Displaying 3 results from an estimated 3 matches for "rootcert".
2004 Mar 05
0
Unexpected error
...trict modes = no
transfer logging=yes
timeout=3600
use lfs=no
hosts allow=192.168.0.98
hosts deny=*
On the other side i have win98 with rsync 2.6.0.
I try to connect them over SSL using STUNNEL 4.0.5 and OpenSSL 0.9.7c .
my stunnel.conf :
CAfile=C:\NARZ?DZIA ADM\SHAREWARE\Stunnel\RootCert.pem
client=yes
debug=7
output=C:\NARZ?DZIA ADM\SHAREWARE\Stunnel\STUNNEL.LOG
verify=2
socket=r:TCP_NODELAY=1
socket=l:SO_LINGER=1:60
[RSYNC]
accept = 873
connect = 192.168.0.234:873
TIMEOUTclose = 0
And after rsync rsync://localhost/PECET /kosz i get :
There is a screen of stunnel :
2004.03.05...
2006 May 11
0
mandatory client certificates and crl check in ssl-proxy-openssl.c
...the emailuser to the
clientcertificate, a clientcert. can access only the account from the
userdb)
in order to use it, the CAfile must be a file which contains the
CAcertificate (pem format) followed by the CRL (also in pem format).
(servercert and the clientcerts are signed with a self-signed rootcert)
there are some issues with the patch:
a) it needs openssl > 0.9.7 for the CRL checking
b) ssl_verify_client_cert now returns 0 in case of an invalid cert. was
there a reason why it always returned 1?
c) i'm not too happy with the commonname extraction code, is it secure??
d) i've no e...
2010 Jan 21
1
[PKI concepts] Why Jboss need (signed cert and) root-cert in PEM format?
Hi folks
[ Please add me CC. Thanks ]
We have here a Jboss app and web server. We signed the SSL-certificate
that end-user don't have ugly error messages. I don't understand why
we need to import the Root-Cert in PEM format?
$ keytool -import -trustcacerts -file rootcert.pem -keystore
myserver.keystore -alias root
The Root-Cert is in web browser, why there is a must to import in keystore?
Did I misunderstood PKI basics?
cheers Sven