Re: Installing a root certificate in openssl

[Jerry]

On Fri, 03 Jun 2011 18:17:39 -0500
jh...@socket.net  articulated:

> I am attempting to get TLS with Postfix working and I have run into a 
> problem and nothing I have tried seems to resolve the problem. 
> 
> When a TLS connection is started, I see the following
> in /var/log/maillog
> 
> Jun  3 17:38:13 mo-bak-s1 postfix/smtp[41281]: certificate
> verification failed for abc.org.s9a1.def.com[WW.XX.YY.ZZ]:25:
> untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate
> Authority 
> 
> I have downloaded the Equifax Secure Certificate Authority.cer,
> converted it to PEM format.  Then, I added the certificate to my
> certfile and restarted Postfix.  I had the same result. 
> 
> My guess is that I am doing something wrong importing the Equifax 
> certificate. 
> 
> Any suggestions would be appreciated.  Have a nice weekend.

Did you run: "c_rehash" on the file? In any event, this is probably
best asked on the Postfix forum. Follow the directions located here for
best results: ; particularly
those under: Reporting problems to postfix-us...@postfix.org

-- 
Jerry ✌
jerry+f...@seibercom.net

Disclaimer: off-list followups get on-list replies or ignored.
Do not CC this poster. Please do not ignore the "Reply-To" header.

http://www.catb.org/~esr/faqs/smart-questions.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Installing a root certificate in openssl

[jhall]

I am attempting to get TLS with Postfix working and I have run into a 
problem and nothing I have tried seems to resolve the problem. 

When a TLS connection is started, I see the following in /var/log/maillog

Jun  3 17:38:13 mo-bak-s1 postfix/smtp[41281]: certificate verification 
failed for abc.org.s9a1.def.com[WW.XX.YY.ZZ]:25: untrusted issuer 
/C=US/O=Equifax/OU=Equifax Secure Certificate Authority 

I have downloaded the Equifax Secure Certificate Authority.cer, converted 
it to PEM format.  Then, I added the certificate to my certfile and 
restarted Postfix.  I had the same result. 

My guess is that I am doing something wrong importing the Equifax 
certificate. 

Any suggestions would be appreciated.  Have a nice weekend.

Thanks for your help.



Jay


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Strange system lockups - kernel saying disk error

[perryh]

Kaya Saman  wrote:

> I have an ancient pre-HT PIV machine with <500MB RAM.
> ...
> Everything was running fine until round about 2 days
> ago when the system started locking up on me?
>
> ... is there anyway to fix the kernel error quickly?

Did you apply any updates shortly before it started to fail?

If not, this is likely to be a hardware problem.  I'd suggest
checking the power supply and the fans, running memtest86, and
taking a close look at the electrolytic filter capacitors on
the system board -- the last because it sounds as if this system
may be about the right age to have been built with some bad ones.
(If any of the capacitors are bulging, either those caps, or the
entire board, need to be replaced.)  Power and heat problems can
cause all sorts of strange symptoms.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

failure to create zfs storage pool

[levitch]

Hello,

After getting a couple of Hitachi 1T 7200 rpm drives, it seemed
like time for ZFS on FreeBSD82, having not had Z file system
subsequent to retiring whatever OpenSolaris was around.

Basically, I followed this article:

/doc/en_US.ISO8859-1/articles/remote-install/installation.html

Previous to this, I had been using sysinstall.

dd if=/dev/zero of=/dev/ad4 count=2
dd if=/dev/zero of=/dev/ad6 count=2

fdisk -BI ad4
fdisk -BI ad6

bsdlabel -wB /dev/ad4s1
bsdlabel -wB /dev/ad6s1

-
bsdlabel -e /dev/ad4s1

  a:  1G16  4.2BSD  102481920
  b:  5G*   swap
  c:  blah,blah
  d:  20G   *   4.2BSD  204816384   0
  e:  20G   *   4.2BSD  204816384   0
  f:  * *   unused  0   0
-

bsdlabel /dev/ad4s1 > /tmp/bsdlabel.txt && bsdlabel -R \
/dev/ad6s1 /tmp/bsdlabel.txt

Now it was way past midnight, I cannot recall but might have run
this:

gmirror label -nb round-robin gm0 ad4s1 ad6s1

I ran these:

gmirror label root ad4s1a ad6s1a
gmirror label var ad4s1d ad6s1d
gmirror label usr ad4s1e ad6s1e
gmirror label -F swap ad4s1b ad6s1b
gmirror load

newfs -b 8192 -f 1024 /dev/mirror/root
newfs /dev/mirror/var
newfs /dev/mirror/usr

mount /dev/mirror/root /mnt
mkdir /mnt/var /mnt/usr
mount /dev/mirror/var /mnt/var
mount /dev/mirror/usr /mnt/usr

So I got the files with 'ftp passive' and followed the article all
to the 'reboot' command.  Seemed okay.

Now at the next page of the article:

/doc/en_US.ISO8859-1/articles/remote-install/zfs.html

Having read several articles and the zpool manual page, I still
have failed to create any kind of ZFS storage pool.

Darrel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Hardware sensors on FreeBSD

[Joshua Isom]

I was wondering if anyone knew of better software for FreeBSD for 
monitoring hardware sensors like CPU temp and fan speeds.  I'm using an 
athlon II x4 and the amdtemp driver seems like it's 20C below what it 
really is but does change.  I've tried using mbmon and it detects the 
it87 chip but it never updates.  It's as if whatever temps it finds at 
boot are what it'll always show, and the fan speed listed is a quarter 
of what it really is.  I tried stress linux to test lmsensors to make 
sure it wasn't a motherboard issue and lmsensors works relatively fine. 
 The voltages are junk but temperature seems accurate and varies with 
the load.  I've yet to see any update about the openbsd sensors 
framework, and I imagine the patch is so old it won't apply cleanly.


Is there a better method to monitor system health under FreeBSD or am I 
stuck with decade old software and a kernel driver that's off by 20C?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Dell R210 "no disks found"

[Jaime Kikpole]

On Thu, May 26, 2011 at 4:18 PM, Steve Polyack  wrote:
> I'm assuming these have the PERC H200 cards in them.  If so, you will need
> the mps(4) driver which is only available in FreeBSD 8-STABLE built sometime
> after the 8.2 release.  You can find ISO snapshots of 8-STABLE builds here
> http://pub.allbsd.org/FreeBSD-snapshots/.  Search the list archives for
> "PERC H200" for more information.

I made a DVD from the ISO and then it booted.  I had to destroy the
RAID array, unfortunately.  It looks 8-STABLE can see the disks as
/dev/da0 and /dev/da1, but it can't see the array.

My next issue is this:  I can use the DVD to install 8.2-RELEASE, but
not 8-STABLE.  However, 8.2-RELEASE can't boot, sinc eit doesn't have
the driver for the HDs.  Am I missing something?

Thanks,
Jaime Kikpole

-- 
Network Administrator
Cairo-Durham Central School District
http://cns.cairodurham.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

freebsd-update 7.0->7.4 problem: rmdir "Directory not empty"

[Brent Bloxam]

I'm going through the freebsd-update process to move from 7.0 to 7.4. I 
followed the handbook, rebooted to GENERIC and followed up with 
`freebsd-update install` and got the following output:



# freebsd-update install
Installing updates...rmdir: ///usr/share/man/ja: Directory not empty
rmdir: ///usr/share/man/en.ISO8859-1/cat8: Directory not empty
rmdir: ///usr/share/man/en.ISO8859-1/cat4: Directory not empty
rmdir: ///usr/share/man/cat8: Directory not empty
rmdir: ///usr/share/man/cat4: Directory not empty
 done.


Are these rmdir lines something to be concerned about? Should I remove 
them and their content?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Benq Scanner 5000 works from time to time

[Oleg]

Hi all!

I use:
Benq Scanner 5000
sane-backends-1.0.21 
FreeBSD 7.4-STABLE
'firmware /home/user/ftp/20F8V119.bin' in snapscan.conf

The problem is scanner works unstable (from time to time). It takes multiple 
attepts of 'scanimage > file.ppm' to get the scan. Only 'lsusb' can always see 
the scanner while 'sane-find-scanner' and 'scanimage -L' can see it from time 
to time.
I've tried changing firmware to 20F8V116.bin, 20F8V114.bin, 20F8V112.bin - the 
problem repeats.
The scanner works fine under Windows 7 and Linux (Slax 6.1.2 LiveCD, sane 
1.0.20), so the hardware is ok, probably it is OS-related problem. In sane's 
[sane-devel] mailing list i got recommendation to ask on some freebsd forums.

All my actions have been tested in 2 cases:
1. with libusb (kernel without 'device uscanner') 
2. with uscanner:
(echo 'product ACERP ACERSCAN_5000 0x20f8 Benq 5000' >> 
/usr/src/sys/dev/usb/usbdevs 
echo '{{ USB_VENDOR_ACERP, USB_PRODUCT_ACERP_ACERSCAN_5000 }, 0 },' >> 
/usr/src/sys/dev/usb/uscanner.c
recompiled kernel with 'device uscanner')

Case1: 
Benq 5000 powered on first time:

# lsusb
Bus /dev/usb2 Device /dev/ugen0: ID 04a5:20f8 Acer Peripherals Inc. (now BenQ 
Corp.) Benq 5000

sane-find-scanner found the scanner on the fourth attempt:

# sane-find-scanner -q
# sane-find-scanner -q
# sane-find-scanner -q
# sane-find-scanner -q
found USB scanner (vendor=0x04a5 [Color], product=0x20f8 [ FlatbedScanner 22]) 
at libusb:/dev/usb2:/dev/ugen0

and scanimage found it on the third attempt:

# scanimage -L

No scanners were identified. 
.
.
.

# scanimage -L
device `snapscan:libusb:/dev/usb2:/dev/ugen0' is a Acer FlatbedScanner42 
flatbed scanner

after 6 attempts of:
# scanimage --quality-cal=no > image-7.ppm
scanimage: no SANE devices found

we got the scan:
# scanimage --quality-cal=no > image-7.ppm
#

and next:
# scanimage -L

No scanners were identified.

And i have to wait several minutes getting this errors to get the next scan.

Case2: 
Benq 5000 powered on first time it is found by sane-find-scanner and scanimage 
successfully:

# sane-find-scanner -q
found USB scanner (vendor=0x04a5, product=0x20f8) at /dev/uscanner0

# scanimage -L
device `snapscan:/dev/uscanner0' is a Acer FlatbedScanner22 flatbed scanner

# scanimage --quality-cal=no > image-1.ppm
[snapscan] Scanner warming up - waiting 31 seconds.
#

OK. We got the scan.
After 3 minutes:

# scanimage --quality-cal=no > image-2.ppm

hangs forever...

If i kill scanimage and use sane-find-scanner:
# sane-find-scanner -q
# sane-find-scanner -q
.
.
.
i have nothing.


I would be very grateful if anybody points me on the root of this instability.
Thanks for your time!

-- 
Oleg

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Strange system lockups - kernel saying disk error

[Kaya Saman]

Hi,

I have an ancient pre-HT PIV machine with <500MB RAM.

The system has an extra PCI->SATA card installed so I can  make use of 
modern high capacity drives.


Everything was running fine until round about 2 days ago when the system 
started locking up on me?



Current drive configuration for the system is:

40GB IDE drive as root (ad2) - UFS2
500GB IDE drive for storage (ad3) - EXT3
1TB SATA drive for storage (ad4) - UFS2
750GB SATA drive for storage (ad8) - EXT3

I had an issue with the 750GB drive which the file system seemed to have 
got corrupted so I powered down and backed the information up to a 2TB 
SATA drive using ddrescue and the Gentoo Linux based System Rescue CD. I 
put the 2TB drive in place of the 1TB ad4 drive physically.


Once backed up I powered down again and re-installed the 1TB SATA drive 
into ad4 position on system and completely removed the 2TB backup.


When booted back into FreeBSD upon boot I received this error:


 WARNING:  Kernel Errors Present
ad4: FAILURE - WRITE_DMA48 status=51  error=4  
LBA=1 ...:  1 Time(s)
g_vfs_done():ad4e[WRITE(offset=97691456, length=16384)]error = 5 ...:  
1 Time(s)


The current status of the disks seemed to be ok though:

 1 Time(s): ad2: 38166MB  at ata1-master UDMA33
 1 Time(s): ad2: DMA limited to UDMA33, controller found non-ATA66 cable
 1 Time(s): ad3: 476940MB  at ata1-slave UDMA33
 1 Time(s): ad3: DMA limited to UDMA33, controller found non-ATA66 cable
 1 Time(s): ad4: 953869MB  at ata2-master SATA150
 1 Time(s): ad8: 715404MB  at ata4-master SATA150
 1 Time(s): agp0:  on hostb0
 1 Time(s): ata0:  on atapci0
 1 Time(s): ata0: [ITHREAD]
 1 Time(s): ata1:  on atapci0
 1 Time(s): ata1: [ITHREAD]
 1 Time(s): ata2:  on atapci1
 1 Time(s): ata2: [ITHREAD]
 1 Time(s): ata3:  on atapci1
 1 Time(s): ata3: [ITHREAD]
 1 Time(s): ata4:  on atapci1
 1 Time(s): ata4: [ITHREAD]
 1 Time(s): ata5:  on atapci1


In order to test if the error was due to disk failure I powered down and 
disconnected the ad4 and ad3 disks and powered back up.



The system still seems to be locking on me and I can't understand why?


Through Google'ing a discovered a post by Jeremy Chadwick about these 
kinds of errors:


http://wiki.freebsd.org/JeremyChadwick/ATA_issues_and_troubleshooting

however since the system board is pre-SATA is doesn't even have 
S.M.A.R.T. so I'm totally lost on how to fix this. I mean the best 
remedy would be to get a new computer and migrate the stored information 
(something like this is on the way) but currently I don't have access to 
any of the disks at all and to make matters worse no NTP or DNS server 
as I was running these services on the same machine or TFTP boot server 
for my IP phones. - I do run multiboot UNIX on my notebook so Bind9 is 
naturally installed hence me writing this but I only activate in 
emergencies.


I mean one way I thought of for fixing this would be to grab a USB -> 
ATA/SATA adapter:


http://www.startech.com/product/USB2SATAIDE-USB-20-to-IDE-or-SATA-Adapter-Cable

and hook the drives up to both Linux and FreeBSD in my notebook and copy 
the information across to the new system when it arrives in a few months.



Aside from that is there anyway to fix the kernel error quickly?


Thanks,


Kaya




 1 Time(s): ata5: [ITHREAD]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Build failure /usr/ports/editors/openoffice.org-3 on amd64

[Chris Whitehouse]

Michael D. Norwick wrote:

Good Day;

It appears that I cannot build openoffice.org-3 from ports due to an 
error similar to

this;

http://freebsd.1045724.n5.nabble.com/OpenOffice-3-2-fails-to-build-on-FreeBSD-8-0-STABLE-amd64-td3873768.html 



1 module(s):
 nss
need(s) *to* be rebuilt

Reason(s):

ERROR: error 65280 occurred while making
/usr/*ports*/editors/openoffice.org-3/work/OOO320_m12/nss/

Attention: if you *build* and deliver *the* above module(s) you may
prolongue your *the* *build* issuing command "*build* --*from* nss"

and ...

http://permalink.gmane.org/gmane.os.freebsd.devel.openoffice/2805

1 module(s):
instsetoo_native
need(s) to be rebuilt

Reason(s):

ERROR: error 65280 occurred while making
/usr/ports/editors/openoffice.org-3/work
/OOO330_m20/instsetoo_native/util

Attention: if you fix the errors in above module(s) you may prolongue
your the build issuing command:

build --from instsetoo_native

* Error code 1

I am sorry that I cannot give you the exact error message because I did 
'make clean' in /usr/ports/editors/openoffice.org-3 during my 
troubleshooting.  Google produced the above hits and they are the same 
type of module build error I am seeing.

My build error is in module moz.


Try building it with WITHOUT_MOZILLA see
http://docs.freebsd.org/cgi/getmsg.cgi?fetch=208692+0+current/freebsd-questions

Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: acroread9 - kernel module load error

[Jamie Paul Griffin]

On Fri, Jun 03, 2011 at 12:14:36AM +0200, Polytropon wrote:
> On Thu, 2 Jun 2011 23:43:51 +0200, Patrick Lamaiziere  
> wrote:
> > We need a kernel module to see some pdf with acrobat now?
> 
> I was thinking exactly the same (without further investigation).
> Luckily xpdf and gv, as well as Gnome's and KDE's PDF viewer
> don't need kernel modules. :-)

Which is exactly the way i've headed. It's just not worth the hassle.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"