Re: Perl File::Copy / Upload host cert is broken somehow

Hi Eric

> Are the permissions on the /var/ipcop/ca or /var/ipcop/certs directories
> unusual in any way? They are owned by nobody:nobody on my system.

Everything looks ok to me:
root@ipcop20:~ # ls -al /var/ipcop/ca/
total 12
drwxr-xr-x  2 nobody nobody 4096 May 16 23:14 .
drwxr-xr-x 34 root   root   4096 May 16 23:11 ..
-rw-r--r--  1 nobody nobody 1253 May 16 23:14 cacert.pem
root@ipcop20:~ # ls -al /var/ipcop/certs/
total 28
drwxr-xr-x  2 nobody nobody 4096 May 16 23:16 .
drwxr-xr-x 34 root   root   4096 May 16 23:11 ..
-rw-r--r--  1 nobody nobody 1180 May 16 23:15 hostcert.pem
-rw-r--r--  1 nobody nobody  887 May 16 23:15 hostkey.pem
-rw-r--r--  1 nobody nobody    0 May 16 23:15 index.txt
-rw-r--r--  1 nobody nobody   21 May 16 23:15 index.txt.attr
-rw-r--r--  1 nobody nobody    2 May 16 23:15 serial
-rw-r--r--  1 nobody nobody 1314 May 17 19:13 test3cert.pem

And where the uploaded (tmp) cert file is moved from:
root@ipcop20:~ # ls -al /tmp/
total 8
drwxrwxrwt  2 root root   60 May 17 19:13 .
drwxrwxrwt 18 root root 4096 May 16 23:11 ..
-rw-r--r--  1 root root  290 May 17 19:10 vnstat.xml

Every time I did a fresh install, so no [broken] backups involved.

Eric, are you able to create a Ipsec vpn connection with uploaded host cert
with current SVN build? Whats your build machine/distro?

Achim



------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d