- openSUSE Networking

stunnel complains FIPS mode not set
by Zhang Weiwu 17 Dec '13

17 Dec '13

The question is: is FIPS mode supposed to be set for compiling openssl, or for compiling stunnel, or just with OPENSSL_FIPS=1 environment varilable? In the last case, where to put the export command? (tried inserting to /etc/init.d/stunnel in vain). Thanks. stunnel version: ~> zypper se -is stunnel Loading repository data... Reading installed packages... S | Name | Type | Version | Arch | Repository --+---------+---------+----------+--------+------------------ i | stunnel | package | 4.56-1.1 | x86_64 | security: stunnel The error is produced even with a blank configration file (not specifying any section in [xxx] format): > cat /var/log/rc.stunnel.log Clients allowed=500 stunnel 4.56 on x86_64-suse-linux-gnu platform Compiled/running with OpenSSL 1.0.1e 11 Feb 2013 Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS Auth:LIBWRAP Reading configuration from file /etc/stunnel/stunnel.conf FIPS_mode_set: F06D065: error:0F06D065:common libcrypto routines:FIPS_mode_set:fips mode not supported Global options: Failed to initialize SSL str_stats: 5 block(s), 87 data byte(s), 290 control byte(s) -- To unsubscribe, e-mail: opensuse-networking+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-networking+owner(a)opensuse.org

1 0

Re: [opensuse-security] CVE-2013-4854:bind critical security issue ??
by 1xx 31 Jul '13

31 Jul '13

Hi all . 2013/7/30 johann Luce <johann.luce(a)wanadoo.fr>: > > is there something declared about this > > https://kb.isc.org/article/AA-01015/0/CVE-2013-4854%3A-A-specially-crafted-… > > or is it already patched in the 9.9.2 p2??? I built BIND 9.9.2P2 package . http://software.opensuse.org/download.html?project=home%3AMitsutoshi%3Abran… http://software.opensuse.org/package/bind Would you review it ? And would you test it ? Please see also: http://lists.opensuse.org/archive/opensuse-ja/2013-07/msg00182.html . -- 1xx <ItSANgo(a)gmail.com> <https://twitter.com/ItSANgo> <http://d.hatena.ne.jp/Itisango/> -- To unsubscribe, e-mail: opensuse-networking+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-networking+owner(a)opensuse.org

2 3

2 nic's in 1 subnet for iscsi
by Darin Perusich 27 Feb '13

27 Feb '13

Hello all, I'm attempting to setup multipath iscsi to an equallogic ps4100 series san on opensuse 12.1 but I've run into a little issue, networking only working on one of the interfaces in the iscsi network. When both the interfaces in the iscsi network and configured and up I can only ping devices in the network over a single interface, say eth1 (ping -I eth1 172.16.0.2 ), and when i attempt to ping via eth2 ( ping -I eth2 172.16.0.2) it fails w/100% package loss. If I ifdown eth1, i'm then able to ping via eth2 (ping -I eth2 172.16.0.2). I've read/reviewed the SLES11 Storage Admin Guide, various Equallogic docs, and the great and might google, and haven't really come up with much. I think I may need to setup policy routing for this but I haven't had a chance to try it yet, so I figured in the meantime I'd reach out to the community. OpenSUSE 12.1: eth0 = 192.168.0.2 eth1 = 172.16.0.10 (iscsi net) eth2 = 172.16.0.11 (iscsi net) The SAN group_ip is 172.16.0.2 port 3260. Thanks! -- To unsubscribe, e-mail: opensuse-networking+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-networking+owner(a)opensuse.org

2 2

duplicate entry of LOCAL-dirs in mtab
by m.frerichs 18 Oct '12

18 Oct '12

Hello all, This is my constellation: Opensuse 12.1 with nfs-client Version : 1.2.5 Release : 4.3.1 There are several (single!) entries for different homes and /usr/local , /usr/local/etc... in /etc/fstab, because we mount /usr/local/* from our server ,too. After Booting , i wonder that all /usr/local /* entries are mounted twice , shown in /etc/mtab. Home entries are mounted only once. I searched in /etc/init.d/nfs and recognized , that "usr" -mounts are treated separately with mount_usr Uncommenting this , "rcnfs start " mounts /usr/local/ only once. Why do you insert mount_usr? Kind regards +----------------------------------------------------------------------+ | Marianne Frerichs | | Juelich Supercomputing Centre (JSC) | | Institute for Advanced Simulation (IAS) | | Forschungszentrum Juelich GmbH | | D-52425 Juelich | | Phone: +49 02461 61-1466 | | Email: M.Frerichs(a)fz-juelich.de Fax: +49 02461 61-6656 | +----------------------------------------------------------------------+ ------------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------------------ Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Dr. Karl Eugen Huthmacher Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt, Prof. Dr. Sebastian M. Schmidt ------------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------------------ Kennen Sie schon unsere app? http://www.fz-juelich.de/app -- To unsubscribe, e-mail: opensuse-networking+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-networking+owner(a)opensuse.org

1 0

Marketing Jur�dico | Newsletter Inrise Consultoria | Edi��o 27 | Ano 05
by Inrise RH 18 Sep '12

18 Sep '12

1 0

Makeup mirror suppliers shared photos with you
by Makeup mirror suppliers 21 Jul '12

21 Jul '12

Dear: We have obtained your name and address from internet search,I know you sell fashion and promotion item,and we are writing to inquire whether you would be willing to establish business relations with us. We have been manufacturing promotion gift for many years now.our main products have makeup mirror,cosmetic brush,hair comb/brush,manicure sets, bottle opener,measuring tape etc.At present we are interested in extending our overseas market and would appreciate your respond. Considering our competitive prices and high quality,we expect to establish a long-term partnership With you. We look forward to your early reply. Thanks Best Regards! ------------------------------------ Ike Sale Manager Ningbo Yinzhou Victy Craft Factory

1 0

Bug in Wake on LAN (WOL)
by James Knott 15 Jul '12

15 Jul '12

I've noticed a bug in WOL. The normal command is /usrb/in/wol <MAC address>. However, you're supposed to be able to specify a host name or IP address, to force a specific interface. This is done with the -h, --host, -i or --ipaddr options. This is supposed to use the destination IP address, but still use the broadcast MAC. However, instead of using the broadcast MAC, it does an arp to determine the MAC address, which will of course fail, as the computer is not running to respond. If the command is issued while the MAC address is still in the arp cache, it will work. Has anyone else tried this? tnx jk -- To unsubscribe, e-mail: opensuse-networking+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-networking+owner(a)opensuse.org

1 0

led display Suppliers shared photos with you
by led display Suppliers 10 Jun '12

10 Jun '12

Dear Mr/Miss, Still be puzzling about looking for best led display supplier? Now it will be miles easier working with KEROSA! Here you can find competitive price and excellent quality with a best mix. We"ve been in led display career for many years. We know your market and your country well. Our business is flexible which something is more likely to be a friend chat. We never waste your time. Our conversation will be very efficient base on our good communication. Please reply as soon as possible .if you are working on some led display project. We are ready to make you a satisfied offer! Samuel Shezhen Krosa Techology Co.,Ltd. Address: Building 3,Park,Guanguang road,Bao"an District,Shenzhen,China. post 518000

1 0

VLAN & Network Manager 12.1
by James Knott 23 Apr '12

23 Apr '12

Is it possible to set up a VLAN with the Network Manager in 12.1? I don't see any way to do that. It's easy enough with the traditional ifup method. I use the KDE desktop. tnx jk -- To unsubscribe, e-mail: opensuse-networking+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-networking+owner(a)opensuse.org

1 0

Why no IPv6 link local address?
by James Knott 01 Jan '12

01 Jan '12

My firewall is an old computer running openSUSE 11.3 and I have IPv6 running on it. However, the NIC facing my cable modem does not show an IPv6 link local address, which every NIC is supposed to have, if IPv6 is enabled. The NIC facing my LAN has both link local and public unicast addresses. I had considered that something in my cable modem might be inhibiting it, but when I plug my notebook computer directly into the modem, it has a link local address. I tried booting from a live 12.1 CD and had link local addresses on both LAN & WAN interfaces, so there's something in openSUSE 11.3, as installed, that's disabling it. I tried turning off the firewall, but that also didn't make any difference. Any idea why that one NIC doesn't have a link local address? tnx jk -- To unsubscribe, e-mail: opensuse-networking+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-networking+owner(a)opensuse.org

1 0