5 Bře
2009
5 Bře
'09
12:46
Suddenly i get this error, when i connect to fred-client:
-----------------------------------------------------------------------------
Using configuration from /etc/fred/fred-client.conf
Connecting to localhost, port 700 ...
ERROR: socket.sslerror: (1, 'error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol') (localhost:700)
Certificate not signed by verified certificate authority.
-----------------------------------------------------------------------------
I guess its because my certificate is out of date ?
Is it possible to disable SSL in fred-client ? (since no customers/registrars are using it
directly)
If it is possible, how can i do it ?
regards
Petur
This email and its attachments may be confidential and are intended solely for the use of
the individual to whom it is addressed.
If you are not the intended recipient or authorized to receive information for the
intended recipient you are notified that disclosing, copying, distributing or taking any
action in reliance on the contents of this information is strictly prohibited. If the
email contains proposals, they are valid for 30 days following the date of email
transmission. Finally, the recipient should check this email and any attachment for the
presence of viruses. The company accepts no liability for any damage caused by any virus
transmitted by email.
5 Bře
5 Bře
22:31
I'm quite sure that it's possible to disable ssl check but I never tried
it. You would have to tweak SSLCipherSuite option in apache
configuration file to allow this possibility and then, maybe, modify
code of fred-client in the place where ssl socket is opened. More
indepth knowledge of ssl communication is required.
Regards
Jaromir
On Thu, 2009-03-05 at 11:46 +0000, Petur Kirke wrote:
Suddenly i get this error, when i connect to
fred-client:
-----------------------------------------------------------------------------
Using configuration from /etc/fred/fred-client.conf
Connecting to localhost, port 700 ...
ERROR: socket.sslerror: (1, 'error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol') (localhost:700)
Certificate not signed by verified certificate authority.
-----------------------------------------------------------------------------
I guess its because my certificate is out of date ?
Is it possible to disable SSL in fred-client ? (since no customers/registrars are using
it directly)
If it is possible, how can i do it ?
regards
Petur
This email and its attachments may be confidential and are intended solely for the use of
the individual to whom it is addressed.
If you are not the intended recipient or authorized to receive information for the
intended recipient you are notified that disclosing, copying, distributing or taking any
action in reliance on the contents of this information is strictly prohibited. If the
email contains proposals, they are valid for 30 days following the date of email
transmission. Finally, the recipient should check this email and any attachment for the
presence of viruses. The company accepts no liability for any damage caused by any virus
transmitted by email.
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users
23:47
Ooops, I just found out that this previous statement is false. There is
hard coded check for client certificate in EPP module. Hash of this
client certificate is compared with corresponding record in registraracl
table. So as a result - SSL communication is required and cannot be
easily bypassed.
Jaromir
On Thu, 2009-03-05 at 22:31 +0100, Jaromír Talíř wrote:
I'm quite sure that it's possible to disable
ssl check but I never tried
it. You would have to tweak SSLCipherSuite option in apache
configuration file to allow this possibility and then, maybe, modify
code of fred-client in the place where ssl socket is opened. More
indepth knowledge of ssl communication is required.
Regards
Jaromir
On Thu, 2009-03-05 at 11:46 +0000, Petur Kirke wrote:
Suddenly i get this error, when i connect to
fred-client:
-----------------------------------------------------------------------------
Using configuration from /etc/fred/fred-client.conf
Connecting to localhost, port 700 ...
ERROR: socket.sslerror: (1, 'error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol') (localhost:700)
Certificate not signed by verified certificate authority.
-----------------------------------------------------------------------------
I guess its because my certificate is out of date ?
Is it possible to disable SSL in fred-client ? (since no customers/registrars are using
it directly)
If it is possible, how can i do it ?
regards
Petur
This email and its attachments may be confidential and are intended solely for the use of
the individual to whom it is addressed.
If you are not the intended recipient or authorized to receive information for the
intended recipient you are notified that disclosing, copying, distributing or taking any
action in reliance on the contents of this information is strictly prohibited. If the
email contains proposals, they are valid for 30 days following the date of email
transmission. Finally, the recipient should check this email and any attachment for the
presence of viruses. The company accepts no liability for any damage caused by any virus
transmitted by email.
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users 
7 Bře
7 Bře
5:19
Petur Kirke escribió:
Suddenly i get this error, when i connect to
fred-client:
-----------------------------------------------------------------------------
Using configuration from /etc/fred/fred-client.conf
Connecting to localhost, port 700 ...
ERROR: socket.sslerror: (1, 'error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol') (localhost:700)
Certificate not signed by verified certificate authority.
-----------------------------------------------------------------------------
I guess its because my certificate is out of date ?
Is it possible to disable SSL in fred-client ? (since no customers/registrars are using
it directly)
If it is possible, how can i do it ?
regards
Petur
Perhaps fred-pyfred is not active?
Regards.
Mario
9 Bře
9 Bře
11:06
New subject: SV: ssl in fred-client
what is the command for starting or activate fred-pyfred ?
________________________________________
Fra: fred-users-bounces(a)lists.nic.cz [fred-users-bounces(a)lists.nic.cz] På vegne
af Mario Guerra [mguerra(a)nic.cr]
Sendt: 7. marts 2009 04:19
Til: fred-users(a)lists.nic.cz
Emne: Re: ssl in fred-client
Petur Kirke escribió:
Suddenly i get this error, when i connect to
fred-client:
-----------------------------------------------------------------------------
Using configuration from /etc/fred/fred-client.conf
Connecting to localhost, port 700 ...
ERROR: socket.sslerror: (1, 'error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol') (localhost:700)
Certificate not signed by verified certificate authority.
-----------------------------------------------------------------------------
I guess its because my certificate is out of date ?
Is it possible to disable SSL in fred-client ? (since no customers/registrars are using
it directly)
If it is possible, how can i do it ?
regards
Petur
Perhaps fred-pyfred is not active?
Regards.
Mario
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users
This email and its attachments may be confidential and are intended solely for the use of
the individual to whom it is addressed.
If you are not the intended recipient or authorized to receive information for the
intended recipient you are notified that disclosing, copying, distributing or taking any
action in reliance on the contents of this information is strictly prohibited. If the
email contains proposals, they are valid for 30 days following the date of email
transmission. Finally, the recipient should check this email and any attachment for the
presence of viruses. The company accepts no liability for any damage caused by any virus
transmitted by email.
11 Bře
11 Bře
12:12
New subject: SV: ssl in fred-client
You can start it directly by running fred-pyfred or you can use wrapper
pyfredctl that have start/stop parameters.
Regards
Jaromir
Petur Kirke píše v Po 09. 03. 2009 v 10:06 +0000:
what is the command for starting or activate
fred-pyfred ?
________________________________________
Fra: fred-users-bounces(a)lists.nic.cz [fred-users-bounces(a)lists.nic.cz] På vegne
af Mario Guerra [mguerra(a)nic.cr]
Sendt: 7. marts 2009 04:19
Til: fred-users(a)lists.nic.cz
Emne: Re: ssl in fred-client
Petur Kirke escribió:
Suddenly i get this error, when i connect to
fred-client:
-----------------------------------------------------------------------------
Using configuration from /etc/fred/fred-client.conf
Connecting to localhost, port 700 ...
ERROR: socket.sslerror: (1, 'error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol') (localhost:700)
Certificate not signed by verified certificate authority.
-----------------------------------------------------------------------------
I guess its because my certificate is out of date ?
Is it possible to disable SSL in fred-client ? (since no customers/registrars are using
it directly)
If it is possible, how can i do it ?
regards
Petur
Perhaps fred-pyfred is not active?
Regards.
Mario
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users
This email and its attachments may be confidential and are intended solely for the use of
the individual to whom it is addressed.
If you are not the intended recipient or authorized to receive information for the
intended recipient you are notified that disclosing, copying, distributing or taking any
action in reliance on the contents of this information is strictly prohibited. If the
email contains proposals, they are valid for 30 days following the date of email
transmission. Finally, the recipient should check this email and any attachment for the
presence of viruses. The company accepts no liability for any damage caused by any virus
transmitted by email.
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users
12:28
New subject: SV: ssl in fred-client
I forgot third option. There is fred-server init script that start all
servers (fred-pyfred, fred-rifd, fred-adifd and fred-pifd).
Regards,
Jaromir
Jaromír Talíř píše v St 11. 03. 2009 v 12:12 +0100:
You can start it directly by running fred-pyfred or
you can use wrapper
pyfredctl that have start/stop parameters.
Regards
Jaromir
Petur Kirke píše v Po 09. 03. 2009 v 10:06 +0000:
what is the command for starting or activate
fred-pyfred ?
________________________________________
Fra: fred-users-bounces(a)lists.nic.cz [fred-users-bounces(a)lists.nic.cz] På vegne
af Mario Guerra [mguerra(a)nic.cr]
Sendt: 7. marts 2009 04:19
Til: fred-users(a)lists.nic.cz
Emne: Re: ssl in fred-client
Petur Kirke escribió:
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users Suddenly i get this error, when i connect to
fred-client:
-----------------------------------------------------------------------------
Using configuration from /etc/fred/fred-client.conf
Connecting to localhost, port 700 ...
ERROR: socket.sslerror: (1, 'error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol') (localhost:700)
Certificate not signed by verified certificate authority.
-----------------------------------------------------------------------------
I guess its because my certificate is out of date ?
Is it possible to disable SSL in fred-client ? (since no customers/registrars are using
it directly)
If it is possible, how can i do it ?
regards
Petur
Perhaps fred-pyfred is not active?
Regards.
Mario
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users
This email and its attachments may be confidential and are intended solely for the use of
the individual to whom it is addressed.
If you are not the intended recipient or authorized to receive information for the
intended recipient you are notified that disclosing, copying, distributing or taking any
action in reliance on the contents of this information is strictly prohibited. If the
email contains proposals, they are valid for 30 days following the date of email
transmission. Finally, the recipient should check this email and any attachment for the
presence of viruses. The company accepts no liability for any damage caused by any virus
transmitted by email.
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users
18:33
New subject: SV: ssl in fred-client
Looks like fred-pyfred is running.
Do you think the certificate has gone out of date ?
My problem now is that i cannot get fred-client to start.
I cant remember how i got this to work, when i installed FRED in november last year.
Can someone give me a clue ?
________________________________________
Fra: fred-users-bounces(a)lists.nic.cz [fred-users-bounces(a)lists.nic.cz] På vegne
af Mario Guerra [mguerra(a)nic.cr]
Sendt: 7. marts 2009 04:19
Til: fred-users(a)lists.nic.cz
Emne: Re: ssl in fred-client
Petur Kirke escribió:
Suddenly i get this error, when i connect to
fred-client:
-----------------------------------------------------------------------------
Using configuration from /etc/fred/fred-client.conf
Connecting to localhost, port 700 ...
ERROR: socket.sslerror: (1, 'error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol') (localhost:700)
Certificate not signed by verified certificate authority.
-----------------------------------------------------------------------------
I guess its because my certificate is out of date ?
Is it possible to disable SSL in fred-client ? (since no customers/registrars are using
it directly)
If it is possible, how can i do it ?
regards
Petur
Perhaps fred-pyfred is not active?
Regards.
Mario
_______________________________________________
Fred-users mailing list
Fred-users(a)lists.nic.cz
https://lists.nic.cz/mailman/listinfo/fred-users
This email and its attachments may be confidential and are intended solely for the use of
the individual to whom it is addressed.
If you are not the intended recipient or authorized to receive information for the
intended recipient you are notified that disclosing, copying, distributing or taking any
action in reliance on the contents of this information is strictly prohibited. If the
email contains proposals, they are valid for 30 days following the date of email
transmission. Finally, the recipient should check this email and any attachment for the
presence of viruses. The company accepts no liability for any damage caused by any virus
transmitted by email.
5617
days inactive
5623
days old
7 comments
3 participants
participants (3)
-
Jaromír Talíř -
Mario Guerra -
Petur Kirke