search for: selfsign

...d the make testcert script in /etc/httpd/conf to create a new one with the appropriate company name and such. But this certificate requires a passphrase everytime apache starts and I rather would like to remove this passphrase. Does anyone know a good quick and dirty howto for centos to create a selfsigned ssl certificate without a passphrase? Ivago -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20060412/721aeac1/attachment-0001.html>

...[]:Mail Apps # Common Name (eg, YOUR name) []:myhome # Email Address []:ebalaskas at ebalaskas.gr openssl pkcs12 -export -in dovecot.crt -inkey dovecot.key \ -name "dovecot Certificate Client" -out dovecot.p12 openssl ca -gencrl -keyfile dovecot.key -cert dovecot.crt -out dovecot.crl -selfsign I've imported the dovecot.p12 to thunderbird certificates and dovecot.crt to thunderbird authorities (i've tried claws mail too - same errors) My dovecot.conf is this: [root at myhome dovecot]# dovecot -n # 1.2.2: /usr/local/etc/dovecot.conf # OS: Linux 2.6.30-ARCH i686 ext4 info_log_pa...

...ures using the SHA1 algorithm are rejected gpg: key 0x0FC3042E345AD05D: 2 bad signatures gpg: key 0x0FC3042E345AD05D: no valid user IDs gpg: this may be caused by a missing self-signature gpg: Total number processed: 1 gpg: w/o user IDs: 1 Searched around and found there is ----allow-non-selfsigned-uid and it appears to succeed: $ gpg --import --allow-non-selfsigned-uid hans-gpg-key.asc gpg: Note: signatures using the SHA1 algorithm are rejected gpg: key 0x0FC3042E345AD05D: 2 bad signatures gpg: key 0x0FC3042E345AD05D: accepted non self-signed user ID "Hans Wennborg <hans at chromiu...

Hello, This is a selfsigned cert. Both of the below methods were used. May I ask for 1. pointer to info setting up "intermediate certs" and where the certfile goes? The objective is to generate a self-signed cert and use it for just internal use with IMAPS dovecot. Separately, what are your thoughts as to wh...

I am currently trying to setup my Samba server to act as a samba PDC, with ldap as a backend. I have a selfsigned CA, that has signed the certificates to my ldap server. Starting my smbd, i keep getting the message smb_ldap_setup_connection: ldap://ldap.streetgeek.lan/ Failed to issue the StartTLS instruction: Connect error Connection to LDAP server failed for the 1 try! smbldap_open: already connected to...

...42E345AD05D: 2 bad signatures > > gpg: key 0x0FC3042E345AD05D: no valid user IDs > > gpg: this may be caused by a missing self-signature > > gpg: Total number processed: 1 > > gpg: w/o user IDs: 1 > > > > Searched around and found there is ----allow-non-selfsigned-uid and > > it appears to succeed: > > $ gpg --import --allow-non-selfsigned-uid hans-gpg-key.asc > > gpg: Note: signatures using the SHA1 algorithm are rejected > > gpg: key 0x0FC3042E345AD05D: 2 bad signatures > > gpg: key 0x0FC3042E345AD05D: accepted non self-sign...

...IMAPS cannot agree on SSL however Evolution, on the exact same system, is working fine with the same accounts. Tried recreating the Dovecot cert and also the thunderbird accounts from scratch. The OpenSSL raw client works fine as well. Would someone also confirm the openssl commands to create a selfsigned cert for dovecot imaps. They cert created does work with evolution; just not thunderbird. Thoughts? Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 Apr 8 18:10:18 hh d...

...rt the cert into thundebird's trusted ca certs. > > Aki >> On 30/04/2020 21:36 hanasaki at gmail.com <mailto:hanasaki at gmail.com> >> <hanasaki at gmail.com <mailto:hanasaki at gmail.com>> wrote: >> >> >> Hello, >> >> This is a selfsigned cert. Both of the below methods were used. >> >> May I ask for 1. pointer to info setting up "intermediate certs" and >> where the certfile goes? >> >> The objective is to generate a self-signed cert and use it for just >> internal use with IMAPS dove...

Everyone, I have been working on a new installation of CentOS 5.0 on a x86_64 machine. The installation has gone well except for httpd. When I start httpd with LogLevel turned to debug all I get is an immediate failure with the following errors the logs: /var/log/httpd/error_log: [Sun Jul 22 13:00:31 2007] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) /var/log/ssl_error.log:

Hi Fosiul, Am 03.09.2016 um 14:59 schrieb Fosiul Alam via samba: > from Samba4 side i need this help, I can see that sshd has this option, can > you just tell me by default when i installed samba4 , did it create any > .crt file , if yes where? which i can use in sssd tls authenticaiton ? > Thanks for the help # ls -1 /usr/local/samba/private/tls/*.pem

...l.com">hanasaki@gmail.com</a> <<a href="mailto:hanasaki@gmail.com">hanasaki@gmail.com</a>> wrote:</div><div><br></div><div><br></div><div>Hello,</div><div><br></div><div>This is a selfsigned cert. Both of the below methods were used.</div><div><br></div><div>May I ask for 1. pointer to info setting up "intermediate certs" and</div><div>where the certfile goes?</div><div><br></div><div>The objective is t...

Hi Thanks to All. so i understand that i will have to use ca.pem from Clinet to authenticaiotn vis tls , is that right ? also, if i use default tls file which was created by samba4 installation, do i need to add them into smb.conf ? I can see the wiki say, if i create selfsigned then i will need add, but I am not sure if this is true for defautl .pem file ? bellow is smb.conf Thanks for the help # Global parameters [global] bind interfaces only = Yes interfaces = lo eth0 eth1 netbios name = xxxx realm = xx.xx workgroup = xxx...

Hello, I am trying to create a self-signed certificate for a sub-domain. Creating the certificate is not the problem. I used cacert.org to complete it. When I made the certificate, it was for the sub-domain but the certificate for the top-level domain is the certificate that appears. In the <VirtualHost> section for the sub-domain, I have pointed to the sub-domain key:

On Tue, 2004-07-27 at 19:08, David Marsh wrote: > Unfortunately, I don't know how to do this part! > Can anybody offer any advice? A short description on how I did this can be found at my web page: http://www.sm6rpz.se/mailserver.html I use Fedora Core 2, but I do not think that will matter, it should work for SuSE also I think. Lars -- Lars E. Pettersson <lars at homer.se>

...ME, Object Signing > X509v3 Key Usage: > Digital Signature, Non Repudiation, Key Encipherment > Netscape Comment: > > I know of important companies doing this mistake. > The second cert has to be one SIGNED by the first CA authority, not a > selfsigned one with CA fields "off" of false. > Said in other words: the second cert is the result or output of a CSR > (certificate signing request) signed by the CA cert. Yes, that is true, so why this is not so in case of /etc/pki/tls/misc/CA . All my generated server certificates sign...

Hi everyone, I have a basic SAMBA setup with a main AD DC ad1 and a backup AD DC ad2, running on Samba 4.5.16-Debian on Raspbian. I would now like to enable LDAPS so my users can authenticate in other non Samba services using Active Directory. From reading the documentation here: https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC I understand that for the most

On Mon, 13 Aug 2018, Blumenthal, Uri - 0553 - MITLL wrote: > Lack of time on the Open Source projects is understandable, and not uncommon. > > However, PKCS11 has been in the codebase practically forever - the ECC > patches that I saw did not alter the API or such. It is especially > non-invasive when digital signature is concerned. > > Considering how long those patches have

Hi, I am at a complete loss of ideas here: I have a - xen3.3.1 hypervisor compiled from source with - dom0 being 2.6.26-1-xen-amd64 kernel from debian/lenny repository with - windows 2008 64bit as hvm guest. I use the gplpv drivers 0.10.0.69 from James Harper. The included files (xenpci.sys and xennet.sys) are apparently test-signed, so applying test-signing as boot option does enable

...ow most things seem to work (rc12 on Mandriva 2007.0), I've been looking more thoroughly at the syslog file. I see a 'syscall failed' at the end of a normal timed poll from the client. I wonder what it means. Sorry for the layout, it is messed up by the cut and paste. I have created the selfsigned cert and key in the /etc/ssl/dovecot/[certs,private] directories. Egbert Jan Nov 8 21:31:39 dev dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Isecured^Ilip=192.168.1.10^Irip=192.168.1.13^Iresp=<hidden> Nov 8 21:31:41 dev dovecot: auth(default): pam(user at domain.tld,...

...t, so greetings to you all! I am seeking your help with SSL/TLS client authentication. I currently have the following setup: * Server: - Debian Squeeze (fully patched) - OpenSSL 0.9.8o - Dovecot v2.1.10 (Debian backport package from Wheezy) - SSL listener on port 993 with the Dovecot selfsigned certificate that was created during installation - Virtual users (user at domain.net) with password in passwd style file * Client: - Windows XP SP3 (fully patched) - Thunderbird 17.0 - IMAP account using "Normal password" authentication - Roundcube webmail (to...