I have done this, according to http://www.tc.umn.edu/~brams006/selfsign.html, part 1B (generating your own CA):
a) create a CA authority (ca.key and ca.crt)
b) make a certificate request (server.csr)
c) sign the certificate request (server.crt and server.key) with the new CA authority
d) change the server key so it does not ask for a passphrase.
Afterwards, the server.crt and server.key files are included in /usr/share/fred-client/ssl directory, and the fred-client configuration file is modified like this:
ssl_cert = %(dir)s/server.crt
ssl_key = %(dir)s/server.key
Now, if I try to run fred-client this is the result:
ERROR: socket.sslerror: [Errno 1] _ssl.c:480: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (200.107.82.18:700)
Certificate not signed by verified certificate authority
What should I do for fred-client to identify these certificates as valid?.
Thanks in advance.
Note: the new fred-client is perfectly compatible with FRED 2.2.
--
Mario Guerra <mguerra(a)nic.cr>
On 27 Jun 2017 at 9:18, Ghislain wrote:
> Good Morning all,
>
> We (i.e. .RW registry – RICTA Ltd.) are not using FRED but I think the prepayment
model is more
> or less the same.
>
> #1. We don’t pre-invoice the registrars based on a “pre-established” list of
domain names.
> This is a lot of work, and it won’t scale if you have 100 of registrars, unless
the registry does that
> for them.
> But even if it is possible from the registry, it is a lot of work for “them” (i.e.
manual work).
>
> Therefore, they (registrars) just send money/amount, let say $500 or 30,000 RWF,
and that is
> what we issue the invoice for.
> With a simple description, i.e. “Advance payment”. BTW, the amount can vary
depending on
> what they want to register, renew, etc.
Thank you for the input, most of this is already the same on .mw registry.
> The law in Rwanda don’t allow to receive money without an invoice. (it being
advance or actual
> payment).
It appears there is no such law in Malawi and this is part of the reason I raised the
question - to learn what is the case with other ccTLD registries.
> #2. Once received, we credit their accounts in the Registry system. (still a
manual process).
> Then they can do whatever they want with it (i.e. do registration, renewal, pay
for transfer fees,
> etc.).
Same.
So, does your registry system have facilities for generating invoices such as these for
pre-payments?
Does it produce statements form registrars?
Regards,
Paulos
======================
Dr Paulos B Nyirenda
NIC.MW & .mw ccTLD
http://www.registrar.mw
>
> I think this approach (above) is more flexible.
>
> A little additional info:
>
> The money received from registrars, is a liability until it is consumed.
> Until it is consumed, it cannot yet be called revenues from your side (registry).
> From financial “documents” perspective, an un-consumed advance payment is a
liability that
> needs to seat in the balance sheet.
> Once the revenue is realized (end of month), the money can be recognized in you
Income
> statement. (you debit the liability and credit your income accounts).
>
> Sorry if this is perhaps more than what you asked for.
>
> Thank you,
>
> Ghislain
> .RW registry
>
> From: fred-users <fred-users-bounces(a)lists.nic.cz> on behalf of Jaromir Talir
> <jaromir.talir(a)nic.cz>
> Reply-To: A mailing list for users and developers of FRED registry system
> <fred-users(a)lists.nic.cz>
> Date: Friday, 23 June 2017 at 17:18
> To: <paulos(a)sdnp.org.mw>, <fred-users(a)lists.nic.cz>
> Subject: Re: payments - invoices and statements on FRED registry system
>
> Hi Paulos,
>
> I guess this is more question for some Malawi lawyer. In Czech Republic
> we have a law that we should issue invoice when we receive advanced
> payment. However, this may be something specific for our legislation.
> Also every legislation specifies what should be the content of the
> invoice in that case (issuer, recipient, day of payment, effective day
> of service, etc..). This may differ country to country as well. FRED
> contains PDF templates for invoices according Czech legislation. I
> cannot say if they may be used for you as well.
>
> If you will be in Joburg, we can have a talk about it there.
>
> Regards,
> Jaromir
>
> On Fri, 2017-06-16 at 05:15 +0200, Dr P Nyirenda wrote:
> Hello,
> I would like to find out how your registry responds to a request like
> the one here below
> for invoices and statements on registrar payments to a registry that
> uses the FRED
> registry system.
> On our registry for the Malawi .mw ccTLD, registrar payments are
> credited to the
> registrar zone by zone according to what the registrar has paid for.
> Once the registrar
> has consumed the credit, then they need to make a new payment in
> advance which is then
> credited to the zones that they need.
> We do not need to issue them an invoice in advance, they make the
> payments based on what
> transactions they need to do on each zone.
> When we receive a request for their data payments, we have used
> Invoice on Daphne to
> generate the data and we have sent this to the registrar.
> However, as you can see here below, this registrar seems to be asking
> for more.
> I would therefore like to request information on how your registry
> using FRED handles
> requests for data, invoices and statements like these.
> Regards,
> Paulos
> ======================
> Dr Paulos B Nyirenda
> NIC.MW & .mw ccTLD
> http://www.registrar.mw
> ------- Forwarded message follows -------
> From: Jamil Kamaly <Jamil.Kamaly(a)NetNames.com >
> To: "paulos(a)sdnp.org.mw" <paulos(a)sdnp.org.mw>
> Copies to: Michal Czyz <Michal.Czyz(a)NetNames.com>, domains mw
> <domains(a)registrar.mw>,
> PB Nyirenda <pb.nyirenda(a)gmail.com>
> Subject: RE: Malawi payments.
> Date sent: Wed, 14 Jun 2017 11:56:39 +0000
> Hi Dr Paulos,
> I think you might have misunderstood, I wasn’t complaining. The
> details you provided me
> in April was excel spreadsheet with payment details and the zones
> that were topped. We
> need proper invoices and statements and therefore I was following up
> on our last
> conversation where you was saying that you are developing a system to
> make this possible.
> I was just checking if this is now possible and would we be getting
> proper statements
> and invoices.
> Thank you.
> Kind regards,
> Jamil
> ----------------------------------------------------------
> Malawi SDNP Webmail: http://www.sdnp.org.mw
> Access your Malawi SDNP e-mail from anywhere in the world.
> ----------------------------------------------------------
> --
> Jaromir Talir
> Technicky partner / Technical Fellow
> -------------------------------------------
> CZ.NIC, z.s.p.o. -- .cz domain registry
> Milesovska 5, 130 00 Praha 3, Czech Republic
> mailto:jaromir.talir@nic.cz http://nic.cz/
> sip: jaromir.talir(a)nic.cz tel:+420.222745107
> mob:+420.739632712 fax:+420.222745112
> -------------------------------------------
> _______________________________________________
> fred-users mailing list
> fred-users(a)lists.nic.cz
> https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
>
----------------------------------------------------------
Malawi SDNP Webmail: http://www.sdnp.org.mw
Access your Malawi SDNP e-mail from anywhere in the world.
----------------------------------------------------------
Hello,
I would like to find out how your registry responds to a request like the one here below
for invoices and statements on registrar payments to a registry that uses the FRED
registry system.
On our registry for the Malawi .mw ccTLD, registrar payments are credited to the
registrar zone by zone according to what the registrar has paid for. Once the registrar
has consumed the credit, then they need to make a new payment in advance which is then
credited to the zones that they need.
We do not need to issue them an invoice in advance, they make the payments based on what
transactions they need to do on each zone.
When we receive a request for their data payments, we have used Invoice on Daphne to
generate the data and we have sent this to the registrar.
However, as you can see here below, this registrar seems to be asking for more.
I would therefore like to request information on how your registry using FRED handles
requests for data, invoices and statements like these.
Regards,
Paulos
======================
Dr Paulos B Nyirenda
NIC.MW & .mw ccTLD
http://www.registrar.mw
------- Forwarded message follows -------
From: Jamil Kamaly <Jamil.Kamaly(a)NetNames.com>
To: "paulos(a)sdnp.org.mw" <paulos(a)sdnp.org.mw>
Copies to: Michal Czyz <Michal.Czyz(a)NetNames.com>, domains mw <domains(a)registrar.mw>,
PB Nyirenda <pb.nyirenda(a)gmail.com>
Subject: RE: Malawi payments.
Date sent: Wed, 14 Jun 2017 11:56:39 +0000
Hi Dr Paulos,
I think you might have misunderstood, I wasn’t complaining. The details you provided me
in April was excel spreadsheet with payment details and the zones that were topped. We
need proper invoices and statements and therefore I was following up on our last
conversation where you was saying that you are developing a system to make this possible.
I was just checking if this is now possible and would we be getting proper statements
and invoices.
Thank you.
Kind regards,
Jamil
----------------------------------------------------------
Malawi SDNP Webmail: http://www.sdnp.org.mw
Access your Malawi SDNP e-mail from anywhere in the world.
----------------------------------------------------------
