Discuss

discuss@lists.centos.org

8 participants
34745 discussions

Re: [CentOS] ca-bundle questions
by Pete Biggs 13 Sep '18

13 Sep '18

You need to dig deeper - I will give you a start ... > > > Sometime in Feb, yum updated something to do with ca-bundle. The "something" is the ca-certificates.noarch rpm. It is updated every year around May. The last update was around May 16th this year. Not February. > > > I didn't > > > notice at the time, but it put these two files on my machine: > > > > > > /etc/pki/tls/certs/ca-bundle.trust.crt.rpmnew and > > > > > > /etc/pki/tls/certs/ca-bundle.crt.rpmnew > > > > > > Both of those on the existing system are symbolic links > > > > > > ca-bundle.trust.crt -> > > > /etc/pki/ca-trust/extracted/openssl/ca-bundle-trust.crt and > > > > > > ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem That is what is defined in the ca-certificates package. See the output of rpm -qv --list ca-certificates-2018.2.22-70.0.el7_5.noarch > > > > > > I'm not sure how exactly I'm supposed to use thes files to update those > > > locations. one points to a .pem file, which the .rpmnew file is not, and > > > there is no file of the corresponding name in the direstory pointed to > > > by the link. What do the .rpmnew files contain? The repository version of those files are symlinks, so to me it looks like some other package is trying to install those files. > > > > > > Shouldn't the rpm have "done the right thing", and put them where they > > > belong? There is something that is stopping it from "doing the right thing". > > > > Except as noted above, there is no ca-bundle.crt file in the tree, only > this: > > tls-ca-bundle.pem > > > > Do I rename it, or what? > The simple answer is possibly. The sensible answer is that you need to find out if anything has tried to add different certificate files (and why) and work around that to work out what the best thing to do is. Use the 'rpm' command to find out what provides that files that have a .rpmnew suffix: rpm -q --whatprovides /etc/pki/tls/certs/ca-bundle.trust.crt It should come up with just one package - the ca-certificates-2018 package. If it returns multiple packages, then something else is causing confusion. P.

1 0

Re: [CentOS] Panic / EL6 / KVM / kernel-2.6.32-754.2.1.el6.x86_64
by Leon Fauster 12 Sep '18

12 Sep '18

Am 30.08.2018 um 20:28 schrieb Simon Matter <simon.matter(a)invoca.ch>: > Am 30.08.2018 um 12:16 schrieb Leon Fauster <leonfauster(a)googlemail.com>: >> >> BTW upstream bug report: >> >> https://bugzilla.redhat.com/show_bug.cgi?id=1623692 > > Well, I have an account and am logged in, still can not see the bug. It seems that the default bugzilla classification doesn't allow bug reports associated with the kernel to get a read status or so ... just to summarize the status briefly: They fortunately can reproduce the problem and are trying to find the cause now. So, +1! -- LF

1 0

Fwd: OpenSSL version 1.1.1 published - needed for TLS 1.3
by Robert Moskowitz 12 Sep '18

12 Sep '18

If anyone here is thinking about supporting TLS 1.3, every indication is that you will need openSSL 1.1.1. Fedora 29 pre-beta is still one 1.1.1-pre9, I hope to see 1.1.1 release soonish. Hopefully Redhat will be backporting support in RHEL7 so we will have it in C7. Part of the challenge is that there is an API change from 1.1.0 to 1.1.1. Got to love it... Further complication is no FIPS support yet in 1.1.1. That is next on the docket for openSSL. -------- Forwarded Message -------- Subject: [openssl-users] OpenSSL version 1.1.1 published Date: Tue, 11 Sep 2018 13:42:31 +0000 From: OpenSSL <openssl(a)openssl.org> Reply-To: openssl(a)openssl.org, openssl-users(a)openssl.org Organisation: OpenSSL Project To: openssl-project(a)openssl.org, OpenSSL User Support ML <openssl-users(a)openssl.org>, OpenSSL Announce ML <openssl-announce(a)openssl.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 OpenSSL version 1.1.1 released =============================== OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.1.1 of our open source toolkit for SSL/TLS. For details of changes and known issues see the release notes at: https://www.openssl.org/news/openssl-1.1.1-notes.html OpenSSL 1.1.1 is available for download via HTTP and FTP from the following master locations (you can find the various FTP mirrors under https://www.openssl.org/source/mirror.html) * https://www.openssl.org/source/ * ftp://ftp.openssl.org/source/ The distribution file name is: o openssl-1.1.1.tar.gz Size: 8337920 SHA1 checksum: e4559f31dca37ce815e0c7135488b747745a056d SHA256 checksum: 2836875a0f89c03d0fdf483941512613a50cfb421d6fd94b9f41d7279d586a3d The checksums were calculated using the following commands: openssl sha1 openssl-1.1.1.tar.gz openssl sha256 openssl-1.1.1.tar.gz Yours, The OpenSSL Project Team. -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAluXuZ8ACgkQ2cTSbQ5g RJFPFQf9G1LopuN1P3tIUTgps9Z1SS+TuC7OeRPu9TCEqOR0yO8WGyTCfLZnoXZ7 0BqFASYW4VbPCy8LH3glHLBe64NApdoA1HoMmHCvd+TxPQHEvhc0OejSaOGZKY/r 2LGUvEguiyYpjQS4bQmsl8wNl3CrYRGSMqBcbFj+qF/Rrlpa1hpKGnH4ooMxe7Nx /Ro4AjMe46vQL/RU980yFl+JTkhAvSOxw0cltbILPO2MP6Fo4QZqMO8mYRjEnqUZ E/Ixl/dIkSWjPC8pkkRS9FmMQHHYe66S20OK7V2Zl3Zd88FrNI+qeKgEF3ABGknR 6vR0kPkddRl43JktQ4B1QKS+GcwzHw== =fvfm -----END PGP SIGNATURE----- -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

1 0

Centos 7 rsync problem
by Nikos Gatsis - Qbit 12 Sep '18

12 Sep '18

Hello list. I have a problem with rsync on a FUJITSU PRIMERGY TX150 S7 mailserver with Linux version 3.10.0-862.11.6.el7.x86_64. The server have a hardware raid 5 megaraid_sas and xfs partitions. I have an external network disk (mounted as cifs) where we backup emails from old centos 6 mailserver and files from also centos 6 file server. On the new mail server with centos 7 (full updated) the rsync starts but stop transferring files after some minutes and disappears from Top but service is alive on ps aux. The email files (cyrus imap files) are mostly small files. Unfortunately there is no error so I cant understand where is the problem. We try an external usb (ext3) and transfer 40Gb emails without problem. We give the command: rsync -vaR --delete --log-file=/var/log/rsync /var/lib/imap /var/spool/imap/ /mnt/backup/mailserver/ Any ideas? Thank you in advance.

2 1

ca-bundle questions
by Chuck Campbell 12 Sep '18

12 Sep '18

Sometime in Feb, yum updated something to do with ca-bundle. I didn't notice at the time, but it put these two files on my machine: /etc/pki/tls/certs/ca-bundle.trust.crt.rpmnew and /etc/pki/tls/certs/ca-bundle.crt.rpmnew Both of those on the existing system are symbolic links ca-bundle.trust.crt -> /etc/pki/ca-trust/extracted/openssl/ca-bundle-trust.crt and ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem I'm not sure how exactly I'm supposed to use thes files to update those locations. one points to a .pem file, which the .rpmnew file is not, and there is no file of the corresponding name in the direstory pointed to by the link. Shouldn't the rpm have "done the right thing", and put them where they belong? -chuck --

2 1

CentOS 6.10 Boot Xorg Issues with Kernels 2.6.32-754
by Brian Bernard 10 Sep '18

10 Sep '18

Hello, Ever since I updated my CentOS 6 machine from 6.9 to 6.10 Xorg will not start with the 2.6.32-754 kernels. Instead the computer will reboot. This issue does not exist with the 2.6.32-696.30.1 kernel from CentOS 6.9 that I still have on my system. Has anyone else encountered this issue, and if so, how did you rectify it? Thank you for any help. Brian Bernard

2 4

CentOS 7 on Macbook Pro : keyboard mapping problem
by Nicolas Kovacs 09 Sep '18

09 Sep '18

Hi, Some time ago I installed CentOS 7 on an older MacBook Pro for a client, since she couldn't install a more recent version of Mac OS X on it. The installation was a bit of an adventure, and I wrote a little article about it: https://blog.microlinux.fr/centos-7-macbook-pro/ I made this installation about a year ago, and the only thing I changed since then is replacing Xfce by GNOME. I have one remaining problem which seems a bit tricky. I live in France, and people use an AZERTY keyboard mapping here. The keyboard works OK, except for one single key. On a french keyboard, in the lower left corner just next to the right Shift key, there's a key that's supposed to produce the "=" equal sign, and in combination with Shift, you get the "+" plus sign. For some unknown reason, this single key produces an "!" exclamation mark, and the "paragraph" symbol. I tried all possible combinations, but there seems to be no way to get a "+" sign on this keyboard. Any idea what I have to do here? Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 2

rsyslog listening on high port
by Adam Tauno Williams 08 Sep '18

08 Sep '18

Attempting to lookup why rsyslogd is listening on the high port UDP/51427. Have not succeeded in what this port is used for and what directive controls what interface it binds to. [root@bedrock ~]# netstat --listen --inet --program --numeric | grep syslog udp 0 0 0.0.0.0:51427 0.0.0.0:* 66655/rsyslogd -- Adam Tauno Williams <mailto:awilliam@whitemice.org> GPG D95ED383 OpenGroupware Developer <http://www.opengroupware.us/>

5 7

postfix on centos 7
by Larry Martell 07 Sep '18

07 Sep '18

When I try and send mail I see this in the maillog: Sep 6 11:59:48 postfix/sendmail[11059]: fatal: open /etc/postfix/main.cf: Permission denied But /etc/postfix/main.cf is world readable: $ ls -l /etc/postfix/main.cf -rw-r--r--. 1 root root 27176 Jun 9 2014 /etc/postfix/main.cf

5 7

Centos on Dell XPS15
by H 07 Sep '18

07 Sep '18

Is anyone successfully running Centos 7 on a Dell XPS15? If so, which model? If not, what was the problem? Thank you!

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss