Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Nicolas Kovacs
Le 26/04/2017 à 16:16, James Hogarth a écrit : > I'm not 100% on any differences in ciphers available, but I don't > think there should be much difference between EL7 and Fedora. > > This config gets my an A+ rating on the sslabs test: > > SSLEngine on > SSLProtocol all -SSLv2 -SSLv3 > SSLCipherS

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Leon Fauster
> Am 26.04.2017 um 17:17 schrieb Fabian Arrotin : > > On 26/04/17 16:16, James Hogarth wrote: >> On 26 April 2017 at 13:16, Steven Tardy wrote: >>> On Apr 26, 2017, at 2:58 AM, Nicolas Kovacs wrote: The site is rated "C" >>> >>> The RHEL/CentOS out-of-the-box apache tls is a li

Re: [CentOS] NOT Solved - Re: SELinux policy to allow Dovecot to connect to Mysql

2017-04-26 Thread Robert Moskowitz
Thanks for the advice. Will see what I can get done this evening. On 04/26/2017 06:27 PM, Gordon Messmer wrote: On 04/26/2017 12:29 AM, Robert Moskowitz wrote: But the policy generates errors. I will have to submit a bug report, it seems A bug report would probably be helpful. I'm lookin

Re: [CentOS] NOT Solved - Re: SELinux policy to allow Dovecot to connect to Mysql

2017-04-26 Thread Gordon Messmer
On 04/26/2017 12:29 AM, Robert Moskowitz wrote: But the policy generates errors. I will have to submit a bug report, it seems A bug report would probably be helpful. I'm looking back at the message you wrote describing errors in ld-2.17.so. I think what's happening is that the policy on y

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Fabian Arrotin
On 26/04/17 16:16, James Hogarth wrote: > On 26 April 2017 at 13:16, Steven Tardy wrote: >> >>> On Apr 26, 2017, at 2:58 AM, Nicolas Kovacs wrote: >>> >>> The site is rated "C" >> >> The RHEL/CentOS out-of-the-box apache tls is a little old but operational. >> This Mozilla resource is excellent

Re: [CentOS] can't create printers after upgrading cups

2017-04-26 Thread Vanhorn, Mike
It looks like this may just be a bug upstream: https://access.redhat.com/solutions/3001891 Still trying the work-arounds. --- Mike VanHorn Senior Computer Systems Administrator College of Engineering and Computer Science Wright State University 265 Russ Engineering Center 937-775-5157 michael.v

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread James Hogarth
On 26 April 2017 at 13:16, Steven Tardy wrote: > >> On Apr 26, 2017, at 2:58 AM, Nicolas Kovacs wrote: >> >> The site is rated "C" > > The RHEL/CentOS out-of-the-box apache tls is a little old but operational. > This Mozilla resource is excellent for getting apache tls config up-to-date. > > htt

[CentOS] can't create printers after upgrading cups

2017-04-26 Thread Vanhorn, Mike
After upgrading cups on my CentOS 6 systems from version 1.4.2-72.el6 to 1.4.2-77.el6, I am no longer able to create working printers, either with lpadmin from the command line or with system-config-printer. When I try to run lpadmin, I get this simple error: [root@vlsi66 ~]# lpadmin -p newpr

[CentOS] rsyslog and zipping up "rotated" files

2017-04-26 Thread Ian Diddams
l the mail messages in one place.mail.*                                                  -?mailLog... so that I get over time .. /var/log/external/server/maillog-20170424.log /var/log/external/server/maillog-20170425.log /var/log/external/server/maillog-20170426.log etc. Over time of course thes

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Steven Tardy
> On Apr 26, 2017, at 2:58 AM, Nicolas Kovacs wrote: > > The site is rated "C" The RHEL/CentOS out-of-the-box apache tls is a little old but operational. This Mozilla resource is excellent for getting apache tls config up-to-date. https://wiki.mozilla.org/Security/Server_Side_TLS

Re: [CentOS] saslauth logging

2017-04-26 Thread John Hodrien
On Wed, 26 Apr 2017, Jobst Schmalenbach wrote: On Tue, Apr 25, 2017 at 07:14:56PM -0700, Gordon Messmer (gordon.mess...@gmail.com) wrote: On 04/25/2017 07:00 PM, Jobst Schmalenbach wrote: What I want is the IP address and if possible the incorrect password (just to see how far they are off).

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Tru Huynh
Hi, On Wed, Apr 26, 2017 at 08:58:39AM +0200, Nicolas Kovacs wrote: ... > * This server is vulnerable to the POODLE attack. If possible, disable > SSL 3 to mitigate. Grade capped to C." https://wiki.centos.org/Security/POODLE <...> Tru -- Tru Huynh http://pgp.mit.edu:11371/pks/lookup?op=get&se

Re: [CentOS] NOT Solved - Re: SELinux policy to allow Dovecot to connect to Mysql

2017-04-26 Thread Robert Moskowitz
thanks. On 04/26/2017 08:55 AM, Phoenix, Merka wrote: Robert, in regards to your Postfix and Dovecot issue with MySQL and SELinux, Apr 26 01:25:45 z9m9z dovecot: dict: Error: mysql(/var/lib/mysql/mysql.sock): Connect failed to database (postfix): Can't connect to local MySQL server through so