Displaying 20 results from an estimated 200 matches similar to: "Using pki/ssl/tls connection."
2017 Dec 15
2
Question about imap (expunge response)
(This is not neccesarily about dovecot, but rather IMAP protocol)
At https://drive.google.com/open?id=1j3oa5jYeSdiPbgaihq02K-u_vHbZLJZQ
is fetchmail log from my sessinon with polish email provider "Wirtualna
Polska"
As you can se fetchmail logged "* 1 EXPUNGE" as a response to "STORE"
command.
According to https://tools.ietf.org/html/rfc3501#section-7.4.1
EXPUNGE
2014 Nov 19
2
Connecting libvirt remotely using tls: TLS handshake failed : packet with unexpected length +gnutls_handhsake Error
Hi all,
I am facing an error while connecting libvirt remotely using tls.. I
have created CA, client and server certificates with RSA 1024 bit
using Openssl. I am using debian linux flavor in both client and
server.
*Original Error:*
(When trying to connect remote libvirt)
virsh -c xen+tls://destinationipaddr/system
error: failed to connect to the hypervisor
error: authentication failed: TLS
2019 Nov 28
0
[linux.debian.user] Bug - but where
(This is repost of message sent to debian-user list + some additional
data)
my hw:
--8<---------------cut here---------------start------------->8---
sudo inxi -GxxSM
System: Host: alfa Kernel: 5.3.11+1+kjonca x86_64 bits: 64 compiler: gcc v: 9.2.1 Desktop: FVWM 2.6.8 dm: XDM
Distro: Debian GNU/Linux bullseye/sid
Machine: Type: Desktop
2017 Dec 18
0
Question about imap (expunge response)
Yeah, that smells bogus. You can't send the EXPUNGE right away, even if
you did the EXPUNGE. As the server you're required to wait for a
command which allows expunges to happen. I've double-checked the Cyrus
IMAP server, and we check usinguid to decide if we can tellexpunge at
the end of index_store - aka, only UID STORE will tell the client
EXPUNGE responses.
Unfortunately, this is
2018 Oct 11
1
Ask for little change :)
Is it possible, that dovecot-lmtp, has in inserted "Received:" header
something about its version ie.
instead:
--8<---------------cut here---------------start------------->8---
Received: from alfa.kjonca by alfa.kjonca with LMTP id
n1O7D5Q3v1toSQAApvcrCQ (envelope-from <envelope at from>)
for <kjonca at localhost>; Thu, 11 Oct 2018 13:44:20 +0200
2019 Sep 30
2
sieve - segmentation fault
I tried to experiment with "index" extension and I found that, in case
"0" sieve-filter segfaults.
example code was:
--8<---------------cut here---------------start------------->8---
if header :index 0 :last :regex "received" "some regex here" { fileinto "dedicated mailbox" ; }
--8<---------------cut
2016 Nov 08
0
A lot of duplicate GUIDS.
Recently I have in logs a LOT of messages like this:
[....]
Nov 06 19:39:36 IMAP(kjonca): Error: mdbox /home/kjonca/Mail/1/storage: Duplicate GUID 13511 in m.1530:845670 (size=2622) and m.1371:1831730 (size=916)
Nov 06 19:39:36 IMAP(kjonca): Error: mdbox /home/kjonca/Mail/1/storage: Duplicate GUID 13512 in m.1530:847414 (size=2274) and m.1371:1832476 (size=1069)
Nov 06 19:39:36 IMAP(kjonca):
2023 Sep 10
2
Question about encryption and tls
(Posted few days ago on qemu group but no reactions)
Do I understand correctly that ssl shoudl be configured independently
for libvirt and each hypervisor?
I asked because I configured libvirt connection as
qemu+tls://bambus.kjonca/system?pkipath=...
(and on bambus in /etc/libvirt/libvirtd.conf) I set
key_file = ...
cert_file = ...
ca_file = ...
But after connect and lauching (on bambus) vm I
2011 Mar 11
1
client certificate path hard coded?
Hi all,
I'm trying to figure out how to get my desktop talking to two libvirt hosts using qemu+tls and I've read that virsh relies on hard coded paths to the certificates.. which seems to be true.
Is there a way to tell virsh to use a different path to a certificate, or another way people solve this presently?
Cheers,
Ant
-------------- next part --------------
An HTML attachment was
2011 Apr 08
1
Python API - setting client certificate path
Hi there,
I'm trying to establish a TLS connection to libvirtd with certificates
verification from a python script. My question is quite simple:
is it possible to set the client certificate/keyfile path from within a
python script? or it has to be in /etc/pki/libvirt/...
Thanks in advance for any help
Wojciech Gumularz
2015 Dec 27
3
sieve-filter crashes
I tried to post earlier, but something goes wrong.
KJ
kjonca at o2.pl (Kamil Jo?ca) writes:
> I want to refilter my mails in inbox so I tried to use:
>
> sieve-filter -e -W -D -C -v ~/.dovecot.sieve INBOX
>
> on three messages I got:
>
> info: filtering: [Fri, 28 Dec 2012 15:40:33 -0500; 14399 bytes] `[SPAM] Keep Defective by Design fight...'.
> sieve-filter(kjonca):
2010 Oct 21
3
Virt-v2v
Usual prologue: we're testing on CentOS 5.5, RHEL subscriptions purchased.
Now trying to use virt-v2v to transfer Win2008 Server guest from ESXi host to KVM host.
Have enabled SSH on ESXi host, and can connect using esx+ssh://esxhost, but procedure fails because nc isn't found on ESXi. Fair enough. BTW, ESXi looks like a radically cut down RH system (/etc/sysconfig being the give-away)?
2023 Sep 11
2
Question about encryption and tls
On Sun, Sep 10, 2023 at 01:00:21PM +0200, Kamil Jo?ca wrote:
>(Posted few days ago on qemu group but no reactions)
>
>Do I understand correctly that ssl shoudl be configured independently
>for libvirt and each hypervisor?
It depends what you are asking about. There are various connections,
each of you can configure separately.
>I asked because I configured libvirt connection as
2014 Nov 19
0
Re: Connecting libvirt remotely using tls: TLS handshake failed : packet with unexpected length +gnutls_handhsake Error
I doubt whether there is any fixed algorithm given while generating
certificates. I used RSA 1024 bit.
On Wed, Nov 19, 2014 at 11:42 AM, Ajitha Robert <ajitharobert01@gmail.com>
wrote:
>
> Hi all,
>
> I am facing an error while connecting libvirt remotely using tls.. I have created CA, client and server certificates with RSA 1024 bit using Openssl. I am using debian linux
2023 May 24
0
fails to start @boot - service-start-limit-hit
Hi guys.
When I login to the system I find:
? UNIT??????????????????? LOAD?? ACTIVE SUB DESCRIPTION
? virtproxyd.service????? loaded failed failed
Virtualization daemon
? virtproxyd-admin.socket loaded failed failed Libvirt proxy
admin socket
? virtproxyd-ro.socket??? loaded failed failed Libvirt proxy
local read-only socket
? virtproxyd-tls.socket?? loaded failed failed Libvirt proxy
TLS
virsh connect to xen:///system fails: "error: internal error: Unexpected driver type 'Xen' opened" ?
2020 May 04
2
virsh connect to xen:///system fails: "error: internal error: Unexpected driver type 'Xen' opened" ?
I'm setting up for libvirt remote access on a xend host.
On the host,
xl info | egrep "release|xen_version"
release : 5.6.10-24.gde48f93-default
xen_version : 4.13.0_12-lp151.700
systemctl --version
systemd 234
I've installed
rpm -qa libvirt-daemon-xen
libvirt-daemon-xen-6.2.0-lp151.890.1.x86_64
libvirtd --version
libvirtd (libvirt)
2012 Jun 27
0
Trouble connecting to XenServer HyperVisor with Java bindings
Hello,
I am trying to use the libvirt Java bindings (version 0.4.7) with libvirt
version 0.9.12 to connect to a XenServer hypervisor. Virsh is able to
connect to my XenServer, but when I try to do the same thing in Java, it
won't connect.
Here is the debug output:
2012-06-26 19:48:52.259+0000: 26051: info : libvirt version: 0.9.12,
package: 1.fc16 (Unknown, 2012-06-26-11:43:53, flynx)
2007 Jan 29
3
tool to manage a PKI
Hello,
this is a little bit off-topic (even if it have to work on CentOS ;-)
I'm looking for a tool to manage a small Public Key Infrastructure, with
creation/revocation of certificates X.509, export in PKCS#12 format and
have the ability to handle CSR (Certificate Signing Request).
I've wrote my own script to perform it (openssl command line based):
it's a good way to
2008 Nov 03
0
Monkeysphere: An OpenPGP-based PKI for OpenSSH
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 826 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20081103/e9bffea8/attachment.bin
2012 Mar 07
0
CEBA-2012:0357 CentOS 6 pki-core Update
CentOS Errata and Bugfix Advisory 2012:0357
Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0357.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
4a6b504a592f9bb07ddf135d2a518205ab3cf4fd143ad374ec58693e2bf4fb07 pki-ca-9.0.3-21.el6_2.noarch.rpm