25 Úno
2015
25 Úno
'15
10:02
Hello all,
Can someone help on this:
I have done this,
a) create a CA authority (ca.key and ca.crt)
b) make a certificate request (server.csr)
c) sign the certificate request (server.crt and server.key) with the new CA authority
d) make a certificate request (registrar.csr)
e) sign the certificate request (registrar.crt and registrar.key) with the new CA
authority
Afterwards, the server.crt and server.key and the ca.crt files are included in
/usr/share/fred-mod-eppd/ssl directory,then the epp file is tweaked to reflect the
files and the fred-client configuration file in /etc/fred/directory is modified like this:
ssl_cert = %(dir)s/registrar.crt
ssl_key = %(dir)s/registrar.key
Now, if I try to run fred-client this is the result:
Login Failed
----------------------------------------------------------
Malawi SDNP Webmail: http://www.sdnp.org.mw
Access your Malawi SDNP e-mail from anywhere in the world.
----------------------------------------------------------
25 Úno
25 Úno
18:33
El 25/02/2015 a las 03:02, timothy escribió:
Hello all,
Can someone help on this:
I have done this,
a) create a CA authority (ca.key and ca.crt)
b) make a certificate request (server.csr)
c) sign the certificate request (server.crt and server.key) with the new CA authority
d) make a certificate request (registrar.csr)
e) sign the certificate request (registrar.crt and registrar.key) with the new CA
authority
Afterwards, the server.crt and server.key and the ca.crt files are included in
/usr/share/fred-mod-eppd/ssl directory,then the epp file is tweaked to reflect the
files and the fred-client configuration file in /etc/fred/directory is modified like
this:
ssl_cert = %(dir)s/registrar.crt
ssl_key = %(dir)s/registrar.key
Now, if I try to run fred-client this is the result:
Login Failed
Hello, Timothy.
Check that the md5sum of registrar.crt is the same is equal to the same
in field "cert" in table "registraracl" of FRED database.
I hope this helps.
----------------------------------------------------------
Malawi SDNP Webmail: http://www.sdnp.org.mw
Access your Malawi SDNP e-mail from anywhere in the world.
----------------------------------------------------------
_______________________________________________
fred-users mailing list
fred-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
26 Úno
26 Úno
9:30
Timothy, check also for error messages in /var/log/fred.log, they will
help you find out what is wrong.
Regards,
Jaromir
On Wed, 2015-02-25 at 11:33 -0600, Mario Guerra wrote:
El 25/02/2015 a las 03:02, timothy escribió:
--
Jaromir Talir
technicky reditel / Chief Technical Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- .cz domain registry
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:jaromir.talir@nic.cz http://nic.cz/
sip:jaromir.talir@nic.cz tel:+420.222745107
mob:+420.739632712 fax:+420.222745112
-------------------------------------------
Hello all,
Can someone help on this:
I have done this,
a) create a CA authority (ca.key and ca.crt)
b) make a certificate request (server.csr)
c) sign the certificate request (server.crt and server.key) with the new CA authority
d) make a certificate request (registrar.csr)
e) sign the certificate request (registrar.crt and registrar.key) with the new CA
authority
Afterwards, the server.crt and server.key and the ca.crt files are included in
/usr/share/fred-mod-eppd/ssl directory,then the epp file is tweaked to reflect the
files and the fred-client configuration file in /etc/fred/directory is modified like
this:
ssl_cert = %(dir)s/registrar.crt
ssl_key = %(dir)s/registrar.key
Now, if I try to run fred-client this is the result:
Login Failed
Hello, Timothy.
Check that the md5sum of registrar.crt is the same is equal to the same
in field "cert" in table "registraracl" of FRED database.
I hope this helps.
----------------------------------------------------------
Malawi SDNP Webmail: http://www.sdnp.org.mw
Access your Malawi SDNP e-mail from anywhere in the world.
----------------------------------------------------------
_______________________________________________
fred-users mailing list
fred-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
_______________________________________________
fred-users mailing list
fred-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
14:00
Hello all,
Thanks for the assistance it was the issue of authentication. I ddnt extract md5 from the
cert .
Now it works upon extracting and including the md5 in the "registraracl " table
Regards,
Mathias Timothy
-----Original Message-----
From: fred-users-bounces(a)lists.nic.cz [mailto:fred-users-
bounces(a)lists.nic.cz] On Behalf Of Jaromir Talir
Sent: Thursday, February 26, 2015 10:30 AM
To: fred-users(a)lists.nic.cz
Subject: Re: Generating own Certificates for fred [Modified question]
Timothy, check also for error messages in /var/log/fred.log, they will help
you find out what is wrong.
Regards,
Jaromir
On Wed, 2015-02-25 at 11:33 -0600, Mario Guerra wrote:
SDNP
--
Jaromir Talir
technicky reditel / Chief Technical Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- .cz domain registry
Milesovska 5, 130 00 Praha 3, Czech Republic mailto:jaromir.talir@nic.cz
http://nic.cz/ sip:jaromir.talir@nic.cz tel:+420.222745107
mob:+420.739632712 fax:+420.222745112
-------------------------------------------
_______________________________________________
fred-users mailing list
fred-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
El 25/02/2015 a las 03:02, timothy escribió:
> Hello all,
>
> Can someone help on this:
>
> I have done this,
>
> a) create a CA authority (ca.key and ca.crt)
> b) make a certificate request (server.csr)
> c) sign the certificate request (server.crt and server.key) with the new
CA authority
> d) make a certificate request
(registrar.csr)
> e) sign the certificate request (registrar.crt and registrar.key)
> with the new CA authority
>
> Afterwards, the server.crt and server.key and the ca.crt files are
included
in
> /usr/share/fred-mod-eppd/ssl
directory,then the epp file is
> tweaked to reflect the files and the fred-client configuration file in
/etc/fred/directory is modified like this:
ssl_cert = %(dir)s/registrar.crt
ssl_key = %(dir)s/registrar.key
Now, if I try to run fred-client this is the result:
Login Failed
Hello, Timothy.
Check that the md5sum of registrar.crt is the same is equal to the
same in field "cert" in table "registraracl" of FRED database.
I hope this helps.
>
> ----------------------------------------------------------
> Malawi SDNP Webmail: http://www.sdnp.org.mw Access your Malawi e-mail
from anywhere in the world.
----------------------------------------------------------
_______________________________________________
fred-users mailing list
fred-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
_______________________________________________
fred-users mailing list
fred-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/fred-users
4027
days inactive
4028
days old
3 comments
4 participants
participants (4)
-
Jaromir Talir -
Mario Guerra -
Mathias Timothy -
timothy