users September 2013

users@lists.fedoraproject.org

185 participants
243 discussions

free CA?
by Mike Wright 07 Sep '13

07 Sep '13

Hi all, Does anybody know of a free CA (Certificate Authority) that is recognized by common browsers? I have some very low volume non-commercial sites and cannot justify spending $100/year on certificates for them. I tried CAcert by no matter what I did they said they could not contact my mail server in order to verify me. (Same server where my Fedora Users mail arrives w/o problems.) tcpdump shows they came and carried on some sort of conversation. Given all that I gave up on them. Any help would be greatly appreciated, Mike Wright p.s Thank you, Edward Snowden. You've done us all a great service.

3 3

Does 'YUM install' always install the latest app version?
by Fernando Cassia 07 Sep '13

07 Sep '13

Hi there, This is a probably stupid question, but I never checked what strategy yum uses. If I do "yum install firefox" on a freshly installed F19 system, and the initial version of FIrefox on F19 (the one shipped on the LiveCD) is, say, 21.0, but the latest update on the repos is, say, Firefox 23.0. Does "yum install firefox" directly fetch FF 23.0.x, or does it install the "baseline" browser (21.0) and then on the next "yum update firefox" jump to 23?. Thanks in advance. FC -- During times of Universal Deceit, telling the truth becomes a revolutionary act Durante épocas de Engaño Universal, decir la verdad se convierte en un Acto Revolucionario - George Orwell

8 14

Re: tls
by Patrick Dupre 07 Sep '13

07 Sep '13

Hello, Thank. Port 990, is the default (filezilla). By the way, using firewall-config. In public zone service ssh is check but not ftp. Am I supposed to check ftp? The port for ftp is 21 (I guess default). There is no service ftps, do I need to create it? I can easy create port 990, but I not know how to create service ftps associated to a port! Sorry for my poor background in this stuff. > > Am 07.09.2013 01:09, schrieb Patrick Dupre: > >> ----- Original Message ----- > >> From: Reindl Harald > >> Sent: 09/07/13 12:48 AM > >> To: Community support for Fedora users > >> Subject: Re: tls > >> > >> Am 07.09.2013 00:43, schrieb Patrick Dupre: > >>> I installed pure-ftpd on my machine to use the TLS protocle. > >>> I followed the instructions given in: > >>> http://www.howtoforge.com/how-to-configure-pureftpd-to-accept-tls-sessions-… > >>> > >>> but I still cannot ftp by using ftps (filezilla) > >> > >> be explicit - you can not connect or you can not list folders and transfer data > > Status: Connecting to 193.49.194.196:990... > > Status: Connection attempt failed with "EHOSTUNREACH - No route to host". > > Error: Could not connect to server > > why port 990? > > even if the port would be correct you need > a) verify on which ports your daemon is listening (man netstat) > b) make sure that ports are open > > AFAIK it is using STARTTLS > http://en.wikipedia.org/wiki/STARTTLS > > >> http://slacksite.com/other/ftp.html conatins basics about FTP > >> > >>> Do I need to configure the firewall to open the port? > >> > >> you need to open the passive port-range in the firewall by hand > >> "nf_conntrack_ftp" as any other DPI can not work with encrypted streams > > This, I do not know what to do: > > I do not see any nf_conntrack_ftp in public service or in selinux > > man iptables > > if you do not specify "PassivePortRange" the passive port can be anything > between 1024 and 65535 and if you do use active FTP mode than you need > to setup the firewall on the client properly - at the end of the day it > doe snot matter who is chosing the random port for the data connection > and the otehr side has to open this port > > to understand what you are doing i posted > >> http://slacksite.com/other/ftp.html conatins basics about FTP > > only few people (inclduing a lot of professional amdins) do understand FTP really =========================================================================== Patrick DUPRÉ | | email: pdupre(a)gmx.com Laboratoire de Physico-Chimie de l'Atmosphère | | Université du Littoral-Côte d'Opale | | Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44 189A, avenue Maurice Schumann | | 59140 Dunkerque, France ===========================================================================

2 1

tls
by Patrick Dupre 07 Sep '13

07 Sep '13

Hello, I installed pure-ftpd on my machine to use the TLS protocle. I followed the instructions given in: http://www.howtoforge.com/how-to-configure-pureftpd-to-accept-tls-sessions-… TLS 2 but I still cannot ftp by using ftps (filezilla). Do I need to configure the firewall to open the port? in firewall-config, I do not see any tls service. However, in system-config-service, I do see 2 service pure-ftpd one saying that it is running and one not running (The pure-ftpd service will be started on demand by the xinetd service and ends when it has nothing more to do.) Is it normal? Thank for your help. =========================================================================== Patrick DUPRÉ | | email: pdupre(a)gmx.com Laboratoire de Physico-Chimie de l'Atmosphère | | Université du Littoral-Côte d'Opale | | Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44 189A, avenue Maurice Schumann | | 59140 Dunkerque, France ===========================================================================

4 5

Re: users Digest, Vol 115, Issue 16
by Houge Langley 06 Sep '13

06 Sep '13

于 2013年09月07日 02:01, users-request(a)lists.fedoraproject.org 写道: > Re: Something compatible to MS Office on Fedora? You guys may try kingsoft office sute. You could download the rpm installer in http://community.wps.cn/download/ This software not open-source, but it's the best alternative. Totally compatible to M$ Office Documents. More Info: http://linux.wps.cn/

1 0

Something compatible to MS Office on Fedora?
by Oliver Ruebenacker 06 Sep '13

06 Sep '13

Hello, I need to be able to collaborate writing documents with colleagues who use MS Office. That is, we send documents back and forth while each party edits them. It used to be that LibreOffice was acceptable, although way from perfect. But recently, it is causing severe headaches. I'm importing and exporting as DOCX in Writer, and I get cases where it crashes persistently when I want to open a document, or in other cases indentation changes to absurd ways, and math formulas get corrupted and in one case simply vanish. Is there a better alternative? Or a better way to use LibreOffice to share with MS Office? This is a potentially fatal problem. Thanks! Best, Oliver -- Oliver Ruebenacker IT Project Lead at PanGenX (http://www.pangenx.com) Be always grateful, but never satisfied.

17 19

Re: tls
by Patrick Dupre 06 Sep '13

06 Sep '13

> ----- Original Message ----- > From: Reindl Harald > Sent: 09/07/13 12:48 AM > To: Community support for Fedora users > Subject: Re: tls > > Am 07.09.2013 00:43, schrieb Patrick Dupre: > > I installed pure-ftpd on my machine to use the TLS protocle. > > I followed the instructions given in: > > http://www.howtoforge.com/how-to-configure-pureftpd-to-accept-tls-sessions-… > > > > but I still cannot ftp by using ftps (filezilla) > > be explicit - you can not connect or you can not list folders and transfer data Status: Connecting to 193.49.194.196:990... Status: Connection attempt failed with "EHOSTUNREACH - No route to host". Error: Could not connect to server > http://slacksite.com/other/ftp.html conatins basics about FTP > > > Do I need to configure the firewall to open the port? > > you need to open the passive port-range in the firewall by hand > "nf_conntrack_ftp" as any other DPI can not work with encrypted streams This, I do not know what to do: I do not see any nf_conntrack_ftp in public service or in selinux =========================================================================== Patrick DUPRÉ | | email: pdupre(a)gmx.com Laboratoire de Physico-Chimie de l'Atmosphère | | Université du Littoral-Côte d'Opale | | Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44 189A, avenue Maurice Schumann | | 59140 Dunkerque, France ===========================================================================

2 1

Fedora/Redhat and perfect forward secrecy
by Reindl Harald 06 Sep '13

06 Sep '13

https://bugzilla.redhat.com/show_bug.cgi?id=319901 looks like Redhat based systems are the only remaining which does not support EECDHE which is a shame these days in context of PRISM and more and more Ciphers are going to be unuseable (BEAST/CRIME weakness) ______________________________________________________________ https://bugzilla.redhat.com/show_bug.cgi?id=960193 > ECC will be supported on RHEL-6.5 and will also be > part of the planned FIPS-140 revalidation so what is here state of play for Fedora? ______________________________________________________________ https://www.google.at/search?q=postfix+EECDHE https://www.google.at/search?q=%22EECDHE-RSA%22 http://en.wikipedia.org/wiki/Elliptic_curve_Diffie%E2%80%93Hellman http://en.wikipedia.org/wiki/Perfect_forward_secrecy

4 4

"Error: connection activation failed: Device not managed by NetworkManager or unavailable" after moving machine
by Aaron Gray 06 Sep '13

06 Sep '13

Hi, "Error: connection activation failed: Device not managed by NetworkManager or unavailable" I am getting the above error and have tried all my normal mods to try and get a connection. I did move the SATA drive from one machine to another and back, changing the MAC address and putting it back in the process. I have tried adding 'NM_CONTROLLED="yes"' to /etc/sysconfig/network-scripts/ifcfg-em1 but still am not able to get it to work. As I cannot connect to the internet on this device I cannot do any yum reinstalls. Hope you can help, Aaron

3 6

RE: Turning off SELINUX
by Alan Gagne 06 Sep '13

06 Sep '13

> As for the tinfoil hat, it needs two layers --- the inside layer needs > to be orientend shiny-side in, which would prevent the NSA from spying > on your brain waves. But the outside layer needs to be oriented > shiny-side out, to prevent the NSA from feeding your brain with > undesired signals. The two layers need to be well insulated against > each other --- it's obvious that a short-circuit between them will > leave you completely vulnerable... I prefer kevlar in the insulated layer. Also my hat is more of a full helmet. Like to make it slightly more difficult in the event they decide my process needs to be terminated. :-) Alan

1 0

← Newer
1
...
18
19
20
21
22
23
24
25
Older →

Jump to page: