Re: httpd: certificate files with prepended intermediates

On Mon, Sep 12, 2016 at 11:16 PM, Ian Sutton wrote: > httpd currently fails to serve over TLS if the certificate file > specified in httpd.conf contains an intermediate certificate ahead of > the site's certificate. httpd still starts with no error indication > (with rcctl) but `httpd -d` shows:

httpd: certificate files with prepended intermediates

httpd currently fails to serve over TLS if the certificate file specified in httpd.conf contains an intermediate certificate ahead of the site's certificate. httpd still starts with no error indication (with rcctl) but `httpd -d` shows: server_tls_init: failed to configure tls - failed to load pri

[SOLVED] Re: Certificate Error "format error in certificate's notAfter field"

On Mon, Sep 12, 2016 at 11:40:44AM -0700, Philip Guenther wrote: > That value is acceptable...when encoded as required. > [...] > The notAfter time is before 2050, so it MUST be encoded as a UTCTIME, > but it isn't. You need to fix your CA software to generate > RFC-compliant certificates when sig

Re: man pages missing in openBSD 6.0

On Sat, Sep 10, 2016 at 02:59:07PM +0200, hom...@mailoo.org wrote: > OpenBSD 6.0 man pages : adduser, rmuser, user are missing. > > Searching these man pages in man60.tgz returns nothing. A few man pages ar in the base tarball. -Otto

man pages missing in openBSD 6.0

OpenBSD 6.0 man pages : adduser, rmuser, user are missing. Searching these man pages in man60.tgz returns nothing.

Re: Certificate Error "format error in certificate's notAfter field"

On Mon, Sep 12, 2016 at 10:47 AM, George Lane wrote: ... > Running a verify on either a server cert (whose key and CSR were > generated on OpenBSD, and cert signed on the Debian server) produces an > error about the notAfter field: > > $ openssl verify -CAfile root-ca.crt server.crt > server.crt:

Certificate Error "format error in certificate's notAfter field"

I have my own PKI running on a Debian 8 server (that I set up using this tutorial: http://pki-tutorial.readthedocs.io/en/latest/index.html). Certificate creation and signing has worked fine on all my Linux- and Windows- based servers and clients, but when I try to use the certs on OpenBSD 6.0 (htt

Re: Building OpenBSD 6.0 -stable - Error

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 09/04/16 04:35, STeve Andre' wrote: > On 09/03/16 11:32, Harald Dunkel wrote: >> On 09/03/16 12:40, Ted Unangst wrote: >>> there's some repo surgery in progress. it should be fixed eventually. >>> >> What exactly does this mean? >> >> > It mean

Re: UPS, Network UPS Tools and UPD(4)

Todd/Stuart, thanks for the responses. Permissions set correctly on /dev/usb1 -- the device the UPS is connected to. And I had been through the package readme. A couple of times! As is often the case I was making this much more complicated than it was. The NUT package installer created the direct

Re: xenocara/app/cwm: sticky command

On Sat 2016.09.10 at 01:06 +0430, Ali Farzanrad wrote: > Hi, > > It seems that cwmrc(5) could not change default key binding for sticky > command and whenever I try to bind keys to sticky, I receive "syntax error". > > I check the codes and found out that in parse.y file "sticky" is a keyword. >

Re: sockaddr_in initialization in ttcp (possibly other programs affected)

Philip Guenther writes: > On Tue, 6 Sep 2016, Héctor Luis Gimbatti wrote: >> I post this to .misc since some other (than ttcp) programs might not >> work in recent versions of OBSD. >> >> In OBSD 5.6 I am able to run ttcp. >> >> $ uname -a >> OpenBSD pez.etale.com.ar 5.6 GENERIC.MP#333 amd64 >> $

Re: Routing 10-40 Mpps on OpenBSD

On Sun, Sep 11, 2016 at 05:46:48PM +, K K wrote: > Chelsio NIcs: Chelsio T540-CR (although not sure there is an OpenBSD driver) There is no driver for these cards. There used to be a work-in-progress driver but it was never finished and hence deleted one year ago. CVSROOT:/cvs Module