Archive

Archive for the ‘Tech’ Category

importing a CA certificate on a RAZR V3

September 7th, 2006

I have had zero luck so far on importing my own CA certificate into my Motorola RAZR V3 phone. The user interface has a certificate manager application (CertMgr); however, there doesn’t seem to be a way to actually add additional certificates. My attempts to download and import the certificate in either PEM or DER formats have been unsuccessful.

The RAZR documentation has been less than helpful. It is really sad when a Google search for information returns your own site in the top 5 results. Can I be the only person trying to use a self-signed SSL certificate to secure email authentication being sent from my handset? It is annoying to have to acknowledge the certificate warning every time I go to send an email.

Any ideas?

Powered by Qumana

Tech

Pimp my RAZR

April 7th, 2006

For my birthday I replaced my aging Nokia 3650 with a shiny new Motorola RAZR V3. For some dumb reason T-Mobile decided to cripple the GPRS network settings and IMAP email client features of the phone. Fortunately it was easy to modify the phone following these directions I found over at ONLamp. Worked like a charm :)

Tech, moblogging

Linode

March 15th, 2006

A few weeks ago I moved spendy.org and the other domains I host over to a Linode virtual dedicated server. Linode uses user-mode Linux so I am free to run my choice of distribution with guaranteed bandwidth, CPU, and memory. Since I can’t really justify the expense of collocating a server for the few odds and ends I have on the Internet, a VDS is the next best thing. The initial account setup was painless and $20/month is a bargain compared to most shared hosting accounts.

Storage space is at a premium; however, I find most of my stuff fits nicely in 4GB. A bit of reverse proxy magic with Apache allows me to serve up my photos from my home server. This provides a more elegant solution to Verizon’s lame port 80 blocking on their FiOS network.

So far I’m a very happy customer :)

Blogging, Linux, Tech

FiOS!

February 22nd, 2006

I switched over to Verizon’s FiOS high-speed Internet service today. The install was a breeze and only took a few hours from start to finish. So far my only gripe is the port-80 blocking but other than that things are working smoothly. My review at DSLReports is here.

Before (DSL)
DSL Speedtest

After (FIOS)
FIOS Speedtest

Sweet! :)

House, Tech

wp-keitai-mail and PHP5

February 11th, 2006

Last month I finally got around to updating to PHP5 which had the unfortunate side effect of breaking Dr. Dave’s excellent wp-keitai-mail script. After upgrading it would throw the following error:

PHP Fatal error: Using $this when not in object context in /var/www/moblog/joncellini.com/mimedecode.php on line 168

Fortunately with a bit of googling I was able to come up with an easy fix. Altering the syntax on line 156 of wp-keitaimail.php does the trick.

Before:

$structure = Mail_mimeDecode::decode($mime_params);

After:

// hack to fix PHP5 error
// $structure = Mail_mimeDecode::decode($mime_params);
$mail_mimedecode=new Mail_mimeDecode($input);
$structure = $mail_mimedecode->decode($mime_params);

This fix got version 1.6b of the script working again :)

Blogging, Tech, moblogging

Nintendo WFC and the Linksys WAP11

January 14th, 2006

Heather, being the cool wife she is, got me a Nintendo DS a few weeks ago since I had mentioned I wanted one. She got me the Mario Kart bundle so I have been having fun having my ass handed to me by other players online. The built-in Wi-Fi feature is pretty cool, my only gripe is that the DS only supports WEP encryption. Fortunately, as a techie i happen to be swimming in extra network gear so I was able to make use of an old access point for the DS without having to downgrade my router from WPA2 encryption.

I ran into a couple of snags initially getting connected to the Nintendo Wi-Fi Connection at home with an old spare Linksys WAP11, fortunately, a bit of googling did the trick:

  • the basic transfer rate needs to be set to 1-2 Mbps - thanks to John for figuring this out :)
  • the WEP key on the Nintendo DS needs to be entered in HEX and not as the passphrase used to generate it - RTFM was helpful

I’m looking forward to getting my hands on the online enabled Tetris DS that is due this March.

Tech

HOWTO: WPA2 under Ubuntu 5.10 with a WPC54G v3 (Broadcom)

December 28th, 2005

Over the holiday weekend I took my old Sony VAIO notebook and loaded Ubuntu Linux on it. As a desktop / end-user distro I’m very impressed with Ubuntu - it is easy to use and configure. Unfortunately, I had some trouble getting my wireless card to work with WPA2 authentication to my wireless network at home. From looking at the Ubuntu forums it seems like this is a common problem. There are some helpful guides; however, none I found covered how to use WPA2 Pre-Shared Key authentication specifically. Fortunately by reading the man pages and some trial and error I was able to get it working.

Here are the steps:

  • download the appropriate driver for your card -> Linksys WPC54G v3
  • from the download extract the driver file (bcmwl5.sys) and inf file (LSBCMNDS.inf)
  • fire up the Synaptic Package Manager and install wpasupplicant & ndis-wrapper
  • open a shell and change directory to the location the driver and inf file were extracted to
  • install the driver: sudo ndis-wrapper -i ./LSBCMNDS.inf
  • check that the driver was installed correctly: ndiswrapper -l if it was installed correctly it should output “driver present, hardware present”
  • write the module configuration file: sudo ndiswrapper -m
  • load the module: sudo modprobe ndiswrapper
  • add ndiswrapper to /etc/modules so the kernel module is loaded at boot time

Now on to the fun of configuring wpa_supplicant to handle the WPA2 authentication for the interface.

  • open the /etc/wpa_supplicant.conf file in an editor
  • edit the network stanza as shown below substituting myssid and mypsk with the appropriate values for your network

network={
ssid=”myssid
proto=WPA2
key_mgmt=WPA-PSK
psk=”mypsk
}

  • open /etc/default/wpasupplicant in an editor
  • change ENABLED to 1
  • change the OPTIONS argument to have values appropriate for your adapter. For my WPC54G v3 I used the following:

OPTIONS=”-i wlan0 -D ndiswrapper -c /etc/wpa_supplicant.conf”

  • open the /etc/network/interfaces file in an editor
  • add entries for the wlan0 interface - on my notebook I desire the wireless card (wlan0) to be the primary interface. My configuration follows below:

# The primary network interface
auto wlan0
iface wlan0 inet dhcp
pre-up /etc/init.d/wpasupplicant start
pre-up sleep 5

  • and we are done

This leaves you with a wlan0 interface that will start automatically, is configured via DHCP, and prior to bringing the interface up the system will start wpa_supplicant to handle the WPA2 authentication so the card can associate with your WLAN.

I found the following to be helpful resources in getting it working:

Hopefully this is helpful to anyone else who is struggling to get it working.

Linux, Tech

wp-keitai-mail and the PHPXMLRPC vulnerability

November 11th, 2005

I use Dr. Dave’s wp-keitai-mail script for my moblog postings which works great; however, it depends on some older XMLRPC files from Wordpress 1.2 which unfortunately are vulnerable to remote code execution that has recently been exploited by a worm making its way around the Internet. It looks like Dr. Dave has lost interest in updating it and trying to rewrite it to use the new WP 1.5 XMLRPC libraries is non-trivial.

Fortunately the risk can be mitigated pretty easy with some Apache .htacess directives:

order deny,allow
deny from all
allow from localhost

order deny,allow
deny from all
allow from localhost

Placing that in the wp-includes directory keeps the older XMLRPC files from being accessible (and exploitable) from the Internet yet still allows them to be used by wp-keitai-mail. Tons easier than finding a new moblogging solution :)

Blogging, Tech, moblogging

Interoperability

August 23rd, 2005

Finally someone “gets it” - Google Talk was launched today providing an instant message product based on the Jabber/XMPP protocol. With any luck this will spur adoption Jabber based technologies and make the various proprietary IM networks obsolete.

Tech

plea for help

August 21st, 2005

Does anyone know how to import a self-signed SSL certificate into a Series 60 smartphone? On my Nokia 3650 it is annoying to have to click OK and acknowledge the “Security Warning - You have received an untrusted certificate” message any time I want to check, send, or read an email. The included certificate manager app doesn’t seem to have any way to import a certificate and my searches on the web haven’t turned up anything helpful.

Any ideas?

Tech