search for: pki

...an2 ~]# rpm -qa|grep cert > ca-certificates-2018.2.22-70.0.el7_5.noarch > [root at stan2 ~]# Can you verify the ca-certificates package on both your systems and compare? Here is what my C7 box shows (same version package as yours): [root at hp3 ~]# rpm -Vv ca-certificates ......... /etc/pki/ca-trust ......... /etc/pki/ca-trust/README ......... c /etc/pki/ca-trust/ca-legacy.conf ......... /etc/pki/ca-trust/extracted ......... /etc/pki/ca-trust/extracted/README ......... /etc/pki/ca-trust/extracted/java ......... /etc/pki/ca-trust/extracted/java/README .M....... g /etc/...

...Errata and Bugfix Advisory 2015:1130 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1130.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 75d78a10d6a87cf757d30f21d1bfe6dabab52e6be9472cac17d0c56c1ffd04a5 pki-ca-9.0.3-39.el6_6.noarch.rpm 9fd8bbe8ecc2e4be63f781bff338161a22614459ca57b47f19f5e9e294ef7772 pki-common-9.0.3-39.el6_6.noarch.rpm cf5700ee7ea94cc0b9d3b2b89cc1def0ee838b41cac2130fe569fb0932c6ece3 pki-common-javadoc-9.0.3-39.el6_6.noarch.rpm 85183c1cb7db8b96f0c416877f3c4581d43e7e268d5b0bc2f7dc5b22...

...Errata and Bugfix Advisory 2016:0151 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0151.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 0d04ce18e0720742a79233a2bc11461396bd60225c238c9912b7f13be6d78c34 pki-ca-9.0.3-45.el6_7.noarch.rpm e87873cc54e3b211dd1d7df1d0c7815bb2cdad59c25fca24a2234fab2f93c380 pki-common-9.0.3-45.el6_7.noarch.rpm 6370ab6650b243b786ba1d49eee3b2d5504d2e1b4672f72baff21d1444471c5e pki-common-javadoc-9.0.3-45.el6_7.noarch.rpm 439ea071861c996bc70749870749bfcbd8bc9d59cbed71ca7f03951c...

...Errata and Bugfix Advisory 2016:1661 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-1661.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 05d3cf577d439c3558c77a89b029f56633b4734c8fc43612a3d14f23c232c9b3 pki-ca-9.0.3-50.el6_8.noarch.rpm 62a15c868c1d9cbcce42e8b47196a244f0e4df2919ed5d7a1711f847c552e81b pki-common-9.0.3-50.el6_8.noarch.rpm e5725a415fdcb3791ffb7b489a1d6ae187926c0f26c8ad7d2b6836328cf3e487 pki-common-javadoc-9.0.3-50.el6_8.noarch.rpm fc8731b7149b0f4982ba60be4010d4d220a56e57418633578ac3af15...

...Errata and Bugfix Advisory 2012:0357 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0357.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4a6b504a592f9bb07ddf135d2a518205ab3cf4fd143ad374ec58693e2bf4fb07 pki-ca-9.0.3-21.el6_2.noarch.rpm 514a8c6f4604cdb0046d96ba1657b3586a4a8f44bfa8d1efcdf7dc2440fb07e5 pki-common-9.0.3-21.el6_2.noarch.rpm e4d81f5d96e25428aacae0acd0fc0c05f2dc57c7387e5c0d574000048214a8bb pki-common-javadoc-9.0.3-21.el6_2.noarch.rpm b79600cf82f42590af9c46f368658fcaad3794eb48752b1f661c9777...

Am 2019-08-29 18:26, schrieb Gary Stainburn: > On Thursday 29 August 2019 16:47:11 Alexander Dalloz wrote: >> rpm -Vv nss > > [root at stan2 ~]# rpm -Vv nss > ......... /etc/pki/nss-legacy > ......... c /etc/pki/nss-legacy/nss-rhel7.config > ......... /etc/pki/nssdb > ......... c /etc/pki/nssdb/cert8.db > ......... c /etc/pki/nssdb/cert9.db > ......... c /etc/pki/nssdb/key3.db > ......... c /etc/pki/nssdb/key4.db > ......... c /etc/pki/nssdb/p...

...367 kB/s | 28 kB 00:00 Extra Packages for Enterprise Linux 8 - Next - x86_64 75 kB/s | 35 kB 00:00 Error: Problem 1: package resteasy-3.0.26-6.module_el8.4.0+595+e59c9af2.noarch from @System requires pki-servlet-4.0-api, but none of the providers can be installed - package tomcat-servlet-4.0-api-1:9.0.62-30.el8.noarch from appstream obsoletes pki-servlet-4.0-api <= 1:9.0.50 provided by pki-servlet-4.0-api-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from @System - package tomcat-servle...

...r.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx at gmail.com US Mail: 5708 Sabbia Drive, Round Rock, TX 78665-2106 ?On 7/11/18, 5:26 PM, "Teno Deuter" <gvgter at googlemail.com> wrote: this is what I have now in my smptd conf file: listen on $egress_int pki server.pki tls-require hostname [domain] listen on $egress_int pki server.pki port 587 tls-require auth hostname [domain] listen on $egress_int pki server.pki smtps auth hostname [domain] but the problem is still there :( On Thu, Jul 12, 2018 at 12:04 AM, Larry Rosenman &l...

Hi, few miscellaneous fixes for nbdkit. Thanks, Pino Toscano (3): build: use AC_MSG_RESULT for $PERL_LDOPTS crypto: add missing '{' tests: fix generation of PKI test data configure.ac | 1 + src/crypto.c | 2 +- tests/Makefile.am | 10 +++++----- 3 files changed, 7 insertions(+), 6 deletions(-) -- 2.13.6

> > The mysqld process runs as the mysql user. It's parent which is the > mysqld_safe runs as the root user. That being said the mysql user needs > to have at least read permission to the locations where the ssl files are > > located. By default on Centos the /etc/pki/CA/private directory has its > directory permissions to only allow the root user. If the mysql user > cannot read all ssl files SSL will not work. > 2. Regarding your replication specific user not being able to connect to > the master. It may not work until SSL is fully working s...

--- /etc/smtpd/smtpd.conf pki mx.domain.tld certificate "/etc/smtpd/tls/smtpd.crt" pki mx.domain.tld key "/etc/smtpd/tls/smtpd.key" table creds "/etc/smtpd/creds" table vdoms "/etc/smtpd/vdoms" table vusers "/etc/smtp...

...rryrtx at gmail.com > US Mail: 5708 Sabbia Drive, Round Rock, TX 78665-2106 > > ?On 7/11/18, 5:26 PM, "Teno Deuter" <gvgter at googlemail.com> wrote: > > this is what I have now in my smptd conf file: > > listen on $egress_int pki server.pki tls-require hostname [domain] > listen on $egress_int pki server.pki port 587 tls-require auth hostname [domain] > listen on $egress_int pki server.pki smtps auth hostname [domain] > > but the problem is still there :( > > On Thu,...

...like '%ssl%'; +---------------+--------------------------------+ | Variable_name | Value | +---------------+--------------------------------+ | have_openssl | DISABLED | | have_ssl | DISABLED | | ssl_ca | /etc/pki/CA/certs/ca.crt | | ssl_capath | | | ssl_cert | /etc/pki/tls/certs/mysql.crt | | ssl_cipher | | | ssl_key | /etc/pki/tls/private/mysql.key | +---------------+--------------------------------+ 7 rows in set (0.01...

> > No: /etc/pki/CA should NOT be group writeable. Ditto for > /etc/pki/tls/cernts and private Ok, yeah I can understand that. I'll correct it. Still need a way to get SSL enabled however. Any suggestions there? Thanks Tim On Thu, Mar 12, 2015 at 11:40 AM, <m.roth at 5-cent.us> wrote: > Tim Dun...

...gg-Stedman wrote: > Hello all, > > I'm trying to get virsh (and virt-manager) to talk to a remote libvirt > instance. I cannot for the life of me figure out how to tell either > tool where to find client or CA certificates. Do they *really* need > to access the ones in /etc/pki? In particular, the client seems to > want to read the *server's* private key, which for obvious reasons is > only readable by root. > > I feel like I must be missing something obvious...if someone can point > me towards a solution I would really appreciate it. Thanks! > &...

Move the generation of PKI test data outside of the HAVE_LIBGUESTFS, otherwise they will not be generated when the tests using libguestfs are not enabled. Also, use $(srcdir) to properly refr to make-pki.sh in the source directory, fixing the build with builddir!=srcdir. --- tests/Makefile.am | 10 +++++----- 1 file change...

Due to unpleasant (but arguably valid) policy changes at work, any SSH server within the work firewall must accept only PKI authentication. Unless we can convince the higher-ups otherwise, we will also have to use the commercial SSH server within the firewall. Of course, I should be able to use whatever client I like. Unfortunately, it is not clear that I can get OpenSSH to use PKI authentication. A bit of googling turn...

...e, Round Rock, TX 78665-2106 > > > > ?On 7/11/18, 5:26 PM, "Teno Deuter" <gvgter at googlemail.com> wrote: > > > > this is what I have now in my smptd conf file: > > > > listen on $egress_int pki server.pki tls-require hostname [domain] > > listen on $egress_int pki server.pki port 587 tls-require auth hostname [domain] > > listen on $egress_int pki server.pki smtps auth hostname [domain] > > > > but the problem is still th...

...; > > > ?On 7/11/18, 5:26 PM, "Teno Deuter" <gvgter at googlemail.com> wrote: > > > > > > this is what I have now in my smptd conf file: > > > > > > listen on $egress_int pki server.pki tls-require hostname [domain] > > > listen on $egress_int pki server.pki port 587 tls-require auth hostname [domain] > > > listen on $egress_int pki server.pki smtps auth hostname [domain] > > > > >...

...centos-announce-owner at centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2015:1131 CentOS 7 paps FASTTRACK BugFix Update (Johnny Hughes) 2. CEBA-2015:1130 CentOS 6 pki-core BugFix Update (Johnny Hughes) 3. CEBA-2015:1128 CentOS 6 selinux-policy BugFix Update (Johnny Hughes) 4. CEBA-2015:1129 CentOS 6 mysql BugFix Update (Johnny Hughes) 5. CEBA-2015:1134 CentOS 6 nfs-utils-lib BugFix Update (Johnny Hughes) 6. CEBA-2015:1133 CentOS 6 cairo...