search for: certificat

Hi list, is there an easy and proper way to revoke certificat created by the script ast_tls_cert? I always get a name error on the CN/ O/ subject ... -- Daniel

Hi, next problem with outlook 2003 On the IMAP Server (dovecot.x86_64 1.0.7-7.el5) I created a certificate with "mkcert_dovecot.sh". Some entries as be written to "/etc/pki/dovecot/dovecot-openssl.cnf". plaintext paswords are disables. IMAP Serverport: 993 Server needs SSL Now the outlook 2003 clients meens "the server uses a security certificate, which could not be verifi...

Today I've been trying to get dovecot (1.0 rc2) to use certificates for client side authentication. If my memory serves right, beta8 had no problems with it (although it was some time ago and on different machine). Similar setup works perfectly well for postfix (for authentication that is, on the same machine). Originally I thought I overdid some certificate set...

Hello, Configuration : - Debian 8 - Wordpress 5.3.2 (Apache) - Icecast 2 - Radio web player : Streamcast I just installed my Web radio that was working correctly in full HTTP. I add a Lets Encrypt certificat on my Wordpress that is now in HTTPS. Since my Wordpress is in HTTPS, my stream on the website is not working. The direct Link in HTTP is working correctly. I checked on the internet and it say "mixed content do not work". I was not able to find a simple procedure to add HTTPS on my Icec...

Hi, I have to connect 3 asterisk servers,each of them being TLS server for his clients and connected in both way in TLS with both others asterisk, each having hi own Common Name. Is this possible? I set up 2 asterik's , one server and the other client, this is OK. But I can't deal with certificats generated on both servers. I tried to put tlscertfile ans tlscafile in the peer definition, each pointing to the certificate generated by the server, but that? not working. Thanks for any hint. -- Daniel

Hi, I'm using Dovecot for pop3-ssl. Unofortunatelly, most of my users are using MS Outlook. I want them to be able to remove standard mesage: "The certificat is not signed by...", but I don't know how :-( In the dialog isn't a button "Trust this certificate forever"... Is there anybody, who know, how to solve this? Many thanks.

...tup the dovecot with the instructions from http://wiki2.dovecot.org/SSL/DovecotConfiguration Each domain has it's own ip address. However, when I connect via Thunderbird or any other mail clients, the client is ONLY picking up the top-level "default" ssl_key and ssl_cert and the certificat in /etc/ssl/dovecot.pem Is this a bug? This is on Debian Wheezy. Any help pointing in the right direction would be appreciated thanks. Here is the ssl section: ----------- ssl_cert = </etc/ssl/dovecot.pem ssl_key = </etc/ssl/dovecot.pem local 192.0.2.10 { # instead of IP you can also us...

...gt; >> Hello, >> >> Configuration : >> - Debian 8 >> - Wordpress 5.3.2 (Apache) >> - Icecast 2 >> - Radio web player : Streamcast >> >> I just installed my Web radio that was working correctly in full HTTP. >> >> I add a Lets Encrypt certificat on my Wordpress that is now in HTTPS. >> Since my Wordpress is in HTTPS, my stream on the website is not working. >> The direct Link in HTTP is working correctly. >> >> I checked on the internet and it say "mixed content do not work". I was >> not able to fin...

...ccept:SSLv3 flush data tls_read: want=5, got=5 0000: 15 03 01 00 02 ..... tls_read: want=2, got=2 0000: 02 30 .0 TLS trace: SSL3 alert read:fatal:unknown CA TLS trace: SSL_accept:failed in SSLv3 read client certificate A TLS: can't accept. TLS: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca s3_pkt.c:1052 connection_read(14): TLS accept error error=-1 id=2, closing connection_closing: readying conn=2 sd=14 for close May anyone tell me what is going wrong? Thank you _______...

Hello, I would like to set up an authentication using certificate with Dovecot: A user sends mail to Postfix and Dovecot authentication is valid only if certificate is trusted. So, I enable the parameter auth_ssl_require_client_cert in dovecot configuration but it is not running. Here are the postfix logs: Aug 16 09:51:48 myserver dovecot: auth: Debug: Loading...

...I have a strange problem when installing puppet client 2.6.3 on a node. I have installed facter-1.3.8-4 and ruby-1.8.6-8. When I start puppetd as a normal user everything behaves normally. A .puppet directory is installed under $HOME and ssl key is installed under $HOME/.puppet/ssl.. I sign the certificat on the puppet master and the client is working fine. However I cannot change system files, so I have to run puppetd as root. Here is where the problem starts. I ssh in as root, set up the same environment variables (i.e LD_LIBRARY_PATH, PATH etc.) as the normal user. When i run: puppetd -v --lis...

Hi All - I am running CentOS 7.5 and trying to use certbot. I am getting an error 403 forbidden on the /.well-known/acme-challenge/-CG_gSckofY5ln7TdMvoanDI1_FBRh8otQkyB0hxmoo Some searching indicated permission problems... I also noticed that the /var/www/html directory does not even have the .well-known directory in it. The /var/www/html directory was root:root I changed it to root:apache

...t;> - Debian 8 >>>> - Wordpress 5.3.2 (Apache) >>>> - Icecast 2 >>>> - Radio web player : Streamcast >>>> >>>> I just installed my Web radio that was working correctly in full HTTP. >>>> >>>> I add a Lets Encrypt certificat on my Wordpress that is now in HTTPS. >>>> Since my Wordpress is in HTTPS, my stream on the website is not working. >>>> The direct Link in HTTP is working correctly. >>>> >>>> I checked on the internet and it say "mixed content do not work"...

...rde Duplicateurs Utilisateurs du Bureau ? distance Op?rateurs de configuration r?seau Utilisateurs de l?Analyseur de performances Utilisateurs du journal de performances Utilisateurs du mod?le COM distribu? IIS_IUSRS Op?rateurs de chiffrement Lecteurs des journaux d??v?nements Acc?s DCOM service de certificats Ordinateurs du domaine I think there is a misconfiguration in my setup but did not find any solution: Where i'm wrong ? [global] workgroup = TOUZEAU netbios name = bdc2 server string = %h server disable netbios =no max protocol = SMB2 name resolve order =host lmhosts wins bcast dn...

....conf(5) for possible values loglevel 3 # Where the dynamically loaded modules are stored modulepath /usr/lib/ldap moduleload back_bdb ####################################################################### # SSL: # Uncomment the following lines to enable SSL and use the default # snakeoil certificates. #TLSCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem #TLSCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key # Chemin vers le certificat du serveur LDAP #TLSCertificateFile /etc/ldap/cert/servercert.pem # Chemin vers la clef priv??e du serveur LDAP #TLSCertificateKeyFile...

...thentication works but I need to automate this in kickstart for deploying cluster nodes. This show that the server side is running fine. At this time the message is #systemctl status sssd |.... sssd[be[default]][2732]: Could not start TLS encryption. error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate)| In my kickstart file I use: auth? --useshadow --enableldaptls --enablecache? --passalgo=sha512 --enableldap --enableldapauth --ldapserver="ldaps://my.ldap.server.fr" --ldapbasedn=dc=my,dc=base,dc=dn Then in a post install script I...

...p_access allow localhost manager http_access deny manager http_access allow localnet http_access allow localhost http_access deny all # Ports du proxy http_port 3130 http_port 3128 intercept https_port 3129 intercept ssl-bump \ cert=/etc/squid/ssl_cert/nestor.microlinux.lan.pem \ generate-host-certificates=on dynamic_cert_mem_cache_size=4MB # Emplacement de ssl_crtd et du cache des certificats TLS sslcrtd_program /usr/lib64/squid/ssl_crtd -s /var/lib/ssl_db -M 4MB sslcrtd_children 8 startup=1 idle=1 # SSL-Bump acl step1 at_step SslBump1 ssl_bump peek step1 ssl_bump bump all # Taille du cache dan...

...r (see logs below), but samba tells "Failed to issue the StartTLS instruction: Connect error". Any idea??? Have I to use the "--with-ssl" option? It's said no. ############################################## LDAP CONF: -------------------------- ######################## # certificats et clefs TLSCertificateKeyFile /opt/openldap/pem/ldapuckey.pem TLSCertificateFile /opt/openldap/pem/ldapcert.pem TLSCACertificateFile /opt/openldap/pem/demoCA/cacert.pem ############################################## SMB CONF: -------------------------- # LDAP: ldap ser...

...; And only use \\host.fqdn.tld\shares > ok, I'll remember. The longer you wait with changing these setups, the more problems you will hit in the future. Not because im saying this.. Because Microsoft is enforcing more security. Google is enforcing more security. like, how you setup your certificat chains, it must have a intermediate cert in latest chrome versions. Basicly all big companies are doing it now, i think a bit late.. But better late then never.. Greetz, Louis

...n GENESTE <d.geneste at illud.fr> wrote: > Hello, > > Configuration : > - Debian 8 > - Wordpress 5.3.2 (Apache) > - Icecast 2 > - Radio web player : Streamcast > > I just installed my Web radio that was working correctly in full HTTP. > > I add a Lets Encrypt certificat on my Wordpress that is now in HTTPS. > Since my Wordpress is in HTTPS, my stream on the website is not working. > The direct Link in HTTP is working correctly. > > I checked on the internet and it say "mixed content do not work". I was > not able to find a simple procedure...