Search Results: "will"

12 March 2008

Neil Williams: Open vs archived bugs in Debian

Bubulle asked about whether anyone has computed the number of bugs open (and by inference close) and I've just found a link from the DD statistics pages:
Debian Bug Tracking System News - These are the bugs touched during the last four hours. The data will be updated in 40 minutes.
Active Bugs 110443 (+9) 9230042 kb
Archived Bugs 366389 (+0) 24156850 kb
Debian NEW closable bugs 41
Source packages in incoming.debian.org 19
Package movement for testing +17 -2
Orphaned packages 360
Popularity contest Debian 76404 (+0) Ubuntu 448702 (+0)
Total registered dpkg/apt Users 525106

There's an RSS feed too.

Gintautas Miliauskas: Launchpad translation synchronization

Ubuntu package translation storage in Launchpad used to annoy me, primarily because the synchronization workflow between Launchpad and upstream was unclear. My questions have been partly answered on Launchpad Answers. Others working with translations in Launchpad might be interested in this information. Here's another tip for translation coordinators. I used to worry about translation pollution in Launchpad, until I found that you can clean up efficiently by sorting packages by the number of translations changed locally in Launchpad (to try it out, you can go here and click twice on the "Changed" column). Click on the number of changed translations in a given package and you will be presented with a list of the changed translations, which you can reset to upstream versions one by one by choosing "packaged" versions. It seems to be a good idea to perform such a cleanup once in a while, to keep the amount of cruft to a minimum.

Neil Williams: Serial over USB, broken laptops and screen

Well, after many failed attempts, here I am on my problematic HP laptop with a USB key mounted, a balloon3 board booted under an Emdebian root filesystem and visible over USB-to-serial using /dev/ttyUSB0 via screen.
Thanks to Daniel's tip about screen /dev/ttyUSB0 115200, my USB to Serial converter (Maplins with a Prolific PL2303 chipset) is working on my problematic HP laptop.
The proviso is that I have to reboot to enable all this stuff - allow the laptop to hibernate and all this USB stuff just disappears. :-(
The only remaining problem is the wireless - I haven't decided yet whether to patch the current stock Debian kernel (I've had enough problems without getting into more kernel issues) - I may simply buy a replacement external wireless unit or just not use wireless until the b43 driver is capable of working with the Broadcom Corporation BCM94311MCG wlan mini-PCI (rev 02).
The magic runes for enabling USB are to add some more options to the grub boot list (on the 'kernel' line):

noapic nolapic noirqfixup

minicom still doesn't like serial over USB (on this laptop, it adds an extra line feed and then refuses to pass on any keyboard entry to the device in a similar manner to the powerpc laptop) but screen works nicely. Thanks Daniel.
With noirqfixup added, I can also plug in other USB things like a USB mouse and actually see them work. This is all good news because apart from adding these mysterious runes to Grub, this is a completely standard Debian box running Sid and with no particular configuration changes or tweaks in the system setup.
This means that I can now get on with uploading the emdebian-tools package split to Debian unstable, adapting the Emdebian root filesystem for balloon3 to support USB networking by default and suggesting screen as an alternative to minicom in the control information for the new emdebian-rootfs package. (The package split is now in Emdebian SVN - main trunk - if you are interested.) I'm also downgrading my old G4 iBook to running Lenny instead of sid and it will now stay running Lenny as Debian stable when Lenny is released. It just makes it easier to not have to keep downloading massive updates on the brief occasions that I now use the iBook.
Now if I can just work out why hibernation forgets 'noirqfixup', I'll have a usable HP laptop....
Not bad for a machine that I once considered as a complete non-starter.

Filip Van Raemdonck: Debian firewire support

Christian, you forgot to mention the Linux kernel, where a member of the kernel team deliberately broke hardware support.
Thanks to Holger for these links, he has listed several more. I disagree with the suggestion that shipping the old firewire stack in the linux-extra-modules package is sufficient workaround; unless this is not prohibiting it from being included in the installer to support ethernet over firewire? (though in such case it will certainly have implications due to the fact that this package should be pulled in when the installer used eth1394)

So Adrian, you too may want to reconsider if Debian really does have less compatibility regressions than other distributions.

Filip Van Raemdonck: Debian firewire support

Christian, you forgot to mention the Linux kernel, where a member of the kernel team deliberately broke hardware support.
Thanks to Holger for these links, he has listed several more. I disagree with the suggestion that shipping the old firewire stack in the linux-extra-modules package is sufficient workaround; unless this is not prohibiting it from being included in the installer to support ethernet over firewire? (though in such case it will certainly have implications due to the fact that this package should be pulled in when the installer used eth1394)

So Adrian, you too may want to reconsider if Debian really does have less compatibility regressions than other distributions.

11 March 2008

David Welton: Mass customization of Android applications

As I mentioned in an earlier article, one of the goals for the Android port of Hecl is to make it as easy as it is to create Java ME applications:
  1. Write the script.
  2. Wrap it up and send it to the phone.
No "compiling" (well, none that's obvious or explicitly asked of the user, at least, as we'll see) or fiddling with build files or writing new Java classes or any of that. We're still not there yet 100%, but I did managed to hack together a system that, from an original Hecl.apk, creates a new application that can be installed on the emulator. This is tricky, because Android looks at the uniqueness of the package and class utilized for the application, meaning you can't just rename Hecl.apk to Foo.apk and install it as a separate app. The emulator will overwrite your old copy of Hecl. Here's what we go through to make this work. Be forewarned - big, ugly hacks that are not for the faint of heart follow. The command line isn't exactly beautiful either, but it beats all the individual steps that it replaces, as we'll see.
java -jar /home/davidw/workshop/hecl/jars/AndroidBuilder.jar -android \
    /opt/android-sdk_m5-rc15_linux-x86/ -class Example -label "Hecl Example" \
    -package my.example -permissions ACCESS_LOCATION,ACCESS_GPS
  1. The first thing that needs to be done is to replace the AndroidManifest.xml that is contained within our "template" application, that resides in Hecl.apk, a copy of which is contained within the AndroidBuilder jar file. Since the compiled version of the xml file is a binary format that hasn't been reverse engineered or documented yet, the best way to do this was to simply:
  2. Write out a new AndroidManifest.xml in our temporary work directory that uses our provided package name, label and class.
  3. Using the aapt command in the SDK, create a new, empty apk file, specifying the newly created xml file as the manifest file to use.
  4. Now we can extract the compiled version of the xml file, for later use.
  5. At this point, we extract a version of Hecl.jar contained within AndroidBuilder.jar to the temp directory.
  6. Now we need to generate some Java classes that correspond to the new package and class names that we've passed to AndroidBuilder. Ideally, I would have done this with some tools to write the byte code out directly, since the classes are so simple: all they do is subclass the Hecl and SubHecl classes so that methods fall through to those.
  7. But instead, I just write out the .java code and compile it.
  8. The two new classes get stashed inside the copy of Hecl.jar that we're working with.
  9. We now use the dx command to compile the entire jar into the classes.dex file that Android uses.
  10. Since Hecl.apk is just a zip file, we can replace the AndroidManifest.xml file and classes.dex file with the new files we have created.
  11. At this point, we rename the whole works, and move it out of the temporary working directory to the current directory.
Phew! That's a lot of ugly work. It's obvious that a lot of this should and could be handled in a less "brute force" way, but for now it gets the job done. The only thing left to do is replace the Hecl script, which is very easy:
zip -r Example.apk res/raw/script.hcl
This makes it possible to whip out new Android Hecl scripts without carrying around a lot of project infrastructure - all you really need is AndroidBuilder.jar and your script. Naturally, all of this is very much a work in progress, so it may not work as advertised, and, given the mess that we go through, bugs are likely as well. Do report them if you find any, and have fun! In the future, it will be necessary to make it so that it's possible to add resources to the apk file with zip, and have them be available to Hecl applications, which was actually the focus of the previous article.

Norbert Tretkowski: Security support for sarge-backports to be terminated

Security support for Debian 3.1 (aka sarge) will be terminated on March 31st this year. We decided to terminate the security support for sarge-backports at the same time, there will be no more updates after March 31st.

Thanks to everyone who contributed to the sarge-backports archive.

Antti-Juhani Kaijanaho: John Ringo: The Last Centurion

I finished reading the electronic advance reader’s copy last night. Overall, I’m glad I read it, though it was quite infuriating. The book is set about a decade in the future. In the book’s world, anthropogenic climate change and global warming turned out to be a hoax; instead, a global cooling (caused by solar variation) was beginning. At the same time, the bird flu (H5N1) became a major pandemic. The United States was governed by the democrats and “the bitch” (a thinly disguised demonisation of a certain democrat presidential candidate), who handled everything wrong. The book is a fictional autobiography (or a series of blog posts) by a US army officer who became famous during those turbulent times, first commanding a company finding its own way back home after being abandoned in the Middle East (the later stuff I won’t describe to avoid spoiling the book). The Last Centurions is a television propaganda show featuring his unit in action, intended to counterspin anti-military news reports. Several chapters early in the book are pure political ranting by the narrator: how anthropogenic climate change is false, how socialized medicine is bad (and causes lots of unnecessary deaths during a pandemic), how republicans are good and democrats are evil et cetera et cetera et cetera. (Then again, it’s a Ringo book, political ranting is a given.) Given my political persuasion, it was not easy to read: I kept yelling, “where are your footnotes!” I actually tried to verify some of the claims the narrator makes, and found nothing persuasive. Still… in the end, it all turned out to be justified. It explains the character, and it explains the world. Perhaps it should be a bit trimmed during editing (remember, I read the author’s submission draft which has not been through the usual editing and copyediting cycles), but a lot of it is necessary for the story. The premise that anthropogenic global warming is a false theory made it very hard for me to suspend disbelief. However, given that premise (and the premise of a totally incompetent government in the USA), the story is compelling and interesting. There’s a quite a bit of military action as we have become to expect from Ringo. The beginning grabbed me, – apart from the couple of chapters of exposition – held my attention tightly to the end, and left me shell-shocked. I especially liked the wife’s edits. I’m sorry that we didn’t get to see their courtship. I don’t know if I’ll ever want to re-read the book, but I’m still rating it at 5/5. The book is now available as an e-ARC, and will be released as a regular book in August. There is a companion site at www.thelastcenturion.com.

Miriam Ruiz: Gnash 0.8.2 in Debian

The first beta release for Gnash has finally been published. There are a lot of improvements in this version, and it now supports the majority of Flash opcodes up to SWF version 7, and a wide sampling of ActionScript 2 classes for SWF version 8.5. Flash version 9 and ActionScript 3 support is being worked on. I’ve just uploaded it to Debian, so it will soon be available in the mirrors. YouTube of course works, but not all of the other video streaming web pages are supported yet. Don’t forget to install the recommended packages if you want to have the video streaming features available, as some plugins for gstreamer are necessary for that.

MJ Ray: Current Issues / Post Office Protest 1230 Friday

The Murky reports that protestors will be seeing how long it takes to walk from the under-threat Kewstoke Post Office to the next nearest in Milton at 1230 on Friday.  While it's under two miles, it involves a 25% gradient 100+m hill.

Conservative MP John Penrose will be there. The Murky also reports Lib Dem candidate Mike Bell's campaign which points out Weston is losing more Post Offices than Bristol, proportionately.  I suspect that's related to the above-average number of pensioners and the Government taking services away from the post offices.

Adrian von Bidder: Linux on the Desktop: The Agenda

I think that Matt Hartley is spot on on his Top 10 Linux Desktop Hurdles. Commented:
  1. Regression testing is hard. Assuring that hardware that worked will still work in the next version of the distribution is where many Linux distributions fall down. At least I think Debian here does better than some others.
  2. Mobile devices. I've written about this already some months ago. I want to just plug in my smartphone and sync it with my calendar application. I don't think this is too much to ask.
  3. Software compatibility. I don't do video editing and I'm comfortable with the Gimp, but I witness people having difficulties with OpenOffice.org all day. Mostly, it's because either they were MS Office power users and stuff like form letters are different between the packages, or it is because the state issues silly form/macro based MS Office documents.
  4. Wireless. Hmm. I haven't had real problems with Wireless in quite some time. But then, I know that I need to watch what kind of hardware I buy, so YMMV.
  5. Hardware compatibility lists. Debian doesn't have one, so that's apparently a good starting point ;-)
  6. Compiling drivers. I don't understand this complaint. The user should never even come to the point where he needs to compile a driver. But I think here Debian with module-assistant is quite good.
  7. The Patent Trap a.k.a. I Want To Watch DVDs. This is a serious issue, and will probably not be going away unless some heavy duty political stuff is happening. Organisations like PubPat and the new End Software Patents initiative will help. In my opinion, though, these are not taking it far enough. Patents are monopolies granted by the state — in all other areas (post, railways, telecommunications), it has been agreed that monopolies are bad, so why not just abolish the broken idea of patents, too?
  8. Off the Shelf Software. Hmm. My clientele is not the lone Linux user at home but the business user who has an IT support dept, so I don't see this issue for me.
Issues #9 and #10 is just “the community sucks” in nicer words. He's not wrong as such, but I think Matt's view is pessimistic on these.

10 March 2008

Dirk Eddelbuettel: PGApack 1.1: Almost as good as new

PGAPack is rather nice and fairly small library for 'parallel' optimisation via generic algorithms using the MPI message passing protocol. PGAPack 1.0 was written by David Levine while doing graduate work during the mid-1990s at Argonne Labs / University of Chicago. PGAPack has also been in or around Debian for a rather long time, but it suffered from benign neglect in the last few years. Some of this came to the fore in this bugreport which lead to my offer to the then-maintainer Andreas to help on the relicencing request. After all, Argonne Labs is just a few miles from where I live, and I had already spent a little bit of time polishing and upgrading the package for my own exploratory use. So I called Rusty Lust, head of the Mathematics and Computer Science section at Argonne to try to sort this out. He was sympathetic and put me in email contact with David Levine. As we are all somewhat busy, this dragged on for a little longer than we thought --- but as of today, about and a half years later, we have a new and shiny PGAPack 1.1 release, or around twelve years after the initial 1.0 version came out. I have done a fair amount of polishing: there are now two library packages for serial use (i.e. for debugging) as well as parallel use via MPI. We use Open MPI where available and LAM where not. All open Debian bugs have been addressed. One minor issue in the postscript documentation remains as David can no longer locate his LaTeX sources; I may just have to extract the text and re-latex this from scratch to update it. One day. Anyway, for full reference, the changelog entry is below. The package is currently in the NEW queue (as the new sub-package require manual inspection and approval) but should hit mirrors in a couple of days. My thanks to the two previous Debian maintainers; to Rusty Lusk for helping with the from the end MSC department at Argonne Labs and for suggesting the rather liberal and easy MPICH2 license (and he happens to be one of the MPICH2 authors); and of course to David Levine for writing PGAPack in the first place, for agreeing to relicense it and giving valuable feedback on my repackaging of what is now version 1.1 on the MCS ftp server at Argonne --- this library has held up really well over the years; let's hope it will find more good use going forward.
pgapack (1.1-1) unstable; urgency=low
  * Really good news:  The MCS divsion of Argonne National Laboratories has
    agreed to relicense pgapack using the MPICH2 license. So pgapack
    is now Free Software and can move into Debian's main archive!
  
    Our thanks go to David Levine and Rusty Lusk to make this possible.
  
  * New maintainer, following Andreas' offer dated 2006-10-04 in #379388
  * debian/control: Change section to math		(Closes: #379388)
  
  * Added new brinary packages libpgapack-mpi1 and libpgapack-serial1
  * The MPI package is configured using Open MPI where available and LAM
    where not. 
  * debian/control: Changed Build-Depends: to use OpenMPI where available, 
    and LAM otherwise.
 
  * Finally acknowledges old NMUs 		(Closes: #379168,#359549)
  * source/integer.c: Apply patch for one-off error 	(Closes: #333381)
  * source/report.c:  Do not unconditionally print at generation 1
  
  * debian/rules: Remove a bashism 			(Closes: #379168)
  * debian/rules: Install examples directly 		(Closes: #134331)
  * debian/control: libpgapack-lam1 Depends on lam4 	(Closes: #60376)
  * debian/rules: Rewritten using debhelper
  * debian/control: Added Build-Depends: section for debhelper
  * No longer install mpi.h in /usr/include		(Closes: #404027)
    
  * debian/control: Updated Standards-Version: to current version
  * man/man1/PGAGetCharacterAllele.1: fix whatis entry 		(lintian)
  
 -- Dirk Eddelbuettel   Mon, 10 Mar 2008 18:03:34 -0500

Wouter Verhelst: Whereami or guessnet?

Before my hard disk adventure, I used to use whereami to manage my laptop network setup. Whereami is pretty good. It allows me to detect whether a cable is connected to my NIC, and not even bother wasting several minutes in trying to get a DHCP lease. It can run tests on several interfaces, and decide that I am "home" if it finds a known network on either the wireless or the wired interface. Most importantly, it allows me to build a script based on where I actually am, so that I can have my laptop modify several configuration settings that depend on the actual network I'm on -- say, whether or not to use a proxy, or whether or not to use an SMTP smarthost. I was having issues with whereami lately, however, and thought to look for something else. After all, it's true what they say; whereami does not properly integrate with ifupdown. If you use whereami, modifying the network configuration involves "/etc/init.d/whereami start" or some such; just "ifup eth0" will break things horribly. Additionally, I was having issues with my WPA setup; there is a testwpa, but it does not seem to work for me for some reason—and I can't seem to figure out what's going on in order to file a bug. Apart from the two issues above, I was having some minor annoyances with my setup; enough so that after reinstalling my system, I thought to try something else. The guessnet package is designed to properly integrate with ifupdown, so I thought I'd give it a try. I don't think it is what I'm looking for, though.
#  route_data = $ lookup 
#			$ readfile /etc/whereami/topmost_location 
#		 lsearch /etc/exim4/smarthosts 
  route_data = $ lookup 
  			$ extract eth0 
				$ readfile /etc/network/run/ifsftate 
			 
		 lsearch /etc/exim4/smarthosts 
		$ lookup 
			$ extract wlan0 
				$ readfile /etc/network/run/ifstate 
			 
		 lsearch /etc/exim4/smarthosts 
The upper version is what I used with whereami (but not active, see the comment marks :). My script would write something to /etc/whereami/topmost_location, and several other things (including my exim configuration, as shown above) would use that to automagically modify their configuration. Which is pretty cool. The lower version is the equivalent of the upper version with guessnet. How ugly. And then I didn't even see a way to avoid ifup from trying to 'up' eth0 if the MII tells me there is no cable in the NIC. Oh my.

Gerfried Fuchs: APT::Acquire::Translation "none";

Quite a lot people are unhappy with how the package descriptions are translated. Different teams handle it differently, but the approach the German "team" chose is quite unfriendly from a quality point of view: The webinterface for it doesn't require any authentication at all, leading technically to anonymous translations all over the place. The so-called "review" process consists of the same not-existing authentication, leading to a situation where unknown people can put in whatever they like and have other (or potentially the same) unknown people acknowledge that. The language team has actively chosen that way because it was said that bad translations simply won't happen and that the review (three people opening the page and clicking onto a button) will not let that happen. Well, it happened. And is happening all over the place. Things like "Gedultsspiel" and "Murmelirrsinn" are pretty tough and almost hiding translations from "counting pipe" to "Zählrohr" and "villages" to "Orte" (and no, those aren't the only examples that accumulated over the last months). As this all happens anonymously one can't even get a message to the people submitting (extremely) low quality translations, helping them to improve their skills so they won't do the same mistake in future translations; meaning things are hard to improve. I am usual an advocate of translating stuff, did put a lot of effort into that area—but the total lack of quality in not only a small and tiny bit here but a much broader area is why I suggest to everyone (at least from a German language point of view): Put APT::Acquire::Translation "none"; into your /etc/apt/apt.conf file and don't get annoyed by them. When quantity is the only thing that counts people wanting to have quality are simply ignored with their mails on the lists.

Holger Levsen: debian kernel packages with the old firewire stack

To cater the impressive number of Debian users who cannot use the Debian kernels in sid and lenny, I have decided to provides packages which just one change: the old firewire enabled. That means, one has to blacklist one or the other and one can continue to use Debian kernels even if one has to do video work or anything else with firewire. Win!

It's true, the new firewire stacks needs testing, bug reports and fixing. I believe we get more of this, if users keep using Debian kernels and are not forced to rebuild the kernel, to be able to use the hardware.

The wiki page about the Juju migration explains how to blacklist one stack. You probably will have to blacklist the modules already in the initrd image (or not include all modules in them)...

Packages for amd64, i386 and powerpc are available with apt from this repo: deb http://layer-acht.org/debian sid 1394kerel

Source is there as well, just replace deb with deb-src as usual. The version number is higher than the current one in sid, but - by using a tilde - lower than the next upload.

I intend to provide those packages, updated whenever there is a new version in sid, as long as firewire in Debian sid is fundamentally broken. And I hope this won't be long! :-)

After discussing this with maks he suggested to provide the old stack via the linux-modules-extra-2.6 package. And then there is also the option that Juju is finally getting usable. One or the other will happen eventually ;-)

Lars Wirzenius: Reducing online distractions

I'm attempting to raise my productivity by reducing the number of distractions I have while working. I work at home, and there's no-one else here when I work, so there's not much to do there. There is a lot to do about online distractions, however. The three biggest distractions are IRC, non-necessary mailing lists, and random web browsing. I will be reducing the IRC channels I'm regularly on. This means dropping all but one or two channels not directly related to work, and as many work related channels as I can. I'm pondering doing something similar to what Martin Krafft has talked about: making sure the mailing list messages reach me only at certain points of the day or week. I'd do this by having list e-mail delivered to a folder not usually visible to my e-mail program, and then having a cron job move the mails to the inbox when it's time. I have all the scripts written for this, so it'd be easy to do. This way I could ignore them at all other times, and then catch up on them every now and then. The problem with this is that when the list mails are delivered, I'm going to be swamped, and that can happen at an inconvenient time. So it's probably best to just unsubscribe. Either way, even if I'm fairly silent on mailing lists, don't be surprised if I shut up completely. (I might start sending out other e-mails and blog a lot more, though.) Both of these changes, dropping IRC and lists, are potentially permanent, but might turn out to be temporary. We'll see. If this works out well, meaning that I manage to keep track of the people and projects I'm interested in while improving productivity, the change is likely to be permanent.

Rob Bradford: Cunning tip

Shoes get caught when trying to put on waterproofs? Simply place a carrier bag over your shoe. Your foot will then glide smoothly through without getting snagged. Essential advice for anyone braving the elements in the UK tonight.

Filip Van Raemdonck: PyGTK/glade object reuse

Someone asked on the PyGTK mailinglist if it is possible to reuse certain parts of a libglade window several times within an application.
It certainly is, and it's not even hard to do!

I've quickly written a demo application to show how it's done.
Glade widget tree

The user interface designed in glade is really simple, a textbox with two toggle buttons underneath. Activating one button will display a second, disparate textbox beside the original one. Deactivating it will remove that second textarea.
The other button will display and remove a copy of the first textbox which was there from application startup.
The full widget tree of this interface is shown in the first screenshot.

The actual code to the demo application is rather brief.
Continue reading "PyGTK/glade object reuse"

Filip Van Raemdonck: PyGTK/glade object reuse

Someone asked on the PyGTK mailinglist if it is possible to reuse certain parts of a libglade window several times within an application.
It certainly is, and it's not even hard to do!

I've quickly written a demo application to show how it's done.
Glade widget tree

The user interface designed in glade is really simple, a textbox with two toggle buttons underneath. Activating one button will display a second, disparate textbox beside the original one. Deactivating it will remove that second textarea.
The other button will display and remove a copy of the first textbox which was there from application startup.
The full widget tree of this interface is shown in the first screenshot.

The actual code to the demo application is rather brief.
Continue reading "PyGTK/glade object reuse"

Filip Van Raemdonck: PHP and SSL with Lighttpd on Debian Etch

First, a question: dear lazyweb, how do I completely disable non-SSL access with lighttpd? I can't seem to find how to have a lighttpd SSL-only configuration. (and only binding port 80 on localhost does not count for an answer)

On to the subject. While it's easy to add SSL to lighttpd and enable PHP (through fastcgi) and Debian makes it even easier with it's lighty-enable-mod tool if you only do it once in a blue moon then it's not exactly resident knowledge. So here are the steps to do it, on Debian Etch:
  1. apt-get the lighttpd, php4-cgi or php5-cgi, and openssl packages
  2. lighty-enable-mod fastcgi
  3. if using php5, update the path to the cgi binary in /etc/lighttpd/conf-available/10-fastcgi.conf (it's preconfigured for php4)
  4. lighty-enable-mod ssl
  5. update the path to the SSL certificate in /etc/lighttpd/conf-available/10-ssl.conf
  6. restart the lighttpd server

That's all there is to it. Well, strictly speaking there's a step 4a: install a certificate; but that's arguably not a part of the configuration process.
(for reference: openssl req -new -x509 -keyout /etc/lighttpd/selfcert.pem -out /etc/lighttpd/selfcert.pem -days 365 -nodes will generate a self-signed certificate)

Next.

Previous.