From: "Peter Moylan" <ecs-isp@2rosenthals.com>
Subject: Re: [eCS-ISP] Getting started with Let's Encrypt
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>
References: <list-11323468@2rosenthals.com>
Message-ID: <67550E48.3020701@pmoylan.org>
Date: Sun, 8 Dec 2024 14:11:04 +1100
User-Agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:38.0) Gecko/20100101
 Thunderbird/38.8.0
MIME-Version: 1.0
In-Reply-To: <list-11323468@2rosenthals.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit

On 07/12/24 16:42, Steven Levine wrote:
> In <list-11323400@2rosenthals.com>, on 12/07/24 at 01:16 PM, "Peter
> Moylan" <ecs-isp@2rosenthals.com> said:
>
> Hi Peter,
>
>> Would you mind posting that REXX script again? In fact, I hve the
>> impression that there have to be two scripts, one for the hook and
>> one to invoke uact.
>
> I've uploaded
>
> uacme-scripts-for-peter-2024-12-06-20240818.zip
>
> to
>
> www.warpcave.com/betas
>
> The archive includes uacme-scripts-notes.txt which includes a brief
> overview to the archive contents and a description of how uacme
> generated keys and certs work with apache httpd.

Thanks for this. I've downloaded it, and am now in the process of
reading through the scripts to be sure I understand the process, and to
see where I need to edit the scripts. I think I now understand the
system, though: the probing server wants a token to be inserted at a
particular point in the HTML document tree, and then it looks to see
whether the token is there.

I notice that one of your scripts (I forget which) had a comment saying
that you need to check for prerequisites. You're welcome to copy the
procedure CheckPrerequisites that is included in some of my Weasel
utilities, for example
      ftp://ftp.pmoylan.org/weasel/tools/adduser.cmd
It's not precisely what you need, but is easy to modify.

> To get started you need to create the c:\etc\ssl\uacme directory
> that uacme.exe expects to exist.

I was under the impression that C:\etc\SSL was a remnant of a much
earlier version of OS/2, before SSL was replaced by TLS, so I've been
using the directory
     C:\etc\pki\tls
as a place to keep keys and certificates. It's easy enough to change to
using the SSL directory, though.

> Then you need to ...

[details saved for when I get to the next step]

>> I've tried looking for uact documentation, but my eyesight is
>> weakening to the point where I can't read pages on github.
>
> I can commiserate.  Good luck with this.  Both Joan and I are
> getting close to needing cataract surgery.  It's more than a bit
> frustrating not to be able to read the the speed I once could.

I had cataract surgery years ago. My GP advised me not to wait until it
got bad, but to get it over with even though my symptoms weren't severe.
It was an easy procedure, after which my vision was good for a number of
years. More recently, though, I've had macular degeneration. My left eye
is now useless for reading, because of distortion at the focus. The
right eye is still good but I now have trouble with small fonts or
inadequate lighting.

I still do bank account reconciliation with a program that I wrote back
in the MS-DOS days. Lately I've had to change the fonts for an OS/2
command shell to 22 x 12, which means the shell takes up more than a
quarter of the screen size. That made me rediscover a flaw in the
design: changing the font size changes it for all instances of the shell
(and also all instances of 4OS2) rather than for just one application.
Oh, and the account reconciliation also requires me to hold a magnifying
glass over my phone, because my bank's online banking is incompatible
with Firefox for OS/2.

Another example: I'm learning Irish, but the only way I can use my
Irish-English dictionary is with a torch (flashlight). Otherwise the
contrast is not good enough.

-- 
Peter Moylan                  peter@pmoylan.org
http://www.pmoylan.org