I have done this, according to http://www.tc.umn.edu/~brams006/selfsign.html, part 1B (generating your own CA):
a) create a CA authority (ca.key and ca.crt)
b) make a certificate request (server.csr)
c) sign the certificate request (server.crt and server.key) with the new CA authority
d) change the server key so it does not ask for a passphrase.
Afterwards, the server.crt and server.key files are included in /usr/share/fred-client/ssl directory, and the fred-client configuration file is modified like this:
ssl_cert = %(dir)s/server.crt
ssl_key = %(dir)s/server.key
Now, if I try to run fred-client this is the result:
ERROR: socket.sslerror: [Errno 1] _ssl.c:480: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (200.107.82.18:700)
Certificate not signed by verified certificate authority
What should I do for fred-client to identify these certificates as valid?.
Thanks in advance.
Note: the new fred-client is perfectly compatible with FRED 2.2.
--
Mario Guerra <mguerra(a)nic.cr>
Hello,
I've just installed fred from apt-repository on lucid. Now, when I try
to connect to EPP server using fred-client, I get following error:
ERROR: socket.sslerror: [Errno 1] _ssl.c:480: error:14094418:SSL
routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (10.128.5.195:700)
Certificate not signed by verified certificate authority.
There is (hopefully) no problem with CA trust. Moreover, I can see this
in fred-eppd.log:
CORBA exception: IDL:omg.org/CORBA/COMM_FAILURE:1.0
Could not get greeting data from fred_rifd
Any ideas please?
Regards,
Tomas Mazak
Hi,
I've just successfully installed fred on ubuntu 12.04. phew…
- i've added zone
- i've added registrar to zone
- i've added acl for registrar
now the problem is:
when saving anything data (certificate md5, edit street, etc) i got error returned by the fred-webadmin:
Required_integer_as_parameter
No output generated from debug log, i've set debug level to "debug" too.
Any clue how to fix this ?
--
Sayid Munawar
Sent with Sparrow (http://www.sparrowmailapp.com/?sig)
I'm trying to test introducing domain_blacklist entries. My purpose is to blacklist only one domain (under a controlled environment). These are the SQL statements:
fred=# insert into domain_blacklist values (1,'^guerra.co.cr$','2013-02-21','2013-02-22','A test');
INSERT 0 1
fred=# insert into domain_blacklist values (1,'^guerra.co.cr$','2013-02-21','2013-02-28','A test');
INSERT 0 1
But info_domain gives this:
NIC-REG1(a)127.0.0.1> info_domain guerra.co.cr
Domain name: guerra.co.cr
Repository object ID: D0000045196-EPP
Created by: NIC-REG1
Designated registrar: NIC-REG1
Updated by: NIC-REG1
Created on: 2012-02-21T07:47:02-06:00
Last update on: 2013-02-15T16:49:46-06:00
Expiration date: 2015-02-21
NSSET ID: GUERRA_CO_CR
Password for transfer: IvMlT73J
Status: ok - Objekt is without restrictions
Registrant ID: GUERRAMARIOALBERTO_AT_GMAIL.COM
Administrative contact: MGUERRA_AT_NIC.CR
MGUERRA2_AT_NIC.CR
The domain is not blacklisted, it seems. Thoughts?.
Thanks in advance.
--
Mario Guerra <mguerra(a)nic.cr>
