Ben,
With 1.4.10 we are introducing a dependency on openssl into freeVSD. This is
because we believe freeVSD should strive to be secure-by-default. We are
going to considerable efforts to ensure our CD-based distribution (yes, one
is on its way...) will provide a secure default installation suitable for an
instant commercial hosting solution. freeVSD now builds the following
additional executables, svsd and svsdadm, each of which is linked against
openssl and will only support secure vsd communincations. The executables
vsd and vsdadm are also, still produced but do not link against openssl and
only support insecure (plain-text) vsd communincation.
So, when you have installed freevsd-1.4.10 you have a choice, either enble
vsd, on port 1725 and use vsdadm for your command line requests, or enable
svsd, on port 1726 and use svsdadm for your command line requests (in this
case you will need certificates to be present so must run vsd-mkca). You
could even enable both ports though is not recommended except for debugging
as simultaneous access on both ports could play havoc with locking of config
files...
Damion has produced a spanking new vsd-install command (note the lack of
.pl) which takes various command-line switches, try 'vsd-install --help' and
by default only enables svsd.
Also note that having a hosting server certificate allows you to have
control access to all virtual-servers/domains on that server - you do not
need an individual certificate for each one. Similarly, using a virtual
server certificate grant control access to all domains on that virtual
server....
I know the docs haven't yet been updated to reflec these changes so, if you
have problems, drop me a line and I will try to help.
Tim
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Ben Kennish
> Sent: 30 August 2001 17:05
> To: [EMAIL PROTECTED]
> Subject: Re: I dont want SSL vsd!
>
>
> Hi Nigel,
>
> So just comment out the "svsd" entry and enable the "vsd" entry in
> inetd.conf? I think I tried this and it still didn't work but I cant
> confirm this as Ive just been shouted at by someone who was using the
> host server to work locally when its daemons were going up and down like
> a yo-yo (installing FreeVSD) so I'll have to wait until tommorow to try
> again :-)
>
> Thanks,
>
>
> Ben Kennish
> [EMAIL PROTECTED]
> www.fubra.com
>
> ----- Original Message -----
> From: "Nigel Marett" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, August 30, 2001 4:32 PM
> Subject: Re: I dont want SSL vsd!
>
>
> oooooooh nasty, your correct - this is bleeding edge,
>
> As its not documented (yet) heres some tips
>
> check you (x)inetd (you can enable both ssl and non ssl)
>
> if you wanna ssl - then vsd-mkca
>
> for ssl use "svsdadm"
>
> =>
>
> Email me if you have any further hassles and I'll try and sort you out.
>
> Cheers,
>
> Nige.
>
>
> On Thursday 30 August 2001 4:23 pm, you wrote:
> > After having installed FreeVSD 1.4.9 from CVS, I do a "vsd-install"
> and
> > a "netstat -at" reveals that the host server is only listening on the
> > "svsd" port and not the "vsd" port. I didn't use the "--use-ssl"
> option
> > (only "--enable-addons")
> >
> > Doing "vsdadm vs_create ... " (before I created a skel admitedly but
> I
> > was just testing) gives "Cant connect to chiefwigham.office.fubra :
> > Connection refused" which isn't really surprising as I haven't
> generated
> > any SSL certs.
> >
> > I had also cleaned the server of anything freeVSD related beforehand.
> >
> > Any ideas?
> >
> >
> > Ben Kennish
> > [EMAIL PROTECTED]
> > www.fubra.com
> >
> >
> > ------------------------- The freeVSD Support List
> > -------------------------- Subscribe:
> > mailto:[EMAIL PROTECTED]?body=subscribe%20freevsd-support
> Unsubscribe:
> > mailto:[EMAIL PROTECTED]?body=unsubscribe%20freevsd-support
> Archives:
> > http://freevsd.org/support/mail-archives/freevsd-support
> > ----------------------------------------------------------------------
> -----
> >--
> ------------------------- The freeVSD Support
> List --------------------------
> Subscribe:
> mailto:[EMAIL PROTECTED]?body=subscribe%20freevsd-support
> Unsubscribe:
> mailto:[EMAIL PROTECTED]?body=unsubscribe%20freevsd-support
> Archives: http://freevsd.org/support/mail-archives/freevsd-support
> ------------------------------------------------------------------------
> -----
>
>
> ------------------------- The freeVSD Support List
> --------------------------
> Subscribe: mailto:[EMAIL PROTECTED]?body=subscribe%20freevsd-support
> Unsubscribe:
mailto:[EMAIL PROTECTED]?body=unsubscribe%20freevsd-support
Archives: http://freevsd.org/support/mail-archives/freevsd-support
----------------------------------------------------------------------------
-
------------------------- The freeVSD Support List --------------------------
Subscribe: mailto:[EMAIL PROTECTED]?body=subscribe%20freevsd-support
Unsubscribe: mailto:[EMAIL PROTECTED]?body=unsubscribe%20freevsd-support
Archives: http://freevsd.org/support/mail-archives/freevsd-support
-----------------------------------------------------------------------------
