Mister Olli

Hi all,

I'm using openvpn for several years now, with certificates that are
issued by a private Windows based CA.

My clients are provided with an encrypted PKCS#12 container, which
contains:
- CA certificate
- user certificate
- private key

The PKCS#12 container is created manually using openssl and the
following command:

openssl pkcs12 -export -in CLIENT_CERT.pem -inkey CLIENT_KEY.pem -certfile CA_CERT.pem -out CLIENT_PKCS12.pfx

This worked perfectly for quite a few years.
As our current CA certificate is running out of date, we replaced the
Windows CA, due to changed requirements. It is now based on Windows
Server 2008 R2, working as an Enterprise CA within an Active Directory
Environment.

Certificate issuing and PKCS#12 creation did not change. However the new
PKCS#12 give the following error message when I try to connect:

Wed Dec  8 10:31:18 2010 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: $CA_NAME

My first thought was, that the CA cert is not marked as such with the
container, but
    openssl pkcs12 -in client_cert.pfx -cacerts
returns the correct certificate.

I then tested dissambling the PKCS#12 into priv-key/user-cert/ca-cert
and changed client configuration to use this 3 files, with the following
commands:
    openssl pkcs12 -in cert.pfx -nocerts -nodes -out key.pem
    openssl pkcs12 -in cert.pfx -clcerts -nokeys -out client.pem
    openssl pkcs12 -in cert.pfx -cacerts -nokeys -out ca01.pem

Certificate verification of the server cert then works as intended.

My question:
Does anyone know what is wrong with the PKCS#12 container?
Why does OpenVPN do not find the CA certificate, while it is found by
OpenSSL?

Regards,
Mr. Olli

Read more »

hi all,

I just compiled & configured elsa. It looks really cool, great work :-))

however when I start '/usr/sbin/elsa' from outside X, I can login
normally, but a fullscreen sized elsa window remains on desktop 1.

It's possible to close the window by doing 'sudo kill -9 $PID_OF_ELSA'.

I attached my current config and the log file elsa produced. Is there
any more I can do?

Regards,
Mr. Olli

group "Elsa_Config" struct {
    value "session_path" string: "./:/bin:/usr/bin:/usr/local/bin";

    /* X server path */
    value "xinit_path" string: "/usr/bin/X";
    /* X server args */
    value "xinit_args" string: "-nolisten tcp -br vt7";

    /* xauth path binary */
    value "xauth_path" string: "/usr/bin/xauth";
    /* xauth file for server */
    value "xauth_file" string: "/var/run/elsa.auth";

    /* Commands executed when starting a session */
    value "session_start" string: "/usr/bin/sessreg -a -l :0.0";
    /* Command executed when login. Warning xsession must be set to 0 */
    value "session_login" string: "exec /bin/bash -login /etc/X11/xinit/xinitrc";
    /* Commands executed when exiting a session */
    value "session_stop" string: "/usr/bin/sessreg -d -l :0.0";

    /* Commands executed to shutdown */
    value "shutdown" string: "/usr/bin/shutdown -h now";
    /* Command executed to reboot */
    value "reboot" string: "/usr/bin/shutdown -h now";
    /* Command executed to suspend */
    value "suspend" string: "/usr/bin/shutdown -h now";

   /** Start in daemon mode. This can be overriden by the command line
     *  1 = True, 0 = False */
    value "daemonize" uchar: 1;

    /** Bool to determine if elsa must login user with the session_login command
     *  or use xdg desktop and determine the command to use
     *  1 = desktop_file_cmd, 0 = session_login */
    value "xsessions" uchar: 1;

    /* Enable numlock */
    value "numlock" uchar: 1;

    /* Lock file */
    value "lockfile" string: "/var/run/elsa.pid";

    /* Log file */
    value "logfile" string: "/var/log/elsa.log";
}

Read more »

I configured DMPS on my brand new e17 by using
    
    'xset dpms 60 60 60'

Whenever I hit my mouse I get a me dialog saying:

    You disabled screensaver too fast.
    
    Would you like to enable presentation mode and temporarily disable
    screen saver, lock and power saving?

Honestly I don't get what the technical impact of the different answers
is, and why enlightenment is asking this question to me???

could please someone point me to some link or explain what this means...

Regards,
Mr. Olli