Re: lug-bg: Sendmail TLS

2003-06-02 Thread
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

,   ! ;-),   
 - ?  ...   :) 
(! :)

 

 Monday 02 June 2003 09:32, Vesselin Kolev :
 Znachi.. za clientskata chast e dobre da mi postnesh faila
 submit.mc ili kakto ti se kazva tam m4 prototipa na tozi file.

 Dori ako iskash na lichnia mail mi prati dvata si m4 prototipa
 sendmail.mc i submit.mc, cha ako gi postnesh tuk niakoi hora
 shte protestirat sreshtu prekaleno dylgi pisma:)

Pozdravi
Vesselin Kolev

 On Monday 02 Jun 2003 08:53, Konstantin Angelov wrote:
  Imam slednia problem:
 
  sm-msp-queue[25889]: STARTTLS=client: file
  /etc/mail/tls/sendmail-common.key unsafe: Permission denied
 
  Permissions na faila sa:
 
  -rw---1 root root  887 May 30 02:05
  sendmail-common.key
 
  Sendmail e startiran kato root.
 
  Nqkoi moje li da mi kaje kakvo propuskam?
 
 
  =
 == = A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
  http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
  Zagora To unsubscribe:
  http://www.linux-bulgaria.org/public/mail_list.html
  =
 == =

 ===
= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
 http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
 Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
 ===
=

 !DSPAM:3edaf6b9123941585030145
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+2wltbUl2/okDM3URAoAkAJ9E00siqdPikxdrWbw62Q3Gka6y2QCfQCSu
0OxseWhO0i4/M0ONKDSQMxg=
=gKAE
-END PGP SIGNATURE-

A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html



Re: lug-bg: Sendmail: TLS bazirani politiki v access_db

2003-03-25 Thread Vesselin Kolev
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Za Mozilla 1.x/Netscape 6.x/7.x

 certificate-a za CA. T.e. niama da ti se nalaga da slagash otdelno CA cert
 (to i taka ne stava. za da mozhesh da importnesh CA cert samo, e nuzhno da
 go postavish vyv file s razshirenie .crt i da go otovorish s browsera).


Mynichko dopylnenie, koeto ochevidno sym izpusnal. Sled kato CA certificate
se loadne e nuzhno potrebitelia da go obleche v doverie, t.e. da izpolzva
hubavia bylgarski glagol trustvam. Kak stava tova:

  KMail: Otiva se na KDE SSL information (mozhe napravo prez Konqueror),
posle se otiva na Cryptography Configuration i ottam na SSL signers. Tam 
se izbira CA, koiato e izdala certifikata i se markirat poletata:
 - Accept for site signing
 - Accept for email signing
(- Accept for code signing samo, ako shte uploadvate signati softuerni 
paketi)

  I posle kato otidete v Your certificates - Verify shte traibva da 
vidite polozhitelen otgovor za authentikaciata na vashia certifikate:
The certificate passed the verification tests successfully!

  Mozilla 1.x/Netscape 6.x/7.x

  Edit - Preferences - PrivacySecurity - Certificates - Manage 
Certificates - Authorities. Sled tova se markira certifikata i se natiska
butona Edit. Tam po syshtata shema kakto za KMail se ukazva za
kakvo mu se dava doverie.

   Mislia, che tova e nakratko.

Pozdravi
  Vesselin Kolev
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+gCaO+48lZPXaa+MRAjrlAJsF4AhiEZwU5bN6i77XvGXllIaJcQCfR60z
nGWYTZccJmX9wVle35YBahk=
=sQgW
-END PGP SIGNATURE-


A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html



Re: lug-bg: Sendmail: TLS bazirani politiki v access_db

2003-03-24 Thread George Danchev
On 20 03 2003 12:08, Vesselin Kolev wrote:
 Zdraveite,

Napisah pyrvonachalnia variant na documenta za TLS bazirani politiki
 v access_db. Materialyt se namira na adres:

 http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls-relay.html

 i e vkliuchen kato glava v rykovodstvoto za Sendmail:

 http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/

 Za da razberete niakoi neshta, shte vi e nuzhno tova pomoshtno
 chetivo:

 http://www.lcpe.uni-sofia.bg/linuxdoc/CA/


   Pozdravi
   Vesselin Kolev

 PS. Zadava se i rykovodstvo na integrirane na klientskia software kym
 politikite v access_db (KMain, Netscape/Mozilla Messenger)

Dokato se napishe doc-a za clients, eto kak stana pri men s izvestna pomost ot 
CA-to. 

Legend: 
*ca.cert = X.509 certificate na CA-to , demek Vesselin Kolev ;-) 
*danchev.p12 = PKCS#12 certificate-na na CA-to, my one  my secret key
Demek tova e client certificate-a. 

PKCS se polu4ava ot X.509 4rez openssl --see-help... 

On 19 03 2003 08:47, Vesselin Kolev wrote:

Za KMail: Pyrvo triabva da postavish certificate na moiata CA. Otvariash
 crypto config. menuto na KDE (mozhe napravo ot Konqueror). Otivash na
 SSL signers i tam izbirash Import. Ukazvash pytia do faila ca.cert (tam
 e certificate na CA). S tova toi e importnat.

danchev.p12 se loadva ot menuto za crypto. configuration na KDE
 (mozhesh da go izvikash ot browsera Konqueror). Shte se otvori edin
 prozorec. Tam ima sekcia Your Certificates. Natiskash Import i ukazvash
 kyde e faila danchev.p12.  Posle kato te popita za parola ne my davash
 nishto, shtoto nie po default go napravihme bez parola. No parola mozhesh
 da si slozhish ot syshtoto menu Your Certificates, t.e. niama strashno.

   Ako vsichko e nared, kato selectnesh v sekciata Your Certificates tvoia
 certificate i izberesh Verify ot menuto v diasno, traibva da poluchish
 potvyrzhdenie za tova, che certifikata e validen i trustnat.

   Za Mozilla 1.x/Netscape 6.x/7.x

   Puskash si Mozilla/Netscape. Otivash na
 Edit-Preferences-PrivacySecurity Tam vyv pokazanite vyzmozhnosti
 izbirash Certificates-Manage Certificates i v otvorilia se prozorec
 otivash v sekciata Your Certificates. Vsyshnost to oshte pri otvarianeto
 na prozoreca za Manage Certificates shte popadnesh po porazbirane v Your
 Certificates. Tam izbirash Import i ukazvash pytia do danchev.p12 i sled
 tova go zarezhdash. Imai predvid, che tozi certificate shte zaredi i
 certificate-a za CA. T.e. niama da ti se nalaga da slagash otdelno CA cert
 (to i taka ne stava. za da mozhesh da importnesh CA cert samo, e nuzhno da
 go postavish vyv file s razshirenie .crt i da go otovorish s browsera).

   Posle spirash Mozilla/Netscape i pak go puskash i traibva da e gotovo
 vsichko.  Za da si siguren, che vsichko e nared, otidi pak v Edit-
 Preferences-PrivacySecurity-Certificates-Manage Certificates-
 Your Certificates. Tam v otvorilia se prozorec v kolonata Verified
 traibva da stoi stoinost true. Ako tia stoi.. niama problemi-vsichko e
 nared.


V krajna smetka moq KMail se razbira perfect-no s Vesso's Sendmail. 10x. 
Blah.

-- 
pub  4096R/0E4BD0AB 2003-03-18 (no comments) [EMAIL PROTECTED] 
1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB keyserver.bu.edu



A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html



lug-bg: Sendmail: TLS bazirani politiki v access_db

2003-03-20 Thread Vesselin Kolev
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Zdraveite,

   Napisah pyrvonachalnia variant na documenta za TLS bazirani politiki
v access_db. Materialyt se namira na adres:

http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls-relay.html

i e vkliuchen kato glava v rykovodstvoto za Sendmail:

http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/

Za da razberete niakoi neshta, shte vi e nuzhno tova pomoshtno
chetivo:

http://www.lcpe.uni-sofia.bg/linuxdoc/CA/


  Pozdravi
  Vesselin Kolev

PS. Zadava se i rykovodstvo na integrirane na klientskia software kym
politikite v access_db (KMain, Netscape/Mozilla Messenger)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+eZMO+48lZPXaa+MRAhvCAJ9yk5gDUtWKVzRZthPlVCQWNDCXmQCg6CJA
ePlA6THg/Mucc1ZAjqMmTr8=
=ZBlH
-END PGP SIGNATURE-


A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html



lug-bg: Sendmail: TLS Support - doc

2003-03-16 Thread Vesselin Kolev
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Zdraveite,

   Dopylnih malko documentaciata za Sendmail s edna nova glava,
a imenno TLS poddrzhka. Mozhe bi shte byde interesno za mnogo
ot vas da vidiat, a zashto ne i testvat, cialata izlozhena shema.

  Linkyt s documenta e :

http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls.html

  Syzheliavam, che ot kraia na oktomvri sym se zael s tova, a chak sega
vizhda bial sviat. Mozhe bi .. izleze zashtoto me provokiraha.

  Shte sym blagodaren za otzivi i vyprosi.

   Pozdravi
 Vesselin Kolev
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+dJiI+48lZPXaa+MRAglBAKDaL9zozXaJzbD5C2uwU+4Epy1f1QCgywp6
0CAsN6zb8eekjCGXoc24kmM=
=95i0
-END PGP SIGNATURE-


A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html



Re: lug-bg: Sendmail: TLS Support - doc

2003-03-16 Thread Vesselin Kolev
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Samo dopylvam.. za da izprevaria vyprosite. Shte ima opisanie
na RELAY politika bazirana na validirane na certificate. Shte ima
i obiasnenia kak da se izgradi avtonomna CA sys sertificatna
politika za izpolzvane na TLS bazirani mail uslugi na baza
certificate, koito mozhe da se vgrazhda v Netscape, Outlook Express
i dr. mail clienti, poddyrzhashti pkcs#12.

Shte byde opisano i tylkuvaneto na syslog syobshteniata v svetlinata
na TLS usluga.

  Pozdravi
Vesselin Kolev

On Sunday 16 Mar 2003 17:30, Vesselin Kolev wrote:
 Zdraveite,

Dopylnih malko documentaciata za Sendmail s edna nova glava,
 a imenno TLS poddrzhka. Mozhe bi shte byde interesno za mnogo
 ot vas da vidiat, a zashto ne i testvat, cialata izlozhena shema.

   Linkyt s documenta e :

 http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls.html

   Syzheliavam, che ot kraia na oktomvri sym se zael s tova, a chak sega
 vizhda bial sviat. Mozhe bi .. izleze zashtoto me provokiraha.

   Shte sym blagodaren za otzivi i vyprosi.

Pozdravi
  Vesselin Kolev

 ===
= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
 http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
 Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
 ===
=
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+dJ1y+48lZPXaa+MRAvdTAJ928GQ+g2lj2dUwoRXUnuc0HKftZgCgt72H
qdHaaNOLdLp4wbGe8aB860Q=
=b3ox
-END PGP SIGNATURE-


A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html