search for: rootcert

Displaying 3 results from an estimated 3 matches for "rootcert".

2004 Mar 05
0
Unexpected error
...trict modes = no transfer logging=yes timeout=3600 use lfs=no hosts allow=192.168.0.98 hosts deny=* On the other side i have win98 with rsync 2.6.0. I try to connect them over SSL using STUNNEL 4.0.5 and OpenSSL 0.9.7c . my stunnel.conf : CAfile=C:\NARZ?DZIA ADM\SHAREWARE\Stunnel\RootCert.pem client=yes debug=7 output=C:\NARZ?DZIA ADM\SHAREWARE\Stunnel\STUNNEL.LOG verify=2 socket=r:TCP_NODELAY=1 socket=l:SO_LINGER=1:60 [RSYNC] accept = 873 connect = 192.168.0.234:873 TIMEOUTclose = 0 And after rsync rsync://localhost/PECET /kosz i get : There is a screen of stunnel : 2004.03.05...
2006 May 11
0
mandatory client certificates and crl check in ssl-proxy-openssl.c
...the emailuser to the clientcertificate, a clientcert. can access only the account from the userdb) in order to use it, the CAfile must be a file which contains the CAcertificate (pem format) followed by the CRL (also in pem format). (servercert and the clientcerts are signed with a self-signed rootcert) there are some issues with the patch: a) it needs openssl > 0.9.7 for the CRL checking b) ssl_verify_client_cert now returns 0 in case of an invalid cert. was there a reason why it always returned 1? c) i'm not too happy with the commonname extraction code, is it secure?? d) i've no e...
2010 Jan 21
1
[PKI concepts] Why Jboss need (signed cert and) root-cert in PEM format?
Hi folks [ Please add me CC. Thanks ] We have here a Jboss app and web server. We signed the SSL-certificate that end-user don't have ugly error messages. I don't understand why we need to import the Root-Cert in PEM format? $ keytool -import -trustcacerts -file rootcert.pem -keystore myserver.keystore -alias root The Root-Cert is in web browser, why there is a must to import in keystore? Did I misunderstood PKI basics? cheers Sven