Re: lug-bg: Sendmail & TLS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ааа,да ги нямаме тия! ;-) Поствайте тука конфигурационните файлове, че иначе каква мейл-листа сме? А който е на модем през БТК да му мисли... така де :) (моля никой да не се обижда на интернет връзка! :) Стоян На Monday 02 June 2003 09:32, Vesselin Kolev написахте: > Znachi.. za clientskata chast e dobre da mi postnesh faila > submit.mc ili kakto ti se kazva tam m4 prototipa na tozi file. > > Dori ako iskash na lichnia mail mi prati dvata si m4 prototipa > sendmail.mc i submit.mc, cha ako gi postnesh tuk niakoi hora > shte protestirat sreshtu prekaleno dylgi pisma:) > >Pozdravi >Vesselin Kolev > > On Monday 02 Jun 2003 08:53, Konstantin Angelov wrote: > > Imam slednia problem: > > > > sm-msp-queue[25889]: STARTTLS=client: file > > /etc/mail/tls/sendmail-common.key unsafe: Permission denied > > > > Permissions na faila sa: > > > > -rw---1 root root 887 May 30 02:05 > > sendmail-common.key > > > > Sendmail e startiran kato root. > > > > Nqkoi moje li da mi kaje kakvo propuskam? > > > > > > = > >== = A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > > Zagora To unsubscribe: > > http://www.linux-bulgaria.org/public/mail_list.html > > = > >== = > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= > > -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+2wltbUl2/okDM3URAoAkAJ9E00siqdPikxdrWbw62Q3Gka6y2QCfQCSu 0OxseWhO0i4/M0ONKDSQMxg= =gKAE -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail & TLS
Znachi.. za clientskata chast e dobre da mi postnesh faila submit.mc ili kakto ti se kazva tam m4 prototipa na tozi file. Dori ako iskash na lichnia mail mi prati dvata si m4 prototipa sendmail.mc i submit.mc, cha ako gi postnesh tuk niakoi hora shte protestirat sreshtu prekaleno dylgi pisma:) Pozdravi Vesselin Kolev On Monday 02 Jun 2003 08:53, Konstantin Angelov wrote: > Imam slednia problem: > > sm-msp-queue[25889]: STARTTLS=client: file > /etc/mail/tls/sendmail-common.key unsafe: Permission denied > > Permissions na faila sa: > > -rw---1 root root 887 May 30 02:05 > sendmail-common.key > > Sendmail e startiran kato root. > > Nqkoi moje li da mi kaje kakvo propuskam? > > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Sendmail & TLS
Imam slednia problem: sm-msp-queue[25889]: STARTTLS=client: file /etc/mail/tls/sendmail-common.key unsafe: Permission denied Permissions na faila sa: -rw---1 root root 887 May 30 02:05 sendmail-common.key Sendmail e startiran kato root. Nqkoi moje li da mi kaje kakvo propuskam? A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail: TLS bazirani politiki v access_db
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > >Za Mozilla 1.x/Netscape 6.x/7.x > > certificate-a za CA. T.e. niama da ti se nalaga da slagash otdelno CA cert > (to i taka ne stava. za da mozhesh da importnesh CA cert samo, e nuzhno da > go postavish vyv file s razshirenie .crt i da go otovorish s browsera). > Mynichko dopylnenie, koeto ochevidno sym izpusnal. Sled kato CA certificate se loadne e nuzhno potrebitelia da go "obleche v doverie", t.e. da izpolzva hubavia bylgarski glagol "trustvam". Kak stava tova: KMail: Otiva se na "KDE SSL information" (mozhe napravo prez Konqueror), posle se otiva na "Cryptography Configuration" i ottam na "SSL signers". Tam se izbira CA, koiato e izdala certifikata i se markirat poletata: -> Accept for site signing -> Accept for email signing (-> Accept for code signing samo, ako shte uploadvate signati softuerni paketi) I posle kato otidete v "Your certificates" -> "Verify" shte traibva da vidite polozhitelen otgovor za authentikaciata na vashia certifikate: "The certificate passed the verification tests successfully!" Mozilla 1.x/Netscape 6.x/7.x Edit -> Preferences -> Privacy&Security -> Certificates -> Manage Certificates -> Authorities. Sled tova se markira certifikata i se natiska butona "Edit". Tam po syshtata shema kakto za KMail se ukazva za kakvo mu se dava doverie. Mislia, che tova e nakratko. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+gCaO+48lZPXaa+MRAjrlAJsF4AhiEZwU5bN6i77XvGXllIaJcQCfR60z nGWYTZccJmX9wVle35YBahk= =sQgW -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail: TLS bazirani politiki v access_db
On 20 03 2003 12:08, Vesselin Kolev wrote: > Zdraveite, > >Napisah pyrvonachalnia variant na documenta za TLS bazirani politiki > v access_db. Materialyt se namira na adres: > > http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls-relay.html > > i e vkliuchen kato glava v rykovodstvoto za Sendmail: > > http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/ > > Za da razberete niakoi neshta, shte vi e nuzhno tova pomoshtno > chetivo: > > http://www.lcpe.uni-sofia.bg/linuxdoc/CA/ > > > Pozdravi > Vesselin Kolev > > PS. Zadava se i rykovodstvo na integrirane na klientskia software kym > politikite v access_db (KMain, Netscape/Mozilla Messenger) Dokato se napishe doc-a za clients, eto kak stana pri men s izvestna pomost ot CA-to. Legend: *ca.cert = X.509 certificate na CA-to , demek Vesselin Kolev ;-) *danchev.p12 = PKCS#12 certificate-na na CA-to, my one & my secret key Demek tova e client certificate-a. PKCS se polu4ava ot X.509 4rez openssl --see-help... On 19 03 2003 08:47, Vesselin Kolev wrote: Za KMail: Pyrvo triabva da postavish certificate na moiata CA. Otvariash crypto config. menuto na KDE (mozhe napravo ot Konqueror). Otivash na "SSL signers" i tam izbirash "Import". Ukazvash pytia do faila ca.cert (tam e certificate na CA). S tova toi e importnat. danchev.p12 se loadva ot menuto za crypto. configuration na KDE (mozhesh da go izvikash ot browsera Konqueror). Shte se otvori edin prozorec. Tam ima sekcia "Your Certificates". Natiskash "Import" i ukazvash kyde e faila danchev.p12. Posle kato te popita za parola ne my davash nishto, shtoto nie po default go napravihme bez parola. No parola mozhesh da si slozhish ot syshtoto menu "Your Certificates", t.e. niama strashno. Ako vsichko e nared, kato selectnesh v sekciata "Your Certificates" tvoia certificate i izberesh "Verify" ot menuto v diasno, traibva da poluchish potvyrzhdenie za tova, che certifikata e validen i trustnat. Za Mozilla 1.x/Netscape 6.x/7.x Puskash si Mozilla/Netscape. Otivash na Edit->Preferences->Privacy&Security Tam vyv pokazanite vyzmozhnosti izbirash "Certificates"->"Manage Certificates" i v otvorilia se prozorec otivash v sekciata "Your Certificates". Vsyshnost to oshte pri otvarianeto na prozoreca za "Manage Certificates" shte popadnesh po porazbirane v "Your Certificates". Tam izbirash "Import" i ukazvash pytia do danchev.p12 i sled tova go zarezhdash. Imai predvid, che tozi certificate shte zaredi i certificate-a za CA. T.e. niama da ti se nalaga da slagash otdelno CA cert (to i taka ne stava. za da mozhesh da importnesh CA cert samo, e nuzhno da go postavish vyv file s razshirenie .crt i da go otovorish s browsera). Posle spirash Mozilla/Netscape i pak go puskash i traibva da e gotovo vsichko. Za da si siguren, che vsichko e nared, otidi pak v Edit-> Preferences->Privacy&Security->Certificates->Manage Certificates-> Your Certificates. Tam v otvorilia se prozorec v kolonata "Verified" traibva da stoi stoinost "true". Ako tia stoi.. niama problemi-vsichko e nared. V krajna smetka moq KMail se razbira perfect-no s Vesso's Sendmail. 10x. Blah. -- pub 4096R/0E4BD0AB 2003-03-18 (no comments) <[EMAIL PROTECTED]> 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Sendmail: TLS bazirani politiki v access_db
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Napisah pyrvonachalnia variant na documenta za TLS bazirani politiki v access_db. Materialyt se namira na adres: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls-relay.html i e vkliuchen kato glava v rykovodstvoto za Sendmail: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/ Za da razberete niakoi neshta, shte vi e nuzhno tova pomoshtno chetivo: http://www.lcpe.uni-sofia.bg/linuxdoc/CA/ Pozdravi Vesselin Kolev PS. Zadava se i rykovodstvo na integrirane na klientskia software kym politikite v access_db (KMain, Netscape/Mozilla Messenger) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+eZMO+48lZPXaa+MRAhvCAJ9yk5gDUtWKVzRZthPlVCQWNDCXmQCg6CJA ePlA6THg/Mucc1ZAjqMmTr8= =ZBlH -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail: TLS Support - doc
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Samo dopylvam.. za da izprevaria vyprosite. Shte ima opisanie na RELAY politika bazirana na validirane na certificate. Shte ima i obiasnenia kak da se izgradi avtonomna CA sys sertificatna politika za izpolzvane na TLS bazirani mail uslugi na baza certificate, koito mozhe da se vgrazhda v Netscape, Outlook Express i dr. mail clienti, poddyrzhashti pkcs#12. Shte byde opisano i tylkuvaneto na syslog syobshteniata v svetlinata na TLS usluga. Pozdravi Vesselin Kolev On Sunday 16 Mar 2003 17:30, Vesselin Kolev wrote: > Zdraveite, > >Dopylnih malko documentaciata za Sendmail s edna nova glava, > a imenno "TLS poddrzhka". Mozhe bi shte byde interesno za mnogo > ot vas da vidiat, a zashto ne i testvat, cialata izlozhena shema. > > Linkyt s documenta e : > > http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls.html > > Syzheliavam, che ot kraia na oktomvri sym se zael s tova, a chak sega > vizhda bial sviat. Mozhe bi .. izleze zashtoto me provokiraha. > > Shte sym blagodaren za otzivi i vyprosi. > >Pozdravi > Vesselin Kolev > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+dJ1y+48lZPXaa+MRAvdTAJ928GQ+g2lj2dUwoRXUnuc0HKftZgCgt72H qdHaaNOLdLp4wbGe8aB860Q= =b3ox -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Sendmail: TLS Support - doc
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Dopylnih malko documentaciata za Sendmail s edna nova glava, a imenno "TLS poddrzhka". Mozhe bi shte byde interesno za mnogo ot vas da vidiat, a zashto ne i testvat, cialata izlozhena shema. Linkyt s documenta e : http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls.html Syzheliavam, che ot kraia na oktomvri sym se zael s tova, a chak sega vizhda bial sviat. Mozhe bi .. izleze zashtoto me provokiraha. Shte sym blagodaren za otzivi i vyprosi. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+dJiI+48lZPXaa+MRAglBAKDaL9zozXaJzbD5C2uwU+4Epy1f1QCgywp6 0CAsN6zb8eekjCGXoc24kmM= =95i0 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html