Very pleased to have encrypted sessions now for BINKP! :)
On 16-Dec-2018 06:01, NuSkooler wrote to g00r00 <=-
On Saturday, December 15th g00r00 muttered...
Very pleased to have encrypted sessions now for BINKP! :)
This sounds awesome. I may have to actually write a Bink protocol
support for Enig at some point so I can do this as well. I'd love to
drop all plain text protocols.
Very pleased to have encrypted sessions now for BINKP! :)
This sounds awesome. I may have to actually write a Bink protocol
support for Enig at some point so I can do this as well. I'd love to
drop all plain text protocols.
Would be good to have the specs opened up, so all binkp implementations can make use of encrypted sessions.
On 12-16-18 08:34, g00r00 wrote to vk3jed <=-
Would be good to have the specs opened up, so all binkp implementations can make use of encrypted sessions.
Yep, I will try to get it into BINKD or at least accepted by them as
the way they would implement it when they finally do.
I think if BINKD has it then pretty much everyone would accept it as
the standard way to do things.
That would be awesome. And would mean all 3 of my systems would
implement encryption at that point (1 Mystic, 2 binkd).
These are close to the A40 release so please test if you are interested, and let me know of any bugs or suggestions. I'd like to release A40 on XMAS or New Years assuming I do not hear anything back from people.
+ 2018.12.23 21:59:53 BINKP 1-S: NUL TIME Sun, 23 Dec 2018 21:59:53 1300 + 2018.12.23 21:59:53 BINKP 1-S: NUL VER Mystic/1.12A40 binkp/1.0
Just setting up a test version of this pre-alpha and testing things with Al today/tomorrow.
Just sent some secured netmail that was encrypted. leaving my test
system it was all good :) the packet was unreadable and the session between our two systems was secure.
I wonder if the logs should show when something is encrypted as it is exported?
You're welcome, it was only a quick add that only took a few minutes so certainly not a big deal and if it helps you pinpoint issues then it was
a no brainer!
Awesome, thank you and thank Al too. I don't know if he reads here.
Either way, I'll double check and make sure all of them have a message that says its encrypting and decrypting.
Awesome, thank you and thank Al too. I don't know if he reads here.
Awesome, thank you and thank Al too. I don't know if he reads here.
Everyday.. :)
was wondering if the events section has been fixed?
I run ./mis -server, and have noticed that mystic is
ignoring my echomail.in event - it should run "z"
which runs mutil, then updates my ip
but all it runs is "mutil" ???
I've been running events for years no problems, and there are no reported issues at the moment although I am using the "default" events or all my echomail processing.
Can you post your event so we can take a look?
it is just the "Toss incomming echomail, I change it to run my script,
and at somepoint, mystic re-verts back to the original entry??
should I shutdown mis after changing the event?? if so, how about adding
a prompt to remind us that we need to restart the server or daemon ???
$c mci code, blank prompts crashing, seenby, pkt header, 2020 date, smtp not sending ehlo after SSL step up and so on.
To upgrade from previous prealpha just replace all your .exe files you
can do that with "install replace c:\mystic\"
To upgrade from previous prealpha just replace all your .exe files you
can do that with "install replace c:\mystic\"
Hey g00r00, I volunteer to do any linux upgrade testing if you like. Feel free to email me separately - ryanfantus@gmail.com - I'm happy to be the linux guinea pig as needed. :)
Presumably replacing the binaries with the new ones is all that would be required here as well?
Also, FYI, I have some systemd scripts for automating some Mystic stuff. Let me know if you'd like to get a look at those, perhaps for placing in the wiki or docs.
I am updating prealphas with some fixes and changes including several to BINKP that I would appreciate getting tested. They will be up in about
5 minutes or less.
I am updating prealphas with some fixes and changes including several to BINKP that I would appreciate getting tested. They will be up in about
5 minutes or less.
I am updating prealphas with some fixes and changes including several BINKP that I would appreciate getting tested. They will be up in abo 5 minutes or less.
Just checking is it build v1.12 A45 Windows/32 Compiled 2020/02/15 20:28:45 ??
I am updating prealphas with some fixes and changes including several to BINKP that I would appreciate getting tested. They will be up in about
I am updating the Prealphas today it should be done in a few minutes.
This update will have some changes to the new MIS POLL to fix display errors and to introduce some other statistical tracking.
The MUTIL [EchoMailTracker] is enabled but if you decide to try it
please be very careful because it has not had a good run through of testing yet. I will be setting up some test cases for these features soon.
I would love assistance if someone wants to try it, but I recognize this is mostly for HUBs where they may not want to risk restoring if
something doesn't work.
At the very least MIS POLL seems stable and complete though in this
build.
I'm going to try and get the SSH going on 24553 first. If anyone wants to test this at 21:1/100 please let me know.
The port should now be open and the server running.
I just tried it and it couldn't connect. Is the port behind a firewall
by chance? Could of couse be a bug. I should retest locally to make
sure I didnt break anything.
I'm going to try and get the SSH going on 24553 first. If anyone wants to test this at 21:1/100 please let me know.
The port should now be open and the server running.
I can connect, but I get an authorization failure:
--------------------- POLL v1.12 A46 2020/03/01 Sun, Mar 01 2020 (loglevel 2) + 2020.03.01 09:13:47 Polling all nodes of session type ALL + 2020.03.01 09:13:47 1-Polling 21:1/100 on slot 1 via BINKP
+ 2020.03.01 09:13:47 1-Connecting to agency.bbs.nz on port 24553
+ 2020.03.01 09:13:47 1-Connected by IPV4 to 219.89.83.33
+ 2020.03.01 09:13:48 1-Connection lost
+ 2020.03.01 09:13:48 1-Authorization failed
+ 2020.03.01 09:13:49 Polled 1 systems
I have scbbs.nsupdate.info:24553 up and running if you'd like to try a forced send to me or similar. =)
I just tried it and it couldn't connect. Is the port behind a firewa by chance? Could of couse be a bug. I should retest locally to make sure I didnt break anything.
I'm fairly sure its open. will keep playing, just posted some stuff to
the echo about this :)
Found the issue I believe, and I am uploading a new version as I type this.
Thanks :)
Getting late here but will try to update and test before eyeballs fall
out
I can connect, but I get an authorization failure:what I see internally when I force the BinkP Hostname to include a port number.
I have a feeling g00r00 may spot something soon.
I removed :24553 from your hostname in my echomail node configuratoin
and now it seems to poll you OK over SSL:
I removed :24553 from your hostname in my echomail node configuratoin
and now it seems to poll you OK over SSL:
--------------------- POLL v1.12 A46 2020/03/01 Sun, Mar 01 2020 (loglevel 2) + 2020.03.01 09:52:48 Polling all nodes of session type ALL + 2020.03.01 09:52:48 1-Polling 21:1/100 on slot 1 via BINKP
+ 2020.03.01 09:52:48 1-Connecting to agency.bbs.nz on port 24553
+ 2020.03.01 09:52:51 1-Connected by IPV4 SSL to 219.89.83.33
But then you should have been able to poll me as well? Hmm...
I have a feeling g00r00 may spot something soon.
Perhaps something related to Cryptlib on Windows?
Best regards
Well good news I just successfully exchanged via SSL with you. So at least its working with another Mystic system.
Hopefully eyeballs have preserved and will live another day!
I think thats just a timing thing. We are swapping versions as you're testing this stuff :)
No joy... but it may be your build needs an update to..
I just upgraded my L64 version as well (downloaded it 5 minutes ago),
and it seems to (still) poll just fine using SSL.
Great to hear and that will save me some time.
I think its time for me to go do something else for a few hours this evening for my own sanity. :)
Thanks for helping to test!
Deon and Al - yep to more tests, will look to do so tomorrow.
I'll setup Hub 3 to receive inbound TLS - and send the details.
OK, hub 3 is on alterant.leenooks.net:24556 (synchronet windows), and
my BBS 2/116 is on alterant.leenooks.net:24553 (synchronet linux).
I'll setup Hub 3 to receive inbound TLS - and send the details.
OK, hub 3 is on alterant.leenooks.net:24556 (synchronet windows), and
my BBS 2/116 is on alterant.leenooks.net:24553 (synchronet linux).
I have tried both of these. It connects but fails for some reason, something about the certificates.
I have tried both of these. It connects but fails for some
reason, something about the certificates.
Maybe its the TLS < v1.2 situation?
I have tried both of these. It connects but fails for some reason, something about the certificates.
Maybe its the TLS < v1.2 situation?
So, I can't poll Synchronet or Mystic presently with binkd. Can you try polling
here?
So, I can't poll Synchronet or Mystic presently with binkd. Can
you try polling here?
Error in recv() of first byte of packet header
Although, "Error in recv()..." not sure what you see on your side...
There is no mention of errors in my log but I have now turned up the verbosity so it may show more now. Also in my setup the tls is done by openssl so it is not logged by binkd.
OK, hub 3 is on alterant.leenooks.net:24556 (synchronet windows), and my
Anybody who wants to test binkps is welcome to.
Although I do see "timeout receiving first byte of packet..." so not
sure why it thinks a packet is transferring..
Interesting, I also see "Will Encrypt Session", which seems redundant
if its a TLS session - but I'll pay more attention when there is some
mail flow and check with DM if it continues.
Let me know if you want a password so that you can pull some packets
from Hub 3.
If you can set my node up and send me the details I'll setup likewise. If we get incomunicado somehow you can email me at agianson {at} gmail {dot} com
If you can set my node up and send me the details I'll setup
likewise. If we get incomunicado somehow you can email me at
I've been reading the ongoing discussion on binkps and I would like to join the "fun" if you will. I'm all about using SSL wherever possible.
I've also noticed A46 introduces a new mis poll, is there action(s) I'll need to take to get my networks functional once I upgrade?
their ssl.cert in DATA folder but that remains to be confirmed. And its also possible this will break compatibility with Synchronet).
Have we worked out what the issue is?
20:59:59 Poll BINKP node via address lookup: 21:3/100
20:59:59 1-Polling 21:3/100 on slot 1 via BINKP
20:59:59 1-Connecting to alterant.leenooks.net on port 24556
20:59:59 1-Connected by IPV4 to 101.186.5.106
21:00:31 1-Data frame timeout
21:00:31 1-Connection lost
21:00:31 1-Authorization failed
21:00:32 Polled 1 systems
If you want to use SSL with BINKP you will need to upgrade to the latest A46 prealpha (and there is potential that everyone will need to delete their ssl.cert in DATA folder but that remains to be confirmed. And its also possible this will break compatibility with Synchronet).
As of now I don't know any issues with Mystic. Are you using the latest release and are the system you're connecting with?
Awesome, thanks g00r00! I hate to add another one to the list, but wo it be possible to remove the SMTP username/password character limits? auto-generates some really long username and password combos for thei SMTP services.
Yeah we can get that expanded. Its probably limited to what it is
because I didn't want to change the data file formats. Worst case it
will have to wait until A45 since I already sent out the A44 upgrade but maybe I can figure something out.
Awesome, thanks g00r00! I hate to add another one to the list, b it be possible to remove the SMTP username/password character li auto-generates some really long username and password combos for SMTP services.
Yeah we can get that expanded. Its probably limited to what it is because I didn't want to change the data file formats. Worst case it will have to wait until A45 since I already sent out the A44 upgrade maybe I can figure something out.
I'm not sure if this is always consistent with AWS but in my case the username is 20 characters and the password is 44 characters long
(brutally long I know) :(
I've updated the pre-alpha releases.
changes to BINKP but I still have a list of things to look into that I haven't yet.
Sysop: | Keyop |
---|---|
Location: | Huddersfield, West Yorkshire, UK |
Users: | 369 |
Nodes: | 16 (2 / 14) |
Uptime: | 88:48:27 |
Calls: | 7,896 |
Calls today: | 2 |
Files: | 12,968 |
Messages: | 5,792,366 |