From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 9B913139085 for ; Tue, 20 Dec 2016 15:06:52 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CEC0CE0D70; Tue, 20 Dec 2016 15:06:41 +0000 (UTC) Received: from smtp6.plusvps.com (smtp6.plusvps.com [89.201.164.168]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 53D75E0D68 for ; Tue, 20 Dec 2016 15:06:40 +0000 (UTC) Received: from lin16.mojsite.com ([178.218.164.164]) by smtp6.plusvps.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.84) (envelope-from ) id 1cJLzx-0003nK-2E for gentoo-user@lists.gentoo.org; Tue, 20 Dec 2016 16:06:37 +0100 Received: from 78-0-222-187.adsl.net.t-com.hr ([78.0.222.187]:52156 helo=g0n.localdomain) by lin16.mojsite.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1cJLzv-0005cf-48 for gentoo-user@lists.gentoo.org; Tue, 20 Dec 2016 16:06:35 +0100 Received: by g0n.localdomain (Postfix, from userid 1000) id 1AC4F30; Tue, 20 Dec 2016 16:07:09 +0100 (CET) Date: Tue, 20 Dec 2016 16:07:09 +0100 From: Miroslav Rovis To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Reading the (SSL) traffic with Pale Moon Message-ID: <20161220150709.GB8158@g0n.xdwgrp> References: <20161217224455.GA9477@g0n.xdwgrp> <20161217232554.GB9477@g0n.xdwgrp> <20161218015637.GC18283@waltdnes.org> <20161218055009.GA11155@g0n.xdwgrp> <20161218070441.GA19833@waltdnes.org> <20161218181616.GA13242@g0n.xdwgrp> <20161218184347.GB13242@g0n.xdwgrp> <20161218202933.GA23487@waltdnes.org> <20161219122519.GB31077@g0n.xdwgrp> <20161220080036.GA16916@waltdnes.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="jho1yZJdad60DJr+" Content-Disposition: inline In-Reply-To: <20161220080036.GA16916@waltdnes.org> User-Agent: Mutt/1.7.2 (2016-11-26) X-PlusHosting-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details, Found to be clean X-PlusHosting-MailScanner-SpamCheck: X-Spam-Status: No, No X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - lin16.mojsite.com X-AntiAbuse: Original Domain - lists.gentoo.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - croatiafidelis.hr X-Get-Message-Sender-Via: lin16.mojsite.com: authenticated_id: miro.rovis@croatiafidelis.hr X-Authenticated-Sender: lin16.mojsite.com: miro.rovis@croatiafidelis.hr X-PlusHosting-MailScanner-Information: Please contact the ISP for more information X-PlusHosting-MailScanner-ID: 1cJLzx-0003nK-2E X-PlusHosting-MailScanner-From: miro.rovis@croatiafidelis.hr X-Archives-Salt: da0811ec-a9ba-46a6-bdd0-fccb3d51a98a X-Archives-Hash: a22a641bc548ed2d1c7f9c0bba539c16 --jho1yZJdad60DJr+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Very useful! Thanks!=20 But only quick notes now. On 161220-03:00-0500, Walter Dnes wrote: > On Mon, Dec 19, 2016 at 01:25:19PM +0100, Miroslav Rovis wrote >=20 > > And I'm very curious to learn how to install in Air-Gapped, from git, > > through intermediary action, that is acceptable, but in a verifiable > > way, as I asked in my other reply email to this message. >=20 > The Pale Moon project is located at... > https://github.com/MoonchildProductions/Pale-Moon I see. And one thing appears to be missing for me. *IIUC* <-- pls. note. The tags are not verified on the Pale Moon repo above! Do you see that they are, if you open: https://github.com/MoonchildProductions/Pale-Moon/tags ? I don't! *IIUC* <-- pls. note. Do you see that my tags are verified, e.g. if you open: https://github.com/miroR/tshark-hosts-conv/tags and by clicking on "Verified" link, you should see: This tag was signed with a verified signature. @miroR miroR Miroslav Rovis GPG key ID: EA9884884FBAF0AE Learn about signing commits Or am I again missing something? And if the tags are not verified, I may do the below, but I still don't feel right. I'm used to webrsync-gpg which is obsolete in comparison to git, but it's so safe, because all the the portage, including distfiles, all is PGP verifiable! I leave your instuctions below, since this is really useful, and it's a possible route for me to take... But... > The current release branch is "27.0_Relbranch". I'm not a programmer, > and I don't push commits back to the project. So I don't need the full > depth and history. The following command grabs the latest 27.0.x source > and downloads it to a directory pmsrc/ and only downloads what is needed > to do a build. >=20 > git clone -b 27.0_RelBranch --depth 1 https://github.com/MoonchildProduct= ions/Pale-Moon.git pmsrc >=20 > To save typing, I made a script "getcode". I merely have to type > ./getcode 27.0 >=20 > The script consists of 2 lines... >=20 > #!/bin/bash > git clone -b "${1}_RelBranch" --depth 1 https://github.com/MoonchildProdu= ctions/Pale-Moon.git pmsrc >=20 > Note that this picks up the latest git tag. You can force a specific > tag (e.g. 27.0.0 or 27.0.1 or 27.0.2) if you use the appropriate git > command. Once the the pmsrc/ subdirectory is populated, you can... >=20 > cp -r pmsrc/ /pmsrc/ >=20 > walk over to the air-gapped machine and... >=20 > cp -r /pmsrc/ pmsrc/ >=20 > and then do a "-march=3Dnative" build on the air-gapped machine. >=20 > --=20 > Walter Dnes > I don't run "desktop environments"; I run useful applications >=20 =2E.. But also, the time on my hands is an issue. If the Gentoo overlay prooves easier and quicker, I may go that other way... And which way I go may also depend on which one I get to verifiably install= =2E.. Yes, verifiability is my sine qua non! I have to say, I had no issues with installing from Gentoo palemoon overlay, and I may open an issue about verification there, or in main Pale Moon repo... E.g. there are never even any tags at all on: https://github.com/deuiore/palemoon-overlay/tags If I understand correctly. <-- pls. note. All this in the wake of my asking Gentoo devs about the verifiability in git: Is it safe to switch from webrsync to the git repo now? http://www.gossamer-threads.com/lists/gentoo/dev/320922 Really thanks a lot. --=20 Miroslav Rovis Zagreb, Croatia http://www.CroatiaFidelis.hr --jho1yZJdad60DJr+ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJYWUkcAAoJEOqYhIhPuvCujY0P/2igPfaJ8h57V4eJf41CIg37 /o7tMLiq4BXAn6TRPeU94i3Bb6zfqSttAq2Dx+0wPa+LJNEpUf9TF0dcjS4uxfMl NAEv5E18DOW4BtgHH3jS0wm0EUJxwj/UhR+kRQGFWOJb/ITPe4xu89aMZWuSu0IC a5M5MP0T+j5JzOsHHRBZjmjxak8XlFMKbRo6IqyT00l8r7lZq25LiIRSttaX3FBY AAa4f7Lk02eOrf03WX+/TKuTp7kxsl/thy04WH574/IGddpW6naFmEiUJtSHMcNG 9E+OAW3WTw1hieMAzZIVhgihbJkaaqCNCGSRAJ2MhFpfl+UcYrXFGUi3Vdm3UXxX 6lLZr1yuJ3W3wPhIQv42AMcAwvbsDTmJ23iLinvlyB8y7yhsclA7z3nVZqFmTmR5 CdtHYdL8LiIZiQ58riNnAKsPn4w3ZaGHx0srHQCMYJ6tMXGZvAAMmYxH65z60Ski YOvYGQPDKiM71nOX21kBf/+T4k0d5ss8FkgXyaF0air1HPzZmMUnLf6QqmE+8uDX l+oa7YxeWwYuJquz9q6M+3UE0wfPktOzLSYH5A9fNw13c1sZtFqt5xRlsVjzAOmN bmqQTnYkfo+vrg31QLHlaH/GENS/UzoC+3FRlj8oTNR0wp3XsvHiv5r8elQUHDmQ xvuWlVs9/KalZNipzACl =GkGt -----END PGP SIGNATURE----- --jho1yZJdad60DJr+--