Re: F28 help with firfox-tls-proxy

2018-11-06 Thread Ed Greshko
On 11/6/18 10:16 PM, Robert Moskowitz wrote: > and then i 1st went to spectrum.ieee.org then back to mmn.com and it worked. > > i am going to have to set up to one of the free vpns > > what client should i install NetworkManager should have all you need.  Depends on the VPN.  My VPN is openVPN b

Re: F28 help with firfox-tls-proxy

2018-11-06 Thread Robert Moskowitz
On 11/6/18 7:23 AM, Robert Moskowitz wrote: On 11/5/18 8:05 PM, Samuel Sieb wrote: On 11/5/18 11:23 AM, Robert Moskowitz wrote: On 11/5/18 12:29 PM, Samuel Sieb wrote: What is the message from Firefox for that one?  It doesn't redirect to https, so there shouldn't be any ssl messages. it

Re: F28 help with firfox-tls-proxy

2018-11-06 Thread Robert Moskowitz
On 11/5/18 8:05 PM, Samuel Sieb wrote: On 11/5/18 11:23 AM, Robert Moskowitz wrote: On 11/5/18 12:29 PM, Samuel Sieb wrote: What is the message from Firefox for that one?  It doesn't redirect to https, so there shouldn't be any ssl messages. it went very quickly to https. just now, i opene

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Samuel Sieb
On 11/5/18 11:23 AM, Robert Moskowitz wrote: On 11/5/18 12:29 PM, Samuel Sieb wrote: What is the message from Firefox for that one?  It doesn't redirect to https, so there shouldn't be any ssl messages. it went very quickly to https. just now, i opened a new FF window, typed in the http://iet

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Robert Moskowitz
On 11/5/18 12:29 PM, Samuel Sieb wrote: On 11/5/18 9:00 AM, Robert Moskowitz wrote: the google test works fine. Did it redirect to https successfully? yes it did. http:/ietf.org does not What is the message from Firefox for that one?  It doesn't redirect to https, so there shouldn'

Claws Mail 3.17.1 with experimental TLS SNI support

2018-11-05 Thread Michael Schwendt
For Fedora 29 and Rawhide: https://copr.fedorainfracloud.org/coprs/mschwendt/claws-mail-testing/ If upgrading to these packages, be sure to upgrade also "libetpan" and not only the "claws-mail*" packages. As a side-note, the Dillo based HTML rendering plugin package "claws-mail-plugins-dillo" is

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread vipul kumar via users
Use Bitmask VPN ( https://bitmask.net/en/install ). And connect it through their firewall. Sent with ProtonMail Secure Email. ‐‐‐ Original Message ‐‐‐ On Monday, November 5, 2018 7:24 PM, Robert Moskowitz wrote: > greetings > > i am in a hospital bed pecking left handed from being hi

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Joe Zeff
On 11/05/2018 10:23 AM, Robert Moskowitz wrote: On 11/5/18 12:11 PM, Joe Zeff wrote: On 11/05/2018 10:00 AM, Robert Moskowitz wrote: the google test works fine. http:/ietf.org does not shouldn't that be http://ietf.org with two slashes, not one? i typed it wrong in the email.  not in th

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Samuel Sieb
On 11/5/18 9:00 AM, Robert Moskowitz wrote: the google test works fine. Did it redirect to https successfully? http:/ietf.org does not What is the message from Firefox for that one? It doesn't redirect to https, so there shouldn't be any ssl messages. ___

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Robert Moskowitz
On 11/5/18 12:11 PM, Joe Zeff wrote: On 11/05/2018 10:00 AM, Robert Moskowitz wrote: the google test works fine. http:/ietf.org does not shouldn't that be http://ietf.org with two slashes, not one? i typed it wrong in the email.  not in the browser url.  :) _

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Joe Zeff
On 11/05/2018 10:00 AM, Robert Moskowitz wrote: the google test works fine. http:/ietf.org does not shouldn't that be http://ietf.org with two slashes, not one? ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Robert Moskowitz
On 11/5/18 11:34 AM, Samuel Sieb wrote: On 11/5/18 5:54 AM, Robert Moskowitz wrote: Secure Connection Failed The connection to the server was reset while the page was loading. The page you are trying to view cannot be shown because the authenticity of the received data could not be ver

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Samuel Sieb
On 11/5/18 5:54 AM, Robert Moskowitz wrote: Secure Connection Failed The connection to the server was reset while the page was loading.     The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.     Please contact the website own

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Robert Moskowitz
my samsung galaxy s3 can access ietf.org over hospital wifi. thus this is a f28/FF issue On 11/5/18 9:40 AM, Ed Greshko wrote: On 11/5/18 10:26 PM, Robert Moskowitz wrote: never used a free vpn.  Can you give me some instructions? I don't have any recommendations for a free one.  I use one t

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Ed Greshko
On 11/5/18 10:26 PM, Robert Moskowitz wrote: > never used a free vpn.  Can you give me some instructions? I don't have any recommendations for a free one.  I use one that I pay to use. Does the proxy allow you to do google searches? Or, if you can use another browser, Opera includes a free VPN s

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Robert Moskowitz
On 11/5/18 9:09 AM, Ed Greshko wrote: On 11/5/18 9:54 PM, Robert Moskowitz wrote: i am in a hospital bed pecking left handed from being hit by a car, instead of in bankok for ietf meeting. this hospital's firewall/proxy is giving firefox problems connecting to ietf.org Secure Connection Fai

Re: F28 help with firfox-tls-proxy

2018-11-05 Thread Ed Greshko
On 11/5/18 9:54 PM, Robert Moskowitz wrote: > i am in a hospital bed pecking left handed from being hit by a car, > instead of in bankok for ietf meeting. > > this hospital's firewall/proxy is giving firefox problems connecting to > ietf.org > > > Secure Connection Failed > > The connection to the

F28 help with firfox-tls-proxy

2018-11-05 Thread Robert Moskowitz
greetings i am in a hospital bed pecking left handed from being hit by a car, instead of in bankok for ietf meeting. this hospital's firewall/proxy is giving firefox problems connecting to ietf.org Secure Connection Failed The connection to the server was reset while the page was loading.

Re: Correction -Firefox/TLS Handshake -

2017-08-15 Thread Bob Goodwin
On 08/15/17 16:31, Tim wrote: Working fine here. Perhaps at the time you tried it, whatever Google server you were connecting to, is having a problem. [tim@fluffy ~]$ dig google.com +short 216.58.196.142 That's the IP that I'm currently finding Google at. + 216.58.196.142 Worked immediately,

Re: Firefox/TLS Handshake -

2017-08-15 Thread Bob Goodwin
weather, ISP usage, etc. The problem accessing google remained. I tried an alternate, dudkduckgo, and it does not report any TLS handshake action at all. My Firefox, pre-update was 54.0.1 (64-bit), and working fine. Post update, is 55.0.1 (64-bit), and still working fine. Including with

Re: Firefox/TLS Handshake -

2017-08-15 Thread Joe Zeff
On 08/15/2017 01:48 PM, Patrick O'Callaghan wrote: On Tue, 2017-08-15 at 13:37 -0700, Joe Zeff wrote: ps aux | grep $1 | grep -v grep Why not use pgrep? *Shrug!* Just a matter of personal preference, just as the switches for ps are, plus the fact that mine gives the entire output from ps,

Re: Firefox/TLS Handshake -

2017-08-15 Thread Patrick O'Callaghan
On Tue, 2017-08-15 at 13:37 -0700, Joe Zeff wrote: > ps aux | grep $1 | grep -v grep Why not use pgrep? poc ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Firefox/TLS Handshake -

2017-08-15 Thread Joe Zeff
On 08/15/2017 01:25 PM, Tim wrote: I've found that if Firefox is running while it's updated, it soon goes into an unusable condition. Close all open Firefox windows, check there's no processes still open (downloads, background doo-dads, etc). And for the big fight, if it's not quitting, run "kil

Re: Correction -Firefox/TLS Handshake -

2017-08-15 Thread Tim
Just found your follow-up message, after I'd replied to the first one. Allegedly, on or about 15 August 2017, Bob Goodwin sent: > When I address Firefox to https://www.google.com I get a message at the > bottom of my screen "Performing a TLS handshake to www.google.com"

Re: Firefox/TLS Handshake -

2017-08-15 Thread Tim
Allegedly, on or about 15 August 2017, Bob Goodwin sent: > When I address Firefox to https://www.firefox.com I get a message at > the bottom of y screen "Performing a TLS handshake to www.google.com" > and it looks like nothing m,ore than that is ever going to happen ... I

Re: Correction -Firefox/TLS Handshake -

2017-08-15 Thread Bob Goodwin
On 08/15/17 15:17, Joe Zeff wrote: It can do it wherever it wants, but that's not the response I expect, normally I get a window to enter some search terms in, as it is it does nothing but display an "error" message." It has always just worked until now, something has changed and it may be my I

Re: Correction -Firefox/TLS Handshake -

2017-08-15 Thread Joe Zeff
On 08/15/2017 11:22 AM, Bob Goodwin wrote: It can do it wherever it wants, but that's not the response I expect, normally I get a window to enter some search terms in, as it is it does nothing but display an "error" message." It has always just worked until now, something has changed and it may

Re: Correction -Firefox/TLS Handshake -

2017-08-15 Thread Bob Goodwin
On 08/15/17 14:03, Walter H. wrote: On 15.08.2017 19:54, Bob Goodwin wrote: When I address Firefox to https://www.google.com I get a message at the bottom of my screen "Performing a TLS handshake to www.google.com" and it looks like nothing more than that is ever going

Re: Correction -Firefox/TLS Handshake -

2017-08-15 Thread Walter H.
On 15.08.2017 19:54, Bob Goodwin wrote: When I address Firefox to https://www.google.com I get a message at the bottom of my screen "Performing a TLS handshake to www.google.com" and it looks like nothing more than that is ever going to happen ... whereelse do you expect to perfo

Correction -Firefox/TLS Handshake -

2017-08-15 Thread Bob Goodwin
When I address Firefox to https://www.google.com I get a message at the bottom of my screen "Performing a TLS handshake to www.google.com" and it looks like nothing more than that is ever going to happen ... Is this some new feature I need to deal with, I believe there was a Firef

Firefox/TLS Handshake -

2017-08-15 Thread Bob Goodwin
When I address Firefox to https://www.firefox.com I get a message at the bottom of y screen "Performing a TLS handshake to www.google.com" and it looks like nothing m,ore than that is ever going to happen ... Is this some new feature I need to deal with, I believe there was a Firef

[389-users] Re: Replication + SSLCLIENTAUTH failure: setup_ol_tls_conn - failed: unable to create new TLS context

2016-03-30 Thread Rich Megginson
On 03/30/2016 06:45 PM, Graham Leggett wrote: On 31 Mar 2016, at 12:25 AM, Graham Leggett wrote: [30/Mar/2016:17:19:19 +] setup_ol_tls_conn - failed: unable to create new TLS context [30/Mar/2016:17:19:19 +] slapi_ldap_bind - Error: could not configure the server for cert auth

Re: F21 - NetworkManager "hotspot.txt" TLS Failure Message

2015-05-12 Thread Tom Rivers
with 'Peer failed to perform TLS handshake'. I know this relates to the "Captive Portal" feature, https://fedorahosted.org/fesco/ticket/1337, but what I don't understand is why the TLS handshake is failing. For example, wget works without issue to retrieve the file:

F21 - NetworkManager "hotspot.txt" TLS Failure Message

2015-05-08 Thread Tom Rivers
Good morning! Since shortly after 4PM EDT on May 5, 2015 I have been seeing the following message in my system logs every 5 minutes: NetworkManager[768]: Connectivity check for uri 'https://fedoraproject.org/static/hotspot.txt' failed with 'Peer failed to perform TLS hands

Re: tls

2013-09-10 Thread Reindl Harald
Am 09.09.2013 20:22, schrieb Patrick Dupre: >> - Original Message - >> From: Matthew J. Roth >> Sent: 09/09/13 04:55 PM >> To: Community support for Fedora users >> Subject: Re: tls >> >> Patrick Dupre wrote: >>> >>> ssh w

Re: tls

2013-09-10 Thread Matthew J. Roth
Patrick Dupre wrote: > > I probably need to learn more how to use sftp for having best secure transfers > using my own key. Patrick, All you need to know is the fingerprint of the key on the remote computer. It is used to authenticate that you are connecting to the computer you intended to. Ei

Re: tls

2013-09-09 Thread Patrick Dupre
> - Original Message - > From: Matthew J. Roth > Sent: 09/09/13 11:24 PM > To: Community support for Fedora users > Subject: Re: tls > > >>> Patrick Dupre wrote: > >>> > >>> ssh works fine. However, I have a possible explaination.

Re: tls

2013-09-09 Thread Matthew J. Roth
>>> Patrick Dupre wrote: >>> >>> ssh works fine. However, I have a possible explaination. >>> This machine is behind a firewall and to be able to make ssh, I >>> add to ask to have the ssh port open. Probably, the ftp port is >>> closed.

Re: tls

2013-09-09 Thread Patrick Dupre
> - Original Message - > From: Matthew J. Roth > Sent: 09/09/13 04:55 PM > To: Community support for Fedora users > Subject: Re: tls > > Patrick Dupre wrote: > > > > ssh works fine. However, I have a possible explaination. > > This machine is b

Re: tls

2013-09-09 Thread Reindl Harald
rver >>> >>> ssh works fine. However, I have a possible explaination. >>> This machine is behind a firewall and to be able to make ssh, I >>> add to ask to have the ssh port open. Probably, the ftp port is >>> closed. Should I ask to have it open to use ssl/t

Re: tls

2013-09-09 Thread Reindl Harald
Am 07.09.2013 16:28, schrieb Patrick Dupre: > Hello, > > Thank. > Port 990, is the default (filezilla). says who? https://wiki.filezilla-project.org/SSL/TLS Client Setup For a client to connect to a server using SSL, then the host for that connection needs to be set to FTPS.

Re: tls

2013-09-09 Thread Reindl Harald
Am 07.09.2013 01:09, schrieb Patrick Dupre: >> - Original Message - >> From: Reindl Harald >> Sent: 09/07/13 12:48 AM >> To: Community support for Fedora users >> Subject: Re: tls >> >> Am 07.09.2013 00:43, schrieb Patrick Dupre: >>>

Re: tls

2013-09-09 Thread Reindl Harald
Am 07.09.2013 08:38, schrieb Rejy M Cyriac: > If you are using iptables for firewall, you could use the 'ip_nat_ftp' > and 'ip_conntrack_ftp' module if you are behind nat, or > 'ip_conntrack_ftp' module alone otherwise, for having the firewall ports > dynamically opened on demand. You specify th

Re: tls

2013-09-09 Thread Reindl Harald
Am 07.09.2013 00:43, schrieb Patrick Dupre: > I installed pure-ftpd on my machine to use the TLS protocle. > I followed the instructions given in: > http://www.howtoforge.com/how-to-configure-pureftpd-to-accept-tls-sessions-on-fedora-18 > > but I still cannot ftp by using ftps

Re: tls

2013-09-09 Thread Matthew J. Roth
Patrick Dupre wrote: > > ssh works fine. However, I have a possible explaination. > This machine is behind a firewall and to be able to make ssh, I > add to ask to have the ssh port open. Probably, the ftp port is > closed. Should I ask to have it open to use ssl/tls? > Is

Re: tls

2013-09-07 Thread Patrick Dupre
> - Original Message - > From: Mike Wright > Sent: 09/07/13 08:11 PM > To: Community support for Fedora users > Subject: Re: tls > > 09/07/2013 11:07 AM, Patrick Dupre wrote: > > HELLO, > > > > I may have make some progress. > > I can SSL/TLS

Re: tls

2013-09-07 Thread Mike Wright
09/07/2013 11:07 AM, Patrick Dupre wrote: HELLO, I may have make some progress. I can SSL/TLS on a local machine but it does not work on a remote. I get (filezilla): Disconnected from server Status: Resolving address of homere Status: Connecting to 193.49.194.196:21... Status: Connection

Re: tls

2013-09-07 Thread Patrick Dupre
HELLO, I may have make some progress. I can SSL/TLS on a local machine but it does not work on a remote. I get (filezilla): Disconnected from server Status: Resolving address of homere Status: Connecting to 193.49.194.196:21... Status: Connection attempt failed with "EHOSTUNREACH - No rou

Re: tls

2013-09-07 Thread Patrick Dupre
know how to create service ftps associated to a port! Sorry for my poor background in this stuff. > > Am 07.09.2013 01:09, schrieb Patrick Dupre: > >> - Original Message - > >> From: Reindl Harald > >> Sent: 09/07/13 12:48 AM > >> To: Community supp

Re: tls

2013-09-07 Thread Rejy M Cyriac
On 09/07/2013 12:28 PM, Reindl Harald wrote: > > > Am 07.09.2013 08:38, schrieb Rejy M Cyriac: >> If you are using iptables for firewall, you could use the 'ip_nat_ftp' >> and 'ip_conntrack_ftp' module if you are behind nat, or >> 'ip_conntrack_ftp' module alone otherwise, for having the firewal

Re: tls

2013-09-06 Thread Rejy M Cyriac
On 09/07/2013 05:16 AM, Rick Stevens wrote: > On 09/06/2013 03:43 PM, Patrick Dupre issued this missive: >> Hello, >> >> I installed pure-ftpd on my machine to use the TLS protocle. >> I followed the instructions given in: >> http://www.howtoforge.com/how-to

Re: tls

2013-09-06 Thread Rick Stevens
On 09/06/2013 03:43 PM, Patrick Dupre issued this missive: Hello, I installed pure-ftpd on my machine to use the TLS protocle. I followed the instructions given in: http://www.howtoforge.com/how-to-configure-pureftpd-to-accept-tls-sessions-on-fedora-18 TLS Â Â Â Â Â Â Â Â 2 but I still

Re: tls

2013-09-06 Thread Patrick Dupre
> - Original Message - > From: Reindl Harald > Sent: 09/07/13 12:48 AM > To: Community support for Fedora users > Subject: Re: tls > > Am 07.09.2013 00:43, schrieb Patrick Dupre: > > I installed pure-ftpd on my machine to use the TLS protocle. > > I f

tls

2013-09-06 Thread Patrick Dupre
Hello, I installed pure-ftpd on my machine to use the TLS protocle. I followed the instructions given in: http://www.howtoforge.com/how-to-configure-pureftpd-to-accept-tls-sessions-on-fedora-18 TLS                 2 but I still cannot ftp by using ftps (filezilla). Do I need to configure the

Re: sendmail TLS question

2013-08-23 Thread Bill Oliver
Thanks. I'll give that a try. billo On Fri, 23 Aug 2013, Joe Zeff wrote: On 08/23/2013 01:44 PM, Bill Oliver wrote: I'm having a bit of an issue with sendmail. To be honest, this is in a recent installation of CentOS rather than fedora, but the CentOS forum hasn't been particularly usef

Re: sendmail TLS question

2013-08-23 Thread Joe Zeff
On 08/23/2013 01:44 PM, Bill Oliver wrote: I'm having a bit of an issue with sendmail. To be honest, this is in a recent installation of CentOS rather than fedora, but the CentOS forum hasn't been particularly useful. So, this is a cry of desperation. Several years ago, I needed help getting

sendmail TLS question

2013-08-23 Thread Bill Oliver
verify: depth=1 /C=US/O=Google Inc/CN=Google Internet Authority, state=0, reason=unable to get local issuer certificate Aug 23 14:33:00 hope sendmail[2006]: STARTTLS: TLS cert verify: depth=1 /C=US/O=Google Inc/CN=Google Internet Authority, state=0, reason=unable to get local issuer certificate A

Re: virsh ok with TLS but virt-viewer not

2013-05-03 Thread Fernando Lozano
Hi there, I folowed instructions on: http://wiki.libvirt.org/page/TLSSetup To setup TLS conections to a qemu+kvm host, for remote administration. I guess I did everything right, because sudo virsh -c qemu+tls://myhost/system But I cannot open any guest console, be it from virt-manager or from

Re: virsh ok with TLS but virt-viewer not

2013-05-03 Thread Rick Stevens
On 05/03/2013 08:34 AM, Fernando Lozano issued this missive: Hi there, I folowed instructions on: http://wiki.libvirt.org/page/TLSSetup To setup TLS conections to a qemu+kvm host, for remote administration. I guess I did everything right, because sudo virsh -c qemu+tls://myhost/system Works

virsh ok with TLS but virt-viewer not

2013-05-03 Thread Fernando Lozano
Hi there, I folowed instructions on: http://wiki.libvirt.org/page/TLSSetup To setup TLS conections to a qemu+kvm host, for remote administration. I guess I did everything right, because sudo virsh -c qemu+tls://myhost/system Works fine. So far every command I tried is ok. Giving the same

Re: [389-users] Start TLS and 389 Directory

2012-09-28 Thread Grzegorz Dwornicki
ne: ld 0x14890770 msgid 1 > res_errno: 0, res_error: <>, res_matched: <> > ldap_free_request (origid 1, msgid 1) > ldap_parse_extended_result > ber_scanf fmt ({eaa) ber: > ber_scanf fmt (a) ber: > ldap_parse_result > ber_scanf fmt ({iaa) ber: > ber_scanf fmt (x)

Re: ftp with TLS auth

2012-09-18 Thread Michael J Gruber
Joachim Backes venit, vidit, dixit 17.09.2012 12:39: > On 09/17/2012 12:22 PM, Michael J Gruber wrote: >> Hi there, >> >> I'ven been struggling to find an ftp client in Fedora which supports TLS >> auth. Tried ftp, lftp, ncftp, even dolphin (KDE file manager); all

RE: ftp with TLS auth

2012-09-17 Thread Patrick Kobly
try doing: set ftp:ssl-auth TLS set ftp:ssl-force true set ftp:ssl-allow yes set ftp:ssl-protect-list yes set ftp:ssl-protect-data yes set ftp:ssl-protect-fxp yes in lftp (if you're connecting to an ftp server that uses TLS in explicit mode (i.e. connect on port 21) PK -Original me

Re: ftp with TLS auth

2012-09-17 Thread Gabriel VLASIU
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 17 Sep 2012, Michael J Gruber wrote: > I'ven been struggling to find an ftp client in Fedora which supports TLS > auth. Tried ftp, lftp, ncftp, even dolphin (KDE file manager); all fail > with "must use TLS auth". I

Re: ftp with TLS auth

2012-09-17 Thread Joachim Backes
On 09/17/2012 12:22 PM, Michael J Gruber wrote: > Hi there, > > I'ven been struggling to find an ftp client in Fedora which supports TLS > auth. Tried ftp, lftp, ncftp, even dolphin (KDE file manager); all fail > with "must use TLS auth". > > Is this due to ou

ftp with TLS auth

2012-09-17 Thread Michael J Gruber
Hi there, I'ven been struggling to find an ftp client in Fedora which supports TLS auth. Tried ftp, lftp, ncftp, even dolphin (KDE file manager); all fail with "must use TLS auth". Is this due to our use of GNU TLS rather than OpenSSL for many packages? Firefox with FireFTP wo

Re: [389-users] dirsrv-admin startup issues with SSL/TLS configuration [solved]

2012-08-02 Thread Arnold Werschky
Jul 31 13:19 local.conf > -r 1 ldap ldap 4535 Jul 31 14:36 nss.conf > -rw--- 1 ldap root 4535 Jul 27 16:20 nss.conf.rpmsave > -rw--- 1 ldap root50 Jul 31 15:27 password.conf > -rw--- 1 ldap root 16384 Jul 27 14:21 secmod.db > > On Wed, Aug 1, 2012 at

Re: [389-users] dirsrv-admin startup issues with SSL/TLS configuration

2012-08-01 Thread Rich Megginson
h Megginson <mailto:rmegg...@redhat.com>> wrote: On 08/01/2012 08:17 AM, Arnold Werschky wrote: Good morning, I'm trying to set up a new install LDAP server with self signed TLS/SSL on CentOS 6.2 My install using setup-ds-admin.pl <http://setup-ds-admin.pl/>

[389-users] dirsrv-admin startup issues with SSL/TLS configuration

2012-08-01 Thread Arnold Werschky
Good morning, I'm trying to set up a new install LDAP server with self signed TLS/SSL on CentOS 6.2 My install using setup-ds-admin.pl was typical, and I was able to login to the 389-Console after installation. At that point I downloaded the script from richm : https://github.com/richm/sc

Re: Help with ssl/tls handshake_failure.

2012-03-06 Thread Frantisek Hanzlik
f/nfe/web/validacaocertificado/ValidacaoCertificadoController.jpf> > using FireFox10.0.1 I got the error: > === > (Error code: ssl_error_handshake_failure_alert) > ======= > How to solve the SSl/TLS auth

Re: Help with ssl/tls handshake_failure.

2012-03-04 Thread Lucélio Gomes de Freitas
f/nfe/web/validacaocertificado/ValidacaoCertificadoController.jpf> >> >> using FireFox10.0.1 I got the error: >> === >> (Error code: ssl_error_handshake_failure_alert) >> ======= >> How to solve the SSl/

Re: Help with ssl/tls handshake_failure.

2012-03-04 Thread Lucélio Gomes de Freitas
Em 04-03-2012 17:12, Patrick O'Callaghan escreveu: > On Sun, 2012-03-04 at 19:43 -0500, Lucélio Gomes de Freitas wrote: >> Installed Fedora 3.2.7-1.fc16.x86_64, trying to access the site > What is Fedora 3.2.7? [Lucelio@MAQ01 ~]$ uname -a Linux MAQ01.REDE01 3.2.7-1.fc16.x86_64 #1 SMP Tue Feb 21 0

Re: Help with ssl/tls handshake_failure.

2012-03-04 Thread jdow
ado/ValidacaoCertificadoController.jpf> using FireFox10.0.1 I got the error: === (Error code: ssl_error_handshake_failure_alert) === How to solve the SSl/TLS authentication? I have a valid certificate, and I

Re: Help with ssl/tls handshake_failure.

2012-03-04 Thread Patrick O'Callaghan
On Sun, 2012-03-04 at 19:43 -0500, Lucélio Gomes de Freitas wrote: > Installed Fedora 3.2.7-1.fc16.x86_64, trying to access the site What is Fedora 3.2.7? poc -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailm

Help with ssl/tls handshake_failure.

2012-03-04 Thread Lucélio Gomes de Freitas
using FireFox10.0.1 I got the error: === (Error code: ssl_error_handshake_failure_alert) === How to solve the SSl/TLS authentication? I have a valid certificate, and IcedTea-web seems ok. Anybody helps? Thanks in a

Re: [389-users] TLS handshake failure

2012-01-09 Thread Iain Morgan
> And, as mentioned in the original post, using the console GUI is not an > > option. > What happens if you specify the -CAfile filename arguments to openssl I get the same behaviour with -CAfile set. > s_client? > > On Mon, Jan 09, 2012 at 16:41:36 -0600, Marc Sauton wrote: &g

Re: [389-users] TLS handshake failure

2012-01-09 Thread Rich Megginson
on. What happens if you specify the -CAfile filename arguments to openssl s_client? On Mon, Jan 09, 2012 at 16:41:36 -0600, Marc Sauton wrote: Review the 389 DS errors log file, and the config, it seem like TLS did not start. Use the console UI a first time to review the working configuration, ju

Re: [389-users] TLS handshake failure

2012-01-09 Thread Iain Morgan
Marc Sauton wrote: > Review the 389 DS errors log file, and the config, it seem like TLS did > not start. > Use the console UI a first time to review the working configuration, > just for a test, and compare with the manual settings. > M. > > On 01/09/2012 02:33 PM, Iain Morg

[389-users] Clients can't use tls

2011-12-06 Thread Ru-Benz Cáceres
In my server tls works fine for my clients, problems are when I try to active on the others clients machine. I import the certificate just like I did in my server. But I have problems when I activate tls. At the begin it works fine but minutes later I check the logs and I get this: Dec 6 15

Re: [389-users] Start TLS request accepted. Server willing to negotiate SSL

2011-10-04 Thread David Hoskinson
-users] Start TLS request accepted. Server willing to negotiate SSL is not the same /etc/ldap.conf than /etc/openldap/ldap.conf seems that you're missing second one. While attempting to change a directory password I keep getting this message… [roo

Re: [389-users] Start TLS request accepted. Server willing to negotiate SSL

2011-10-04 Thread Angel Bosch Mora
eople,dc=xxx,dc=cle=dc=us" -a "oldpass" -s "newpass" ldap_start_tls: Connect error (-11) additional info: Start TLS request accepted.Server willing to negotiate SSL. In researching this I found to add –d1 for additional debugging information and found this probably

Re: [389-users] SSL/TLS with a hardware load balancer

2011-06-10 Thread Angel Bosch Mora
- Missatge original - > Has anyone engineered a design to run 389-ds servers behind a hardware > load balancer like an f5 LTM? I've found this question presented > before, but never answered. > > a) the openldap-clients ldap module will query the first host/uri in > the list until the port

[389-users] SSL/TLS with a hardware load balancer

2011-06-10 Thread Beamon, John
Has anyone engineered a design to run 389-ds servers behind a hardware load balancer like an f5 LTM? I've found this question presented before, but never answered. a) the openldap-clients ldap module will query the first host/uri in the list until the port goes down b) the server can run out o

Re: httpd cannot connect via TLS to LDAP server after upgrade to fedora 14

2011-02-01 Thread James McKenzie
On 1/31/11 2:14 PM, Michael Cronenworth wrote: > Ldap Tester wrote: >> I don't know if this is a problem with httpd's mod_authnz_ldap >> or its mod_ldap or with openldap, or just a configuration mistake >> on my part, but it used to work before the upgrade. >> I have searched all over for an answer

Re: httpd cannot connect via TLS to LDAP server after upgrade to fedora 14

2011-01-31 Thread Michael Cronenworth
Ldap Tester wrote: > I don't know if this is a problem with httpd's mod_authnz_ldap > or its mod_ldap or with openldap, or just a configuration mistake > on my part, but it used to work before the upgrade. > I have searched all over for an answer to this problem > because I can't believe that I am

httpd cannot connect via TLS to LDAP server after upgrade to fedora 14

2011-01-31 Thread Ldap Tester
configuration is: LDAPTrustedGlobalCert CA_BASE64 /etc/pki/tls/certs/ca-bundle.crt LDAPTrustedGlobalCert CA_BASE64 /etc/openldap/cacerts/cacert.asc AuthType Basic AuthName "User Login" AuthBasicProvider ldap AuthLDAPURL "ldap://serv1.foo.org serv2.foo.org/dc=

Re: [389-users] Admin server console and TLS

2010-08-04 Thread Rich Megginson
Wed Aug 04 13:50:15 2010] [notice] [client 127.0.0.1] > admserv_host_ip_check: ap_get_remote_host could not resolve 127.0.0.1 > [Wed Aug 04 13:50:15 2010] [crit] buildUGInfo(): unable to initialize > TLS connection to LDAP host cds.example.com port 2389: 4 > [Wed Aug 04 13:50

Re: [389-users] Help with setiting up Password Policy and SSL/TLS

2010-01-15 Thread Ryan Braun [ADS]
On January 15, 2010 07:14:06 pm Fulda, Paul R (IS) wrote: > Ok, I got the Password Policy somewhat working now the problem is with > gdm and pam. I get the following error when trying to change the users > password from a Fedora 11 client machine login window. This happens > after I reset their p

Re: [389-users] require ssl/tls only for binding as user

2010-01-11 Thread Andrey Ivanov
You have also this (starting from version 1.2.1) : * Add require secure binds switch o This adds a new configuration attribute named nsslapd-require-secure-binds. When enabled, a simple bind will only be allowed over a secure transport (SSL/TLS or a SASL privacy layer). An attempt

Re: [389-users] require ssl/tls only for binding as user

2010-01-11 Thread Johannes Woerner
> I'm evaluating the migrating of an openldap installation to > > 389 directory server (ca 1200 user objects). > > With openldap I can restrict client authentication to ssl/tls ldap > > connections and > > in parallel allow anonymous (unencrypted) access