fred-users February 2013

fred-users@lists.nic.cz

6 participants
4 discussions

Setting up a CA and signing certificates with it

by Mario Guerra

I have done this, according to http://www.tc.umn.edu/~brams006/selfsign.html, part 1B (generating your own CA): a) create a CA authority (ca.key and ca.crt) b) make a certificate request (server.csr) c) sign the certificate request (server.crt and server.key) with the new CA authority d) change the server key so it does not ask for a passphrase. Afterwards, the server.crt and server.key files are included in /usr/share/fred-client/ssl directory, and the fred-client configuration file is modified like this: ssl_cert = %(dir)s/server.crt ssl_key = %(dir)s/server.key Now, if I try to run fred-client this is the result: ERROR: socket.sslerror: [Errno 1] _ssl.c:480: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (200.107.82.18:700) Certificate not signed by verified certificate authority What should I do for fred-client to identify these certificates as valid?. Thanks in advance. Note: the new fred-client is perfectly compatible with FRED 2.2. -- Mario Guerra <mguerra(a)nic.cr>

1 year, 5 months

fred on lucid problem

by Tomas Mazak

Hello, I've just installed fred from apt-repository on lucid. Now, when I try to connect to EPP server using fred-client, I get following error: ERROR: socket.sslerror: [Errno 1] _ssl.c:480: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (10.128.5.195:700) Certificate not signed by verified certificate authority. There is (hopefully) no problem with CA trust. Moreover, I can see this in fred-eppd.log: CORBA exception: IDL:omg.org/CORBA/COMM_FAILURE:1.0 Could not get greeting data from fred_rifd Any ideas please? Regards, Tomas Mazak

11 years, 9 months

Erorr Required_integer_as_parameter when saving registrar data

by Sayid Munawar

Hi, I've just successfully installed fred on ubuntu 12.04. phew… - i've added zone - i've added registrar to zone - i've added acl for registrar now the problem is: when saving anything data (certificate md5, edit street, etc) i got error returned by the fred-webadmin: Required_integer_as_parameter No output generated from debug log, i've set debug level to "debug" too. Any clue how to fix this ? -- Sayid Munawar Sent with Sparrow (http://www.sparrowmailapp.com/?sig)

11 years, 9 months

About domain_blacklist

by Mario Guerra

I'm trying to test introducing domain_blacklist entries. My purpose is to blacklist only one domain (under a controlled environment). These are the SQL statements: fred=# insert into domain_blacklist values (1,'^guerra.co.cr$','2013-02-21','2013-02-22','A test'); INSERT 0 1 fred=# insert into domain_blacklist values (1,'^guerra.co.cr$','2013-02-21','2013-02-28','A test'); INSERT 0 1 But info_domain gives this: NIC-REG1(a)127.0.0.1> info_domain guerra.co.cr Domain name: guerra.co.cr Repository object ID: D0000045196-EPP Created by: NIC-REG1 Designated registrar: NIC-REG1 Updated by: NIC-REG1 Created on: 2012-02-21T07:47:02-06:00 Last update on: 2013-02-15T16:49:46-06:00 Expiration date: 2015-02-21 NSSET ID: GUERRA_CO_CR Password for transfer: IvMlT73J Status: ok - Objekt is without restrictions Registrant ID: GUERRAMARIOALBERTO_AT_GMAIL.COM Administrative contact: MGUERRA_AT_NIC.CR MGUERRA2_AT_NIC.CR The domain is not blacklisted, it seems. Thoughts?. Thanks in advance. -- Mario Guerra <mguerra(a)nic.cr>

11 years, 9 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

fred-users February 2013