store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Fri Apr 18, 2014 11:52 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 3 posts ] 
Author Message
 Post subject: ASL updates not working on EL4 because of SSL certificate
Unread postPosted: Wed Feb 08, 2012 4:19 pm 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Sat Aug 20, 2005 9:30 am
Posts: 2812
Location: The Netherlands
EL4 doesn't accept the SSL certificate used on www.atomicorp.com, which breaks the ASL updater:

Code:
# asl -u
Checking for updates..
  ASL version is current: 3.0.19                           [OK]
  APPINV rules are current: 201201041122                   [OK]

    Update failed for some reason, retrying with full debug information...
--14:14:32--  https://*username*:*password*@www.atomicorp.com/channels/asl-3.0/rules//clamav-201202081302.tar.gz
           => `/var/asl/updates/clamav-201202081302.tar.gz'
Resolving www.atomicorp.com... 74.208.155.133
Connecting to www.atomicorp.com|74.208.155.133|:443... connected.
ERROR: Certificate verification error for www.atomicorp.com: self signed certificate in certificate chain
To connect to www.atomicorp.com insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.

_________________
Lemonbit Internet Dedicated Server Management


Top
 Profile  
 
 Post subject: Re: ASL updates not working on EL4 because of SSL certificat
Unread postPosted: Wed Feb 08, 2012 4:42 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3548
Location: Chantilly, VA
Please see the release notes:

https://www.atomicorp.com/wiki/index.ph ... own_Issues

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: ASL updates not working on EL4 because of SSL certificat
Unread postPosted: Wed Feb 08, 2012 4:46 pm 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Sat Aug 20, 2005 9:30 am
Posts: 2812
Location: The Netherlands
I think I already know what happened. I installed the other cert.pem before on these servers, but the recent openssl update overwrote them. Maybe something for an ASL self healing rule? ASL users might not notice they're not getting ASL updates anymore.

_________________
Lemonbit Internet Dedicated Server Management


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group