Since 26 February I’m developer of NetBSD, system of my choice. I’ll work mainly with pkgsrc and pl mirror, but I’ll try to bite some kernel source too. ;-) Now I can fix and break stuff myself. :-) You can find me now at morr [at] NetBSD.org.

I would like to thanks here to ahoka@ and joerg@ for being my mentors, and haad@ for meeting in Bratislava and signing my key.

I had couple of adventures with motor, but I like riding on it. ;-) It’s great to avoid traffic jams (which becomes worse lately due to road works). And it’s great way of moving. ;-) Some pictures of my bike (photos was taken fresh from returning home): http://morr.pl/pics/moto/

Since last tuesday I’m 27 years old. I saw that picture couple days before my birthday, and I thought it is perfect for that day: http://images.ucomics.com/comics/ga/2005/ga050614.gif. Many years are behind me, but many more are ahead!

And I see that this will be 30th post. Since I’ve using blog since January 2007, that will be almost 1 post/month. :-) I’ll try posting more frequently, but I’m not promising anything.

So, good night to all of you…

UPDATE1: I forgot to mention what motocycle it is. It’s Yamaha XJ600N.

UPDATE2: I’ve upgraded wordpress to newest stable version, added Twitter Tools and changed skin, as you can see. ;-)

I have since couple of days HTC Dream called T-Mobile G1 (in Poland Era G1). It is nice phone for people, who wants to be always online. My first application, which I’ve installed, was ConnectBot, ssh client. Now I can connect to my home host from every location which is in range of Era’s network. I was using it during my trip to hometown on holiday. It’s working very nice. I can browse WWW, check email and gmail account, use google reader and google docs, happens to update firmware over the air too.

I’ve synced contacts with Gmail, setup my IMAP account and installed couple of applications. One of great app is dgMoney to keep expenses and incomings. Another app is Astrid – TODO/Tasks app. It allows to use tags on tasks and synchronize with http://www.rememberthemilk.com/ service. I have Twiteroid too, so I can watch and post to Twitter. OI Safe is used to keep my passwords and logins… safe. And of course there is Doom! Little sluggish, but it can be played. One app, which is missing now is good PDF reader. There are some applications, but they don’t work good.

One of things, which isn’t good is battery. It allows for day of working when it was only syncing with gmail and everything. Less, if you happen to use it more than calling and browsing WWW. But I guess that is price of being online whole time. Another bad thing is not supporting yet WPA2 Enterprise. But I’ve read that if I get root on phone, I can setup wpa_supplicant easily and WPA2 will work. But since that requires downgrading of  firmware, which then can be upgraded with root enabled, I haven’t done it yet. I’ll play with locked phone for a while longer. ;-)

This is pic of my Era G1 (yes, it’s my cat on wallpaper :-)).

PS: I’ve become godfather of my sister’s son during holiday. I’ve held him in my arms for a while. He is very sweet. :-)

• security/pcsc-lite for accessing tokens
• security/ccid is you are using USB tokens
• wip/pkcs11-helper to allow use of pkcs11 in openvpn
• wip/opensc to add certificates and initialize tokens and for pkcs11 engine for openvpn.

I won’t write now how to initialize token and add certs, I’ll just describe client process.

You have to get patch and use it:

/usr/pkgsrc:# wget -O – http://morr.pl/netbsd/net-openvpn-pkcs11.patch | patch

/usr/pkgsrc:# cd net/openvpn && make install clean

Then you should build pcsc-lite:

/usr/pkgsrc/net/openvpn:# cd ../../security/pcsc-lite && make install clean

If you are using USB token, you will need ccid too:

/usr/pkgsrc/security/pcsc-lite:# cd ../../security/ccid && make install clean

After that, you’ll only need to run /usr/pkg/sbin/pcscd (unfortunatelly there isn’t rc.d script yet) and you’re almost done!

You have to know your token ID. You can get it using:

~:# openvpn  –show-pkcs11-ids /usr/pkg/lib/opensc-pkcs11.so

and copying “Serialized id” to your openvpn config in “pkcs11-id” entry. Another entry is needed for this to run:

pkcs11-providers /usr/pkg/lib/opensc-pkcs11.so

And that all!  Of course you have to configure rest of openvpn, like “client”, “dev” or “remote”, but that is normal openvpn configuration. After running

~:# openvpn –config my.ovpn

you’ll see:

Wed Jan 28 00:49:08 2009 OpenVPN 2.1_rc13 i386–netbsdelf [SSL] [LZO2] [PKCS11] built on Jan 27 2009
Wed Jan 28 00:49:08 2009 PKCS#11: Adding PKCS#11 provider ‘/usr/pkg/lib/opensc-pkcs11.so’

and after a while you’ll be asked for PIN to certs on token:

Enter CryptoCard PKI (PIN1) token Password:

After you’ll enter the PIN, vpn connection will be established.

If you have any question, feel free to ask. ;-) If there will be demand, I’ll write about adding certs to token using pkcs11-tool.

UPDATE: Just yesterday I’ve become an uncle – my sister have given birth to a boy :-)

I’ll post some photos later.

Speaking of numbers, it seems that tomorrow will be my 9600 day of life. :-) In couple of days there should be another post. But I’ll keep secret about subject of that post. ;-)