Discuss February 2017

discuss@lists.centos.org

118 participants
121 discussions

Wich web browser on CentOS6 ?
by Patrick Begou 11 Feb '17

11 Feb '17

Hello I have more and more troubles using firefox in professional environment with CentOS6. The latest version is 45.7.0 But I can't use it anymore to access some old server hardware (IDRAC7 of DELL C6100) because of "/SSL_ERROR_WEAK_SERVER_CERT_KEY/". I had to install an old Firefox32 version to administrate these servers. Today I upgrade the firmware of 2 DELL switch and now Firefox cannot connect to them anymore saying: /An error occurred during a connection to xxx.xxx.xxx.xxx. The server rejected the handshake because the client downgraded to a lower TLS version than the server supports// //SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT /Is there a CentOS6 recommended web browser allowing continuous connections to olds and new base level (and local) system administration services ? Thanks Patrick -- =================================================================== | Equipe M.O.S.T. | | | Patrick BEGOU | mailto:Patrick.Begou@grenoble-inp.fr | | LEGI | | | BP 53 X | Tel 04 76 82 51 35 | | 38041 GRENOBLE CEDEX | Fax 04 76 82 52 71 | ===================================================================

8 9

Re: [CentOS] Wich web browser on CentOS6 ?
by James B. Byrne 11 Feb '17

11 Feb '17

On Fri, February 10, 2017 06:26, Patrick Begou wrote: > Hello > > I have more and more troubles using firefox in professional > environment with > CentOS6. The latest version is 45.7.0 But I can't use it anymore to > access some > old server hardware (IDRAC7 of DELL C6100) because of > "/SSL_ERROR_WEAK_SERVER_CERT_KEY/". I had to install an old Firefox32 > version > to administrate these servers. > > Today I upgrade the firmware of 2 DELL switch and now Firefox cannot > connect to them anymore saying: /An error occurred during a > connection to xxx.xxx.xxx.xxx. The server rejected > the handshake because the client downgraded to a lower TLS version > than the server supports// //SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT > > /Is there a CentOS6 recommended web browser allowing continuous > connections to olds and new base level (and local) system > administration services ? > This situation arises because older, dare I say old, equipment released with embedded software and using http/https as the administrative front end were shipped with minimally compliant x-509 certificates. Often self-signed with 1kb keys and md5 signature hashes. Not to mention many are past their expiry dates. However, given the revelations of state sanctioned snooping on network traffic browsers are being pushed to implement increased compliance checking for the overall security of users. Firefox is simply implementing what various 'authorities' are recommending as secure practices with respect to authentication using pki and x-509 certificates. The present situation is a PIA. It could be a lot more user-friendly if FF so chose. They could have easily allowed one to turn off these advanced compliance checks for specific IP and DNS addresses so that the intended benefit remained but the interference with existing infrastructure was minimised. But, FF is on its own chosen path to oblivion and the idea of compromise is totally absent from their project plan. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

4 3

Re: [CentOS] An rpm package with country flags in PNG format for CentOS 6
by Alexander Farber 10 Feb '17

10 Feb '17

awstats is good suggestion, thank you Frank Also found https://github.com/hjnilsson/country-flags - public domain and any size

1 0

An rpm package with country flags in PNG format for CentOS 6
by Alexander Farber 10 Feb '17

10 Feb '17

Hello fellow CentOS users, does anybody please know a package for CentOS 6 with at least 200 country flag images in PNG format and (lowercased or uppercased) ISO-conform 2-letter naming (like "us.png", "de.png", "ru.png", ...)? This does not have to be a specific graphic-related package, but can be anything - like a Nagios package, or maybe KDE-help package... I am looking for a package to install at my CentOS 6 LAMP server and to (ab)use those images to display the country flags on the served webpages. Thank you for any ideas Alex

2 1

Centos7 - SELinux messing with my named.conf
by Robert Moskowitz 09 Feb '17

09 Feb '17

Well, actually it is me cp-ing files and SELinux yelling at me later... I had named working, but detected that I had a couple clean ups to do in /etc/named.conf and an include file in /etc/named. I made the changes, scp to my user id from my notebook, 'su' in my ssh session and cp the named.conf and other files. Made sure to fix the file ownership with chown root:named, and that permissions were correct. Then restarted named. Of course if failed. After a little playing and digging around I find: # journalctl -xe -- -- Unit named-setup-rndc.service has finished starting up. -- -- The start-up result is done. Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: Starting Berkeley Internet Nam -- Subject: Unit named.service has begun start-up -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit named.service has begun starting up. Feb 09 16:27:41 rigel.htt-consult.com bash[3082]: open: /etc/named.conf: permiss Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: named.service: control process Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: Failed to start Berkeley Inter -- Subject: Unit named.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit named.service has failed. -- -- The result is failed. Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: Unit named.service entered fai Feb 09 16:27:41 rigel.htt-consult.com systemd[1]: named.service failed. Feb 09 16:27:41 rigel.htt-consult.com polkitd[567]: Unregistered Authentication setenforce 0 and named starts right up, indicating it IS a SELinux issue. So what SELinux magic do I need here and were is it documented? thanks

2 2

Re: [CentOS] mach64 driver, latest update in CentOS 6.8, symbol lookup error - workaround
by Styma, Robert (Nokia - US) 09 Feb '17

09 Feb '17

> This is a known issue: >https://www.centos.org/forums/viewtopic.php?f=13&t=58168 >I would recommend filing a bug with Red Hat to have them fix it. I am going to see if I can find someone in the organization with a Red Hat account to open the bug. In the meantime, I came up with a workaround. I wanted to see if I could role the updates back to CentOS 6.7 since the system was 6.7 until I applied the updates. The alternative is to load the system from scratch, so what is there to loose. The result seems to be working so I will document what I did. # First I rebooted and specified to use the original kernel # Then mount the place where I unloaded the original DVD ISOs mount -t nfs phxbkup2:/iso/centos6.7x64 /media/CentOS # Tried to sync from this location, but it did not work, yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 distribution-synchronization # There were a number of conflicts that prevented the yum to run. # The troublesome packages did not look like they would prevent booting, so I got rid of them yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 erase python-libipa_hbac-1.13.3-22.el6_8.4.x86_64 mesa-libxatracker-11.0.7-4.el6.x86_64 xorg-x11-drivers-7.3-13.4.el6.x86_64 mesa-libxatracker-11.0.7-4.el6.x86_64 yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 erase xcb-util xcb-util-renderutil # Tried the distro sync again and it went through. yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 distribution-synchronization # Tried to put back the problem packages, especially since one contained the driver I needed. The drivers went in. # The xcb-util xcb-util-renderutil got reinstalled as part of the distro sync yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 install xorg-x11-drivers # The other packages were not part of the media, so they got left out. yum --disablerepo=\* --enablerepo=c6-media --releasever=6.7 install python-libipa_hbac mesa-libxatracker mesa-libxatracker # Finally, I disabled the CentOS-Base repos and enabled the CentOS-Vault 6.7 repos (Same3 as from the Base) and ran "yum update" to get to the latest set from 6.7. The xorg and x11dirvers were not updated. Rebooted and I have a desktop. This is not the first time distribution-synchronization has pulled my butt out of the fire. Thank you for the suggestions which eventually helped me narrow down the problem.

2 1

Amavisd-new DKIM query timeout
by Tim Smith 09 Feb '17

09 Feb '17

Hi, amavisd is adding the following header to my mails : Authentication-Results: my.example.com (amavisd-new); dkim=neutral reason="invalid (public key: DNS query timeout for their._domainkey.example.com)" header.d=example.com The problem is that this is not quite true ! I have no DNS problems, e.g. if I do : dig their._domainkey.example.com TXT dig returns fine without any substantial wait. What setting am I missing ? Where am I going wrong ? Thanks ! Tim

1 0

centosplus version of firefox
by Leon Fauster 09 Feb '17

09 Feb '17

I known its lower prioritized but any signs of the centosplus version of firefox? Just asking because of the severity class. Thanks for the effort! LF

3 4

Spotty internet connection
by TE Dukes 08 Feb '17

08 Feb '17

How do you IT guys diagnose the problem with a spotty internet connection? Just spent an hour on the phone with TWC/Spectrum. Of course they don't see anything wrong with their service. They send me to speedtest.net. The first attempt, the page didn't fully load, the second attempt, the page didn't load at all, the third attempt, it loaded. On a 20/2MB line I get 24.83/2.47MB. The speed is better than what I'm paying for but its spotty. Lately I have been getting slow and partial page loads, server not found, server timed out, etc.. Get knocked off ssh when accessing my home server from work, etc. Its not the work connection because I don't have problems accessing other sites, just here at home and my home server. Is there any kind of utility to check for failing hardware? TIA

8 14

selinux contexts for openntpd portable
by Jordan Ladora 08 Feb '17

08 Feb '17

I was wondering if someone could help with selinux context for the portable openntpd library on centos7. I compiled openntpd-6.0p1 and it runs great on centos7, but have not had much luck with selinux contexts for it. This is what I tried- semanage fcontext -a -t ntp_conf_t /usr/local/etc/ntpd.conf # seems to work semanage fcontext -a -t ntpd_exec_t /usr/local/sbin/ntpd # gets reset on reboot to bin_t and/or stops ntpd from working semanage fcontext -a -t ntpd_exec_t /usr/local/sbin/ntpctl # stops ntpd from working semanage fcontext -a -t ntp_drift_t /usr/local/var/db/ntpd.drift # seems ok No idea about context for /usr/local/var/db/ntpd.sock Thanks in advance for any help, jl

1 0

← Newer
1
...
6
7
8
9
10
11
12
13
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2017