May 2007 - openSUSE Users - openSUSE Mailing Lists

[opensuse] stunnel certificates
by Koenraad Lelong 31 May '07

31 May '07

Hi, I want to secure access to a databese server (Firebird). I want to do this with stunnel. I'm having troubles with the certificates. This is what I did, using standard Suse 10.0 stuff (I modified openssl.cnf to have a number of defaults) : #in a clean directory create structure : mkdir demoCA mkdir demoCA/private mkdir demoCA/newcerts touch demoCA/index.txt echo 00 > demoCA/serial #Create CA files openssl req -new -x509 -keyout demoCA/private/cakey.pem -out \ demoCA/cacert.pem #Create server key & signing request openssl req -nodes -new -newkey rsa:1024 -keyout server.key -out \ server.req #sign server certificate openssl ca -policy policy_anything -notext -in server.req -out \ server.crt #Create client key & signing request openssl req -nodes -new -newkey rsa:1024 -keyout client.key -out \ client.req #sign client certificate openssl ca -policy policy_anything -notext -in client.req -out \ client.crt cp demoCA/newcerts/00.pem /etc/stunnel/server.pem cp demoCA/cacert.pem /etc/stunnel/cacert.pem chmod 740 /etc/stunnel/server.pem My stunnel.conf is : client = no foreground = yes debug = 7 verify = 3 CApath = certs CAfile = cacert.pem cert = server.pem [firebird] accept = 3051 connect = localhost:3050 When I try to start stunnel I get : ace-cad-3:/etc/stunnel # stunnel stunnel.conf 2007.05.30 12:59:33 LOG7[14071:1076660896]: Snagged 64 random bytes from /root/.rnd 2007.05.30 12:59:33 LOG7[14071:1076660896]: Wrote 1024 new random bytes to /root/.rnd 2007.05.30 12:59:33 LOG7[14071:1076660896]: RAND_status claims sufficient entropy for the PRNG 2007.05.30 12:59:33 LOG6[14071:1076660896]: PRNG seeded successfully 2007.05.30 12:59:33 LOG5[14071:1076660896]: Could not load DH parameters from server.pem 2007.05.30 12:59:33 LOG4[14071:1076660896]: Diffie-Hellman initialization failed 2007.05.30 12:59:33 LOG3[14071:1076660896]: Error reading certificate file: server.pem 2007.05.30 12:59:33 LOG3[14071:1076660896]: SSL_CTX_use_certificate_chain_file: 906D06C: error:0906D06C:PEM routines:PEM_read_bio:no start line ace-cad-3:/etc/stunnel # This procedure is an adaptation from a document from the Firebird community. What am I missing ? I think the Diffie-Hellman stuff can be ignored. I tried three other documents (from the stunnel-site) but these don't work either (for me ;-) ). Anyone can give suggestions, tips, links ? They will be very much appreciated. Are there other methods ? I don't want to give ssh access to the users. I know of zebedee, but this seems old (unsupported ?). -- Met vriendelijke groeten, Koenraad Lelong R&D Manager ACE electronics n.v. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2

[opensuse] problems with mplayer plugin for mozilla
by jdd 31 May '07

31 May '07

Hello, I can't read the videos on my daugther blog (end of the page) http://www.orangeblog.fr/web/jsp/blog.jsp?blogID=170322 they ask for quicktime or realplayer. For QT, say I have no plugin, for Real mplayer starts but stops without playing. Tha videos are not downloadable, so I'm stuck I have the same result for several seamonkey and firefox or mozilla installs (probably same plugin) I already have changed plugins in mozilla, but I don't remember the way and can't find it on google. Do you have any idea? thanks jdd -- http://www.dodin.net http://gourmandises.orangeblog.fr/ -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

5 6

[opensuse] How to keep downloaded updates
by Stuart Murray-Smith 31 May '07

31 May '07

Hi list How do I 'keep' downloaded updates? TiA Stuart -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2

[opensuse] Re: Probably not important but
by Eberhard Roloff 31 May '07

31 May '07

Petr Klíma wrote: > You've missed something called Cool'n'Quiet. In other words - everything > you read is correct, it's just power saving through frequency throttling. > > /proc/cpuinfo reports CURRENT frequency, therefore if you load your > machine e.g. with creating .tar.bz2 archives of big directories, you > should imediately see frequency jumping up to the spec values. > > Tosuja > Probably usefull in regard to Cool'n'Quiet handling might be the "Athlon Powersaving howto" on tldp.org, which has recently been upgraded. regards Eberhard -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 0

[opensuse] monitor sync ranges
by Herbert Georg 31 May '07

31 May '07

Hi there, I installed the latest Nvidia driver and it detected correctly my graphics card and monitor. And assigned correctly the sync ranges. I'm using the 1280x1024 mode. But I wanted to lower the monitor frequencies to do a test. So I opened sax2 and lowered the maximum values. But when I test the sax2 configuration it shows me the old high frequency values. Even if I save the configuration (and looking at the /etc/X11/xorg.conf the ranges are correctly modified) sax2 keeps on showing the old high values. Same if I restart X. My modified ranges are: HorizSync 28-65 kHz and VertRefresh 56-60 Hz. But sax2 says, in that test screen, that the current values are 80kHz and 75Hz. So, is sax2 not showing the actual values or X is not using the values in the range? How can I be sure about the frequencies actually being used? Is there a command that shows me this information? My xorg.conf: # /.../ # SaX generated X11 config file # Created on: 2007-05-30T18:15:34-0300. # # Version: 7.1 # Contact: Marcus Schaefer <sax(a)suse.de>, 2002 # # Automatically generated by [ISaX] (7.1) # PLEASE DO NOT EDIT THIS FILE! # Section "Monitor" DisplaySize 340 270 HorizSync 28-65 Identifier "Monitor[0]" ModelName "LG ELECTRONICS L1753T" Option "DPMS" VendorName "GSM" VertRefresh 56-60 UseModes "Modes[0]" EndSection Section "Modes" Identifier "Modes[0]" Modeline "1280x1024" 105.15 1280 1360 1496 1712 1024 1025 1028 1059 Modeline "1280x960" 97.68 1280 1352 1488 1696 960 961 964 993 Modeline "1280x800" 80.58 1280 1344 1480 1680 800 801 804 827 Modeline "1152x864" 78.82 1152 1216 1336 1520 864 865 868 894 Modeline "1280x768" 77.37 1280 1344 1480 1680 768 769 772 794 Modeline "1024x768" 61.89 1024 1080 1184 1344 768 769 772 794 Modeline "800x600" 36.88 800 832 912 1024 600 601 604 621 Modeline "768x576" 33.74 768 792 872 976 576 577 580 596 Modeline "640x480" 23.06 640 656 720 800 480 481 484 497 EndSection Section "Screen" DefaultDepth 24 SubSection "Display" Depth 15 Modes "1280x1024" "1280x960" "1280x800" "1152x864" "1280x768" "1024x768" "800x600" "768x576" "640x480" EndSubSection SubSection "Display" Depth 16 Modes "1280x1024" "1280x960" "1280x800" "1152x864" "1280x768" "1024x768" "800x600" "768x576" "640x480" EndSubSection SubSection "Display" Depth 24 Modes "1280x1024" "1280x960" "1280x800" "1152x864" "1280x768" "1024x768" "800x600" "768x576" "640x480" EndSubSection SubSection "Display" Depth 32 Modes "1280x1024" "1280x960" "1280x800" "1152x864" "1280x768" "1024x768" "800x600" "768x576" "640x480" EndSubSection SubSection "Display" Depth 8 Modes "1280x1024" "1280x960" "1280x800" "1152x864" "1280x768" "1024x768" "800x600" "768x576" "640x480" EndSubSection Device "Device[0]" Identifier "Screen[0]" Monitor "Monitor[0]" EndSection Section "Device" BoardName "GeForce FX 5200 (0x0322)" BusID "3:0:0" Driver "nvidia" Identifier "Device[0]" Option "NoLogo" Screen 0 VendorName "NVidia" EndSection Section "ServerLayout" Identifier "Layout[all]" InputDevice "Keyboard[0]" "CoreKeyboard" InputDevice "Mouse[1]" "CorePointer" Option "Clone" "off" Option "Xinerama" "off" Screen "Screen[0]" EndSection Section "DRI" Group "video" Mode 0660 EndSection Section "Extensions" EndSection -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] After installation nvidia driver is command line unreadable/cramped
by Krupanský Rastislav 31 May '07

31 May '07

Hello I´ve bought a new monitor Benq FP202W.I´ve got a VGA Asus Nvidia 6600.After installation Nvidia driver when i switch to command line(ctrl+alt+F1), monitor has got blurred picture.It is impossible to read, so i can´t work in command line-it is unusable.And when i turn off pc, blue splash screen is blurred also. I hope you understand me, what i mean. For better explanation I´d like to make a screenshots of command line, but i don´t know if it possible and how. Up to now i had Prestigio P1710 and it worked fine. Regards, Rasto -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 3

Re: [opensuse] XVNC Activating itself -- sign of scurity breach?
by Patrick Shanahan 31 May '07

31 May '07

* David McMillan <skyefire(a)skyefire.org> [05-30-07 21:36]: > Patrick Shanahan wrote: > >* David McMillan <skyefire(a)skyefire.org> [05-30-07 20:56]: > >> In the past two months, I've had two incidents where, when I ran 'top,' > >>I found XVNC running (and taking up a good 75% of my CPU), for no > >>apparent reason on my 10.2 system. > >> Now, I have "Remote Desktop Sharing" turned on on this machine (though > >>I've never been able to get VNC to connect across the LAN from my WXP > >>laptop -- only browsing to http://host:5801 works so far), but at > >>neither of these incidents had I been using, or even attempting to use, > >>a VNC or RD connection to the 10.2 machine, at any time in the recent > >>past. > > > >You *are* using vnc, http://host:5801 is a vnc connection. > > Yes, I know -- what I meant was, *at the time of the incidents,* I > hadn't made any VNC connection attempts, via HTTP or otherwise, in > *days,* if not weeks. There were definitely no VNC connections being > made from any of *my* machines on my LAN. That's what's puzzling (and > worrying me) about seeing XVNC active, and eating up so much CPU. man vnc rpm -ql vnc there is a server, client, viewer, ..... -- Patrick Shanahan Plainfield, Indiana, USA HOG # US1244711 http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 OpenSUSE Linux http://en.opensuse.org/ Registered Linux User #207535 @ http://counter.li.org -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] XVNC Activating itself -- sign of scurity breach?
by David McMillan 31 May '07

31 May '07

In the past two months, I've had two incidents where, when I ran 'top,' I found XVNC running (and taking up a good 75% of my CPU), for no apparent reason on my 10.2 system. Now, I have "Remote Desktop Sharing" turned on on this machine (though I've never been able to get VNC to connect across the LAN from my WXP laptop -- only browsing to http://host:5801 works so far), but at neither of these incidents had I been using, or even attempting to use, a VNC or RD connection to the 10.2 machine, at any time in the recent past. So, if I'm not trying to access this machine via VNC, is there any reason that XVNC would show so much activity? Is this, potentially, a sign that my machine is being accessed from outside? And if so, how do I go about nailing down exactly what's happening? I've never had to deal with intrusions before, so I'm a bit out of my depth here. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] beryl and video
by josenildo marques 30 May '07

30 May '07

Hello! Since I started to use beryl, I haven't been able to play videos. Kaffeine doesn't even start. My card is: NVidia GeForce MX/MX400. How could I fix that? Thansks in advance. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] Re: [opensuse-factory] Making Basic Utilities work under normal user
by Druid 30 May '07

30 May '07

On 5/30/07, Alexey Eremenko <al4321(a)gmail.com> wrote: > Adding /sbin/ to user's $PATH doesn't lower your security. (because Thats your oppinion or do you have some way to prove that? Its very interesting that everybody using linux and defining LSB and FHS are wrong and you are correct... Let's not make some weirdness that will make us a joke among the linux distros, ok? Pascal said everything... Marcio --- druid -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

6 6