp_uri=3D, /O=3DDigital Signature Trust Co./CN=3D=
DST Root CA X3
 * OCSP stapling        : no stapled response
 * OCSP status          : good
  </pre>
</blockquote>
</body>
</html>