Bug#368420: ftpd-ssl: RC abuse of /etc/ssl/certs

2006-06-26 Thread James Westby
package ftpd-ssl tags 368420 patch thanks Hi, Attached is a patch that I think implements the necessary changes. It keeps a combined file, but moves it to /etc/ftpd-ssl. It is supposed to handle upgrades in the following way. 1) If /etc/ssl/certs/ftpd.pem still exists then it moves it to the n

Bug#368420: ftpd-ssl: RC abuse of /etc/ssl/certs

2006-06-26 Thread James Westby
Hi, It should be possible to do this. In the postinst of ftpd-ssl there is a cert created with openssl req -new -x509 -nodes -out ftpd.pem -keyout ftpd.pem If the keyout of this argument is changed then the private key is written to a separate file, and the cert file can then be world readabl

Bug#368420: ftpd-ssl: RC abuse of /etc/ssl/certs

2006-06-26 Thread James Westby
Hi, It does work with -z cert=/etc/ftpd-ssl/ftpd.pem -z key=/etc/ftpd-ssl/ftpd.pem in the inetd config, so maybe this is the best bet. -- James Westby [EMAIL PROTECTED] http://jameswestby.net/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? C

Bug#368420: ftpd-ssl: RC abuse of /etc/ssl/certs

2006-06-03 Thread Richard A Nelson
On Mon, 29 May 2006, Cai Qian wrote: As there is no upstream support anymore, can you provide a simple patch for it? Unfortunately not, some time ago I moved to using vsfptd. The certificate was still about, which caused my problem. Sorry, -- Rick Nelson wow... simple maths show that Debian

Bug#368420: ftpd-ssl: RC abuse of /etc/ssl/certs

2006-05-28 Thread Cai Qian
Hi, From: Richard A Nelson <[EMAIL PROTECTED]> Subject: Bug#368420: ftpd-ssl: RC abuse of /etc/ssl/certs Date: Sun, 21 May 2006 19:09:45 -0700 > Package: ftpd-ssl > Version: 0.17.18+0.3-5 > Severity: critical > Justification: breaks unrelated software > > RC abuse of /

Bug#368420: ftpd-ssl: RC abuse of /etc/ssl/certs

2006-05-21 Thread Richard A Nelson
Package: ftpd-ssl Version: 0.17.18+0.3-5 Severity: critical Justification: breaks unrelated software RC abuse of /etc/ssl/certs, rendering certificate validation inoperable. There are two problems with this packages use of /etc/ssl/certs: * Files in /etc/ssl/certs must be a+r - GNUTLS