作者： Zhensheng Yuan

自信、努力、活出精彩；以前未所见的颜色，绘大千世界！

libvirtd: virNetTLSContextValidCertificate:994 : Unable to verify TLS peer: No certificate was found.

Jan 29 06:20:12 debian libvirtd[3363]: 2019-01-29 11:20:12.116+0000: 3363: error : virNetTLSContextValidCertificate:994 : Unable to verify TLS peer: No certificate was found.
Jan 29 06:20:12 debian libvirtd[3363]: 2019-01-29 11:20:12.116+0000: 3363: warning : virNetTLSContextCheckCertificate:1125 : Certificate check failed Unable to verify TLS peer: No certificate was found.
Jan 29 06:20:12 debian libvirtd[3363]: 2019-01-29 11:20:12.116+0000: 3363: error : virNetTLSContextCheckCertificate:1128 : authentication failed: Failed to verify peer's certificate

Jan 29 06:20:12 debian libvirtd[3363]: 2019-01-29 11:20:12.116+0000: 3363: error : virNetTLSContextValidCertificate:994 : Unable to verify TLS peer: No certificate was found.

Jan 29 06:20:12 debian libvirtd[3363]: 2019-01-29 11:20:12.116+0000: 3363: warning : virNetTLSContextCheckCertificate:1125 : Certificate check failed Unable to verify TLS peer: No certificate was found.

Jan 29 06:20:12 debian libvirtd[3363]: 2019-01-29 11:20:12.116+0000: 3363: error : virNetTLSContextCheckCertificate:1128 : authentication failed: Failed to verify peer's certificate

使用TLS连接libvirtd时，默认需要验证客户端是否拥有由CA签名的证书，详见libvirtd配置文件（/etc/libvirt/libvirtd.conf）：

# Flag to disable verification of client certificates
#
# Client certificate verification is the primary authentication mechanism.
# Any client which does not present a certificate signed by the CA
# will be rejected.
#
# Default is to always verify. Uncommenting this will disable
# verification - make sure an IP whitelist is set
#tls_no_verify_certificate = 1

# Flag to disable verification of client certificates

# Client certificate verification is the primary authentication mechanism.

# Any client which does not present a certificate signed by the CA

# will be rejected.

# Default is to always verify. Uncommenting this will disable

# verification - make sure an IP whitelist is set

#tls_no_verify_certificate = 1

取消此行的注释即可关闭此验证（当然你得启用其它身份认证途径）：

#tls_no_verify_certificate = 1

1	#tls_no_verify_certificate = 1

也可选择以让CA给客户端签发证书：

# 自行修改CA私钥与证书的路径
CA_KEY_FILE_PATH="/etc/pki/libvirt/private/cakey.pem"
CA_CERTIFICATE_FILE_PATH="/etc/pki/CA/cacert.pem"

# 客户端私钥，CSR，证书保存路径
PKI_PREFIX="/tmp/client_pki/"
CLIENT_PRIVATE_KEY_FILE_PATH="${PKI_PREFIX}/clientkey.pem"
CLIENT_CSR_FILE_PATH="${PKI_PREFIX}/clientcsr.pem"
CLIENT_CERTIFICATE_FILE_PATH="${PKI_PREFIX}/clientcert.pem"

oldUmask=$(umask)
umask 0077
mkdir -p ${PKI_PREFIX}

# 生成客户端私钥
openssl genrsa -out ${CLIENT_PRIVATE_KEY_FILE_PATH} 2048
# 生成客户端CSR，根据自己需要自行修改subjects
openssl req -new -key ${CLIENT_PRIVATE_KEY_FILE_PATH} -subj "/C=CN/ST=China/L=China/O=China/OU=China/CN=ClientCommonName" -out ${CLIENT_CSR_FILE_PATH}
# CA通过CSR签发证书，根据需要自行修改有效期
openssl x509 -req -in ${CLIENT_CSR_FILE_PATH} -CA ${CA_CERTIFICATE_FILE_PATH} -CAkey ${CA_KEY_FILE_PATH} -CAcreateserial -out ${CLIENT_CERTIFICATE_FILE_PATH} -days 3650
# 把CA证书放进去
cat ${CA_CERTIFICATE_FILE_PATH} > ${PKI_PREFIX}/cacert.pem

umask ${oldUmask}

# 把${PKI_PREFIX}传送到客户端
# scp -r ${PKI_PREFIX} username@host:~/libvirt-server-pki

# 自行修改CA私钥与证书的路径

CA_KEY_FILE_PATH="/etc/pki/libvirt/private/cakey.pem"

CA_CERTIFICATE_FILE_PATH="/etc/pki/CA/cacert.pem"

# 客户端私钥，CSR，证书保存路径

PKI_PREFIX="/tmp/client_pki/"

CLIENT_PRIVATE_KEY_FILE_PATH="${PKI_PREFIX}/clientkey.pem"

CLIENT_CSR_FILE_PATH="${PKI_PREFIX}/clientcsr.pem"

CLIENT_CERTIFICATE_FILE_PATH="${PKI_PREFIX}/clientcert.pem"

oldUmask=$(umask)

umask 0077

mkdir -p ${PKI_PREFIX}

# 生成客户端私钥

openssl genrsa -out ${CLIENT_PRIVATE_KEY_FILE_PATH} 2048

# 生成客户端CSR，根据自己需要自行修改subjects

openssl req -new -key ${CLIENT_PRIVATE_KEY_FILE_PATH} -subj "/C=CN/ST=China/L=China/O=China/OU=China/CN=ClientCommonName" -out ${CLIENT_CSR_FILE_PATH}

# CA通过CSR签发证书，根据需要自行修改有效期

openssl x509 -req -in ${CLIENT_CSR_FILE_PATH} -CA ${CA_CERTIFICATE_FILE_PATH} -CAkey ${CA_KEY_FILE_PATH} -CAcreateserial -out ${CLIENT_CERTIFICATE_FILE_PATH} -days 3650

# 把CA证书放进去

cat ${CA_CERTIFICATE_FILE_PATH} > ${PKI_PREFIX}/cacert.pem

umask ${oldUmask}

# 把${PKI_PREFIX}传送到客户端

# scp -r ${PKI_PREFIX} username@host:~/libvirt-server-pki

完成上面的操作后，把整个${PKI_PRE […]

Read more No Comments

PHP

PHP – OpenSSL 生成CA私钥&证书及签发带SAN的证书

生成CA私钥及证书：参考Example #1 Creating a self-signed certificate 使用上面的方法可以生成CA证书并使用，但是如果使用上面的方法直接生成的自签名域名证书，即使你把（CA）证书加入到了受信任的根证书列表，也不会受浏览器信任： NET::ERR_CERT_COMMON_NAME_INVALID 此服务器无法证实它就是 localhost – 它的安全证书没有指定主题备用名称。这可能是因为某项配置有误或某个攻击者拦截了您的连接。你还需要把域名加入到SAN。首先生成OpenSSL的配置文件： [crayon-60085869478e41 […]

Read more No Comments

Unix Like, 操作系统

gnome-terminal: Error creating terminal: Timeout was reached

$ gnome-terminal --disable-factory
# Error creating terminal: Timeout was reached

$ tail /var/log/syslog
Jan  9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.a11y.Bus' unit='at-spi-dbus-bus.service' requested by ':1.73' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")
Jan  9 15:11:32 mint systemd[1515]: Starting Accessibility services bus...
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Successfully activated service 'org.a11y.Bus'
Jan  9 15:11:32 mint systemd[1515]: Started Accessibility services bus.
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Activating service name='org.a11y.atspi.Registry' requested by ':1.0' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:32 mint at-spi2-registr[2273]: Could not open X display
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Successfully activated service 'org.a11y.atspi.Registry'
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:32 mint at-spi2-registr[2273]: AT-SPI: Cannot open default display
Jan  9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.freedesktop.portal.Desktop' unit='xdg-desktop-portal.service' requested by ':1.75' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")
Jan  9 15:11:32 mint systemd[1515]: Starting Portal service...
Jan  9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.freedesktop.portal.Documents' unit='xdg-document-portal.service' requested by ':1.77' (uid=1000 pid=2278 comm="/usr/lib/xdg-desktop-portal/xdg-desktop-portal " label="unconfined")
Jan  9 15:11:32 mint systemd[1515]: Starting flatpak document portal service...
Jan  9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.freedesktop.impl.portal.PermissionStore' unit='xdg-permission-store.service' requested by ':1.78' (uid=1000 pid=2282 comm="/usr/lib/xdg-desktop-portal/xdg-document-portal " label="unconfined")
Jan  9 15:11:32 mint systemd[1515]: Starting sandboxed app permission store...
Jan  9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Successfully activated service 'org.freedesktop.impl.portal.PermissionStore'
Jan  9 15:11:32 mint systemd[1515]: Started sandboxed app permission store.
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Activating service name='org.a11y.atspi.Registry' requested by ':1.2' (uid=1000 pid=2277 comm="/usr/bin/gnome-terminal.real --app-id com.canonica" label="unconfined")
Jan  9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Successfully activated service 'org.freedesktop.portal.Documents'
Jan  9 15:11:32 mint systemd[1515]: Started flatpak document portal service.
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:32 mint at-spi2-registr[2290]: Could not open X display
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Successfully activated service 'org.a11y.atspi.Registry'
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry
Jan  9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:32 mint at-spi2-registr[2290]: AT-SPI: Cannot open default display
Jan  9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.freedesktop.impl.portal.desktop.gtk' unit='xdg-desktop-portal-gtk.service' requested by ':1.77' (uid=1000 pid=2278 comm="/usr/lib/xdg-desktop-portal/xdg-desktop-portal " label="unconfined")
Jan  9 15:11:32 mint systemd[1515]: Starting Portal service (GTK+/GNOME implementation)...
Jan  9 15:11:32 mint xdg-desktop-portal-gtk[2306]: No protocol specified
Jan  9 15:11:32 mint xdg-desktop-portal-gtk[2306]: Unable to init server: Could not connect: Connection refused
Jan  9 15:11:32 mint [2306]: cannot open display: :0
Jan  9 15:11:32 mint systemd[1515]: xdg-desktop-portal-gtk.service: Main process exited, code=exited, status=1/FAILURE
Jan  9 15:11:32 mint systemd[1515]: xdg-desktop-portal-gtk.service: Failed with result 'exit-code'.
Jan  9 15:11:32 mint systemd[1515]: Failed to start Portal service (GTK+/GNOME implementation).
Jan  9 15:11:57 mint xdg-desktop-por[2278]: Failed to create file chooser proxy: Error calling StartServiceByName for org.freedesktop.impl.portal.desktop.gtk: Timeout was reached
Jan  9 15:11:57 mint xdg-desktop-por[2278]: g_dbus_interface_skeleton_set_flags: assertion 'G_IS_DBUS_INTERFACE_SKELETON (interface_)' failed
Jan  9 15:11:57 mint xdg-desktop-por[2278]: invalid (NULL) pointer instance
Jan  9 15:11:57 mint xdg-desktop-por[2278]: g_signal_connect_data: assertion 'G_TYPE_CHECK_INSTANCE (instance)' failed
Jan  9 15:11:57 mint xdg-desktop-por[2278]: g_dbus_interface_skeleton_export: assertion 'G_IS_DBUS_INTERFACE_SKELETON (interface_)' failed
Jan  9 15:11:57 mint kernel: [  230.225288] show_signal_msg: 18 callbacks suppressed
Jan  9 15:11:57 mint kernel: [  230.225292] xdg-desktop-por[2278]: segfault at 8 ip 0000556bffa8c7c8 sp 00007ffe13916dd0 error 4 in xdg-desktop-portal[556bffa79000+7c000]
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Activating service name='org.a11y.atspi.Registry' requested by ':1.0' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:57 mint at-spi2-registr[2312]: Could not open X display
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Successfully activated service 'org.a11y.atspi.Registry'
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:57 mint at-spi2-registr[2312]: AT-SPI: Cannot open default display
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Activating service name='org.a11y.atspi.Registry' requested by ':1.0' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:57 mint at-spi2-registr[2314]: Could not open X display
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Successfully activated service 'org.a11y.atspi.Registry'
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry
Jan  9 15:11:57 mint at-spi-bus-launcher[2266]: No protocol specified
Jan  9 15:11:57 mint at-spi2-registr[2314]: AT-SPI: Cannot open default display
Jan  9 15:11:57 mint systemd[1515]: xdg-desktop-portal.service: Main process exited, code=dumped, status=11/SEGV
Jan  9 15:11:57 mint systemd[1515]: xdg-desktop-portal.service: Failed with result 'core-dump'.
Jan  9 15:11:57 mint systemd[1515]: Failed to start Portal service.

$ gnome-terminal --disable-factory

# Error creating terminal: Timeout was reached

$ tail /var/log/syslog

Jan 9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.a11y.Bus' unit='at-spi-dbus-bus.service' requested by ':1.73' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")

Jan 9 15:11:32 mint systemd[1515]: Starting Accessibility services bus...

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Successfully activated service 'org.a11y.Bus'

Jan 9 15:11:32 mint systemd[1515]: Started Accessibility services bus.

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Activating service name='org.a11y.atspi.Registry' requested by ':1.0' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:32 mint at-spi2-registr[2273]: Could not open X display

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Successfully activated service 'org.a11y.atspi.Registry'

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:32 mint at-spi2-registr[2273]: AT-SPI: Cannot open default display

Jan 9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.freedesktop.portal.Desktop' unit='xdg-desktop-portal.service' requested by ':1.75' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")

Jan 9 15:11:32 mint systemd[1515]: Starting Portal service...

Jan 9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.freedesktop.portal.Documents' unit='xdg-document-portal.service' requested by ':1.77' (uid=1000 pid=2278 comm="/usr/lib/xdg-desktop-portal/xdg-desktop-portal " label="unconfined")

Jan 9 15:11:32 mint systemd[1515]: Starting flatpak document portal service...

Jan 9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.freedesktop.impl.portal.PermissionStore' unit='xdg-permission-store.service' requested by ':1.78' (uid=1000 pid=2282 comm="/usr/lib/xdg-desktop-portal/xdg-document-portal " label="unconfined")

Jan 9 15:11:32 mint systemd[1515]: Starting sandboxed app permission store...

Jan 9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Successfully activated service 'org.freedesktop.impl.portal.PermissionStore'

Jan 9 15:11:32 mint systemd[1515]: Started sandboxed app permission store.

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Activating service name='org.a11y.atspi.Registry' requested by ':1.2' (uid=1000 pid=2277 comm="/usr/bin/gnome-terminal.real --app-id com.canonica" label="unconfined")

Jan 9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Successfully activated service 'org.freedesktop.portal.Documents'

Jan 9 15:11:32 mint systemd[1515]: Started flatpak document portal service.

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:32 mint at-spi2-registr[2290]: Could not open X display

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Successfully activated service 'org.a11y.atspi.Registry'

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry

Jan 9 15:11:32 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:32 mint at-spi2-registr[2290]: AT-SPI: Cannot open default display

Jan 9 15:11:32 mint dbus-daemon[1594]: [session uid=1000 pid=1594] Activating via systemd: service name='org.freedesktop.impl.portal.desktop.gtk' unit='xdg-desktop-portal-gtk.service' requested by ':1.77' (uid=1000 pid=2278 comm="/usr/lib/xdg-desktop-portal/xdg-desktop-portal " label="unconfined")

Jan 9 15:11:32 mint systemd[1515]: Starting Portal service (GTK+/GNOME implementation)...

Jan 9 15:11:32 mint xdg-desktop-portal-gtk[2306]: No protocol specified

Jan 9 15:11:32 mint xdg-desktop-portal-gtk[2306]: Unable to init server: Could not connect: Connection refused

Jan 9 15:11:32 mint [2306]: cannot open display: :0

Jan 9 15:11:32 mint systemd[1515]: xdg-desktop-portal-gtk.service: Main process exited, code=exited, status=1/FAILURE

Jan 9 15:11:32 mint systemd[1515]: xdg-desktop-portal-gtk.service: Failed with result 'exit-code'.

Jan 9 15:11:32 mint systemd[1515]: Failed to start Portal service (GTK+/GNOME implementation).

Jan 9 15:11:57 mint xdg-desktop-por[2278]: Failed to create file chooser proxy: Error calling StartServiceByName for org.freedesktop.impl.portal.desktop.gtk: Timeout was reached

Jan 9 15:11:57 mint xdg-desktop-por[2278]: g_dbus_interface_skeleton_set_flags: assertion 'G_IS_DBUS_INTERFACE_SKELETON (interface_)' failed

Jan 9 15:11:57 mint xdg-desktop-por[2278]: invalid (NULL) pointer instance

Jan 9 15:11:57 mint xdg-desktop-por[2278]: g_signal_connect_data: assertion 'G_TYPE_CHECK_INSTANCE (instance)' failed

Jan 9 15:11:57 mint xdg-desktop-por[2278]: g_dbus_interface_skeleton_export: assertion 'G_IS_DBUS_INTERFACE_SKELETON (interface_)' failed

Jan 9 15:11:57 mint kernel: [ 230.225288] show_signal_msg: 18 callbacks suppressed

Jan 9 15:11:57 mint kernel: [ 230.225292] xdg-desktop-por[2278]: segfault at 8 ip 0000556bffa8c7c8 sp 00007ffe13916dd0 error 4 in xdg-desktop-portal[556bffa79000+7c000]

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Activating service name='org.a11y.atspi.Registry' requested by ':1.0' (uid=1000 pid=2265 comm="/usr/lib/gnome-terminal/gnome-terminal-server --ap" label="unconfined")

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:57 mint at-spi2-registr[2312]: Could not open X display

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Successfully activated service 'org.a11y.atspi.Registry'

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:57 mint at-spi2-registr[2312]: AT-SPI: Cannot open default display

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:57 mint at-spi2-registr[2314]: Could not open X display

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: dbus-daemon[2271]: Successfully activated service 'org.a11y.atspi.Registry'

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry

Jan 9 15:11:57 mint at-spi-bus-launcher[2266]: No protocol specified

Jan 9 15:11:57 mint at-spi2-registr[2314]: AT-SPI: Cannot open default display

Jan 9 15:11:57 mint systemd[1515]: xdg-desktop-portal.service: Main process exited, code=dumped, status=11/SEGV

Jan 9 15:11:57 mint systemd[1515]: xdg-desktop-portal.service: Failed with result 'core-dump'.

Jan 9 15:11:57 mint systemd[1515]: Failed to start Portal service.

Fix:

$ dbus-update-activation-environment --systemd DBUS_SESSION_BUS_ADDRESS DISPLAY XAUTHORITY
$ gnome-terminal --disable-factory

1 2	$ dbus-update-activation-environment --systemd DBUS_SESSION_BUS_ADDRESS DISPLAY XAUTHORITY $ gnome-terminal --disable-factory

References: Gnome applications slow start due to failing services

Read more No Comments

Unix Like, Windows, 操作系统

Cygwin/X X Server TCP direct connection

网络上大都是SSH X11 Forward的资料，鲜有Client直连Server的，某些环境下，还是希望能直接一点。安装Cygwin/X 首先要安装Cygwin/X，具体步骤，官方文档已经写得很清楚了：Installing Cygwin/X。启动Cygwin/X X Server Cygwin/X X Server默认仅监听Unix Socket，非本地的Client连接需要启用TCP协议，加入启动参数”-listen tcp”即可，详见官方文档：xserver-nolisten-tcp-default。可以通过修改快捷方式XWin Server加入该启动参数： […]

Read more No Comments

PHP

ERROR: failed to retrieve TCP_INFO for socket: Protocol not available (92)

php_source_dir="/usr/src/php-7.2.12"
sed -i "s/#define HAVE_LQ_TCP_INFO 1/\/\/ #define HAVE_LQ_TCP_INFO 1/g" ${php_source_dir}/main/php_config.h
make -j32 clean && make -j$(cat /proc/cpuinfo | grep "processor" | wc -l) && make -j32 install

php_source_dir="/usr/src/php-7.2.12"

sed -i "s/#define HAVE_LQ_TCP_INFO 1/\/\/ #define HAVE_LQ_TCP_INFO 1/g" ${php_source_dir}/main/php_config.h

make -j32 clean && make -j$(cat /proc/cpuinfo | grep "processor" | wc -l) && make -j32 install

PHP

PHP 7.2 compile on Debian Stretch

Libraries:

apt -y install \
    libcurl4-openssl-dev \
    libgd-dev \
    libsodium-dev \
    libxml2-dev \
    libpcre3-dev \
    libssl-dev \
    libsqlite3-dev \
    libzip-dev \
    libbz2-dev \
    libedit-dev \
    libxmlrpc-epi-dev \
    libxmlrpc-core-c3-dev \
    libxslt1-dev \
    libwebp-dev \
    libreadline-dev

apt -y install \

libcurl4-openssl-dev \

libgd-dev \

libsodium-dev \

libxml2-dev \

libpcre3-dev \

libssl-dev \

libsqlite3-dev \

libzip-dev \

libbz2-dev \

libedit-dev \

libxmlrpc-epi-dev \

libxmlrpc-core-c3-dev \

libxslt1-dev \

libwebp-dev \

libreadline-dev

Configure:

./configure \
    --prefix=/usr/local/php-7.2 \
    --build=x86_64-linux-gnu \
    --host=x86_64-linux-gnu \
    --config-cache --cache-file=$(pwd -P)/config.cache \
    --with-libdir=lib/x86_64-linux-gnu \
    --enable-cli \
    --enable-fpm \
    --with-config-file-path=\${prefix}/etc \
    --with-config-file-scan-dir=\${prefix}/etc/conf.d \
    --with-fpm-user=www-data \
    --with-fpm-group=www-data \
    --disable-debug \
    --with-pic \
    --with-layout=GNU \
    --with-pear \
    --enable-filter \
    --with-openssl=yes \
    --with-pcre-regex=/usr \
    --enable-hash \
    --with-mhash=/usr \
    --enable-libxml \
    --enable-session \
    --with-sodium \
    --with-zlib=/usr \
    --with-zlib-dir=/usr \
    \
    --enable-opcache \
    --enable-opcache-file \
    --enable-huge-code-pages \
    \
    --enable-mysqlnd \
    --enable-mysqlnd-compression-support \
    --with-zlib-dir=/usr \
    --with-mysqli=mysqlnd \
    --with-pdo-mysql=mysqlnd \
    \
    --with-sqlite3=/usr \
    --with-pdo-sqlite=/usr \
    \
    --enable-json \
    \
    --enable-intl \
    \
    --with-curl=/usr \
    \
    --with-bz2=/usr \
    \
    --with-gd=/usr \
    --with-jpeg-dir=/usr \
    --with-xpm-dir=/usr/X11R6 \
    --with-png-dir=/usr \
    --with-freetype-dir=/usr \
    --with-webp-dir=/usr \
    \
    --enable-mbstring \
    --enable-mbregex \
    --enable-mbregex-backtrack \
    \
    --with-libedit=/usr \
    \
    --enable-wddx \
    --enable-xml \
    --with-xsl=/usr \
    \
    --with-xmlrpc=/usr \
    --with-libxml-dir=/usr \
    \
    --enable-zip \
    --with-zlib-dir=/usr \
    --with-libzip=/usr \
    \
    --enable-calendar \
    --enable-ctype \
    --enable-exif \
    --enable-fileinfo \
    --enable-ftp \
    --with-openssl-dir=/usr \
    --with-gettext=/usr \
    --with-iconv \
    --enable-pdo \
    --enable-phar \
    --enable-pcntl \
    --enable-posix \
    --enable-shmop \
    --enable-sockets \
    --enable-sysvmsg \
    --enable-sysvsem \
    --enable-sysvshm \
    --enable-tokenizer

./configure \

--prefix=/usr/local/php-7.2 \

--build=x86_64-linux-gnu \

--host=x86_64-linux-gnu \

--config-cache --cache-file=$(pwd -P)/config.cache \

--with-libdir=lib/x86_64-linux-gnu \

--enable-cli \

--enable-fpm \

--with-config-file-path=\${prefix}/etc \

--with-config-file-scan-dir=\${prefix}/etc/conf.d \

--with-fpm-user=www-data \

--with-fpm-group=www-data \

--disable-debug \

--with-pic \

--with-layout=GNU \

--with-pear \

--enable-filter \

--with-openssl=yes \

--with-pcre-regex=/usr \

--enable-hash \

--with-mhash=/usr \

--enable-libxml \

--enable-session \

--with-sodium \

--with-zlib=/usr \

--with-zlib-dir=/usr \

--enable-opcache \

--enable-opcache-file \

--enable-huge-code-pages \

--enable-mysqlnd \

--enable-mysqlnd-compression-support \

--with-zlib-dir=/usr \

--with-mysqli=mysqlnd \

--with-pdo-mysql=mysqlnd \

--with-sqlite3=/usr \

--with-pdo-sqlite=/usr \

--enable-json \

--enable-intl \

--with-curl=/usr \

--with-bz2=/usr \

--with-gd=/usr \

--with-jpeg-dir=/usr \

--with-xpm-dir=/usr/X11R6 \

--with-png-dir=/usr \

--with-freetype-dir=/usr \

--with-webp-dir=/usr \

--enable-mbstring \

--enable-mbregex \

--enable-mbregex-backtrack \

--with-libedit=/usr \

--enable-wddx \

--enable-xml \

--with-xsl=/usr \

--with-xmlrpc=/usr \

--with-libxml-dir=/usr \

--enable-zip \

--with-zlib-dir=/usr \

--with-libzip=/usr \

--enable-calendar \

--enable-ctype \

--enable-exif \

--enable-fileinfo \

--enable-ftp \

--with-openssl-dir=/usr \

--with-gettext=/usr \

--with-iconv \

--enable-pdo \

--enable-phar \

--enable-pcntl \

--enable-posix \

--enable-shmop \

--enable-sockets \

--enable-sysvmsg \

--enable-sysvsem \

--enable-sysvshm \

--enable-tokenizer

Make xmlrpc error 1:

/usr/src/php-7.2.12/ext/xmlrpc/xmlrpc-epi-php.c:187:2: error: unknown type name 'XMLRPC_SERVER'
  XMLRPC_SERVER server_ptr;
  ^~~~~~~~~~~~~
/usr/src/php-7.2.12/ext/xmlrpc/xmlrpc-epi-php.c:195:2: error: unknown type name 'STRUCT_XMLRPC_REQUEST_OUTPUT_OPTIONS'
  STRUCT_XMLRPC_REQUEST_OUTPUT_OPTIONS xmlrpc_out;
  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

...
Makefile:1933: recipe for target 'ext/xmlrpc/xmlrpc-epi-php.lo' failed

/usr/src/php-7.2.12/ext/xmlrpc/xmlrpc-epi-php.c:187:2: error: unknown type name 'XMLRPC_SERVER'

XMLRPC_SERVER server_ptr;

^~~~~~~~~~~~~

/usr/src/php-7.2.12/ext/xmlrpc/xmlrpc-epi-php.c:195:2: error: unknown type name 'STRUCT_XMLRPC_REQUEST_OUTPUT_OPTIONS'

STRUCT_XMLRPC_REQUEST_OUTPUT_OPTIONS xmlrpc_out;

^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

...

Makefile:1933: recipe for target 'ext/xmlrpc/xmlrpc-epi-php.lo' failed

Open Makefile, add

-I/usr/include/xmlrpc-epi

1	-I/usr/include/xmlrpc-epi

to the line(1933) where the error occured. xmlrpc error 2:

ext/xmlrpc/.libs/xmlrpc-epi-php.o: In function `destroy_server_data':
/usr/src/php-7.2.12/ext/xmlrpc/xmlrpc-epi-php.c:268: undefined reference to `XMLRPC_ServerDestroy'
ext/xmlrpc/.libs/xmlrpc-epi-php.o: In function `zm_info_xmlrpc':

...

collect2: error: ld returned 1 exit status
Makefile:296: recipe for target 'sapi/cli/php' failed
make: *** [sapi/cli/php] Error 1

ext/xmlrpc/.libs/xmlrpc-epi-php.o: In function `destroy_server_data':

/usr/src/php-7.2.12/ext/xmlrpc/xmlrpc-epi-php.c:268: undefined reference to `XMLRPC_ServerDestroy'

ext/xmlrpc/.libs/xmlrpc-epi-php.o: In function `zm_info_xmlrpc':

...

collect2: error: ld returned 1 exit status

Makefile:296: recipe for target 'sapi/cli/php' failed

make: *** [sapi/cli/php] Error 1

[…]

Windows, 操作系统, 网络

东莞城院校园网 – 网络共享限制解除工具

刚考完试那天，学校新版的网络刚好部署到了我的宿舍区，当天探究了一下，有了点发现，不过刚考完试，浪了好久，所以现在才弄。来看本文的，相信都懂什么情况，我废话也少说。注意事项程序目前是预览版，校园网共享的检测也不好触发，因此未经我长时间测试，不保证效果，有兴趣，有需要的欢迎尝试使用，遇到问题可在本文留言或在GITHUB上提交ISSUE。程序需要一直运行才能解除限制，且只能解除运行了此程序的计算机的限制，也就是说，你在你的Windows计算机上运行了此程序，和你使用同一个网络，但未运行此程序的计算机理论上还会受到限制，但即使使用了相同网络的其它设备受到了限制，运行了此程序的计算 […]

Windows远程桌面自定义证书

首先准备需要使用的证书，如果证书不是PKCS #12格式的，需要先转换，可以通过OpenSSL完成：

openssl pkcs12 -export -out <OUTPUT_FILE>.pfx -inkey <INPUT_KEY_FILE>.key -in <INPUT_CERTIFICATE_FILE>.cer

1	openssl pkcs12 -export -out <OUTPUT_FILE>.pfx -inkey <INPUT_KEY_FILE>.key -in <INPUT_CERTIFICATE_FILE>.cer

执行certlm.msc（注意不是certmgr.msc），打开本地计算机的证书管理器：转到个人证书，在窗口右边空白处右键 – 所有任务 – 导入：然后选择PKCS #12格式的证书文件进行导入。导入完毕后，在证书列表双击导入后的证书，查看其指纹，并复制：接下来以管理员身份执行cmd或者powershell，执行命令： [crayon-60085869481807441 […]

NOTE

PHP HTTP $_(REQUEST|GET|POST)数据不完整(数量不足)问题

有个页面需要给PHP POST大量的数据，最近发现只有固定数量的数据可以保存到数据库，其余的数据提交上去后，完全无反应。输出原始POST数据，无问题，但输出$_REQUEST，却发现一条记录后面的数据全丢了。查了下资料，原来PHP有限制$_REQUEST/GET/POST/COOKIE数组的成员数量：http://php.net/manual/en/info.configuration.php#ini.max-input-vars 编辑php.ini，增大max_input_vars的值，重启PHP服务，即可解决。