I have enrolled some certificates from my own ca, to use to a couple of different services, like FTP, WEB, Mail etc. All these certificates comes from the same CA (my own), and I have created a root CA. But is it possible to import this root CA to the whole system, so I do not have to import the certificate or root CA to the different applications like iceweasel/firefox, chrome, icedove, filezilla etc.
View 2 RepliesI am fairly clueless when it comes to open vpn configuration file. Though I should have some understanding to execute the fix if it is available.
I have a ovpn file that is created by my organization (so theoretically there should be nothing wrong with it) containing not only the typical connection information, but also my CA key, certerficate/Public and certificate/Private key. I was able to locate these keys using the standard text editors.
When I follow the procedure to import (Right click on Internet Icon --> Edit Connection --> VPN Tab --> Import) none of my keys were imported (perhaps the import is not complete). I think because of the import failure I was not able to click ok and create the connection.
Is there a method to get around this and get it working? I have been looking for existing solution online but I was not able to find any similar cases with mine.
I run a web server on Fedora 12, principally using Apache, MySQL, and PHP. I host a variety of sites, one of which is a family website that contains semi-sensitive personal data for several hundred extended family members, who all have access to the database-driven site.
Until now, I have been using a self-signed SSL certificate to encrypt the data as it is read and written back and forth from my database. Family members have simply had to put up with clicking past certificate warnings as they enter the site, as most browsers flag self-signed certificates as bad. It hasn't really been that much of a bother, but I'd love to do it more professionally. I have looked into buying SSL certificates, but it's a site I host for free and would rather find a cheap or free alternative if possible.
So I'm just fishing for ideas to work with. What are some alternatives to using SSL certificates for moderately strong website encryption? So far, I run only one host on the domain, but may eventually need encryption that would support multiple hosts. Or does anybody know a way to make self-signed certificates work on most popular browsers without being flagged as suspicious?
i am using red hat5 n i want to create X.509 certificates for ipsec vpn help me in creating certificates, not able 2 create certificates guide me ehere is the location for certificates.
View 1 Replies View RelatedI'm trying to install Debian Jessie, but the installation keeps failing when installing the ca-certificates package and then asks for a media change to the disk that is already in the drive, and keeps asking even though it's already in the drive.
View 0 Replies View RelatedI've just bought a Linksys WRT610N router and I ran through various problems during the configuration, that brought some questions.Here is what I did to configure it (following the short manual that I got with the router)1. plugged the router in my modem and in my computer via ethernet cables2. entered its IP address (given on the manual) on my browser and logged in with the factory login3. changed the login passwordAfter this the problems that I have encountered are that:I set up the administration of the router to be disabled via wireless and enabled locally via https, but when saving those settings I either lost the connection (the browser telling me the server was not accessible) or asked confirm a security certificate after being (logically) redirected to the https version of the administration pageafter trying to loggin again, I wasn't able to login via https but only via http even if after logging those parameters were still as I set them (wireless administrative login disabled and local administrative login enabled only via https)
via https when getting something else than "the server is not responding or could be too busy", I was prompted the untrusted connection site, saying that"192.168.1.1 uses an invalid security certificate.The certificate is not trusted because it is self-signed.The certificate is only valid for Linksys.The certificate expired on 01/01/71 01:21. The current time is 19/04/11 22:56.(Error code:sec_error_expired_issuer_certificate)"I noticed that after loosing the connection and not being able to reach the router either with http or https, the only way I was then able to reconnect to it was to go into (I am using firefox 4 on squeeze) edit > preferences > advanced > encryption > view certificates > servers and delete the linksys certificate
It appears that on Debian (Squeeze) that when I install Postfix MTA, it looks like it uses a default Debian SSL certificate:
root@mail:~# postconf -n | grep -i snakeoil
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
My question is it safe to remove these and re-create my own with openssl?
cd /etc/ssl/certs
openssl req -new -x509 -newkey rsa:2048 -days 3650 -keyout mail.key -out mail.crt
openssl rsa -in mail.key -out mail.key
mv mail.key /etc/ssl/private
Will this impact my Debian system any or will it work fine? Do you guys have any experience with this? I would rather try generating them myself and change it from 1024 to 2048.
I have my company's CA root.crt certificate and I would like to import into openSUSE 11.2 so every application could trust this authority. Is there any instruction for this procedure?
You know, something like you can do in Windows: just click certificate and there is a button "Install certificate"
Where is system certificate store in openSUSE?
The whole day was more or less spent reinstalling a basic Gnome Ubuntu system. Everything went swimmingly until I started with the XBMC part of the installation. After wrestling with PPAs and apt-get for hours I finally got it installed, but then it all turned awkward in a hurry. It simply refused to start up. I clicked the icon and nothing happened for a good few seconds. The screen then flickered black for an instant, but after that nothing. I started from a terminal and it showed an error message saying it couldn't import Python's os and shutil modules. I found that mighty strange since both modules are part of the Python Standard Library.
Finally, in a bizarre twist, it turns out this doesn't seem to be a XBMC problem, suddenly apt-get started complaining too. TL,DR: I (nor the system) can't import any Standard Library modules in Python in Ubuntu! Is this a path problem? Or have I actually managed to uninstall some vital python packages, if so which ones? I am running Ubuntu 10.10, but I don't think this is necessarily a Ubuntu specific problem. Here are some dumps to show the error messages: (I forgot to copy the XBMC error message, but it looked exactly the same as these below, i.e., it couldn't import the os module) First from apt-get:
Code:
tv@tv:/usr/lib$ sudo apt-get autoremove
[sudo] password for tv:
Reading package lists... Done
Building dependency tree
[code]....
I have a database in SQL Server 2005 in my local Windows System and I want to import this database to my linux (ubuntu) server remotely using putty.
View 5 Replies View RelatedHow can I import in OS level (system wide) the CAcert root certificate and the relevant class 3?
View 3 Replies View Relatedhow to import Yast to Debian. I need to know the idea of creating Yast. That is, Yast is designed so that each function has its own konfiguratsioony file whose name is invoked in the code when working with this function. And every function has a number of konfiguratsioonyh files?
View 5 Replies View RelatedSymaptic Package Manager doesn't have an import key option, How do I add repositories with the keys?
View 2 Replies View RelatedRunning Testing. How do I import (wav or mp3) to play at start up/shutdown?
View 2 Replies View RelatedI have a directory of about 1500 tagged mp3s (the directory contains a sub-dir for each artist which contains a sub-dir for each album which contains mp3s). What I am looking for at the moment is a player that allows me to import this directory once and then allows me to navigate the mp3 by tag. I have looked at audacious and abraca but either these don't have such a feature. How to me how to achieve what I need? I use 64-bit squeeze
View 4 Replies View RelatedI'm working in a school and we have a Apple server, we have many problem with it. So, I would install a linux server instead.
Anyway, there is just one big problem (or I miss a simple tip to do it )
We have 1300 students. If I must create them one by one, that will take a lot of time. Actually with the apple server, we can go on a web interface & import an excel list with theses columns :
"Name", "Login", "Password", "Class", "Group", "HDD Space", "Print quota", "Internet access or not", etc ...
Due to this tool, I can upload an excel files with my 1300 students & a couple hours after, they have an account with a personal space & a shared space with their class.
My question is : This tool exist on Debian/Linux world ?
I want to use LaTeX text in Inkscape. Just a simple thing like $$x_i$$. There is an extension called textext with installation manual. Basically one have to copy four files into /usr/share/inkscape/extensions and one more option appears in Extensions menu. So far so good.
If I try to use that extension I get an error message:
Traceback (most recent call last):
File "/usr/share/inkscape/extensions/inklatex.py", line 7, in <module>
import xml.dom.ext.reader.Sax2
ImportError: No module named ext.reader.Sax2
Googling you can find several topics about that error from 2004 or earlier saying to install PyXML and providing a link to it, where it is said "Out of date. Do not use it." I have tried to build that PyXML though -- without success (lots of compile errors).
I've downloaded configuration files for my VPN, Kovurt, and they don't have a .ovpn file extension. Further, when I tried to enter the information manually (using this guide), I saw that the files only include the <ca> tags, and no <cert>, <key> or <tls-auth> tags.
Here is the content of one of the config files, simply named 'Tokyo' with no extension. (adding .ovpn didn't work either):
Code: Select allclient
dev tun
proto udp
remote 50.31.255.86 443
resolv-retry infinite
nobind
[Code] ....
I have an open ticket with Kovurt asking for the other info, but I know already that they don't have much in the way of documentation or support for Linux.
Is there a way to import my contacts list into this (new for me) email program?
View 1 Replies View RelatedI have installled eyeD3. It works on the commandline (bash). But I want use it in python3.
I did get this error:
Code: Select all>>> import eyed3
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
ImportError: No module named eyed3
Why cant I use this module for reading and writing tag information to mp3 files?
I'm on Debian Wheezy using Shotwell 0.12.3. I have a bunch of .MOV videos that I want to import to Shotwell. I choose import from folder and select copy pictures. The import proceeds and shotwell tells med the .MOV (and some .jpg:s) are imported. The pictures are imported with no problem and placed in an event 2014-10-19 as expected. But videos are placed in an event dated 2004-01-01 and not in 2014-10-19 where they belong. Obviously, Shotwell does not use the files last edit date. I though maybe there was some bad dates in the metadata and opened the files in both Totem and VLC player but concluded there is no such metadata available (as far as I can tell).So how does Shotwell determine the date for .MOV files? Where does 2004-01-01 come from? Seems random.
Then, I tried dragging all movies in Shotwell to the event where it really belongs. That is, where the recently imported photos got placed 2014-10-19. But instead of the videos beeing moved into that correct event, now all photos appears in the 2004-01-01 event.Undo that last step and close Shotwell. Then, instead I manually (in nautilus) copy the .mov files to the 2014-10-19 folder where the picures resides. Open Shotwell again which detects something happened and starts import the videos again. Unfortunatley they still show up in the 2004-01-01 event
Another wierd thing is if I manually (in nautilus) move the Shotwell 2004-01-01 folder away from the Pictures folder (out of reach for Shotwell). Then when I re-open Shotwell the event does not appear anymore - as expected. But If I try to once again import the videos, Shotwell tells me all videos are duplicates and does not import them!?! In other words, manually removing a folder from Shotwell mess up the database. And that database is obviously not used to populate the events tree in the gui.How do I get my video to appear in the correct event? Alternatively; is there a photo/video library in Debian that actually works?
after I had to rebuild the rpmdb because of some errors within it, i can't import any gpg-keys with the command "rpm --import". All I get is this:
[Code]....
I am real tired of getting those SSL errors when I go to my intranet. So I am now trying to generate my own SSL certs (go me). I have easy-rsa installed for my openvpn can I use that so sign the csr?
View 2 Replies View RelatedI've installed PostgreSQL on Arch Linux & also self generated self signed certificates in /etc/ssl/ directory. My PostgreSQL 'data' directory is /var/lib/postgres/data & I've edited my postgresql.conf file to use SSL however I'm having permission / access problems starting my database using SSL. It can't access the certificates and errors out when I try and start the database engine:
Code:
LOG: autovacuum launcher shutting down
LOG: shutting down
LOG: database system is shut down
FATAL: could not load server certificate file "server.crt": No such file or directory
code....
I don't know what I need to chown or chmod in order to get PostgreSQL to access my self signed certificates.
Is it possible to import an xorg.conf file from Debian to Fedora and have it work? The reason for this is that I have an older monitor that only offers 800x600 as the maximum resolution.
View 2 Replies View RelatedI have the following problem with konqueror. Eveytime when I am trying to enter https://localhost:10000 (this is webmin) or https://localhost:631, konqueror asks me in a popup the following (translated from german):
"The authentification of the server has failed.The certificate does not suite to the server. The certificate has not been signed by a trustable authentification authority"
Then I press "continue". Then the next popup appears asking me: "Do you want to always accept this certificate without any request" And the possible buttons are "always" or "only this session". The problem is that I always press on "always" but obviously konqueror is not remembering this certificate since I have to press all the buttons a hundred times in the ongoing session and every new session. In firefox, I was only asked once and the certificate was stored in list. Does anyone know how to fix this problem in konqueror??
How can I add self-signed certificates to e.g: Google Chrome under Linux (from the command line)?
View 1 Replies View RelatedI just installed Citrix to my computer but when I try to use it I get an error message saying:
"You have not chosen to trust "Equifax Secure Global eBusiness CA-1", the issuer of the server's security certificate (SSL error 61)."
So I downloaded the certificates to allow me to use it but I am unable to copy them to the /usr/lib/ICAClient/keystore/cacerts/ directory, I cant download them straight to that folder either. I have administrative privileges but still I cant do anything with the files in those folders other than look at them. How to put files in those folders?
Is it possible to set up an OpenVPN without having to issue keys or certificates.All tutorials I found seem to use them.
I want just a basic username/password approach - I don't care that much about security obviously but is it at all possible?
Does anyone know how to configure an SSL cert with GoDaddy? On the following squid page it seems to use x509 and PEM format for everything. GoDaddy seems want CSR files to issue the cert. The x509 & PEM combo don't seem to generate these CSR files in the correct format. Does anyone know the openssl commands to generate the files and the config line(s) to put in squid.conf?
I started from this wiki: [URL]
I also tried following this godaddy wiki, but it was for apache and not squid [URL]