how to import a zimbra trusting cert into IE

June 16th, 2010

Well, I finally made some progress. Of course, being relatively new to CAs, certificate trust chains, etc. I ended up wasting half my day figuring it out.

Most of the research I did pointed to importing the certificate presented to the browser when using the ZWC into the Trusted Root Certification Authorities store, which no matter how many dozens of ways I did it made no difference. I ended up going into /opt/zimbra/ssl/zimbra/ca and converting the PEM format ca.pem certificate into Windows compatible DER format:

openssl x509 -inform PEM -in ca.pem -outform DER -out ca.cer

Then I imported this into the Trusted Root Certification Authorities store and finally I’m not getting the warnings from IE.

I did have one more question for anyone knowledgeable with certificates and domains/DNS. I’d like to use the servers host name as the URL instead of the FQDN (e.g. https://mail/ instead of https://mail.subdomain.domain.com/) to simplify things, but of course the browser then complains the URL doesn’t match the certificate (issued to mail.subdomain.domain.com). Anyone know if this is possible without getting the warnings? I tried to create a certificate using just the hostname but it requires a proper domain name.
Reply With Quote Quick reply to this message
EnSn
View Public Profile
Send a private message to EnSn
Find all posts by EnSn
Add EnSn to Your Buddy List
#3 (permalink) Add to raj’s Reputation Report Post
Old 03-08-2010, 06:06 PM
raj’s Avatar
raj raj is offline
Moderator
raj’s Zimbra Wiki Sandbox Page

Joined: Oct 2005 – Rep: 6 x 6 raj will become famous soon enoughraj will become famous soon enoughraj will become famous soon enough
Location: USA, Canada and India
ZCS/ZD Version: Release 5.0.18_GA FOSS Ed., CentOS 5.3 on VMware ESXi
Posts: 592
Default
just for future …you can just download the ca.pem and rename to ca.crt and double click on it in windows the install the cert..no need to convert

Raj

Strikeforce 11/7/09 picks

November 8th, 2009

I took Fabricio Werdum -155 for 2 units over Antonio Silva and Jason Miller +235 over Jake Shields. I mistook Silva for Giant Silva (Paulo), so I decided to put more than 1 unit on it. It paid off since I lost on the Miller fight. I got close though! Anyways … I’m now -335. Still in negative territory. :(

how to find a package to install in cygwin

October 27th, 2009

I guess it’s similar to rpm -qf to find out what package a specific binary is included in. You can find out which package a specific binary is in by using their website here: http://cygwin.com/cgi-bin2/package-grep.cgi?grep=startx

In my case, I did a search for startx. I did the same search for telnet.

UFC 104 picks …

October 20th, 2009

OK. Maybe I suck. I’m currently -275 after UFC 102 where I was disappointed by Randy Couture.

I’m not one to chase my bets, so I’ll go consistent.

I’ll take Lyoto Machida -500 over Mauricio “Shogun” Rua. This is a dangerous bet because for one, it’s difficult to fork out $500 to win $100, especially against a fighter that actually has a chance. I’ll take this bet though since Lyoto’s never been hurt, ever, and I can see this fight going like Lyoto’s fight against Thiago Silva.

I’ll also go with Yushin Okami -260 over Chael Sonnen. I don’t think Sonnen’s really that good and Okami’s really strong. I can see Okami just being on top of him the entire fight.

UFC 102 Picks

August 24th, 2009

Since I’m -200 overall at this point, I think I’ll keep my picks to a minimum. I don’t think Leitas really lost that fight last time and nor does Dana White, but so be it. I picked him and the judges went the other way.

So for 102 I’m playing:
-Randy Couture -175 over Antonio Rodrigo Nogueira. I know that Couture is older, but I don’t see Nogueira pulling off a submission or KO. I think Couture is a better wrestler as well.

-Brandon Vera -180 over Krzysztof Soszynski. Soszynski is good, but I really don’t think he has what it takes to beat Vera.

August 11th, 2009

The key to immortality is first living a life worth remembering. – Bruce Lee

UFC 101 picks

August 5th, 2009

-B.J. Penn vs. Kenny Florian

BJ -275. I’ll just play 1 unit here because Kenny does have some chance here. He beat Joe Stevenson faster than BJ did. BJ will win it. I don’t think Florian can beat Penn standing or on the ground.

-Anderson Silva vs. Forrest Griffin

Silva -365. Just 1 unit here too. Damn, those are really bad odds, but I think Silva is a really bad fight for Griffin. Silva will take him out standing.

-Ricardo Almeida vs. Kendall Grove

Almeida -150. I’ll take 1 unit here too. They both have submission skills, but Almeida has super submission skills.

-Alessio Sakara (13-7) vs. Thales Leites (14-2)

Thales Leites -500. I’ll take 1 unit here too. Alessio will get submitted. Leites didn’t get KO’d by Silva. He’s not getting KO’d by Sakara

HP Pavilion 743g sound driver …

June 30th, 2009

This piece of garbage wasted about 5 hours of my time! I admit that I didn’t fully read instructions, but damn! The drivers on HP’s OWN site didn’t work!
So, it’s an Intel Realtek ‘97 driver and the real Realtek ‘97 driver will reboot the computer! It’ll just keep rebooting it and fail every damn time you try to install it!

What I needed was Intel’s AC’97 driver! I found it here: http://forums.majorgeeks.com/showthread.php?t=161428

You’ll need to do a force install on the driver as well. Do NOT allow Windows to detect it. Use the “Don’t search” option and install the driver yourself manually.

apt-get cheatsheet

June 30th, 2009





- nixCraft – http://www.cyberciti.biz/tips -

Debian Linux apt-get package management cheat sheet

Posted By LinuxTitli On May 9, 2005 @ 12:21 pm In Debian Linux, Howto, Linux, Sys admin, Tips, Ubuntu Linux | 6 Comments

[1]

Both Debian and Ubuntu Linux provides a number of package management tools. This article summaries package management command along with it usage and examples for you.

(1) apt-get : APT is acronym for Advanced Package Tool. It supports installing packages over internet (ftp or http). You can also upgrade all packages in single operations, which makes it even more attractive.

(2) dpkg : Debian packaging tool which can be use to install, query, uninstall packages.

(3) Gui tools:

You can also try GUI based or high level interface to the Debian GNU/Linux package system. Following list summaries them:
(1) aptitude [2]: It is a text-based interface to the Debian GNU/Linux package system.
(2) synaptic [3]: GUI front end for APT

Red hat Linux package names generally end in .rpml similarly Debian package names end in .deb, for example:
apache_1.3.31-6_i386.deb

apache : Package name
1.3.31-6 : Version number
i386 : Hardware Platform on which this package will run (i386 == intel x86 based system)
.deb : Extension that suggest it is a Debian package

Remember whenever I refer .deb file it signifies complete file name, and whenever I refer package name it must be first part of .deb file. For example when I refer to package sudo it means sudo only and not the .deb file i.e. sudo_1.6.7p5-2_i386.deb. However do not worry you can find out complete debian package list with the following command:

apt-cache search {package-name}

apt-get add a new package

Add a new package called samba
Syntax: apt-get install {package-name}

# apt-get install samba

apt-get remove the package called samba but keep the configuration files

Syntax: apt-get remove {package-name}

# apt-get remove samba

apt-get remove (erase) package and configuration file

Syntax: apt-get –purge remove {package-name}

# apt-get --purge remove samba

apt-get Update (upgrade) package

Syntax: apt-get upgrade

To upgrade individual package called sudo, enter:
# apt-get install sudo

apt-get display available software updates

Following command will display the list of all available upgrades (updates) using -u option, if you decided to upgrade all of the shown packages just hit ‘y’

# apt-get upgrade samba

However if you just wish to upgrade individual package then use apt-get command and it will take care of rest of your worries:
Syntax: apt-get install {package-name}

dpkg command to get package information such as description of package, version etc.

Syntax: dpkg –info {.deb-package-name}

# dpkg --info sudo_1.6.7p5-2_i386.deb | less

List all installed packages

Syntax: dpkg -l

# dpkg -l

To list individual package try such as apache

# dpkg -l apache

You can also use this command to see (verify) if package sudo is install or not (note that if package is installed then it displays package name along with small description):

# dpkg -l | grep -i 'sudo'

To list packages related to the apache:

# dpkg -l '*apache*'

List files provided (or owned) by the installed package (for example what files are provided by the installed samba package)
Syntax: dpkg -L {package-name}

# dpkg -L samba

(H) List files provided (or owned) by the package (for example what files are provided by the uninstalled sudo package)

Syntax: dpkg –contents {.deb-package-name}

# dpkg --contents sudo_1.6.7p5-2_i386.deb

Find, what package owns the file /bin/netstat?

Syntax: dpkg -S {/path/to/file}

# dpkg -S /bin/netstat

Search for package or package description

Some times you don’t know package name but aware of some keywords to search the package. Once you got package name you can install it using apt-get -i {package-name} command:
Syntax: apt-cache search “Text-to-search”

Find out all the Debian package which can be used for Intrusion Detection

# apt-cache search "Intrusion Detection"

Find out all sniffer packages

# apt-cache search sniffer

Find out if Debian package is installed or not (status)

Syntax: dpkg -s {package-name} | grep Status

# dpkg -s samba| grep Status

List ach dependency a package has…

Display a listing of each dependency a package has and all the possible other packages that can fulfill that dependency. You hardly use this command as apt-get does decent job fulfill all package dependencies.

Syntax: apt-cache depends package

Display dependencies for lsof and mysql-server packages:

# apt-cache depends lsof
# apt-cache depends mysql-server

Further reading


Article printed from nixCraft: http://www.cyberciti.biz/tips

URL to article: http://www.cyberciti.biz/tips/linux-debian-package-management-cheat-sheet.html

URLs in this post:

[1] Image: http://www.cyberciti.biz/tips/category/debian-linux

[2] aptitude: http://www.cyberciti.biz/images/blogs/tips_tricks/aptitude030505.jpg

[3] synaptic: http://www.cyberciti.biz/images/blogs/tips_tricks/synaptic.png

[4] cheat sheet: http://www.cyberciti.biz/howto/question/linux/dpkg-cheat-sheet.php

[5] cheat-sheet: http://www.cyberciti.biz/howto/question/linux/apt-get-cheat-sheet.php

[6] APT and Dpkg Quick Reference Sheet: http://www.cyberciti.biz/tips/ref/apt-dpkg-ref.html

Copyright © 2004-2009 nixCraft. All rights reserved.



How to fix networking after cloning an Ubuntu 8 VM

May 19th, 2009

Stolen from: http://weblog.jamisbuck.org/2008/8/15/cloning-ubuntu-hardy-image-in-vmware-fusion

* “sudo hostname blah”, to set the hostname. This doesn’t change it permanently, so you’ll also want to:
* “sudo vim /etc/hostname”. Change the contents of the file to the hostname you want. Then:
* “sudo vim /etc/hosts”. Replace all mentions of the old hostname with the new hostname.
* “sudo vim /etc/udev/rules.d/70-persistent-net.rules”. There will be two entries in this file. The first points eth0 at the old MAC address, and the second points eth1 at the new. Go ahead and delete the first entry, and change “eth1” to “eth0” in the second (and now only) entry.
* “sudo shutdown -r now” to restart your virtual machine.