Package: cone
Version: 0.74-2+b1
Severity: normal

If you try to make an SSL connection from a new cone installation you
get a message which says

    Unable to initialize an encrypted connection because root authority
    certificates are not installed.

I found it very hard to figure out how to install the certificates.

One confusing thing was that the package ships with many certs in
/usr/share/cone/rootcerts, but they aren't enabled by default.

Eventually I found the answer by using the source code.  You've got to
set TLS_TRUSTCERTS in the environment.  A little more digging revealed
that this would normally be done by a setting in the configuration
file /etc/cone.

I couldn't find mention of /etc/cone anywhere in the distributed package.

I'd like to suggest that either /etc/cone.dist be shipped as /etc/cone
instead, or that a README.Debian be included which mentions /etc/cone.
Thanks.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (870, 'stable'), (700, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-686-bigmem
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages cone depends on:
ii  libc6                     2.7-10         GNU C Library: Shared libraries
ii  libfam0                   2.7.0-12       Client library to control the FAM 
ii  libgcc1                   1:4.1.1-21     GCC support library
ii  libldap-2.4-2             2.4.7-6.1      OpenLDAP libraries
ii  libncursesw5              5.6+20080405-2 Shared libraries for terminal hand
ii  libssl0.9.8               0.9.8g-8       SSL shared libraries
ii  libstdc++6                4.3.0-3        The GNU Standard C++ Library v3
ii  libxml2                   2.6.27.dfsg-2  GNOME XML library

cone recommends no packages.

-- no debconf information

-- 
Roderick Schertler
[EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to