similar to: Using pki/ssl/tls connection.

Displaying 20 results from an estimated 200 matches similar to: "Using pki/ssl/tls connection."

2017 Dec 15
2
Question about imap (expunge response)
(This is not neccesarily about dovecot, but rather IMAP protocol) At https://drive.google.com/open?id=1j3oa5jYeSdiPbgaihq02K-u_vHbZLJZQ is fetchmail log from my sessinon with polish email provider "Wirtualna Polska" As you can se fetchmail logged "* 1 EXPUNGE" as a response to "STORE" command. According to https://tools.ietf.org/html/rfc3501#section-7.4.1 EXPUNGE
2014 Nov 19
2
Connecting libvirt remotely using tls: TLS handshake failed : packet with unexpected length +gnutls_handhsake Error
Hi all, I am facing an error while connecting libvirt remotely using tls.. I have created CA, client and server certificates with RSA 1024 bit using Openssl. I am using debian linux flavor in both client and server. *Original Error:* (When trying to connect remote libvirt) virsh -c xen+tls://destinationipaddr/system error: failed to connect to the hypervisor error: authentication failed: TLS
2019 Nov 28
0
[linux.debian.user] Bug - but where
(This is repost of message sent to debian-user list + some additional data) my hw: --8<---------------cut here---------------start------------->8--- sudo inxi -GxxSM System: Host: alfa Kernel: 5.3.11+1+kjonca x86_64 bits: 64 compiler: gcc v: 9.2.1 Desktop: FVWM 2.6.8 dm: XDM Distro: Debian GNU/Linux bullseye/sid Machine: Type: Desktop
2017 Dec 18
0
Question about imap (expunge response)
Yeah, that smells bogus. You can't send the EXPUNGE right away, even if you did the EXPUNGE. As the server you're required to wait for a command which allows expunges to happen. I've double-checked the Cyrus IMAP server, and we check usinguid to decide if we can tellexpunge at the end of index_store - aka, only UID STORE will tell the client EXPUNGE responses. Unfortunately, this is
2018 Oct 11
1
Ask for little change :)
Is it possible, that dovecot-lmtp, has in inserted "Received:" header something about its version ie. instead: --8<---------------cut here---------------start------------->8--- Received: from alfa.kjonca by alfa.kjonca with LMTP id n1O7D5Q3v1toSQAApvcrCQ (envelope-from <envelope at from>) for <kjonca at localhost>; Thu, 11 Oct 2018 13:44:20 +0200
2019 Sep 30
2
sieve - segmentation fault
I tried to experiment with "index" extension and I found that, in case "0" sieve-filter segfaults. example code was: --8<---------------cut here---------------start------------->8--- if header :index 0 :last :regex "received" "some regex here" { fileinto "dedicated mailbox" ; } --8<---------------cut
2016 Nov 08
0
A lot of duplicate GUIDS.
Recently I have in logs a LOT of messages like this: [....] Nov 06 19:39:36 IMAP(kjonca): Error: mdbox /home/kjonca/Mail/1/storage: Duplicate GUID 13511 in m.1530:845670 (size=2622) and m.1371:1831730 (size=916) Nov 06 19:39:36 IMAP(kjonca): Error: mdbox /home/kjonca/Mail/1/storage: Duplicate GUID 13512 in m.1530:847414 (size=2274) and m.1371:1832476 (size=1069) Nov 06 19:39:36 IMAP(kjonca):
2023 Sep 10
2
Question about encryption and tls
(Posted few days ago on qemu group but no reactions) Do I understand correctly that ssl shoudl be configured independently for libvirt and each hypervisor? I asked because I configured libvirt connection as qemu+tls://bambus.kjonca/system?pkipath=... (and on bambus in /etc/libvirt/libvirtd.conf) I set key_file = ... cert_file = ... ca_file = ... But after connect and lauching (on bambus) vm I
2011 Mar 11
1
client certificate path hard coded?
Hi all, I'm trying to figure out how to get my desktop talking to two libvirt hosts using qemu+tls and I've read that virsh relies on hard coded paths to the certificates.. which seems to be true. Is there a way to tell virsh to use a different path to a certificate, or another way people solve this presently? Cheers, Ant -------------- next part -------------- An HTML attachment was
2011 Apr 08
1
Python API - setting client certificate path
Hi there, I'm trying to establish a TLS connection to libvirtd with certificates verification from a python script. My question is quite simple: is it possible to set the client certificate/keyfile path from within a python script? or it has to be in /etc/pki/libvirt/... Thanks in advance for any help Wojciech Gumularz
2015 Dec 27
3
sieve-filter crashes
I tried to post earlier, but something goes wrong. KJ kjonca at o2.pl (Kamil Jo?ca) writes: > I want to refilter my mails in inbox so I tried to use: > > sieve-filter -e -W -D -C -v ~/.dovecot.sieve INBOX > > on three messages I got: > > info: filtering: [Fri, 28 Dec 2012 15:40:33 -0500; 14399 bytes] `[SPAM] Keep Defective by Design fight...'. > sieve-filter(kjonca):
2010 Oct 21
3
Virt-v2v
Usual prologue: we're testing on CentOS 5.5, RHEL subscriptions purchased. Now trying to use virt-v2v to transfer Win2008 Server guest from ESXi host to KVM host. Have enabled SSH on ESXi host, and can connect using esx+ssh://esxhost, but procedure fails because nc isn't found on ESXi. Fair enough. BTW, ESXi looks like a radically cut down RH system (/etc/sysconfig being the give-away)?
2023 Sep 11
2
Question about encryption and tls
On Sun, Sep 10, 2023 at 01:00:21PM +0200, Kamil Jo?ca wrote: >(Posted few days ago on qemu group but no reactions) > >Do I understand correctly that ssl shoudl be configured independently >for libvirt and each hypervisor? It depends what you are asking about. There are various connections, each of you can configure separately. >I asked because I configured libvirt connection as
2014 Nov 19
0
Re: Connecting libvirt remotely using tls: TLS handshake failed : packet with unexpected length +gnutls_handhsake Error
I doubt whether there is any fixed algorithm given while generating certificates. I used RSA 1024 bit. On Wed, Nov 19, 2014 at 11:42 AM, Ajitha Robert <ajitharobert01@gmail.com> wrote: > > Hi all, > > I am facing an error while connecting libvirt remotely using tls.. I have created CA, client and server certificates with RSA 1024 bit using Openssl. I am using debian linux
2023 May 24
0
fails to start @boot - service-start-limit-hit
Hi guys. When I login to the system I find: ? UNIT??????????????????? LOAD?? ACTIVE SUB DESCRIPTION ? virtproxyd.service????? loaded failed failed Virtualization daemon ? virtproxyd-admin.socket loaded failed failed Libvirt proxy admin socket ? virtproxyd-ro.socket??? loaded failed failed Libvirt proxy local read-only socket ? virtproxyd-tls.socket?? loaded failed failed Libvirt proxy TLS
2020 May 04
2
virsh connect to xen:///system fails: "error: internal error: Unexpected driver type 'Xen' opened" ?
I'm setting up for libvirt remote access on a xend host. On the host, xl info | egrep "release|xen_version" release : 5.6.10-24.gde48f93-default xen_version : 4.13.0_12-lp151.700 systemctl --version systemd 234 I've installed rpm -qa libvirt-daemon-xen libvirt-daemon-xen-6.2.0-lp151.890.1.x86_64 libvirtd --version libvirtd (libvirt)
2012 Jun 27
0
Trouble connecting to XenServer HyperVisor with Java bindings
Hello, I am trying to use the libvirt Java bindings (version 0.4.7) with libvirt version 0.9.12 to connect to a XenServer hypervisor. Virsh is able to connect to my XenServer, but when I try to do the same thing in Java, it won't connect. Here is the debug output: 2012-06-26 19:48:52.259+0000: 26051: info : libvirt version: 0.9.12, package: 1.fc16 (Unknown, 2012-06-26-11:43:53, flynx)
2007 Jan 29
3
tool to manage a PKI
Hello, this is a little bit off-topic (even if it have to work on CentOS ;-) I'm looking for a tool to manage a small Public Key Infrastructure, with creation/revocation of certificates X.509, export in PKCS#12 format and have the ability to handle CSR (Certificate Signing Request). I've wrote my own script to perform it (openssl command line based): it's a good way to
2008 Nov 03
0
Monkeysphere: An OpenPGP-based PKI for OpenSSH
A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20081103/e9bffea8/attachment.bin
2012 Mar 07
0
CEBA-2012:0357 CentOS 6 pki-core Update
CentOS Errata and Bugfix Advisory 2012:0357 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0357.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4a6b504a592f9bb07ddf135d2a518205ab3cf4fd143ad374ec58693e2bf4fb07 pki-ca-9.0.3-21.el6_2.noarch.rpm