diff options
Diffstat (limited to 'zarb-ml/mageia-sysadm/2012-February/004212.html')
| -rw-r--r-- | zarb-ml/mageia-sysadm/2012-February/004212.html | 75 |
1 files changed, 75 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2012-February/004212.html b/zarb-ml/mageia-sysadm/2012-February/004212.html new file mode 100644 index 000000000..324c4b130 --- /dev/null +++ b/zarb-ml/mageia-sysadm/2012-February/004212.html @@ -0,0 +1,75 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-sysadm] ldap server certificate (was: Re: [Mageia-discuss] Fosdem report) + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20ldap%20server%20certificate%20%28was%3A%0A%09Re%3A%09%5BMageia-discuss%5D%20Fosdem%20report%29&In-Reply-To=%3C20120214173909.GH21938%40mars-attacks.org%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="004211.html"> + <LINK REL="Next" HREF="004215.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-sysadm] ldap server certificate (was: Re: [Mageia-discuss] Fosdem report)</H1> + <B>nicolas vigier</B> + <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20ldap%20server%20certificate%20%28was%3A%0A%09Re%3A%09%5BMageia-discuss%5D%20Fosdem%20report%29&In-Reply-To=%3C20120214173909.GH21938%40mars-attacks.org%3E" + TITLE="[Mageia-sysadm] ldap server certificate (was: Re: [Mageia-discuss] Fosdem report)">boklm at mars-attacks.org + </A><BR> + <I>Tue Feb 14 18:39:09 CET 2012</I> + <P><UL> + <LI>Previous message: <A HREF="004211.html">[Mageia-sysadm] ldap server certificate (was: Re: [Mageia-discuss] Fosdem report) +</A></li> + <LI>Next message: <A HREF="004215.html">[Mageia-sysadm] ldap server certificate (was: Re: [Mageia-discuss] Fosdem report) +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#4212">[ date ]</a> + <a href="thread.html#4212">[ thread ]</a> + <a href="subject.html#4212">[ subject ]</a> + <a href="author.html#4212">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>On Tue, 14 Feb 2012, Romain d'Alverny wrote: + +><i> On Tue, Feb 14, 2012 at 17:35, Michael Scherer <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-sysadm">misc at zarb.org</A>> wrote: +</I>><i> >> It looks like we are still using a self-signed certificate on the ldap +</I>><i> >> server. So it's required to have "TLS_REQCERT allow" in /etc/openldap/ldap.conf +</I>><i> >> to be able to connect to the ldap server. +</I>><i> >> +</I>><i> >> Should we also use the *.mageia.org certificate on the ldap server ? +</I>><i> +</I>><i> Wouldn't that make sense? +</I> +That would work, but some people can easily get any certificate signed +by official certificate authorities, so it's not very reliable, it's +only useful to remove warnings in web browsers. And we have a wildcard +certificate, so the same certificate is used on all mageia https +websites, and if one of the server is compromised then the key used by +the ldap server can be stolen. + +</PRE> + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="004211.html">[Mageia-sysadm] ldap server certificate (was: Re: [Mageia-discuss] Fosdem report) +</A></li> + <LI>Next message: <A HREF="004215.html">[Mageia-sysadm] ldap server certificate (was: Re: [Mageia-discuss] Fosdem report) +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#4212">[ date ]</a> + <a href="thread.html#4212">[ thread ]</a> + <a href="subject.html#4212">[ subject ]</a> + <a href="author.html#4212">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm +mailing list</a><br> +</body></html> |