Re: Perl File::Copy / Upload host cert is broken somehow
Eric Oberlander <[email protected]> Fri, 17 May 2013 18:45:19 +0100
| Newsgroups | gmane.comp.security.ipcop.devel |
|---|---|
| Message-ID | <CAPkz44HxFMyRSVUFz+C2+f4z42HcA8dmOyqFvNn2H7dWwiayZg@mail.gmail.com> |
On 17 May 2013 18:20, Achim Weber <[email protected]> wrote: > Hi Eric > > > Are the permissions on the /var/ipcop/ca or /var/ipcop/certs directories > > unusual in any way? They are owned by nobody:nobody on my system. > > Everything looks ok to me: > root@ipcop20:~ # ls -al /var/ipcop/ca/ > total 12 > drwxr-xr-x 2 nobody nobody 4096 May 16 23:14 . > drwxr-xr-x 34 root root 4096 May 16 23:11 .. > -rw-r--r-- 1 nobody nobody 1253 May 16 23:14 cacert.pem > root@ipcop20:~ # ls -al /var/ipcop/certs/ > total 28 > drwxr-xr-x 2 nobody nobody 4096 May 16 23:16 . > drwxr-xr-x 34 root root 4096 May 16 23:11 .. > -rw-r--r-- 1 nobody nobody 1180 May 16 23:15 hostcert.pem > -rw-r--r-- 1 nobody nobody 887 May 16 23:15 hostkey.pem > -rw-r--r-- 1 nobody nobody 0 May 16 23:15 index.txt > -rw-r--r-- 1 nobody nobody 21 May 16 23:15 index.txt.attr > -rw-r--r-- 1 nobody nobody 2 May 16 23:15 serial > -rw-r--r-- 1 nobody nobody 1314 May 17 19:13 test3cert.pem > > And where the uploaded (tmp) cert file is moved from: > root@ipcop20:~ # ls -al /tmp/ > total 8 > drwxrwxrwt 2 root root 60 May 17 19:13 . > drwxrwxrwt 18 root root 4096 May 16 23:11 .. > -rw-r--r-- 1 root root 290 May 17 19:10 vnstat.xml > > Every time I did a fresh install, so no [broken] backups involved. > > Eric, are you able to create a Ipsec vpn connection with uploaded host cert > with current SVN build? Whats your build machine/distro? > > Achim > I haven't used a VPN before, but I'm willing to give it a try, if you want to contact me off list. I'm running 2.1.1 built on an Ubuntu 12.04 box. Installed as an update using SVN 7038. Eric ------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platform delivers complete security visibility with the essential security capabilities. Easily and efficiently configure, manage, and operate all of your security controls from a single console and one unified framework. Download a free trial. http://p.sf.net/sfu/alienvault_d2d _______________________________________________ IPCop-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ipcop-devel