LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-02-2010, 05:49 AM   #31
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30

Hi Eric,

i typed sudo rm -r cacert.pem

Code:
xanios@ubuntu:~/demoCA$ sudo rm -r cacert.pem
the certificate still remains.

Code:
xanios@ubuntu:~/demoCA$ cat /etc/ssl/openssl.cnf | grep CA
default_ca	= CA_default		# The default ca section
[ CA_default ]
dir		= ./demoCA		# Where everything is kept
certificate	= $dir/cacert.pem 	# The CA certificate
# For type CA, the listed attributes must be the same, and the optional
# For the CA policy
# This goes against PKIX guidelines but some CAs do it and some software
# requires this to avoid interpreting an end user certificate as a CA.
basicConstraints=CA:FALSE
basicConstraints = CA:FALSE
# Extensions for a typical CA
#basicConstraints = critical,CA:true
basicConstraints = CA:true
# Key usage: this is typical for a CA certificate. However since it will
# nsCertType = sslCA, emailCA
# This goes against PKIX guidelines but some CAs do it and some software
# requires this to avoid interpreting an end user certificate as a CA.
basicConstraints=CA:FALSE

Last edited by Xanios; 08-02-2010 at 05:51 AM.
 
Old 08-02-2010, 05:50 AM   #32
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30
Quote:
Originally Posted by linuxlover.chaitanya View Post
You are still deleting the file from /etc/ssl/CA directory. You need to delete file from demoCA directory.

cd to demoCA with
cd demoCA and now
rm -v cacert.pem
it gave me:

Code:
xanios@ubuntu:~$ cd demoCA
xanios@ubuntu:~/demoCA$ rm -v cacert.pem
rm: cannot remove `cacert.pem': No such file or directory
 
Old 08-02-2010, 05:52 AM   #33
linuxlover.chaitanya
Senior Member
 
Registered: Apr 2008
Location: Nagpur, India
Distribution: Cent OS 5/6, Ubuntu Server 10.04
Posts: 4,629

Rep: Reputation: Disabled
Now if you have already deleted it, you will get the error.
 
Old 08-02-2010, 05:54 AM   #34
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Hi,

Do another ls in the demoCA directory to check if it's gone or not.
Code:
ls -al
when in the demoCA directory.

Kind regards,

Eric
 
Old 08-02-2010, 05:54 AM   #35
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30
Hi Chaitanya,

Nope, still not deleted. i check it using cat /etc/ssl/openssl.cnf | grep CA and it is still there:

Code:
[ CA_default ]
dir		= ./demoCA		# Where everything is kept
certificate	= $dir/cacert.pem 	# The CA certificate
 
Old 08-02-2010, 05:56 AM   #36
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30
Hi Eric,

it is still there

Code:
-rw-r--r--  1 xanios xanios  704 2010-08-02 00:43 careq.pem
 
Old 08-02-2010, 05:58 AM   #37
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Quote:
Originally Posted by Xanios View Post
Hi Eric,

it is still there

Code:
-rw-r--r--  1 xanios xanios  704 2010-08-02 00:43 careq.pem
Hi,

That's another file. The certificate is cacert.pem. careq.pem is the file used for a certificate request.

If cacert.pem is not in the demoCA directory then you can create a new one as you did before.

Kind regards,

Eric
 
Old 08-02-2010, 05:58 AM   #38
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30
Hi,

Code:
xanios@ubuntu:~/demoCA$ ls -al
total 40
drwxr-xr-x  6 xanios xanios 4096 2010-08-02 02:51 .
drwxr-xr-x 41 xanios xanios 4096 2010-08-02 00:44 ..
-rw-r--r--  1 xanios xanios  704 2010-08-02 00:43 careq.pem
drwxr-xr-x  2 xanios xanios 4096 2010-08-02 00:41 certs
drwxr-xr-x  2 xanios xanios 4096 2010-08-02 00:41 crl
-rw-r--r--  1 xanios xanios    3 2010-08-02 02:57 crlnumber
-rw-r--r--  1 xanios xanios    0 2010-08-02 02:57 index.txt
-rw-r--r--  1 xanios xanios   21 2010-08-02 00:43 index.txt.attr
-rw-r--r--  1 xanios xanios    0 2010-08-02 00:41 index.txt.old
drwxr-xr-x  2 xanios xanios 4096 2010-08-02 00:43 newcerts
drwxr-xr-x  2 xanios xanios 4096 2010-08-02 00:41 private
-rw-r--r--  1 xanios xanios   17 2010-08-02 00:43 serial
i still cannot create a new one, means it is still there.
 
Old 08-02-2010, 06:00 AM   #39
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Quote:
Originally Posted by Xanios View Post
Hi Chaitanya,

Nope, still not deleted. i check it using cat /etc/ssl/openssl.cnf | grep CA and it is still there:

Code:
[ CA_default ]
dir		= ./demoCA		# Where everything is kept
certificate	= $dir/cacert.pem 	# The CA certificate
Hello,

This command doesn't tell you anything about the file itself. The only thing this command:
Code:
cat /etc/ssl/openssl.cnf | grep CA
does is show you the content of openssl.conf (cat command) and only those lines that contain CA (the grep part) in them.

Kind regards,

Eric
 
Old 08-02-2010, 06:02 AM   #40
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Quote:
Originally Posted by Xanios View Post
Hi,

Code:
xanios@ubuntu:~/demoCA$ ls -al
total 40
drwxr-xr-x  6 xanios xanios 4096 2010-08-02 02:51 .
drwxr-xr-x 41 xanios xanios 4096 2010-08-02 00:44 ..
-rw-r--r--  1 xanios xanios  704 2010-08-02 00:43 careq.pem
drwxr-xr-x  2 xanios xanios 4096 2010-08-02 00:41 certs
drwxr-xr-x  2 xanios xanios 4096 2010-08-02 00:41 crl
-rw-r--r--  1 xanios xanios    3 2010-08-02 02:57 crlnumber
-rw-r--r--  1 xanios xanios    0 2010-08-02 02:57 index.txt
-rw-r--r--  1 xanios xanios   21 2010-08-02 00:43 index.txt.attr
-rw-r--r--  1 xanios xanios    0 2010-08-02 00:41 index.txt.old
drwxr-xr-x  2 xanios xanios 4096 2010-08-02 00:43 newcerts
drwxr-xr-x  2 xanios xanios 4096 2010-08-02 00:41 private
-rw-r--r--  1 xanios xanios   17 2010-08-02 00:43 serial
i still cannot create a new one, means it is still there.
Hello,

OK, the drastic approach then

Run the following:
Code:
cd
followed by <ENTER> that takes you back to your home directory. Then:
Code:
sudo rm -r demoCA
That will delete the complete demoCA directory after which you will be able to recreate your certificate from zero.

Kind regards,

Eric
 
Old 08-02-2010, 06:03 AM   #41
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30
Hi,

but i still can't create the certificate?

Code:
xanios@ubuntu:~$ /usr/lib/ssl/misc/CA.pl -newca
xanios@ubuntu:~$
by right it should ask me to 'create a certificate..' but it didn't
 
Old 08-02-2010, 06:05 AM   #42
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30
Quote:
Originally Posted by EricTRA View Post
Hello,

OK, the drastic approach then

Run the following:
Code:
cd
followed by <ENTER> that takes you back to your home directory. Then:
Code:
sudo rm -r demoCA
That will delete the complete demoCA directory after which you will be able to recreate your certificate from zero.

Kind regards,

Eric
Hi,

Okay. That did it.
But i wonder how come in the earlier approaches we can't seem to get the certificate deleted. =/ it's so weird.

Anyway, will continue to configure gmail for postfix, hopefully it works do wait for my latest update LOL =X

Thank you to both Eric and Chaitanya *thumbs-up- (:

Last edited by Xanios; 08-02-2010 at 06:07 AM.
 
Old 08-02-2010, 06:10 AM   #43
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Quote:
Originally Posted by Xanios View Post
Hi,

Okay. That did it.
But i wonder how come in the earlier approaches we can't seem to get the certificate deleted. =/ it's so weird.

Anyway, will continue to configure gmail for postfix, hopefully it works do wait for my latest update LOL =X

Thank you to both Eric and Chaitanya *thumbs-up- (:
Hi,

I don't know exactly what the CA.pl script controls (have to read it to find out) in order to determine if a certificate exists or not. Most important is that you got it deleted and can start over again.

Good luck and someone is always around here on LQ to help out, so don't worry about that

Kind regards,

Eric
 
Old 08-02-2010, 06:14 AM   #44
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30
Hi again,

You guys are really helpful, appreciated it lots

Lol sorry for the trouble but now i encountered a problem:

Code:
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
xanios@ubuntu:~$ cp demoCA/cacert.pem FOO-key.pem FOO-cert.pem /etc/postfix
cp: cannot create regular file `/etc/postfix/cacert.pem': Permission denied
cp: cannot create regular file `/etc/postfix/FOO-key.pem': Permission denied
cp: cannot create regular file `/etc/postfix/FOO-cert.pem': Permission denied
xanios@ubuntu:~$
Am supposed to copy them to the /etc/postfix directory as mentioned in the last link you've provided

Last edited by Xanios; 08-02-2010 at 06:16 AM.
 
Old 08-02-2010, 06:19 AM   #45
Xanios
Member
 
Registered: Jul 2010
Posts: 216

Original Poster
Rep: Reputation: 30
Oops, sorry i forgot to put 'sudo'. Too agitated while doing LOL
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Migration Assistant In Ubuntu 9.04 LXer Syndicated Linux News 0 01-08-2009 02:40 PM
not throws evolution setup assistant dissident_goodchild Linux - Software 0 11-16-2007 10:00 PM
Evolution pppoe setup in Ubuntu won't work with dsl Thane Ubuntu 1 08-16-2006 02:11 PM
evolution mail setup hariiyer Linux - Networking 1 03-03-2006 08:41 AM
Evolution - problems after first setup jburford Linux - Software 2 09-08-2002 05:14 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 08:50 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration