fred-users September 2017

fred-users@lists.nic.cz

3 participants
2 discussions

Setting up a CA and signing certificates with it

by Mario Guerra

I have done this, according to http://www.tc.umn.edu/~brams006/selfsign.html, part 1B (generating your own CA): a) create a CA authority (ca.key and ca.crt) b) make a certificate request (server.csr) c) sign the certificate request (server.crt and server.key) with the new CA authority d) change the server key so it does not ask for a passphrase. Afterwards, the server.crt and server.key files are included in /usr/share/fred-client/ssl directory, and the fred-client configuration file is modified like this: ssl_cert = %(dir)s/server.crt ssl_key = %(dir)s/server.key Now, if I try to run fred-client this is the result: ERROR: socket.sslerror: [Errno 1] _ssl.c:480: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (200.107.82.18:700) Certificate not signed by verified certificate authority What should I do for fred-client to identify these certificates as valid?. Thanks in advance. Note: the new fred-client is perfectly compatible with FRED 2.2. -- Mario Guerra <mguerra(a)nic.cr>

1 year, 2 months

Question on 5.6.3.1: create nsset - up to 10 tech-handles?

by Gunter Grodotzki

Hi everyone, According to: https://fred.nic.cz/documentation/html/EPPReference/CommandStructure/Create… <https://fred.nic.cz/documentation/html/EPPReference/CommandStructure/Create…> it is possible to set up to 10 tech handles for a nsset create command (if I am interpreting the documentation correctly). That seems unusual to me? Usually a tech-handle is a very single 1:1 relationship? If this is not a mistake, what would the use case be? Cheers, Gunter Grodotzki

6 years, 12 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

fred-users September 2017