I have done this, according to http://www.tc.umn.edu/~brams006/selfsign.html, part 1B (generating your own CA):
a) create a CA authority (ca.key and ca.crt)
b) make a certificate request (server.csr)
c) sign the certificate request (server.crt and server.key) with the new CA authority
d) change the server key so it does not ask for a passphrase.
Afterwards, the server.crt and server.key files are included in /usr/share/fred-client/ssl directory, and the fred-client configuration file is modified like this:
ssl_cert = %(dir)s/server.crt
ssl_key = %(dir)s/server.key
Now, if I try to run fred-client this is the result:
ERROR: socket.sslerror: [Errno 1] _ssl.c:480: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (200.107.82.18:700)
Certificate not signed by verified certificate authority
What should I do for fred-client to identify these certificates as valid?.
Thanks in advance.
Note: the new fred-client is perfectly compatible with FRED 2.2.
--
Mario Guerra <mguerra(a)nic.cr>
Dear users of the FRED,
I am a technical writer of the CZ.NIC and I'm currently working on a new
administration manual for the FRED.
I think you are of those who would appreciate this new piece of
documentation and therefore, I would like to ask you about your opinions
on what topics this manual should comprise, which questions it should
answer and what else you would expect from it.
I've attached my first (though only very rough) draft of the contents of
this manual for inspiration and/or comments. (Please, ignore the order
of the topics for now, that will be dealt with later.)
Your insight would be very helpful. Thanks for your time!
Best regards,
Lena
Technical Writer @ CZ.NIC
We have made some progress in activating FRED for our Malawi .mw registry and we have
started connecting registrars. We have now also started publishing the zonefiles from FRED
as generated by genzone-client. BUT I have a problem of serial numbers.
Our current zones have a date related SOA which is as follows:
mw. 172800 IN SOA chambo.sdnp.org.mw. domains.registrar.mw.
2010252090 43200 7200 1209600 172800
However from genzone I am getting the following SOA
mw. 18000 IN SOA chambo.sdnp.org.mw. domains.registrar.mw.
1469318701 10800 3600 604800 86400
Since our current serial number 2010252090 is greater than the genzone serial number
1469318701 then the zone will not propagate to the .mw secondary DNS servers
There is no facility in the genzone config file to help have this resolved. Could you then
anyone please show me how to set up genzone-client so that I can set a higher starting
serial number than the current 2010252090 one?
I would apprecisate a details reply ifyou have one.
Regards,
Paulos
======================
Dr Paulos B Nyirenda
NIC.MW & .mw ccTLD
http://www.registrar.mw
------- End of forwarded message -------
Agree with Piotr
On Jul 19, 2016 1:12 PM, Piotr Przybył <piotr(a)przybyl.org> wrote:
On 19/07/16 17:53, Zuzana Lena Ansorgova wrote:
> Dear users of the FRED,
>
> I am a technical writer of the CZ.NIC and I'm currently working on a new administration manual for
> the FRED.
> I think you are of those who would appreciate this new piece of documentation and therefore, I would
> like to ask you about your opinions on what topics this manual should comprise, which questions it
> should answer and what else you would expect from it.
>
> I've attached my first (though only very rough) draft of the contents of this manual for inspiration
> and/or comments. (Please, ignore the order of the topics for now, that will be dealt with later.)
>
> Your insight would be very helpful. Thanks for your time!
>
> Best regards,
> Lena
> Technical Writer @ CZ.NIC
>
>
> _______________________________________________
> fred-users mailing list
> fred-users(a)lists.nic.cz
> https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
>
Hello Zuzana
Would it be possible for you to take a somewhat different approach?
What I have in mind is creating a document in a more collaborative matter than ODT. Something like
wiki or github? So one could add input directly there and some versioning is also available?
(Personally I'd opt for git[hub], but for some it could be easier to use a wiki page I guess.)
Best regards
Piotr
_______________________________________________
fred-users mailing list
fred-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
Hello cz.nic Team
I've read a memo at your page that you have released FRED 2.23 recently.
Do you have any plans about supporting xenial (and releasing binary packages) once it becomes really
stable?
Best regards
Piotr Przybył