519 reputation
29
bio website
location
age
visits member for 3 years, 3 months
seen Dec 1 at 20:42

Apr
11
answered Syncing Google Apps Directory Information to Mac Contacts over cardDAV
Apr
11
answered Is it possible for a spammer to tamper with the received time of an email?
Sep
9
awarded  Yearling
Jul
15
awarded  Peer Pressure
Jul
14
comment Enforce sshd key algorithm
I'm curious - why would you want to require the use of DSA (instead of say RSA or other options)?
Jul
12
comment Setting up SSL with 389 Directory Server for LDAP authentication
Are you saying it is not listening with TLS on 389? In any case the easiest way to ensure that your certs are setup right is to use a webbrowser (say firefox) to connect to the service... just point your web browser at host:636 ; if you get a successful connection (click to view the cert) that the SSL/TLS stuff is fine otherwise it is not.
Jul
12
comment SSH proxy and MySQL on 3rd machine
what is the -q0 in the proxycommand 'nc' call?
Jul
11
answered SSH proxy and MySQL on 3rd machine
Jul
10
comment Setting up SSL with 389 Directory Server for LDAP authentication
"389 side looks fine: server is answering with public certificate and proposing TLSv1" - that's a config problem. It should not be offering TLS on port 389. Port 389 is for ldap while 636 is for ldaps (ldap through TLS/SSL). Do you mean something by 389DS or is that just a way of writing ldap running on port 389?
Jul
10
comment Setting up SSL with 389 Directory Server for LDAP authentication
Isn't this guy on Fedora or something and certutil an MS proprietary tool?
Jul
9
comment SSH proxy and MySQL on 3rd machine
Where is the port forwarding from A to B?
Jul
9
answered Encrypt temporary password using public ssh key
Jun
25
comment ISAPI filter with LDAP over SSL only works as administrator
I imagine that the intermediate CA you had to add was already present in the other account as it had been seen before and was cached (as is typical in browsers).
Jun
22
comment ISAPI filter with LDAP over SSL only works as administrator
Is LDAP_SSL_PORT properly defined in all your scenario?
Jun
22
comment SSL connection errors from Apache
What country are you wgetting from? there is more than one IP or server for that domain name / web-server? What happens if you use openssl s_client -connect host:port -showcerts five times in a row do you get similar error messages to wget? Do you get the same errors each of the five runs?
Jun
21
answered IIS6 Self-Signed certificate not recognized by PHP
Jun
21
answered How can I refresh cached IP for a website in CentOS
Jun
21
answered In Stud, which Private RSA Key should be concatenated in the x509 SSL certificate pem file to avoid “self-signed” browser warning?
Jun
21
comment The SSL certificate doesn't established
To apply for a certificate you must first generate a key-pair - did you do that? Another way to get at the same thing -> where is the CSR you provided the CA (Thawte?) when you enrolled for the certificate?
Jun
19
comment Run SVN commands with self signed SSL cert
It's odd - better to just disable SSL. Beter yet to actually use a cert that you trust and makes sense for the URL.