Re: Perl File::Copy / Upload host cert is broken somehow

Eric Oberlander <[email protected]> Fri, 17 May 2013 18:45:19 +0100
Newsgroups gmane.comp.security.ipcop.devel
Message-ID <CAPkz44HxFMyRSVUFz+C2+f4z42HcA8dmOyqFvNn2H7dWwiayZg@mail.gmail.com>
On 17 May 2013 18:20, Achim Weber <[email protected]> wrote:

> Hi Eric
>
> > Are the permissions on the /var/ipcop/ca or /var/ipcop/certs directories
> > unusual in any way? They are owned by nobody:nobody on my system.
>
> Everything looks ok to me:
> root@ipcop20:~ # ls -al /var/ipcop/ca/
> total 12
> drwxr-xr-x  2 nobody nobody 4096 May 16 23:14 .
> drwxr-xr-x 34 root   root   4096 May 16 23:11 ..
> -rw-r--r--  1 nobody nobody 1253 May 16 23:14 cacert.pem
> root@ipcop20:~ # ls -al /var/ipcop/certs/
> total 28
> drwxr-xr-x  2 nobody nobody 4096 May 16 23:16 .
> drwxr-xr-x 34 root   root   4096 May 16 23:11 ..
> -rw-r--r--  1 nobody nobody 1180 May 16 23:15 hostcert.pem
> -rw-r--r--  1 nobody nobody  887 May 16 23:15 hostkey.pem
> -rw-r--r--  1 nobody nobody    0 May 16 23:15 index.txt
> -rw-r--r--  1 nobody nobody   21 May 16 23:15 index.txt.attr
> -rw-r--r--  1 nobody nobody    2 May 16 23:15 serial
> -rw-r--r--  1 nobody nobody 1314 May 17 19:13 test3cert.pem
>
> And where the uploaded (tmp) cert file is moved from:
> root@ipcop20:~ # ls -al /tmp/
> total 8
> drwxrwxrwt  2 root root   60 May 17 19:13 .
> drwxrwxrwt 18 root root 4096 May 16 23:11 ..
> -rw-r--r--  1 root root  290 May 17 19:10 vnstat.xml
>
> Every time I did a fresh install, so no [broken] backups involved.
>
> Eric, are you able to create a Ipsec vpn connection with uploaded host cert
> with current SVN build? Whats your build machine/distro?
>
> Achim
>


I haven't used a VPN before, but I'm willing to give it a try, if you want
to contact me off list.

I'm running 2.1.1 built on an Ubuntu 12.04 box. Installed as an update
using SVN 7038.

Eric

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d

_______________________________________________
IPCop-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ipcop-devel