Re: [CentOS] CentOS 7 in HP Blade BL620c Gen 7

2016-04-01 Thread Johnny Hughes
On 03/29/2016 05:51 AM, ☼ Francis wrote: > Anyone running CentOS 7 here in HP Blade BL620c Gen 7 when I use the live > DVD the network card can detect and I can use without issue however when I > install the CentOS 7 with Server GUI. The network card can no longer > detect. I tried to google the dr

[CentOS] test - please ignore

2016-04-01 Thread Pawel Eljasz
___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos

[CentOS] RHEL 5 EOL

2016-04-01 Thread Tris Hoar
Hi List, As an FYI Red Hat have announced the 1 year EOL notice for RHEL 5. Anyone still using CentOS 5 would do well to start planning on upgrading to 6 or 7. Tris * This email and any files transmitted with it are confidential an

[CentOS] CentOS-announce Digest, Vol 134, Issue 1

2016-04-01 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ.

[CentOS] Centos7: Mount problem (Unit mnt-bk\x2dbenvet\x2d01.mount is bound to inactive unit dev-disk-by\x2dlabel-bk\x2dbenvet\x2d01.device. Stopping, too.

2016-04-01 Thread Dario Lesca
On a server Centos 7.2  I insert my 1Tb usb disk and run sudo mount LABEL=bk-benvet-01 /mnt/bk-benvet-01 the command seem to work but nothing is mounted Into log I see this issue: > apr 01 13:49:06 s-virt.dom.loc kernel: XFS (sdb1): Mounting V4 Filesystem > apr 01 13:49:06 s-virt.dom.loc kernel

[CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
Hi I am trying to setup a libreswan vpn between centos 7 and a Mikrotik router. I am try to get the keys working. My problem is the Mikrotik router wants the key in PEM format How do I export the keys generated with ipsec newhostkey into PEM format ? Thanks _

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Eero Volotinen
You can do any kind of format conversions with openssl commandline client. Eero 1.4.2016 3.56 ip. "Glenn Pierce" kirjoitti: > Hi I am trying to setup a libreswan vpn between centos 7 and a Mikrotik > router. > > I am try to get the keys working. My problem is the Mikrotik router > wants the key

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
I have tried openssl rsa -in bicester_left.pub -outform pem > bicester_left.pem I get unable to load Private Key 140372295030648:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:701:Expecting: ANY PRIVATE KEY On 1 April 2016 at 13:59, Eero Volotinen wrote: > You can do any kind

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Eero Volotinen
It works, try googling for openssl pem conversion 1.4.2016 4.32 ip. "Glenn Pierce" kirjoitti: > I have tried > openssl rsa -in bicester_left.pub -outform pem > bicester_left.pem > > I get > unable to load Private Key > 140372295030648:error:0906D06C:PEM routines:PEM_read_bio:no start > line:pem_l

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
Sorry but I have looked for over two days. Trying every command I could find. There is obviously a misunderstanding somewhere. After generating a key pair with ipsec newhostkey --configdir /etc/ipsec.d --output /etc/ipsec.d/my.secrets I exported to a file with ipsec showhostkey --ipseckey > file

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Eero Volotinen
So you are using pkcs12 on centos: https://www.sslshopper.com/article-most-common-openssl-commands.html -- Eero 2016-04-01 17:44 GMT+03:00 Glenn Pierce : > Sorry but I have looked for over two days. Trying every command I could > find. > > There is obviously a misunderstanding somewhere. > > Aft

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
Typical I think I just did it . I downloaded a perl script to do it at https://git.dn42.us/ryan/pubkey-converter/raw/master/pubkey-converter.pl First I did ipsec showhostkey --right > right.pub I then edited the file to remove the ipsec key = line Then I converted with perl pubkey-converter.

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Gordon Messmer
On 04/01/2016 07:44 AM, Glenn Pierce wrote: Ie ***.server.net.INIPSECKEY 10 0 2 . Was that a key that you generated as an example, or your actual VPN key? The fact that you obscured part of it makes me think it might be the latter, but if that's the case, you really should generate

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
I just removed the name. I will be regenerating again. To be honest if an attacker to get this to work I would buy then a drink :) On 1 April 2016 at 17:01, Gordon Messmer wrote: > On 04/01/2016 07:44 AM, Glenn Pierce wrote: >> >> Ie >> ***.server.net.INIPSECKEY 10 0 2 . > > > Was that a

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
Just trying to follow the instructions here https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/sec-Securing_Virtual_Private_Networks.html I don't think I am doing anything special. At the point where there is some communication going on Getting this erro

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Eero Volotinen
You must define connection address and key in ipsec.secrets. -- Eero 2016-04-01 19:38 GMT+03:00 Glenn Pierce : > Just trying to follow the instructions here > > https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/sec-Securing_Virtual_Private_Networks.htm

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
I generated according to the docs . Which produced my server.secrets as below used the command ipsec newhostkey --configdir /etc/ipsec.d --output /etc/ipsec.d/www.example.com.secrets : RSA { # RSA 3328 bits ***.**.net Fri Apr 1 15:39:32 2016 # for signatures only, UNSAFE

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Eero Volotinen
IPSec is very complex with certificates. try first with PSK authentication and then with certificates -- Eero 2016-04-01 20:21 GMT+03:00 Glenn Pierce : > I generated according to the docs . Which produced > my server.secrets as below > > used the command > > ipsec newhostkey --configdir /etc/ip

Re: [CentOS] Libreswan PEM format

2016-04-01 Thread Glenn Pierce
I did :) I'm all for an easy life. I got a very similar error instead of but no connection has been authorized with policy RSASIG+IKEV1_ALLOW I got but no connection has been authorized with policy PSK+IKEV1_ALLOW I did read somewhere though errors are re herrings which is helpful. Thanks On 1

Re: [CentOS] RHEL 5 EOL

2016-04-01 Thread Alice Wonder
On 04/01/2016 03:57 AM, Tris Hoar wrote: Hi List, As an FYI Red Hat have announced the 1 year EOL notice for RHEL 5. Anyone still using CentOS 5 would do well to start planning on upgrading to 6 or 7. Tris I would recommend 7 unless you have an application that just won't run on it. And th

Re: [CentOS] Is there a way to detect/validate DHCP static IP assignment?

2016-04-01 Thread David Copperfield
Wow, it works perfectly! all solved. Thanks. -- David On Thursday, March 31, 2016 11:46 AM, David Copperfield wrote: Hi tris,  Many thanks, I'll give the perl script a try shortly Best,David On Thursday, March 31, 2016 6:00 AM, Tris Hoar wrote: On 30/03/2016 18:08, Dav

[CentOS] SSD disk and SMART errors

2016-04-01 Thread Miguel Medalha
Two days ago I installed a brand new SSDNow E50 series (Enterprise) disk on a server. I intend to move the OS there. I just did the physical install and copied a few files to and from it just to see if it was OK. I left it there, waiting for an opportunity to configure it to do real work. Now

Re: [CentOS] SSD disk and SMART errors

2016-04-01 Thread Robert Nichols
On 04/01/2016 06:55 PM, Miguel Medalha wrote: Two days ago I installed a brand new SSDNow E50 series (Enterprise) disk on a server. I intend to move the OS there. I just did the physical install and copied a few files to and from it just to see if it was OK. I left it there, waiting for an opp