Voice command colour change

Hi,
I saw this question and the answer:
Q: Can voice commands other than: ON, OFF and DIM/BRIGHT be used?
A: NO, the ha-bridge emulates a Philips HUE bridge. The interactions between a Philips HUE and and Amazon Echo are determined by Philips and Amazon. They are not changeable by the ha-bridge, so only: ON, OFF and DIM/BRIGHT verbal commands are available.
Im using Domoticz with Homebridge. Homebridge have a option to connect it with Alexa.
When devices discovered (output from Homebridge) you can turn bulbs on/off/dim and colour change.
Here the site of how this works:
https://www.npmjs.com/package/homebridge-alexa
So my question: Would it be possible to let it work ? To change colour as well within HA Bridge using Alexa in future... :)

Unfortunately, this is a problem with Alexa software and not the ha-bridge

I'm not sure I understand how this is not HA-Bridge issue. I have some MiLight bulb set up in domoticz and I can change the light color just fine in domoticz. I then use HA Bridge to create color bulb devices and they show up as such in Alexa after discovery.
If I ask alexa to change the color on the bulb, it does send a request to HA Bridge, but the color doesn't change and from what I understand it's only because the color is send in H + L and there is nothing in the HA Bridge code to convert this value into RGB (well into the value that can be then transmitted to domoticz). I have not looked very hard but it seems to me that there is a code path in HA Bridge that is missing to correctly convert the HSL color.
So I don't see why it could not work (Note : I have done this test with an Echo Dot 2nd Gen triggering a routine created in the Alexa App, so both the routine and a requested color by voice on the Echo does produce a color request that is reaching HA Bridge).

@StephaneM60 Please turn on Debug for the HueMulator and send post the log. We'll see what is happening on the request end then.

Sure, this is what happens when I request the light to be Red (directly from the Alexa application on an Android device)

03-08-2019 16:18:02.343
DEBUG
HueMulator PUT called on api/* with request <<</api/e7d41ec59a844a4286fe35a4ed405a49/lights/14/state>>>, and body <<<{"hue":0,"sat":254}>>>
com.bwssystems.HABridge.hue.HueMulator

03-08-2019 16:18:02.343
DEBUG
hue state change requested: e7d41ec59a844a4286fe35a4ed405a49 from <IP_ADDRESS> body: {"hue":0,"sat":254}
com.bwssystems.HABridge.hue.HueMulator

Let me know if you need more (in the code, if

03-08-2019 16:18:02.343
DEBUG
HueMulator PUT called on api/* with request <<</api/e7d41ec59a844a4286fe35a4ed405a49/lights/14/state>>>, and body <<<{"hue":0,"sat":254}>>>
com.bwssystems.HABridge.hue.HueMulator

03-08-2019 16:18:02.343
DEBUG
hue state change requested: e7d41ec59a844a4286fe35a4ed405a49 from <IP_ADDRESS> body: {"hue":0,"sat":254}
com.bwssystems.HABridge.hue.HueMulator

Let me know if you need more informations (in the code, when I looked why it was not working, I remember that it is in the UpdateState or something like that that there is something missing, there is a test for the "hue" string, so it is somehow expected but after it is not used (only rgb is handled if I remembre correctly)

Well, Alexa is not giving red based on the body '''{"hue":0,"sat":254}'''

Some more color values,l tested in the Alexa app :
Green : {"hue":21845,"sat":254}
Blue : {"hue":43690,"sat":254}
Yellow : {"hue":10923,"sat":254}
Red : {"hue":0,"sat":254}
Magenta : {"hue":54613,"sat":254}
Cyan : {"hue":32768,"sat":254}
Orange : {"hue":7100,"sat":254}

I have been updating the color handling which should now work with HSL which was broken.


[FAB-17742] Convert Adds to Sets in Configtx pkg

Signed-off-by: Chongxin Luo<EMAIL_ADDRESS>Type of change

Improvement (improvement to code, performance, etc)

Description

Part 2 of converting adds to sets in configtx package.

Related issues
FAB-17742

/azp run


How can we make an env variable available at build time?

Hello,
I'm trying to build a rails app that checks an API key in a config yml file (Honeybadger API key).
I set up the Cuberfile in /cuber/production/Cuberfile (btw is there a flag for cuber cli to define the Cuberfile location?)
Please see my Cuberfile template attached.
When I go to /cuber/production/ and run cuber deploy, the buildpack is running but fail when trying to obtain the api key from the credential files:
Running: rake assets:precompile
rake aborted!
Honeybadger::Config::ConfigError: undefined method `[]' for nil:NilClass
/workspace/config/honeybadger.yml:4:in `<main>'

My honeybadger.yml file request the api key like so:
api_key: "<%= Rails.application.credentials.dig(:honeybadger, :key) %>"
Thanks for your help!
My Cuberfile
# The name of your app (it is used as a namespace on Kubernetes)
app 'simple-test'

# The name of an existing release (not necessary for normal deployments)
# It's only for rollbacks to a previous version or to lock to a specific version
# release 'abcdefg-20211201170000'

# The Git repository URL (or local path)
# This repository will be cloned on your machine in order build your app
repo '../../.'

# Build a Docker image of your app automatically using Cloud Native Buildpacks
buildpacks 'heroku/buildpacks:20'

# Alternatively, if you need more customization, you can provide a Dockerfile
# dockerfile 'Dockerfile'

# The Docker repository where the image will be stored
# Include only the image name, without any tag
image 'xxx/xxx'

# You can disable the cache to refresh the base image and all the cache layers
# cache false

# The Docker config, which must contain the credentials (auth) to access the registry
# The default is ~/.docker/config.json, otherwise you can set it here
# dockerconfig 'dockerconfig.json'
dockerconfig 'dockerconfig.json'

# The kubeconfig file contains the credentials to access to the Kubernetes cluster
kubeconfig 'xxx'

# Optionally you can run a migration command (e.g. database) during each release
migrate 'rails db:migrate', check: 'rake db:abort_if_pending_migrations'

# Run and scale any process (web server, background workers, etc.) on Kubernetes
proc :web, 'bundle exec puma', scale: 4
# proc :web, 'bundle exec puma', cpu: 1, ram: 2
proc :worker, 'bundle exec sidekiq', scale: 2

# Add cron jobs (they spin up a new pod with your app image)
# cron :example, '* * * * *', 'example command'

# Set some environment variables
env 'RACK_ENV', 'production'
env 'RAILS_ENV', 'production'
env 'RAILS_LOG_TO_STDOUT', 'enabled'
env 'RAILS_SERVE_STATIC_FILES', 'enabled'
# Set some secrets that will be available as environment variables
env 'RAILS_MASTER_KEY', File.read('../../config/credentials/production.key').strip, secret: true
env 'DATABASE_URL', ENV['DATABASE_URL'], secret: true
env 'REDIS_URL', ENV['REDIS_URL'], secret: true

# Depending on your provider, you can configure specific settings of the load balancer
# lb 'kubernetes.io/ingress.global-static-ip-name', 'my-app-static-ip'

# Depending on your provider, you may want to use an Ingress instead of a Load Balancer
# You should use this on GKE for example
# ingress true

# You can provide a custom SSL/TLS certificate for HTTPS if you want
# ssl 'ssl/cert.pem', 'ssl/key.pem'

is there a flag for cuber cli to define the Cuberfile location?

No (by design). You need to cd in the directory where the Cuberfile is located.

the buildpack is running but fail when trying to obtain the api key from the credential files

For buildpacks errors you can report them here:
https://github.com/buildpacks/pack
Or you can also report the problem to Rails for rake assets:precompile... It should not need to know the credentials for compiling assets.
An alternative is to use your own Dockerfile and the Cuber dockerfile command (instead of buildpacks).

Thanks for the answers, I'll try with a Dockerfile !


Automated cherry pick of #2948: fix: 避免make mod时异常

Cherry pick of #2948 on release/2.12.
#2948: fix: 避免make mod时异常

Codecov Report

:exclamation: No coverage uploaded for pull request base (release/2.12@c755aa7). Click here to learn what that means.
The diff coverage is n/a.

@@              Coverage Diff               @@
##             release/2.12   #2949   +/-   ##
==============================================
  Coverage                ?   7.06%
==============================================
  Files                   ?     477
  Lines                   ?   76389
  Branches                ?       0
==============================================
  Hits                    ?    5396
  Misses                  ?   70541
  Partials                ?     452

Flag
Coverage Δ

#aFlag
7.06% <ø> (?)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c755aa7...7c1bf04. Read the comment docs.

/lgtm

/approve


jax-metal slowdown on m3 max when external monitor is plugged in

Description
I am using macOS Sequoia 15.0.1 (24A348) on an Apple M3 Max.
python: 3.12.7
jax: 0.4.34
jaxlib: 0.4.34
jax-metal: 0.1.0
I noticed that I am consistently getting a reduction in speed by more than a factor of 2 on a simple toy problem when I attach an external monitor.
E.g. without an external monitor I get:
10000/10000 [00:09<00:00, 1021.68it/s]

With an external monitor, I get:
10000/10000 [00:24<00:00, 407.24it/s]

My suspicion was that refresh rate of the monitor could have something to do with it, so I decided to unplug the monitor and test with the internal display, but this time reducing the refresh rate from 120 Hz (default) to 60 Hz and again I got a reduction in speed (although slightly less than with an external monitor plugged in):
10000/10000 [00:18<00:00, 549.69it/s]

Strange thing is that when I fiddle a lot with the display controls (switching between mirroring and extended screen), I can sometimes have it run at 1000it/s even with the external display plugged in. This to me suggests that this is probably a macOS video/mps driver issue and not specific to jax-metal. I could not reproduce this problem with any other libraries for numerical calculations that support MPS, although none of those managed to get more than 400it/s, to begin with even without an external monitor attached.
System info (python version, jaxlib version, accelerator, etc.)
Platform 'METAL' is experimental and not all JAX functionality may be correctly supported!
WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
W0000 00:00:1728313982.685485  115532 mps_client.cc:510] WARNING: JAX Apple GPU support is experimental and not all JAX functionality is correctly supported!
Metal device set to: Apple M3 Max

systemMemory: 128.00 GB
maxCacheSize: 48.00 GB

I0000 00:00:1728313982.692505  115532 service.cc:145] XLA service 0x600003911200 initialized for platform METAL (this does not guarantee that XLA will be used). Devices:
I0000 00:00:1728313982.692514  115532 service.cc:153]   StreamExecutor device (0): Metal, <undefined>
I0000 00:00:1728313982.693547  115532 mps_client.cc:406] Using Simple allocator.
I0000 00:00:1728313982.693555  115532 mps_client.cc:384] XLA backend will use up to<PHONE_NUMBER>68 bytes on device 0 for SimpleAllocator.
jax:    0.4.34
jaxlib: 0.4.34
numpy:  2.1.2
python: 3.12.7 | packaged by conda-forge | (main, Oct  4 2024, 15:57:01) [Clang 17.0.6 ]
jax.devices (1 total, 1 local): [METAL(id=0)]
process_count: 1
platform: uname_result(system='Darwin', node='<REMOVED>', release='24.0.0', version='Darwin Kernel Version 24.0.0: Tue Sep 24 23:35:10 PDT 2024; root:xnu-11215.1.12~1/RELEASE_ARM64_T6031', machine='arm64')

I also suspect this is a Mac OS issue and nothing we can address from JAX, but @shuhand0 can determine that.


Issue changing default voice in Gemini2 live api

Description of the bug:
I'm using the code in live_api_starter.py to test out the multimodal live api and build from there. The basic code works. Based on the documentation in https://ai.google.dev/api/multimodal-live#sessions I am attempting to change the default voice but it seems to be not working if I use the format mentioned in the API documentation:
My code snippet:
MODEL = "models/gemini-2.0-flash-exp"

MODE = args.mode

client = genai.Client(http_options={"api_version": "v1alpha"})

CONFIG = {
    "generation_config": {
        "response_modalities": ["AUDIO"],
        "speech_config": {
            "voice_config": {
                "prebuilt_voice_config": {
                    "voice_name": "Charon"
                }
            }
        },
    }
}

Error message:
Traceback (most recent call last):
File "/Users/rishi/Projects/gemini_live/new.py", line 393, in
asyncio.run(main.run())
File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/asyncio/runners.py", line 190, in run
return runner.run(main)
^^^^^^^^^^^^^^^^
File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/asyncio/runners.py", line 118, in run
return self._loop.run_until_complete(task)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/asyncio/base_events.py", line 653, in run_until_complete
return future.result()
^^^^^^^^^^^^^^^
File "/Users/rishi/Projects/gemini_live/new.py", line 362, in run
async with (
File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/contextlib.py", line 204, in aenter
return await anext(self.gen)
^^^^^^^^^^^^^^^^^^^^^
File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/google/genai/live.py", line 626, in connect
self._LiveSetup_to_mldev(model=transformed_model, config=config)
File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/google/genai/live.py", line 459, in _LiveSetup_to_mldev
_GenerateContentConfig_to_mldev(
File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/google/genai/models.py", line 894, in _GenerateContentConfig_to_mldev
t.t_speech_config(api_client, getv(from_object, ['speech_config'])),
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/google/genai/_transformers.py", line 301, in t_speech_config
raise ValueError(f'Unsupported speechConfig type: {type(origin)}')
ValueError: Unsupported speechConfig type: <class 'dict'>
Actual vs expected behavior:
No response
Any other information you'd like to share?
No response

I had the same issue. Try this instead. It worked for me.
"generation_config": {     "response_modalities": ["AUDIO"],     "speech_config": "Charon"   }

, "speech_config": "Charon"

I had the same issue. Try this instead. It worked for me.
"generation_config": { "response_modalities": ["AUDIO"], "speech_config": "Charon" }

that works, thanks @ThashilNaidoo !
but i also noticed the report is triaged as a bug so hopefully they can fix the issue and/or clarify which one is the correct usage


[FP]: Rust vulnerability CVE-2020-36448 has resurfaced, this time on dependency cache4k-jvm, even with latest (10.0.3) Dependency Check version

Package URl
<EMAIL_ADDRESS>CPE
cpe:2.3:a:cache_project:cache:0.13.0:::::::*
CVE
CVE-2020-36448
ODC Integration
{"label"=>"Gradle Plugin"}
ODC Version
10.0.3
Description
CVE-2020-36448 pertains to a Rust dependency, yet it gets flagged in a JVM library. This isn't the first time this false positive has popped up. see the following previous issues:

https://github.com/jeremylong/DependencyCheck/issues/3968
https://github.com/jeremylong/DependencyCheck/issues/4780

It would seem that the CPE is too generic and tends to flag any dependency with the name cache in it and a version that is too low.

@OrangeDog It would indeed seem that pretty much every new vulnerability that's getting flagged by the plugin lately is a false positive due to a platform/language mismatch. All the FPs I've reported this week seem to fit in that category.
@jeremylong is it possible to improve the plugin in a way that it takes applicable platforms and languages into consideration when it tries to match CPEs to dependency package IDs?

@volkert-fastned the 11th field of the CPE is the language. Most have that as *, but this CVE and the one I linked have it as rust and python respectively.
If dependency-check added the language for detected dependencies, then it could include that in the match and remove all these FPs.


Error in log file

http://pastebin.com/EeCJEUB3
AE2 rv3 alpha13, ae2stuff-rv3-<IP_ADDRESS>-mc1.7.10
https://github.com/AppliedEnergistics/Applied-Energistics-2/issues/2009

Unless i'm missing something this error has nothing to do with my mod, it's between AE2 itself and Extra Utilities.


Ms3 jessica

Fixed a few bugs:

truediv: division by zero checks to be done after checking if other is AD_object instance,
rpow .val formula was wrong, should be other**self.val and not the other way around,
since Malik used "assert" for checking input types, I updated the test.py to expect assertion error instead of typeerror

Fixed a few bugs:

truediv: division by zero checks to be done after checking if other is AD_object instance,
rpow .val formula was wrong, should be other**self.val and not the other way around,
since Malik used "assert" for checking input types, I updated the test.py to expect assertion error instead of typeerror


How to authenticate in influxdb using corley/influxdb-php-sdk

Hi,
i want to authenticate influx db using corley/influxdb-php-sdk . Can anyone help me to achieve this.
Thanks

Hi,
you have to prepare your username and password for your Http\Options
$options = new Http\Options();
$options->setUsername("your-username");
$options->setPassword("your-password");
// ...

Right?

Hi Walter,
Thanks for your quick reply.
Rahul Kumar
On 20 November 2015 at 15:40, Walter Dal Mut<EMAIL_ADDRESS>wrote:

Hi,
you have to prepare your username and password for your Http\Options
$options = new Http\Options();$options->setUsername("your-username");$options->setPassword("your-password");// ...
Right?
—
Reply to this email directly or view it on GitHub
https://github.com/corley/influxdb-php-sdk/issues/67#issuecomment-158346536
.

--
Using a smartphone? Try our app for property search
http://www.commonfloor.com/mobile and app for residential communities
http://groups.commonfloor.com/mobile.
This e-mail and any files transmitted with it may contain confidential and
privileged information are for the sole use of the intended recipient(s) .
If you are not the intended recipient, please appraise the sender by reply
e-mail and destroy all copies and the original message. Any unauthorized
disclosure, dissemination, forwarding, printing or copying of this email or
any action taken on this e-mail is strictly prohibited and may be unlawful.

;)
Il 20 nov 2015 11:15, "rahul9878"<EMAIL_ADDRESS>ha scritto:

Hi Walter,
Thanks for your quick reply.
Rahul Kumar
On 20 November 2015 at 15:40, Walter Dal Mut<EMAIL_ADDRESS>wrote:

Hi,
you have to prepare your username and password for your Http\Options
$options = new
Http\Options();$options->setUsername("your-username");$options->setPassword("your-password");//
...
Right?
—
Reply to this email directly or view it on GitHub
<
https://github.com/corley/influxdb-php-sdk/issues/67#issuecomment-158346536
.

--
Using a smartphone? Try our app for property search
http://www.commonfloor.com/mobile and app for residential communities
http://groups.commonfloor.com/mobile.

This e-mail and any files transmitted with it may contain confidential and
privileged information are for the sole use of the intended recipient(s) .
If you are not the intended recipient, please appraise the sender by reply
e-mail and destroy all copies and the original message. Any unauthorized
disclosure, dissemination, forwarding, printing or copying of this email
or
any action taken on this e-mail is strictly prohibited and may be
unlawful.
—
Reply to this email directly or view it on GitHub
https://github.com/corley/influxdb-php-sdk/issues/67#issuecomment-158348124
.


return plotted figures for manipulation

Incorporated this change in the beta branch, which is now merged onto the master. The plotters return figures. Thanks!


Accessing self signed code-server on iPad

i'm running code-server on https using custom image of code-server, i used existing certificate by providing the path to "--cert" and the path to its key with "--cert-key" as given documentation.
I used below command to run the code-server on https
sudo docker run -d -p 443:8080 -e PASSWORD="password@123" -v /home/ubuntu/ssl_certificate/wwwwww.crt:/home/coder/cert.crt -v /home/ubuntu/ssl_certificate/xxxxxxx.key:/home/coder/cert.key -v "$PWD:/home/coder/project" kkkkk/code-server --auth none --cert /home/coder/cert.crt --cert-key /home/coder/cert.key --proxy-domain *.yyyy.com
here in above command i'm copying my existing "certificate" and "key" from my local system to container and then passing that path in "--cert" and "--cert-key"
It's running on https and also redirecting all "http" request to "https" but the issue which is coming here is that the site in not secure even after provide correct certificate file.
what should i do to make it secure any help will be appreciated

Are you using a self-signed certificate? If so, you'll need to get a real one.

Can you elaborate on what you mean by not secure? Is HTTPS not active?

Are you using a self-signed certificate? If so, you'll need to get a real one.

What if I'm running on LAN? As far as I know CA cannot sign .local domains.

Are you using a self-signed certificate? If so, you'll need to get a real one.

What if I'm running on LAN? As far as I know CA cannot sign .local domains.

I'd assume you'd need to setup a local CA and add that to your OS. You should also be able to add self-signed certificates to your OS, such as shown here: https://www.humankode.com/asp-net-core/develop-locally-with-https-self-signed-certificates-and-asp-net-core
(Not tested)

Hello @mbreese, thanks for pitching in but the article you linked shares how to create a simple self-signed certificate (which is by definition not signed by a CA)
The problem here is not generating the certificate but the fact that in order to use code-server with iPadOS properly an actual SSL certificate is needed.
My setup is a bit more involved than normal but basically I am running code-server on a Linux box that won’t have internet connection and would allow to use vscode via iPad connected through LAN. In this scenario having an actual certificate with a domain seems out of the question and while I understand the reasoning behind limiting certain features when a self signed cert is in place (MiM attacks and such) it would still be good to have an option for intranets.

No one ever mentioned iPadOS... that’s a bit different. But still doable. (Note: it’s recommended to use MDM for iOS).
https://support.apple.com/en-us/HT204477
You can still add the certificate to the OS so that it will be treated as trusted. The mechanism is different, but the same concept for iOS. This should still allow a self signed certificate to be used and trusted.
If you want to have multiple certificates, you should look into creating your own CA and then using that to sign your own certificates. This is pretty easy to do and there are tools available to help you manage it on Linux. The trick here is to add the CA’s certificate to each client OS (including iOS). This will by definition be a self-signed certificate.
I’ve done this for an enterprise install where our internal CA certificate gets added to each user’s system as part of deployment. Then we could issue our own certificates and have them trusted internally.  This was a few years ago, so things may have changed a bit, but this is more common than you think.
Note: if you’re trying to prevent a MitM attack, you’d need some mechanism to either pin the certificate or establish that it is trusted. That’s true for a traditional server or an isolated network. Adding the certificate to the OS is one such mechanism.

On May 3, 2020, at 5:12 AM, Andrea Amorosi<EMAIL_ADDRESS>wrote:

Hello @mbreese, thanks for pitching in but the article you linked shares how to create a simple self-signed certificate (which is by definition not signed by a CA)
The problem here is not generating the certificate but the fact that in order to use code-server with iPadOS properly an actual SSL certificate is needed.
My setup is a bit more involved than normal but basically I am running code-server on a Linux box that won’t have internet connection and would allow to use vscode via iPad connected through LAN. In this scenario having an actual certificate with a domain seems out of the question and while I understand the reasoning behind limiting certain features when a self signed cert is in place (MiM attacks and such) it would still be good to have an option for intranets.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or unsubscribe.

Since iPadOS / iOS 13 there are a few more requirements for TLS server certificates to be trusted by iPadOS / iOS See https://support.apple.com/en-us/HT210176
If using openssl to issue a certificate, this blog post might help for these requirements:  http://blog.nashcom.de/nashcomblog.nsf/dx/more-strict-server-certificate-handling-in-ios-13-macos-10.15.htm?opendocument&comments
On macOS the certificate assistent in Keychain Access.app let's you easily create your own CA and issue the certificates.

I have generated the certificate according to the specifications detailed by @lisanet (thanks a lot):
openssl req -x509 -nodes -days 399 -sha256 -newkey rsa:2048 -out /etc/ssl/localcerts/code.crt -keyout /etc/ssl/localcerts/code.key -config /etc/ssl/openssl.cnf -addext extendedKeyUsage=serverAuth -addext subjectAltName=DNS:raspberrypi.local

When I dump the certificate, as far as I can see, it complies to all the requirements (some parts have been redacted with ......, the actual certificate has actual values):
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ......
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = ES, L = Barcelona, O = Andre INC, CN = raspberrypi.local, emailAddress =<EMAIL_ADDRESS>        Validity
            Not Before: May  3 15:26:21 2020 GMT
            Not After : Jun  6 15:26:21 2021 GMT
        Subject: C = ES, L = Barcelona, O = Andre INC, CN = raspberrypi.local, emailAddress =<EMAIL_ADDRESS>        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    ......
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ......
            X509v3 Authority Key Identifier:
                keyid:......

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Subject Alternative Name:
                DNS:raspberrypi.local
    Signature Algorithm: sha256WithRSAEncryption
         ...

I have then manually installed the certificate on the iPad as a profile and trusted it (thanks @mbreese) and now whenever I visit the host through Safari via HTTPS I don't get anymore any trust/security notice.
Unfortunately code-server shows me a white screen after login now but at least I know it's not a certificate issue as other issues claim.

You need to create your own CA and then create the TLS server certificate using your CA. The CA certificate has to be imported to iPadOS and has to be trusted as a profile and as a certification authority.
For use with code-server, add the CA certificate to the server certificate with
cat client.pem ca.pem > combined.pem
and use this combined.pem with code-servers -cert option.
That fixed the white screen issue on my iPad Pro, whereas only a single self-signed server certificate didn't work.

Could you please elaborate on how to do so through Keychain Access.app?
I had already tried after your first post to create a CA and the certificate but then resorted to openssl. I tried again to create both using Keychain Access > Certificate Assistant but perhaps I'm doing something wrong because I end up with ca.pem and client.cer (that I need to convert into pem) before merging them into combined.pem
Besides, when trying to start code-server with the --cert key and passing the combined.pem it asks me for the key.

Take a look at this: https://siber-sonic.com/mac/MailSMIME/CA.html although it seems outdated, it's still valid.
And please read some manual about openssl. openssl output is almost always in PEM format, so your *.crt is just a PEM file. (test it with the 'file client.crt' command). If it is not PEM, it's in DER format, which can be easily converted, see man openssl.
Well, if code-server complains about a missing key, add it with --cert-key client.key`
Every web server which uses TLS needs just 3 things. A server cert, the private key for this server cert, and the CA which has signed this server cert. Since code-server (and many others apps with included web servers) doesn't have an option to specify the CA cert, you need to combine it with the client cert. That's all.

Can you elaborate on what you mean by not secure? Is HTTPS not active?

HTTPS is active but it's showing unsecured connection while i'm browsing it on chrome.
i'm using valid certificate then also getting this unsecured connection warning. I resolved this issue while i used a valid url for this site insted of just browsing this site on IP address.
But my real problem is i need to use this inside my application where i will create new container of code-server on user request and this container will get created on azure container instance  for each user separately. Now i tried to do this with "Enable a TLS endpoint in a sidecar container" using self-signed certificate and everything is working file except for the warning i'm getting of insecure connection. And this is a problem for me as my application is working on https it will not allow insecure site to get open inside it. Azure is only giving me one IP for browsing it's not giving me any DNS even if i'm giving "--dns-name-label" while i'm creating this container.
So is there any way i can make code-server secure just with IP address

It honestly sounds like you need to run this behind a reverse proxy. Then you can let the proxy handle the SSL termination and forwarding requests to your Azure containers. This is the easiest way to get SSL running with code-server anyway (IMO). You may still have issues with window.isSecureContext, but that will depend on how the proxy is setup.
To answer your specific question (and this is in no way code-server specific): you’re not going to get an IP address certificate issued to you for an ephemeral IP address you get from Azure. The only way you could potentially do it is with a self-signed CA certificate, but then you’ll still get end user warnings.
See this: https://www.geocerts.com/support/ip-address-in-ssl-certificate
You can have IP certificates, but no public CA would issue an IP certificate to an IP address you aren’t permanently assigned.

@lisanet Interesting, can you not add the self signed certificate as a trusted authority like you can on macOS?

@lisanet Interesting, can you not add the self signed certificate as a trusted authority like you can on macOS?

I couldn't get it to work. I've tried using macOS certificate assistant to create a self signed root certificate with all needed extensions. Although the certificate looks okay in macOS keychain and can be trusted there, it couldn't be trusted as a root CA on iPadOS.

Awesome, will add this to the FAQ and guide then!

That is interesting indeed, from the previous comments I was under the impression that it was supposed to work and tested and so I spent several hours trying to make it work.
@nhooyr Definitely something that should be added to the FAQs then!

That is interesting indeed, from the previous comments I was under the impression that it was supposed to work and tested and so I spent several hours trying to make it work.

Reading my comment again, it might be somewhat misleading.
A single self signed root certificate with the extension (SAN and TLS server) to use as the server certificate  couldn't be trusted in iPadOS as a root certificate.
Generating a root CA in macOS certificate assistant and then generating a server certificate (with the needed extensions) signed by this root CA certificate will work. The root CA cert can be trusted in iPadOS.

Added a link to @lisanet's comment in the FAQ: https://github.com/cdr/code-server/blob/629645f55530c532bec841114bfda92550636afb/doc/FAQ.md#blank-screen-on-ipad
#1678

@lisanet I created a CA in Certificate Assistant on the Mac. I generated a CSR using OpenSSL including the SAN (changed below to xxxxx.local):
Requested Extensions:
X509v3 Subject Alternative Name:
DNS:xxxxxxx.local
X509v3 Key Usage:
Digital Signature, Key Encipherment, Data Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
The problem I seem to have is when I "Create a Certificate For Someone Else" in Certificate Assistant, it doesn't appear to honor the SAN entry in the generated certificate. Wondering if you saw this at all when you were working through this?

@LindsayWeir I didn't use a CSR.
I used in Certificate Assistant just the "Create a Certificate" menu item with an identity type of "Leaf" and "Certificate Type" of SSL-Server and checked the "let me override defaults" to get to the extended key usage options to fill in the DNS name.

Thanks Lisa, I was trying to use a CSR generated from OpenSSL. Let me try your way and see if that works.

@lisanet I was able to get the certificate signed and generated correctly. This is using .local for the signed certification. Were you seeing issues with copy/paste on the iPad after you got this all working? Any insights or workarounds? Thanks

nope, I couldn't get copy / paste to work.

I have tried all day to get copy/paste to work with no luck. This is super fuckin’ frustrating, can we just have an override option to allow forcing the session to be considered secure???

It’s out of our control, the browser controls the context and the APIs aren’t available in a non secure context.

https://github.com/cdr/code-server/issues/1362
@zkghost has reported success following this guide to setup a certificate without a CA
https://7402.org/blog/2019/new-self-signed-ssl-cert-ios-13.html

Tried this too but no luck. Now it stays blank for half of the times and the other half it gets to the editor and then disconnects after a few seconds.

Will using LE certificates solve the issue? If so, could you provide instructions on how to use LE with a code-server instance? What about FQDNs? And why are there no guides dedicated for iPadOS users like me?

And why are there no guides dedicated for iPadOS users like me?

There is. See https://github.com/cdr/code-server/blob/master/doc/guide.md
The lets encrypt option works well on iPad.
I think it's a good idea to collect all the iPad issues in a FAQ entry
https://github.com/cdr/code-server/issues/1816

@nhooyr and what about users who are on iPad and cannot expose the server (hence no LE)?
It would be great if the maintainers could either provide detailed instructions for this use case or finally state that this is not supported.
I for one, will for sure submit a PR with the instructions if I ever manage to make it work but so far I have followed all the procedures suggested by those who reported were able to make it run and were never able to make it run properly.

@dreamorosi if your server is not exposed to the internet, then what is your need for HTTPS? (just curious).
If anyone is interested in the specific steps for setting up certbot with auto-renewal on Ubuntu, I cover them here https://codetalk.io/posts/2020-03-20-Visual-Studio-Code-on-iPad.html#securing-the-setup-for-remote-access. Tested and works with iPad.

@Tehnix without HTTPS the clipboard is disabled by default, which makes the app whole IDE pretty unusable.

@dreamorosi I think using VSApp solves this issue.

@dreamorosi Ah, I wasn't aware. That said, as far as I'm aware and according to https://github.com/cdr/code-server/issues/1015 the clipboard doesn't work at all on iPad.
It's a bit of an annoyance to be honest, I've currently resolved to using a VIM emulator (amVIM) to at least be able to yank and paste via that, since the plugin will manage the clipboard.

I for one, will for sure submit a PR with the instructions if I ever manage to make it work but so far I have followed all the procedures suggested by those who reported were able to make it run and were never able to make it run properly.

That's the problem. I can't verify any of these solutions yet either so we can't officially say whether it works or not.
My iPad Pro should be here tomorrow so I'll be able to fix this then.

Thanks for replying and fair enough. If you ever manage to make it work feel free to shout at me and let me know, in the meantime thanks a lot for the work you’ve put into this.

#this is a rehash of the comment I left at Issue #1362 but since it's cloesed I post my comment here as well.
This is a walkthrough of the set-up that works for me on the local lan. The cert is created with the actual IP of the code-server hosting computer (a static IP).
sudo apt install nginx
sudo nano /etc/nginx/sites-available/code-server.conf
server {
listen 443 ssl;
server_name 192.168.x.xx; #use IP of the computer hosting code-server

location / {
  proxy_pass http://<IP_ADDRESS>:8080/;
  proxy_set_header Host $host;
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection upgrade;
  access_log off;

ssl_certificate /etc/nginx/ssl/codeserver.crt;
ssl_certificate_key /etc/nginx/ssl/codeserver.key;

}
Save and close file.
sudo ln -s /etc/nginx/sites-available/code-server.conf /etc/nginx/sites-enabled/code-server.conf
sudo nginx -t #checks for errors
sudo systemctl start nginx
sudo mkdir /etc/nginx/ssl
cd ~/
cp /etc/ssl/openssl.cnf template.cnf
nano template.cnf
Find the section labelled v3_ca and add two lines:
subjectAltName = DNS:192.168.x.xx # replace 192.168.x.xx with IP of the computer hosting code-server
extendedKeyUsage = serverAuth
Find this comment and add the following line:
# Extension copying option: use with caution.
copy_extensions = copy
Save and close the template.cnf file.
sudo openssl req -x509 -nodes -days 825 -newkey rsa:2048 -config template.cnf -keyout /etc/nginx/ssl/codeserver.key -out /etc/nginx/ssl/codeserver.crt
answer this line as:
Common Name (e.g. server FQDN or YOUR name) []: 192.168.x.xx # replace 192.168.x.xx with IP of the computer hosting code-server
sudo systemctl reload nginx
On iPad
email (etc.) codeserver.crt
open attached codeserver.crt
go to Settings app --> General --> Profiles and install codeserver cert
go to Settings app --> General --> About --> Certificate Trust Settings --> enable full trust for codeserver cert
In Safari go to https://192.168.x.xx to access code-server.
*Note
code-server is started with --bind-addr <IP_ADDRESS>:8080 or you can pass it via the below config file
~/.config/code-server/config.yaml has the following
bind-addr: <IP_ADDRESS>:8080
auth: none
password: xxx
cert: false
Hope this helps anyone looking into this issue.

Thank you @xytzw for taking the time to write and post all this, unfortunately I was not able to reproduce what you are saying and make code-server work.
I tried a couple of times (always from scratch) to follow all the steps you suggest and unfortunately nothing works for me.
I have actually recorded my screen while doing the whole thing and I can post it here or elsewhere, if anyone is interested just let me know.

FWI, I self-signed a certificate on iOS 14 and seems working well, you have to enable full permissions to the certificate, but other that works as expected.

FYI, I self-signed a certificate on iOS 14 and seems working well, you have to enable full permissions to the certificate, but other that works as expected.

Do you have a guide for this @DAddYE ?

FYI, I self-signed a certificate on iOS 14 and seems working well, you have to enable full permissions to the certificate, but other that works as expected.

Do you have a guide for this @DAddYE ?

Yes, I followed this: https://7402.org/blog/2019/new-self-signed-ssl-cert-ios-13.html
Do not forget a few things:

From iPad don't use the local ip rather the local-name.local to reach your https server.
If out of network setup a tunnel with Blink (terminal for iPad) or similar apps, pay attention that only Blink has the ability to run in background and keep the tunnel open (see their docs for how to but you need to enable location tracking).
Once you install the certificate, don't forget to go to "Settings->General->Profiles" and enable full access to the new installed profile.
Add a home shortcut to enjoy a rather nice full screen experience:

I hope it helps!

@DAddYE so copy and paste works after everything? Thanks.

@snazzybunny you have to edit lib/vscode/src/vs/editor/browser/controller/textAreaHandler.ts, comment/remove line 186:
if (browser.isIPad) {
       // Do not place anything in the textarea for the iPad
       // return TextAreaState.EMPTY;
}

No clue why they had such return TextAreaState.EMPTY in the first place.
NOTE: On the very very last iOS beta, I think there is a bug in the os, if you copy/paste within vscode works, but if you copy from an app to another, most of the time doesn't work (I think is the new privacy thing), however, a simple cmd+shift+v solve the trick.

Thanks @DAddYE. Is there any guide on how to do that? I'm assuming I need recompile it with the changes but I used the install script on a ubuntu vm. Works on my side with LetsEncrypt I didnt even need to import the CA certs to my ipad. My copy paste isnt working from within vscode but I'm guessing your fix would do it.

Thanks @DAddYE. Is there any guide on how to do that? I'm assuming I need recompile it with the changes but I used the install script on a ubuntu vm. Works on my side with LetsEncrypt I didnt even need to import the CA certs to my ipad. My copy paste isnt working from within vscode but I'm guessing your fix would do it.

They have good guides here: https://github.com/cdr/code-server/blob/v3.4.1/doc/CONTRIBUTING.md#build
The upstream vscode on July 3 pushed the fix posted above https://github.com/microsoft/vscode/commit/b3fba742c5846997eb7ef1f36a1860588eff681a, however, no idea when will land on here.

@snazzybunny you have to edit lib/vscode/src/vs/editor/browser/controller/textAreaHandler.ts, comment/remove line 186:
if (browser.isIPad) {
       // Do not place anything in the textarea for the iPad
       // return TextAreaState.EMPTY;
}

No clue why they had such return TextAreaState.EMPTY in the first place.
NOTE: On the very very last iOS beta, I think there is a bug in the os, if you copy/paste within vscode works, but if you copy from an app to another, most of the time doesn't work (I think is the new privacy thing), however, a simple cmd+shift+v solve the trick.

The copy/paste bug disappeared in the latest beta.

@DAddYE thanks for pointing me in the right direction. Everything seems to be working fine now after the edit and update to latest beta!

@DAddYE I noticed that there is no paste button on Windows or Mac. It does however appear on the ipad. I suppose the code-server should strictly be for the ipad eh. Has anyone had the same issue where the paste button doesn't appear when you right click? Thanks.

Mmm works for me using cmd+c or cmd+v
Make sure you have the right keybidnings for your environment (mac) and
(ipad)
On Tue, Sep 1, 2020 at 5:54 PM Andrew Phan<EMAIL_ADDRESS>wrote:

@DAddYE https://github.com/DAddYE I noticed that there is no paste
button on Windows or Mac. It does however appear on the ipad. I suppose the
code-server should strictly be for the ipad eh. Has anyone had the same
issue where the paste button doesn't appear when you right click? Thanks.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/cdr/code-server/issues/1566#issuecomment-685213622,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAABTCJYM7TL2ATOQCNFJHLSDWJVVANCNFSM4MSQHNHQ
.

There is an easy way to fix most of the above issues without any custom CA hacks. Point your domain (or sub domain) at your internal ip. Then in Caddy activate DNS-01 challenge. This does not require Caddy to be actually reachable at the domain, it just have to call the API of your registrar using one of the modules such as https://github.com/caddy-dns/cloudflare.

FYI, I self-signed a certificate on iOS 14 and seems working well, you have to enable full permissions to the certificate, but other that works as expected.

Do you have a guide for this @DAddYE ?

Yes, I followed this: https://7402.org/blog/2019/new-self-signed-ssl-cert-ios-13.html
Do not forget a few things:
1. From iPad don't use the local ip rather the `local-name.local` to reach your https server.

2. If out of network setup a tunnel with `Blink` (terminal for iPad) or similar apps, pay attention that only Blink has the ability to run in background and keep the tunnel open (see their docs for how to but you need to enable location tracking).

3. Once you install the certificate, don't forget to go to "Settings->General->Profiles" and enable `full access` to the new installed profile.

4. Add a home shortcut to enjoy a rather nice full screen experience:

I hope it helps!

@DAddYE I ended up following your advice and the instructions you linked from 7402.org and this was working great for iOS 13, but now that I've updated my device to iOS 14 my certs no longer pass validation. Did you have any issues getting certs to pass on your iOS 14 devices?

I already enabled full trust for the root cert from Settings > About > Certificate Trust Settings
This was working in iOS 13.7 but not iOS 14

Please take a look at my openssl config:
[ ca ]
default_ca = CA_default

[ CA_default ]
default_md = sha256
default_days = 397
x509_extensions	= usr_cert

[ req ]
default_bits		= 4096
default_md		= sha256
distinguished_name	= req_distinguished_name
attributes		= req_attributes
x509_extensions	= v3_ca
copy_extensions = copy

[ usr_cert ]
basicConstraints=CA:TRUE

[ v3_req ]
basicConstraints = CA:TRUE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment

[ v3_ca ]
basicConstraints = CA:TRUE
subjectAltName = DNS:<IP_ADDRESS>
extendedKeyUsage = serverAuth

[ req_distinguished_name ]
countryName			= Country Name (2 letter code)
countryName_min			= 2
countryName_max			= 2
stateOrProvinceName		= State or Province Name (full name)
localityName			= Locality Name (eg, city)
0.organizationName		= Organization Name (eg, company)
organizationalUnitName		= Organizational Unit Name (eg, section)
commonName			= Common Name (eg, fully qualified host name)
commonName_max			= 64
emailAddress			= Email Address
emailAddress_max		= 64

[ req_attributes ]
challengePassword		= A challenge password
challengePassword_min		= 4
challengePassword_max		= 20

Hmm I did not need to add any CAs to my Ipad and everything is working fine except scrolling. Copy and paste works as well. I have a reverse proxy nginx server with LetsEncrypt. Copied the certs from the nginx server to my code-server machine and added this to my config.yaml in ~/.config/code-server:
cert: /home/meow/.code-server-meta/cert.pem
cert-key: /home/meow/.code-server-meta/key.pem
Anyone else here have issues with scrolling using a magic keyboard? I have to manually use click and scroll down or press cmd+down, which mimics the page down button.

There doesn’t seem to be any update instructions. Does anyone have any idea how to update from 3.4.1 to 3.5.0? Thanks.

Hi,
sorry for the late reply. Works perfectly on my end, here my config:

OpenSSL example configuration file.
This is mostly being used for generation of certificate requests.

Note that you can include other files from the main configuration
file using the .include directive.
#.include filename
This definition stops the following lines choking if HOME isn't
defined.
HOME = .
Extra OBJECT IDENTIFIER info:
#oid_file = $ENV::HOME/.oid
oid_section = new_oids
To use this configuration file with the "-extfile" option of the
"openssl x509" utility, name here the section containing the
X.509v3 extensions to use:
extensions =
(Alternatively, use a configuration file that has only
X.509v3 extensions in its main [= default] section.)
[ new_oids ]
We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
Add a simple OID like this:
testoid1=<IP_ADDRESS>
Or use config file substitution like this:
testoid2=${testoid1}.5.6
Policies used by the TSA examples.
tsa_policy1 = <IP_ADDRESS>.1
tsa_policy2 = <IP_ADDRESS>.5.6
tsa_policy3 = <IP_ADDRESS>.5.7
####################################################################
[ ca ]
default_ca = CA_default # The default ca section
####################################################################
[ CA_default ]
dir = ./demoCA # Where everything is kept
certs = $dir/certs # Where the issued certs are kept
crl_dir = $dir/crl # Where the issued crl are kept
database = $dir/index.txt # database index file.
#unique_subject = no # Set to 'no' to allow creation of
several certs with same subject.
new_certs_dir = $dir/newcerts # default place for new certs.
certificate = $dir/cacert.pem # The CA certificate
serial = $dir/serial # The current serial number
crlnumber = $dir/crlnumber # the current crl number
must be commented out to leave a V1 CRL
crl = $dir/crl.pem # The current CRL
private_key = $dir/private/cakey.pem# The private key
x509_extensions = usr_cert # The extensions to add to the cert
Comment out the following two lines for the "traditional"
(and highly broken) format.
name_opt = ca_default # Subject Name options
cert_opt = ca_default # Certificate field options
Extension copying option: use with caution.
copy_extensions = copy
Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
so this is commented out by default to leave a V1 CRL.
crlnumber must also be commented out to leave a V1 CRL.
crl_extensions = crl_ext
default_days = 365 # how long to certify for
default_crl_days= 30 # how long before next CRL
default_md = default # use public key default MD
preserve = no # keep passed DN ordering
A few difference way of specifying how similar the request should look
For type CA, the listed attributes must be the same, and the optional
and supplied fields are just that :-)
policy = policy_match
For the CA policy
[ policy_match ]
countryName = match
stateOrProvinceName = match
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
For the 'anything' policy
At this point in time, you must list all acceptable 'object'
types.
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
####################################################################
[ req ]
default_bits = 2048
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extensions to add to the self signed cert
Passwords for private keys if not present they will be prompted for
input_password = secret
output_password = secret
This sets a mask for permitted string types. There are several options.
default: PrintableString, T61String, BMPString.
pkix : PrintableString, BMPString (PKIX recommendation before 2004)
utf8only: only UTF8Strings (PKIX recommendation after 2004).
nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
MASK:XXXX a literal mask value.
WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
string_mask = utf8only
req_extensions = v3_req # The extensions to add to a certificate request
[ req_distinguished_name ]
countryName = Country Name (2 letter code)
countryName_default = AU
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = Some-State
localityName = Locality Name (eg, city)
0.organizationName = Organization Name (eg, company)
0.organizationName_default = Internet Widgits Pty Ltd
we can do this but it is not needed normally :-)
#1.organizationName = Second Organization Name (eg, company)
#1.organizationName_default = World Wide Web Pty Ltd
organizationalUnitName = Organizational Unit Name (eg, section)
#organizationalUnitName_default =
commonName = Common Name (e.g. server FQDN or YOUR name)
commonName_max = 64
emailAddress = Email Address
emailAddress_max = 64
SET-ex3 = SET extension number 3
[ req_attributes ]
challengePassword = A challenge password
challengePassword_min = 4
challengePassword_max = 20
unstructuredName = An optional company name
[ usr_cert ]
These extensions are added when 'ca' signs a request.
This goes against PKIX guidelines but some CAs do it and some software
requires this to avoid interpreting an end user certificate as a CA.
basicConstraints=CA:FALSE
Here are some examples of the usage of nsCertType. If it is omitted
the certificate can be used for anything except object signing.
This is OK for an SSL server.
nsCertType = server
For an object signing certificate this would be used.
nsCertType = objsign
For normal client use this is typical
nsCertType = client, email
and for everything including object signing:
nsCertType = client, email, objsign
This is typical in keyUsage for a client certificate.
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
This will be displayed in Netscape's comment listbox.
nsComment = "OpenSSL Generated Certificate"
PKIX recommendations harmless if included in all certificates.
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer
This stuff is for subjectAltName and issuerAltname.
Import the email address.
subjectAltName=email:copy
An alternative to produce certificates that aren't
deprecated according to PKIX.
subjectAltName=email:move
Copy subject details
issuerAltName=issuer:copy
#nsCaRevocationUrl = http://www.domain.dom/ca-crl.pem
#nsBaseUrl
#nsRevocationUrl
#nsRenewalUrl
#nsCaPolicyUrl
#nsSslServerName
This is required for TSA certificates.
extendedKeyUsage = critical,timeStamping
[ v3_req ]
Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
[ v3_ca ]
Extensions for a typical CA
PKIX recommendation.
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer
basicConstraints = critical,CA:true
Key usage: this is typical for a CA certificate. However since it will
prevent it being used as an test self-signed certificate it is best
left out by default.
keyUsage = cRLSign, keyCertSign
Some might want this also
nsCertType = sslCA, emailCA
Include email address in subject alt name: another PKIX recommendation
subjectAltName=email:copy
subjectAltName = DNS:daddye.local
extendedKeyUsage = serverAuth
Copy issuer details
issuerAltName=issuer:copy
DER hex encoding of an extension: beware experts only!
obj=DER:02:03
Where 'obj' is a standard or added object
You can even override a supported extension:
basicConstraints= critical, DER:30:03:01:01:FF
[ crl_ext ]
CRL extensions.
Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
issuerAltName=issuer:copy
authorityKeyIdentifier=keyid:always
[ proxy_cert_ext ]
These extensions should be added when creating a proxy certificate
This goes against PKIX guidelines but some CAs do it and some software
requires this to avoid interpreting an end user certificate as a CA.
basicConstraints=CA:FALSE
Here are some examples of the usage of nsCertType. If it is omitted
the certificate can be used for anything except object signing.
This is OK for an SSL server.
nsCertType = server
For an object signing certificate this would be used.
nsCertType = objsign
For normal client use this is typical
nsCertType = client, email
and for everything including object signing:
nsCertType = client, email, objsign
This is typical in keyUsage for a client certificate.
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
This will be displayed in Netscape's comment listbox.
nsComment = "OpenSSL Generated Certificate"
PKIX recommendations harmless if included in all certificates.
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer
This stuff is for subjectAltName and issuerAltname.
Import the email address.
subjectAltName=email:copy
An alternative to produce certificates that aren't
deprecated according to PKIX.
subjectAltName=email:move
Copy subject details
issuerAltName=issuer:copy
#nsCaRevocationUrl = http://www.domain.dom/ca-crl.pem
#nsBaseUrl
#nsRevocationUrl
#nsRenewalUrl
#nsCaPolicyUrl
#nsSslServerName
This really needs to be in place for it to be a proxy certificate.
proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
####################################################################
[ tsa ]
default_tsa = tsa_config1 # the default TSA section
[ tsa_config1 ]
These are used by the TSA reply generation only.
dir = ./demoCA # TSA root directory
serial = $dir/tsaserial # The current serial number (mandatory)
crypto_device = builtin # OpenSSL engine to use for signing
signer_cert = $dir/tsacert.pem # The TSA signing certificate
(optional)
certs = $dir/cacert.pem # Certificate chain to include in reply
(optional)
signer_key = $dir/private/tsakey.pem # The TSA private key (optional)
signer_digest = sha256 # Signing digest to use. (Optional)
default_policy = tsa_policy1 # Policy if request did not specify it
(optional)
other_policies = tsa_policy2, tsa_policy3 # acceptable policies (optional)
digests = sha1, sha256, sha384, sha512 # Acceptable message digests
(mandatory)
accuracy = secs:1, millisecs:500, microsecs:100 # (optional)
clock_precision_digits = 0 # number of digits after dot. (optional)
ordering = yes # Is ordering defined for timestamps?
(optional, default: no)
tsa_name = yes # Must the TSA name be included in the reply?
(optional, default: no)
ess_cert_id_chain = no # Must the ESS cert id chain be included?
(optional, default: no)
ess_cert_id_alg = sha1 # algorithm to compute certificate
identifier (optional, default: sha1)
Second thing I would check is that your code serve correctly bind your
local address, because one of the recents upgrades in vscode broke it, so I
had to instead to use the local domain, to pass the local ip:
➜ co ~/.config/code-server/config.yaml
bind-addr: <IP_ADDRESS>:8080
auth: none
password: 0f0e1a797b62c3236d0d2888
cert: /Users/daddye/work/daddye.crt
cert-key: /Users/daddye/work/daddye.key
On Fri, Sep 18, 2020 at 3:30 PM Doug Sheridan<EMAIL_ADDRESS>wrote:

FYI, I self-signed a certificate on iOS 14 and seems working well, you
have to enable full permissions to the certificate, but other that works as
expected.
Do you have a guide for this @DAddYE https://github.com/DAddYE ?
Yes, I followed this:
https://7402.org/blog/2019/new-self-signed-ssl-cert-ios-13.html
Do not forget a few things:

From iPad don't use the local ip rather the local-name.local to reach your https server.

If out of network setup a tunnel with Blink (terminal for iPad) or similar apps, pay attention that only Blink has the ability to run in background and keep the tunnel open (see their docs for how to but you need to enable location tracking).

Once you install the certificate, don't forget to go to "Settings->General->Profiles" and enable full access to the new installed profile.

Add a home shortcut to enjoy a rather nice full screen experience:

[image: PNG image]
https://user-images.githubusercontent.com/6537/88426313-d0869400-cda5-11ea-9144-7b9882a3f089.png
I hope it helps!
@DAddYE https://github.com/DAddYE I ended up following your advice and
the instructions you linked from 7402.org and this was working great for
iOS 13, but now that I've updated my device to iOS 14 my certs no longer
pass validation. Did you have any issues getting certs to pass on your iOS
14 devices?

I already enabled full trust for the root cert from Settings > About

Certificate Trust Settings

This was working in iOS 13.7 but not iOS 14

Please take a look at my openssl config:
[ ca ]
default_ca = CA_default
[ CA_default ]
default_md = sha256
default_days = 397
x509_extensions	= usr_cert
[ req ]
default_bits		= 4096
default_md		= sha256
distinguished_name	= req_distinguished_name
attributes		= req_attributes
x509_extensions	= v3_ca
copy_extensions = copy
[ usr_cert ]
basicConstraints=CA:TRUE
[ v3_req ]
basicConstraints = CA:TRUE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
[ v3_ca ]
basicConstraints = CA:TRUE
subjectAltName = DNS:<IP_ADDRESS>
extendedKeyUsage = serverAuth
[ req_distinguished_name ]
countryName			= Country Name (2 letter code)
countryName_min			= 2
countryName_max			= 2
stateOrProvinceName		= State or Province Name (full name)
localityName			= Locality Name (eg, city)
0.organizationName		= Organization Name (eg, company)
organizationalUnitName		= Organizational Unit Name (eg, section)
commonName			= Common Name (eg, fully qualified host name)
commonName_max			= 64
emailAddress			= Email Address
emailAddress_max		= 64
[ req_attributes ]
challengePassword		= A challenge password
challengePassword_min		= 4
challengePassword_max		= 20
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/cdr/code-server/issues/1566#issuecomment-695113844,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAABTCM65UILKNG4MONOJYTSGPNQBANCNFSM4MSQHNHQ
.

You need to create your own CA and then create the TLS server certificate using your CA. The CA certificate has to be imported to iPadOS and has to be trusted as a profile and as a certification authority.
For use with code-server, add the CA certificate to the server certificate with
cat client.pem ca.pem > combined.pem
and use this combined.pem with code-servers --cert option.
That fixed the white screen issue on my iPad Pro, whereas only a single self-signed server certificate didn't work.

Thanks! yes that's what I did and it works on desktop browser but on ipad I only get:
error vscode Handshake timed out {"token":"cfc40654-0ee9-4a06-ac12-2509e50884a0"}
and a blank screen :(
ca certificate is imported in ios and trust root enabled.
It also works for other server certificates I have

Hi @tauceti82 - sorry to hear you're still having issues! Feel free to open a new bug report issue and we'll see if we can help. Otherwise, feel free to open a Discussion if you need further help!


Add the VM number to each VM title?

Description of the modifications
I think the VMs are mainly called by their number, so their number should be easy to spot in the title.
Pinging @clatapie for discussion
Useful links and references
No response

I agree with that but isn't it how it's already done? We could remove the name though and only keep the numbers: vm-001-statically_indeterminate_reaction_force_analysis.py could then become vm-001.py
For me, everything is fine as long as we use the same format for all of them.

I meant the title inside the RST file:
https://github.com/ansys/pymapdl-examples/blob/e3ca16342ef9f605020d749ef8bf189cc7ff3664/examples/verif-manual/vm-001-statically_indeterminate_reaction_force_analysis.py#L3-L4
So they will be better organised too.

I agree with that, they should definitely be added!

@germa89 and @clatapie : VM5 has wrong title. Basically title of VM1 is carried forward.
We need to corrected it.
r""".. _ref_vm5_example:
Statically indeterminate reaction force analysis
It should be,
Laterally Loaded Tapered Support Structure


Update webpack-related dependencies

Older webpack versions are getting flagged by dependabot (CVE-2024-43788).  This PR would update those along with a variety of webpack-adjacent dependencies (webpack-dev-server, loaders, plugins, etc.).  I reviewed the release notes for each of these that crossed a major version boundary and didn't see anything obviously problematic.  I'm in the process of manually testing each example currently, so far so good.  Putting this PR up now for review and to get the pipeline run on it.
Aside from the simple updates, a few items of note:

The docs assets bundle looks substantially different with new webpack.  Tested manually with local docs deployment and everything seemed to work as before (e.g. tested version dropdown, hash link show/hide, confirmed the "sticky" polyfill seems ineffective both before and after the update).

Side note:  I found the instructions in the README to not work as written (error on yarn install: Usage Error: This project is configured to use pnpm), but found success after pulling the "package" out to its own directory (such that pnpm wouldn't get found).
Side note 2: Ironically I also wasn't able to successfully build the bundle without updating the dependencies, as I hit an error Error: error:0308010C:digital envelope routines::unsupported.  Building with the updated dependencies works reliably.

Some examples and tests are non-functional in main already.  I'll make sure bugs are open for these.

attributable-map demo breaks during use (webpacking goes fine though)
prosemirror is broken due to apparent SharedString regression, AB#14652
The memory-orderer package has a non-functional test:webpack script (missing webpack.config.cjs).  Suspect this might have just gotten inadvertently broken in a cleanup and can just be restored?  Probably should use a strategy more like lambdas/local-server's webpack tests though.

clean-webpack-plugin is obsolete as of webpack 5.20, removed remaining references to it and adjusted as needed.
Extended the test timeout for server lambda's webpack as a precaution - it was usually finishing within the timeout but I was getting an occasional timeout locally.

webpack-dev-server is being weird about esm/cjs so I might back that down to 4.15.2 for now and try again later.  My local incremental build had skipped over webpack-fluid-loader for some reason (not sure why) so I didn't see the error locally at first :-/

Side note: I found the instructions in the README to not work as written (error on yarn install: Usage Error: This project is configured to use pnpm), but found success after pulling the "package" out to its own directory (such that pnpm wouldn't get found).

I'm surprised to hear that the README has such guidance. The docs dir uses pnpm like everything else. It never used yarn to my knowledge. We should definitely fix this.

Side note: I found the instructions in the README to not work as written (error on yarn install: Usage Error: This project is configured to use pnpm), but found success after pulling the "package" out to its own directory (such that pnpm wouldn't get found).

~I'm surprised to hear that the README has such guidance. The docs dir uses pnpm like everything else. It never used yarn to my knowledge. We should definitely fix this.~
Never mind. I see this is regarding the theme code. I have no knowledge about that :)

This was inherited from the vscode team, and in general, we should not touch the bundled code unless absolutely necessary, or with a lot of testing of the site. The bundled code does stuff related to nav as I recall.

This was inherited from the vscode team, and in general, we should not touch the bundled code unless absolutely necessary, or with a lot of testing of the site. The bundled code does stuff related to nav as I recall.

On the fortunate side, it doesn't do much so I was able to manually test the full set of functionality.

accessibility.js tries to make a "skip to content" button work, but AFAICT we don't actually have such a button anywhere on our site.  If we did, I think in most places its logic would get tripped up on our breadcrumb nav and try to scroll that into view.
docs.js does a few things:

Uses scrollspy to highlight the current section in the right nav - continues to work
Sets focus on the narrow-width layout's nav dropdown based on localStorage - doesn't seem to do much, but continues to work
Sets a bootstrap affix on the right nav - doesn't really seem to have an affect?  There is affix information in the html, so I think this is duplicative?  In any case, the affix works and the code here runs.
Uses stickyfill for the navbar container - would work, but doesn't because its wrapping element is zero-height.  Also somewhat unnecessary since position:sticky is supported by >99% of browsers now.
Some nav expand/collapse code (primarily for the left nav) - still works
More narrow-width layout nav dropdown code, just to make it navigate.  Still works.
Some questionable userAgent detection that fortunately doesn't seem to do anything
Some logic to make the hash-link (for article sections) appear on hover.  Still works.

Although there are other files in the directory, those two are the only ones that make it into the bundle via index.js.  Most of it could probably be simplified to remove dependency on the alternate build/packageManager, and/or the dependency on jQuery/Bootstrap, but it all still seems to work fine at least.

Completed my test pass over the examples - found lots of breakages but they all also repro in main so I think this PR is feeling pretty good!  Will open work items for those and report back here.

In total, opened 4 bugs:

AB#14652 - prosemirror breaks on load
AB#14942 - attributable-map breaks when run
AB#14943 - memory-orderer has non-functioning test:webpack script
AB#14944 - local-driver generates an ever-growing number of scribeDeltas entries and quickly blows its quota

Since you took the time to write out everything the bundled code does, could you add it to the readme? Also review the PR description because parts of it are outdated now. Otherwise looks good.

Did one better and commented it directly inline in the code in latest commit :). Will update the PR description too.


Allow overriding package for Atlassian apps

Motivation for this change
As many other NixOS module do, expose a package attribute for the services atlassian-jira, atlassian-confluence, atlassian-crowd.
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[ ] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Assured whether relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

cc @fpletz

Thanks!


Add optional neural chunking

This PR adds:

Optional neural chunking for the server. Opus chunks will automatically send when the semantic model detects silence; time to first audio decreases to ~300-400ms. This creates edge artifacts though, so use with caution. Requires the latest version of my fish 1.4 safetensors checkpoint.
Debug endpoint to expose semantic hidden states at layer 24 (for training the probe)

This PR fixes:

CORS now allows all origins, for prototyping streaming web audio. Hey, it's CC-BY-NC-4.0, if you want security go use the official API.

Does NOT work on 1.5+. I suspect it's due to the hidden state backbone predicting next token instead of EOS.


Fix e2e tests

Currently e2e tests on travis are failing, this needs to be fixed.

Fixed in https://github.com/cyclefortytwo/ironbelly/commit/908e526e6ffa3b4b5eaca5be0fa39ef66fb9d251


It's worked run under Jmeter file, but not on Jekins.

Hi team.
I used your plug-in it's worked when i run your plog-in on local server (windows)

Run jemeter file > influxdb > grafana (it's worked) i see report on grafana.

But
When i try on this
2) Jeking > run sheduler with Jemeter file (it's don't worked)  and grafana don't show any informaiton.

Log file show like this

Jekins report (build success)

Question:

Your plug-in it's not support schedule run ? and how to fix it ?
If it's not supported on Jenkins, Do you have other solution run schedule with your plug-in ?

NOTE:
I tesed the same solution with other plug-in it's worked on both (run on local Jmeter file an under Jenkins)
https://jmeter.apache.org/usermanual/realtime-results.html
Best,
UT

Hello @uthens, can you share the java version you have? the plugin works everywhere 😊
please check this first  https://github.com/mderevyankoaqa/jmeter-influxdb2-listener-plugin#compatibility
any logs from jmeter I do not  see any things has to do to the plugin on the screen?
To have the direct support you can reach me here https://www.linkedin.com/in/michail-derevyanko-a2700948/
BR,
Mike

Hi @mderevyankoaqa
It's log file after click "start" on Jmeter UI [It's worked]

2023-11-16 01:45:22,684 INFO o.a.j.u.JMeterUtils: Setting Locale to en_EN
2023-11-16 01:45:22,724 INFO o.a.j.JMeter: Loading user properties from: user.properties
2023-11-16 01:45:22,724 INFO o.a.j.JMeter: Loading system properties from: system.properties
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: Copyright (c) 1998-2023 The Apache Software Foundation
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: Version 5.6.2
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: java.version=17.0.6
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: java.vm.name=OpenJDK 64-Bit Server VM
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: os.name=Windows Server 2022
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: os.arch=amd64
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: os.version=10.0
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: file.encoding=Cp1252
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: java.awt.headless=null
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: Max memory     =1073741824
2023-11-16 01:45:22,732 INFO o.a.j.JMeter: Available Processors =4
2023-11-16 01:45:22,755 INFO o.a.j.JMeter: Default Locale=English (EN)
2023-11-16 01:45:22,763 INFO o.a.j.JMeter: JMeter  Locale=English (EN)
2023-11-16 01:45:22,763 INFO o.a.j.JMeter: JMeterHome=C:\tools\apache-jmeter-5.6.2
2023-11-16 01:45:22,763 INFO o.a.j.JMeter: user.dir  =C:\tools\apache-jmeter-5.6.2\bin
2023-11-16 01:45:22,763 INFO o.a.j.JMeter: PWD       =C:\tools\apache-jmeter-5.6.2\bin
2023-11-16 01:45:22,763 INFO o.a.j.JMeter: IP: 10.xx.x.xxx Name: xxx-windows-xxx FullName: host.docker.internal
2023-11-16 01:45:22,786 INFO o.a.j.JMeter: Loaded icon properties from org/apache/jmeter/images/icon.properties
2023-11-16 01:45:23,114 INFO o.a.j.JMeterGuiLauncher: Setting LAF to: com.github.weisj.darklaf.DarkLaf:com.github.weisj.darklaf.theme.DarculaTheme
2023-11-16 01:45:24,787 INFO o.a.j.r.ClassFinder: Will scan jar C:\tools\apache-jmeter-5.6.2\lib\ext\jmeter-plugins-influxdb2-listener-2.7.jar with filter ExtendsClassFilter [parents=[interface org.apache.jmeter.gui.action.Command], inner=false, contains=null, notContains=null]. Consider exposing JMeter plugins via META-INF/services, and add JMeter-Skip-Class-Scanning=true manifest attribute so JMeter can skip classfile scanning
2023-11-16 01:45:26,336 INFO o.a.j.r.ClassFinder: Will scan jar C:\tools\apache-jmeter-5.6.2\lib\ext\jmeter-plugins-influxdb2-listener-2.7.jar with filter ExtendsClassFilter [parents=[interface org.apache.jmeter.gui.plugin.MenuCreator], inner=false, contains=null, notContains=null]. Consider exposing JMeter plugins via META-INF/services, and add JMeter-Skip-Class-Scanning=true manifest attribute so JMeter can skip classfile scanning
2023-11-16 01:46:08,130 INFO o.a.j.s.FileServer: Default base='C:\tools\apache-jmeter-5.6.2\bin'
2023-11-16 01:46:08,138 INFO o.a.j.g.a.Load: Loading file: C:\code\automation-testing-xxx-air\script\sale\406903_Finalize_V3.jmx
2023-11-16 01:46:08,138 INFO o.a.j.s.FileServer: Set new base='C:\code\automation-testing-xxx-xxx\script\sale'
2023-11-16 01:46:08,349 INFO o.a.j.s.SaveService: Testplan (JMX) version: 2.2. Testlog (JTL) version: 2.2
2023-11-16 01:46:08,392 INFO o.a.j.s.SaveService: Using SaveService properties version 5.0
2023-11-16 01:46:08,392 INFO o.a.j.s.SaveService: Using SaveService properties file encoding UTF-8
2023-11-16 01:46:08,392 INFO o.a.j.s.SaveService: Loading file: C:\code\automation-testing-xxx-xxx\script\sale\406903_Finalize_V3.jmx
2023-11-16 01:46:08,456 INFO o.a.j.p.h.c.CookieManager: Settings: Delete null: true Check: true Allow variable: true Save: false Prefix: COOKIE_
2023-11-16 01:46:08,456 INFO o.a.j.p.h.c.CacheManager: Will only cache the following methods: [GET]
2023-11-16 01:46:08,474 INFO o.a.j.p.h.s.HTTPSamplerBase: Parser for text/html is org.apache.jmeter.protocol.http.parser.LagartoBasedHtmlParser
2023-11-16 01:46:08,474 INFO o.a.j.p.h.s.HTTPSamplerBase: Parser for application/xhtml+xml is org.apache.jmeter.protocol.http.parser.LagartoBasedHtmlParser
2023-11-16 01:46:08,474 INFO o.a.j.p.h.s.HTTPSamplerBase: Parser for application/xml is org.apache.jmeter.protocol.http.parser.LagartoBasedHtmlParser
2023-11-16 01:46:08,474 INFO o.a.j.p.h.s.HTTPSamplerBase: Parser for text/xml is org.apache.jmeter.protocol.http.parser.LagartoBasedHtmlParser
2023-11-16 01:46:08,474 INFO o.a.j.p.h.s.HTTPSamplerBase: Parser for text/vnd.wap.wml is org.apache.jmeter.protocol.http.parser.RegexpHTMLParser
2023-11-16 01:46:08,474 INFO o.a.j.p.h.s.HTTPSamplerBase: Parser for text/css is org.apache.jmeter.protocol.http.parser.CssParser
2023-11-16 01:46:08,614 INFO o.a.j.s.SampleResult: Note: Sample TimeStamps are START times
2023-11-16 01:46:08,614 INFO o.a.j.s.SampleResult: sampleresult.default.encoding is set to UTF-8
2023-11-16 01:46:08,614 INFO o.a.j.s.SampleResult: sampleresult.useNanoTime=true
2023-11-16 01:46:08,614 INFO o.a.j.s.SampleResult: sampleresult.nanoThreadSleep=5000
2023-11-16 01:46:08,663 INFO o.a.j.p.h.s.HTTPJavaImpl: Maximum connection retries = 0
2023-11-16 01:46:09,699 INFO o.a.j.r.ClassFinder: Will scan jar C:\tools\apache-jmeter-5.6.2\lib\ext\jmeter-plugins-influxdb2-listener-2.7.jar with filter ExtendsClassFilter [parents=[interface org.apache.jmeter.visualizers.backend.BackendListenerClient], inner=false, contains=null, notContains=null]. Consider exposing JMeter plugins via META-INF/services, and add JMeter-Skip-Class-Scanning=true manifest attribute so JMeter can skip classfile scanning
2023-11-16 01:46:10,126 INFO o.a.j.r.ClassFinder: Will scan jar C:\tools\apache-jmeter-5.6.2\lib\ext\jmeter-plugins-influxdb2-listener-2.7.jar with filter ExtendsClassFilter [parents=[interface org.apache.jmeter.visualizers.ResultRenderer], inner=false, contains=null, notContains=null]. Consider exposing JMeter plugins via META-INF/services, and add JMeter-Skip-Class-Scanning=true manifest attribute so JMeter can skip classfile scanning
2023-11-16 01:46:10,188 INFO o.a.j.r.ClassFinder: Will scan jar C:\tools\apache-jmeter-5.6.2\lib\ext\jmeter-plugins-influxdb2-listener-2.7.jar with filter ExtendsClassFilter [parents=[interface org.apache.jmeter.visualizers.RequestView], inner=false, contains=null, notContains=null]. Consider exposing JMeter plugins via META-INF/services, and add JMeter-Skip-Class-Scanning=true manifest attribute so JMeter can skip classfile scanning
2023-11-16 01:46:10,345 INFO o.a.j.r.ClassFinder: Will scan jar C:\tools\apache-jmeter-5.6.2\lib\ext\jmeter-plugins-influxdb2-listener-2.7.jar with filter ExtendsClassFilter [parents=[interface org.apache.jmeter.protocol.http.util.accesslog.LogParser], inner=false, contains=null, notContains=null]. Consider exposing JMeter plugins via META-INF/services, and add JMeter-Skip-Class-Scanning=true manifest attribute so JMeter can skip classfile scanning
2023-11-16 01:46:10,393 INFO o.a.j.r.ClassFinder: Will scan jar C:\tools\apache-jmeter-5.6.2\lib\ext\jmeter-plugins-influxdb2-listener-2.7.jar with filter ExtendsClassFilter [parents=[interface org.apache.jmeter.protocol.http.util.accesslog.Filter], inner=false, contains=null, notContains=null]. Consider exposing JMeter plugins via META-INF/services, and add JMeter-Skip-Class-Scanning=true manifest attribute so JMeter can skip classfile scanning
2023-11-16 01:46:10,486 INFO o.a.j.s.FileServer: Set new base='C:\code\automation-testing-xxx-xxx\script\sale'
2023-11-16 01:46:23,224 INFO o.a.j.e.StandardJMeterEngine: Running the test!
2023-11-16 01:46:23,231 INFO o.a.j.s.SampleEvent: List of sample_variables: []
2023-11-16 01:46:23,231 INFO o.a.j.s.SampleEvent: List of sample_variables: []
2023-11-16 01:46:23,239 INFO o.a.j.e.u.CompoundVariable: Note: Function class names must contain the string: '.functions.'
2023-11-16 01:46:23,239 INFO o.a.j.e.u.CompoundVariable: Note: Function class names must not contain the string: '.gui.'
2023-11-16 01:46:23,310 INFO o.a.j.r.ClassFinder: Will scan jar C:\tools\apache-jmeter-5.6.2\lib\ext\jmeter-plugins-influxdb2-listener-2.7.jar with filter ExtendsClassFilter [parents=[interface org.apache.jmeter.functions.Function], inner=false, contains=null, notContains=null]. Consider exposing JMeter plugins via META-INF/services, and add JMeter-Skip-Class-Scanning=true manifest attribute so JMeter can skip classfile scanning
2023-11-16 01:46:23,358 INFO o.a.j.v.b.BackendListener: Backend Listener: Starting worker with class: class io.github.mderevyankoaqa.influxdb2.visualizer.InfluxDatabaseBackendListenerClient and queue capacity: 5000
2023-11-16 01:46:23,374 INFO o.a.j.v.b.BackendListener: Backend Listener: Started  worker with class: class io.github.mderevyankoaqa.influxdb2.visualizer.InfluxDatabaseBackendListenerClient
2023-11-16 01:46:23,380 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: New instance of InfluxDatabaseClient has been created!
2023-11-16 01:46:23,380 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: InfluxDBClientFactory is going to use the following properties:
2023-11-16 01:46:23,380 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: URL --> http://localhost:8086/
2023-11-16 01:46:23,380 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Token --> xxxxxxxxxxxxxxxxxxxxxxxxxx_VyHzN2DAbGZTqUKIXLLP2GypEZTnskDFa1HrzMuxVbf7PG2nohvpeEfg==
2023-11-16 01:46:23,380 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Organization --> learning
2023-11-16 01:46:23,380 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Bucket --> jmeter
2023-11-16 01:46:23,868 INFO o.a.j.g.u.JMeterMenuBar: setRunning(true, local)
2023-11-16 01:46:23,945 INFO o.a.j.e.StandardJMeterEngine: Starting ThreadGroup: 1 : Thread Group
2023-11-16 01:46:23,945 INFO o.a.j.e.StandardJMeterEngine: Starting 1 threads for group Thread Group.
2023-11-16 01:46:23,945 INFO o.a.j.e.StandardJMeterEngine: Thread will continue on error
2023-11-16 01:46:23,945 INFO o.a.j.t.ThreadGroup: Starting thread group... number=1 threads=1 ramp-up=1 delayedStart=false
2023-11-16 01:46:24,019 INFO o.a.j.t.ThreadGroup: Started thread group number 1
2023-11-16 01:46:24,019 INFO o.a.j.e.StandardJMeterEngine: All thread groups have been started
2023-11-16 01:46:24,019 INFO o.a.j.t.JMeterThread: Thread started: Thread Group 1-1
2023-11-16 01:46:24,050 INFO o.a.j.p.h.s.HTTPHCAbstractImpl: Local host = xxx-windows-cloud2
2023-11-16 01:46:24,070 INFO o.a.j.p.h.s.HTTPHC4Impl: HTTP request retry count = 0
2023-11-16 01:46:24,105 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 1, elapsed time is --> 232 ms
2023-11-16 01:46:24,236 INFO o.a.j.p.h.s.h.LazyLayeredConnectionSocketFactory: Setting up HTTPS TrustAll Socket Factory
2023-11-16 01:46:24,243 INFO o.a.j.u.JsseSSLManager: Using default SSL protocol: TLS
2023-11-16 01:46:24,243 INFO o.a.j.u.JsseSSLManager: SSL session context: per-thread
2023-11-16 01:46:24,307 INFO o.a.j.u.SSLManager: JmeterKeyStore Location:  type JKS
2023-11-16 01:46:24,308 INFO o.a.j.u.SSLManager: KeyStore created OK
2023-11-16 01:46:24,308 WARN o.a.j.u.SSLManager: Keystore file not found, loading empty keystore
2023-11-16 01:46:27,879 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 4, elapsed time is --> 13 ms
2023-11-16 01:46:31,880 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 13, elapsed time is --> 13 ms
2023-11-16 01:46:35,580 INFO o.a.j.t.JMeterThread: Thread is done: Thread Group 1-1
2023-11-16 01:46:35,580 INFO o.a.j.t.JMeterThread: Thread finished: Thread Group 1-1
2023-11-16 01:46:35,584 INFO o.a.j.e.StandardJMeterEngine: Notifying test listeners of end of test
2023-11-16 01:46:35,585 INFO o.a.j.v.b.BackendListener: Worker ended
2023-11-16 01:46:35,586 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Shutting down influxDB scheduler...
2023-11-16 01:46:35,588 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: influxDB scheduler terminated!
2023-11-16 01:46:35,589 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: The final step ---> importing before closing.
2023-11-16 01:46:35,601 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 16, elapsed time is --> 12 ms
2023-11-16 01:46:35,604 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Instance of InfluxDatabaseClient has been refreshed!
2023-11-16 01:46:35,604 INFO o.a.j.g.u.JMeterMenuBar: setRunning(false, local)
2023-11-16 01:56:14,786 INFO o.a.j.e.StandardJMeterEngine: Running the test!
2023-11-16 01:56:14,801 INFO o.a.j.s.SampleEvent: List of sample_variables: []
2023-11-16 01:56:14,818 INFO o.a.j.v.b.BackendListener: Backend Listener: Starting worker with class: class io.github.mderevyankoaqa.influxdb2.visualizer.InfluxDatabaseBackendListenerClient and queue capacity: 5000
2023-11-16 01:56:14,818 INFO o.a.j.v.b.BackendListener: Backend Listener: Started  worker with class: class io.github.mderevyankoaqa.influxdb2.visualizer.InfluxDatabaseBackendListenerClient
2023-11-16 01:56:14,818 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: New instance of InfluxDatabaseClient has been created!
2023-11-16 01:56:14,818 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: InfluxDBClientFactory is going to use the following properties:
2023-11-16 01:56:14,818 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: URL --> http://localhost:8086/
2023-11-16 01:56:14,818 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Token --> xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx_VyHzN2DAbGZTqUKIXLLP2GypEZTnskDFa1HrzMuxVbf7PG2nohvpeEfg==
2023-11-16 01:56:14,818 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Organization --> learning
2023-11-16 01:56:14,818 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Bucket --> jmeter
2023-11-16 01:56:14,818 INFO o.a.j.g.u.JMeterMenuBar: setRunning(true, local)
2023-11-16 01:56:14,927 INFO o.a.j.e.StandardJMeterEngine: Starting ThreadGroup: 1 : Thread Group
2023-11-16 01:56:14,927 INFO o.a.j.e.StandardJMeterEngine: Starting 1 threads for group Thread Group.
2023-11-16 01:56:14,927 INFO o.a.j.e.StandardJMeterEngine: Thread will continue on error
2023-11-16 01:56:14,927 INFO o.a.j.t.ThreadGroup: Starting thread group... number=1 threads=1 ramp-up=1 delayedStart=false
2023-11-16 01:56:14,959 INFO o.a.j.t.ThreadGroup: Started thread group number 1
2023-11-16 01:56:14,959 INFO o.a.j.e.StandardJMeterEngine: All thread groups have been started
2023-11-16 01:56:14,986 INFO o.a.j.t.JMeterThread: Thread started: Thread Group 1-1
2023-11-16 01:56:15,008 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 1, elapsed time is --> 81 ms
2023-11-16 01:56:18,926 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 13, elapsed time is --> 12 ms
2023-11-16 01:56:22,430 INFO o.a.j.t.JMeterThread: Thread is done: Thread Group 1-1
2023-11-16 01:56:22,430 INFO o.a.j.t.JMeterThread: Thread finished: Thread Group 1-1
2023-11-16 01:56:22,431 INFO o.a.j.e.StandardJMeterEngine: Notifying test listeners of end of test
2023-11-16 01:56:22,432 INFO o.a.j.v.b.BackendListener: Worker ended
2023-11-16 01:56:22,433 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Shutting down influxDB scheduler...
2023-11-16 01:56:22,433 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: influxDB scheduler terminated!
2023-11-16 01:56:22,433 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: The final step ---> importing before closing.
2023-11-16 01:56:22,446 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 16, elapsed time is --> 13 ms
2023-11-16 01:56:22,447 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Instance of InfluxDatabaseClient has been refreshed!
2023-11-16 01:56:22,447 INFO o.a.j.g.u.JMeterMenuBar: setRunning(false, local)
2023-11-16 02:03:40,817 INFO o.a.j.e.StandardJMeterEngine: Running the test!
2023-11-16 02:03:40,828 INFO o.a.j.s.SampleEvent: List of sample_variables: []
2023-11-16 02:03:40,828 INFO o.a.j.v.b.BackendListener: Backend Listener: Starting worker with class: class io.github.mderevyankoaqa.influxdb2.visualizer.InfluxDatabaseBackendListenerClient and queue capacity: 5000
2023-11-16 02:03:40,828 INFO o.a.j.v.b.BackendListener: Backend Listener: Started  worker with class: class io.github.mderevyankoaqa.influxdb2.visualizer.InfluxDatabaseBackendListenerClient
2023-11-16 02:03:40,828 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: New instance of InfluxDatabaseClient has been created!
2023-11-16 02:03:40,828 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: InfluxDBClientFactory is going to use the following properties:
2023-11-16 02:03:40,828 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: URL --> http://localhost:8086/
2023-11-16 02:03:40,828 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Token --> xxxxxxxxxxxxxxxxxxxxxxxxxxxxx_VyHzN2DAbGZTqUKIXLLP2GypEZTnskDFa1HrzMuxVbf7PG2nohvpeEfg==
2023-11-16 02:03:40,828 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Organization --> learning
2023-11-16 02:03:40,828 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Bucket --> jmeter
2023-11-16 02:03:40,844 INFO o.a.j.g.u.JMeterMenuBar: setRunning(true, local)
2023-11-16 02:03:40,942 INFO o.a.j.e.StandardJMeterEngine: Starting ThreadGroup: 1 : Thread Group
2023-11-16 02:03:40,942 INFO o.a.j.e.StandardJMeterEngine: Starting 1 threads for group Thread Group.
2023-11-16 02:03:40,942 INFO o.a.j.e.StandardJMeterEngine: Thread will continue on error
2023-11-16 02:03:40,942 INFO o.a.j.t.ThreadGroup: Starting thread group... number=1 threads=1 ramp-up=1 delayedStart=false
2023-11-16 02:03:40,969 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 1, elapsed time is --> 29 ms
2023-11-16 02:03:40,979 INFO o.a.j.t.ThreadGroup: Started thread group number 1
2023-11-16 02:03:40,983 INFO o.a.j.e.StandardJMeterEngine: All thread groups have been started
2023-11-16 02:03:40,987 INFO o.a.j.t.JMeterThread: Thread started: Thread Group 1-1
2023-11-16 02:03:44,938 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 13, elapsed time is --> 12 ms
2023-11-16 02:03:48,939 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 14, elapsed time is --> 12 ms
2023-11-16 02:03:49,060 INFO o.a.j.t.JMeterThread: Thread is done: Thread Group 1-1
2023-11-16 02:03:49,060 INFO o.a.j.t.JMeterThread: Thread finished: Thread Group 1-1
2023-11-16 02:03:49,062 INFO o.a.j.e.StandardJMeterEngine: Notifying test listeners of end of test
2023-11-16 02:03:49,062 INFO o.a.j.v.b.BackendListener: Worker ended
2023-11-16 02:03:49,063 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Shutting down influxDB scheduler...
2023-11-16 02:03:49,063 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: influxDB scheduler terminated!
2023-11-16 02:03:49,065 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: The final step ---> importing before closing.
2023-11-16 02:03:49,077 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Data has been imported successfully, batch with size is --> 3, elapsed time is --> 12 ms
2023-11-16 02:03:49,078 INFO i.g.m.i.v.InfluxDatabaseBackendListenerClient: Instance of InfluxDatabaseClient has been refreshed!
2023-11-16 02:03:49,078 INFO o.a.j.g.u.JMeterMenuBar: setRunning(false, local)

But it's don't work if i tested on command line, build success but don't show data on dashboard.
Sample :

My java version:

I think when i run jmeter on command line with my jmeter file, your plug-in don't run ?
My script on command line is wrong ?  : https://jmeter.apache.org/usermanual/get-started.html#running
How i can run comment line jmeter under shell script and to used under Jenkins piplines ? and your plug-in still work.

Thank you for your comment.
Best,
UT

Updated:
I changed code "jmeter -n -t test.jmx -l test.jtl -p user.perperties"
Now it's worked! on both.

Updated:
I changed code "jmeter -n -t test.jmx -l test.jtl -p user.perperties"
Now it's worked! on both.


Testing ci stuff: DO NOT MERGE

Only playing, don't mind me.

LGTM

LGTM

Lol 😀
Note to me: It's not "Build Finished", it's still running:  https://hurl.corp.redhat.com/15fdd24

righto, thanks aos-ci-jenkins/system-level-integration-tests, silently failed as expected 😖


6755: next_previous block skips pages

Equivalent date page get skipped as well as pages before/after an  inaccessible page.

I think we should review this – not sure about some of the constructs used in this code, although I understand the problem it's solving.

The only relevant changes are small changes in the queries.
For example, instead of
cvDatePublic > ?
we now have
((cvDatePublic = ? and cDisplayOrder > ?) or cvDatePublic > ?)
which is perfectly fine.
BTW, I'd optimize the code a bit, checking that pages are loaded without errors and reducing duplicated code: see https://github.com/gfischershaw/concrete5/pull/1
If @gfischershaw accepts https://github.com/gfischershaw/concrete5/pull/1 it will be added to https://github.com/concrete5/concrete5/pull/6756

LGTM, it does fixes the issue. Thanks @gfischershaw!

Thanks both of you!