This page is not created by, affiliated with, or supported by Slack Technologies, Inc.
2019-11-20
Channels
- # aleph (12)
- # announcements (7)
- # aws (6)
- # babashka (36)
- # beginners (161)
- # boot (1)
- # calva (6)
- # cider (21)
- # clj-kondo (13)
- # cljs-dev (28)
- # cljsrn (1)
- # clojars (3)
- # clojure (13)
- # clojure-colombia (1)
- # clojure-europe (10)
- # clojure-spec (12)
- # clojure-uk (47)
- # clojuredesign-podcast (2)
- # clojurescript (67)
- # datascript (8)
- # datomic (21)
- # duct (3)
- # emacs (6)
- # events (1)
- # fulcro (6)
- # graalvm (98)
- # jobs (1)
- # kaocha (18)
- # luminus (1)
- # malli (7)
- # off-topic (56)
- # pathom (5)
- # re-frame (18)
- # reagent (3)
- # reitit (9)
- # remote-jobs (3)
- # rewrite-clj (10)
- # ring (1)
- # shadow-cljs (155)
- # spacemacs (2)
- # sql (5)
- # tools-deps (27)
- # vim (86)
- # xtdb (2)
status of the conch
branch:
this works:
$ lein bb '(conch/programs grep ps) (grep "ssh" {:in (ps "-e" {:seq true})})'
but this seems to get stuck:
$ ./bb '(conch/programs grep ps) (grep "ssh" {:in (ps "-e" {:seq true})})'
@sogaiu Thanks for confirming that this affects both lein and native: https://github.com/borkdude/babashka/issues/119#issuecomment-556295326
This is babashka built with GraalVM 19.3.0:
Linux: https://1858-201467090-gh.circle-artifacts.com/0/release/babashka-0.0.33-SNAPSHOT-linux-amd64.zip
macOS: https://1856-201467090-gh.circle-artifacts.com/0/release/babashka-0.0.33-SNAPSHOT-macos-amd64.zip
Can you check if ./bb '(slurp "
works?
It works on my machine now without any additional settings. (cc @jeroenvandijk)
@borkdude yes this works! Nice 🙂
@borkdude per #1336 I could get that preciously but not with ECC, so you probably want to check that it’s negotiating something decent
@lvh Oh sorry, I thought you were only referring to the SSL stuff. How can I trigger something ECC related in Clojure?
Ideally you wouldn’t have to: the problem is that if you disabled libsunec’s associated provider, everything just worked, but only did DHE instead of ECDHE— let me get you a reproducer
@borkdude tried the 0.0.33-SNAPSHOT-linux-ad64 snapshot here with the slurp successfully :thumbsup:
@borkdude it failed with 0.0.32
➜ ✗ bb '(slurp "")'
WARNING: The sunec native library, required by the SunEC provider, could not be loaded. This library is usually shipped as part of the JDK and can be found under <JAVA_HOME>/jre/lib/<platform>/libsunec.so. It is loaded at run time via System.loadLibrary("sunec"), the first time services from SunEC are accessed. To use this provider's services the java.library.path system property needs to be set accordingly to point to a location that contains libsunec.so. Note that if java.library.path is not set it defaults to the current working directory.
sun.security.ec.ECKeyPairGenerator.isCurveSupported([B)Z [symbol: Java_sun_security_ec_ECKeyPairGenerator_isCurveSupported or Java_sun_security_ec_ECKeyPairGenerator_isCurveSupported___3B]
➜ ✗ bb --version
babashka v0.0.32
You can use https://github.com/lvh/nscap to capture traffic and then Wireshark or whatever to see if something does ECDHE. Or when I get off this plane and am at Conj, I’ll do it myself :)
with 0.0.32 I got:
$ /usr/local/bin/bb '(slurp "")'
WARNING: The sunec native library, required by the SunEC provider, could not be loaded.
@lvh I'll let you do it yourself, because I don't really understand this stuff. Have fun at the conj 🙂
with 0.0.32 (built via the tag):
$ ./bb '(slurp "")'
WARNING: The sunec native library, required by the SunEC provider, could not be loaded. This library is usually shipped as part of the JDK and can be found under <JAVA_HOME>/jre/lib/<platform>/libsunec.so. It is loaded at run time via System.loadLibrary("sunec"), the first time services from SunEC are accessed. To use this provider's services the java.library.path system property needs to be set accordingly to point to a location that contains libsunec.so. Note that if java.library.path is not set it defaults to the current working directory.
sun.security.ec.ECKeyPairGenerator.isCurveSupported([B)Z [symbol: Java_sun_security_ec_ECKeyPairGenerator_isCurveSupported or Java_sun_security_ec_ECKeyPairGenerator_isCurveSupported___3B]
i wonder if someone has wrapped: http://openjdk.java.net/jeps/321
btw, regarding the conch test, both the bb and lein bb processes are still hung at the same place.