Re: [webmin-devel] ssl with xml-rpc
"Jamie Cameron" <[email protected]> Sun, 02 Mar 2014 12:36:42 -0800 (PST)
| Newsgroups | gmane.comp.web.webmin.devel |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--bound1393792602
Content-Type: multipart/alternative; boundary="altsbound1393792602"
Content-Transfer-Encoding: 7bit
--altsbound1393792602
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Try adding the following at the top of test.pl , just after the
#!/usr/bin/perl line :
$ENV{PERL_LWP_SSL_VERIFY_HOSTNAME} = 0;
It turns out that recent versions of the Perl HTTP library have made SSL
cert validation mandatory, and thus turns it off.
See [1]http://stackoverflow.com/questions/74358/how-can-i-get-lwp-to-validat
e-ssl-server-certificates
On 01/Mar/2014 18:33 marty leisner <[email protected]> wrote ..
my [2]test.pl is August 13, 2006.
1) when I set the URL to http, and set webmin to not use ssl, it works fine
2) when webmin is ssl, and I use http in url.txt, I get:
: leisner@t7400 12:14:12;./[3]test.pl
Method call failed : 500 Can't connect to beagle.home:10000 (certificate
verify failed)
3) when urll.txt is set to https:
: leisner@t7400 09:30:23;./[4]test.pl
Method call failed : 500 Can't connect to localhost:10000 (certificate
verify failed)
marty
On Sat, Mar 1, 2014 at 6:36 PM, Jamie Cameron <[5][email protected]>
wrote:
Are you using the un-modified [6]test.pl script that is supplied with the
Webmin XML-RPC docs? Because in my tests, that doesn't require a valid
cert.
On 01/Mar/2014 09:57 marty leisner <[7][email protected]> wrote ..
So how do I modify [8]test.pl to 'not require a real cert?
On Sat, Mar 1, 2014 at 12:35 PM, Jamie Cameron <[9][email protected]>
wrote:
Make sure that either your Webmin server has a real CA-issued SSL cert, or
that your test script is written to not require a valid SSL cert.
On 01/Mar/2014 09:16 marty leisner <[10][email protected]> wrote ..
> I looked at xml-rpc examples.
>
> How do I run xml-rpc to a webmin server which uses ssl?
>
> I get back:
>
> : leisner@t7400 12:14:12;./[11]test.pl
> Method call failed : 500 Can't connect to beagle.home:10000 (certificate
> verify failed)
>
> marty
--------------------------------------------------------------------------
----
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
[12]http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.
clktrk
-
Forwarded by the Webmin development list at [13][email protected]
To remove yourself from this list, go to
[14]http://lists.sourceforge.net/lists/listinfo/webadmin-devel
--------------------------------------------------------------------------
----
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
[15]http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.
clktrk
-
Forwarded by the Webmin development list at [16][email protected]
To remove yourself from this list, go to
[17]http://lists.sourceforge.net/lists/listinfo/webadmin-devel
5. file://localhost/home/webmail/homes/jcameron/.tmp/reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom
7. file://localhost/home/webmail/homes/jcameron/.tmp/reply_mail.cgi?new=1&to=maleisner%40gmail%2Ecom
16. file://localhost/home/webmail/homes/jcameron/.tmp/reply_mail.cgi?new=1&to=webmin%2Ddevel%40webmin%2Ecom
--altsbound1393792602
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<p>Try adding the following at the top of test.pl , just after the #!/usr/bin/perl line :<br /><br />$ENV{PERL_LWP_SSL_VERIFY_HOSTNAME} = 0;<br /><br />It turns out that recent versions of the Perl HTTP library have made SSL cert validation mandatory, and thus turns it off. See <a href="http://stackoverflow.com/questions/74358/how-can-i-get-lwp-to-validate-ssl-server-certificates">http://stackoverflow.com/questions/74358/how-can-i-get-lwp-to-validate-ssl-server-certificates</a></p>
<p>On 01/Mar/2014 18:33 marty leisner <[email protected]> wrote ..
</p>
<blockquote type="cite">
<div dir="ltr">
<div>my <a href="http://test.pl">test.pl</a> is August 13, 2006.</div>
<div><br /></div>
<div>1) when I set the URL to http, and set webmin to not use ssl, it works fine</div>
<div>2) when webmin is ssl, and I use http in url.txt, I get:</div>
<div>: leisner@t7400 12:14:12;./<a href="http://test.pl">test.pl</a> <br />Method call failed : 500 Can't connect to beagle.home:10000 (certificate verify failed)<br /></div>
<div><br /></div>
<div>3) when urll.txt is set to https:</div>
<div>: leisner@t7400 09:30:23;./<a href="http://test.pl">test.pl</a> <br />Method call failed : 500 Can't connect to localhost:10000 (certificate verify failed)<br /></div>
<div><br /></div>
<div>marty</div>
<div><br /></div>
<div> <br /></div>
<div><br /></div>
<div><br /></div>
<div><br /></div>
</div>
<div class="gmail_extra"><br /><br />
<div class="gmail_quote">On Sat, Mar 1, 2014 at 6:36 PM, Jamie Cameron <span dir="ltr"><<a href="reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom" target="_blank">[email protected]</a>></span> wrote:<br />
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: #cccccc; border-left-style: solid; padding-left: 1ex;">
<p>Are you using the un-modified <a href="http://test.pl" target="_blank">test.pl</a> script that is supplied with the Webmin XML-RPC docs? Because in my tests, that doesn't require a valid cert. </p>
<p>On 01/Mar/2014 09:57 marty leisner <<a href="reply_mail.cgi?new=1&to=maleisner%40gmail%2Ecom" target="_blank">[email protected]</a>> wrote ..
</p>
<div class="HOEnZb">
<div class="h5">
<blockquote type="cite">
<div dir="ltr"><br />
<div>So how do I modify <a href="http://test.pl" target="_blank">test.pl</a> to 'not require a real cert?</div>
<div><br /></div>
<div><br /><br /></div>
</div>
<div class="gmail_extra"><br /><br />
<div class="gmail_quote">
On Sat, Mar 1, 2014 at 12:35 PM, Jamie Cameron <span dir="ltr"><<a href="http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom" target="_blank">[email protected]</a>></span> wrote:<br />
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: #cccccc; border-left-style: solid; padding-left: 1ex;">
Make sure that either your Webmin server has a real CA-issued SSL cert, or<br />
that your test script is written to not require a valid SSL cert.<br /> <br />
On 01/Mar/2014 09:16 marty leisner <<a href="http://reply_mail.cgi?new=1&to=maleisner%40gmail%2Ecom" target="_blank">[email protected]</a>> wrote ..<br />
<div>
<div>> I looked at xml-rpc examples.<br />
><br />
> How do I run xml-rpc to a webmin server which uses ssl?<br />
><br />
> I get back:<br />
><br />
> : leisner@t7400 12:14:12;./<a href="http://test.pl" target="_blank">test.pl</a><br />
> Method call failed : 500 Can't connect to beagle.home:10000 (certificate<br />
> verify failed)<br />
><br />
> marty<br /> <br /> </div>
</div>------------------------------------------------------------------------------<br />
Flow-based real-time traffic analytics software. Cisco certified tool.<br />
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer<br />
Customize your own dashboards, set traffic alerts and generate reports.<br />
Network behavioral analysis & security monitoring. All-in-one tool.<br /> <a href="http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk" target="_blank">http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk</a><br />
-<br />
Forwarded by the Webmin development list at <a href="http://reply_mail.cgi?new=1&to=webmin%2Ddevel%40webmin%2Ecom" target="_blank">[email protected]</a><br />
To remove yourself from this list, go to<br /> <a href="http://lists.sourceforge.net/lists/listinfo/webadmin-devel" target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-devel</a><br />
</blockquote>
</div><br />
</div>
</blockquote><br />
</div>
</div><br />------------------------------------------------------------------------------<br />
Flow-based real-time traffic analytics software. Cisco certified tool.<br />
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer<br />
Customize your own dashboards, set traffic alerts and generate reports.<br />
Network behavioral analysis & security monitoring. All-in-one tool.<br /> <a href="http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk" target="_blank">http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk</a><br />-<br />
Forwarded by the Webmin development list at <a href="reply_mail.cgi?new=1&to=webmin%2Ddevel%40webmin%2Ecom">[email protected]</a><br />
To remove yourself from this list, go to<br /> <a href="http://lists.sourceforge.net/lists/listinfo/webadmin-devel" target="_blank">http://lists.sourceforge.net/lists/listinfo/webadmin-devel</a><br /> <br />
</blockquote>
</div><br />
</div>
</blockquote><br />
--altsbound1393792602--
--bound1393792602
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
------------------------------------------------------------------------------
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk
--bound1393792602
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
-
Forwarded by the Webmin development list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-devel
--bound1393792602--