TLS server key and certificate generation

[Jawad hussain]

Thanks,

Now I got one error related with GNUTLS so can you please help in resolving
this.

Sep 25 18:29:03 jawad-desktop openxcap[2781]: Log opened.
Sep 25 18:29:03 jawad-desktop openxcap[2781]: Starting OpenXCAP 1.1.2
Sep 25 18:29:04 jawad-desktop openxcap[2781]:
/etc/openxcap/openxcap-1.1.2/xcap/tweaks.py:1:
exceptions.DeprecationWarning: the md5 module is deprecated; use hashlib
instead

Sep 25 18:29:04 jawad-desktop openxcap[2781]: *fatal error: failed to create
OpenXCAP 1.1.2: /usr/local/lib/libgnutls.so.26: undefined symbol:
gnutls_certificate_get_x509_cas*

Sep 25 18:29:04 jawad-desktop openxcap[2781]: Traceback (most recent call
last):
Sep 25 18:29:04 jawad-desktop openxcap[2781]: --- <exception caught here>
---
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "./openxcap", line 61,
in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from xcap.server import
XCAPServer
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/etc/openxcap/openxcap-1.1.2/xcap/server.py", line 24, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from xcap.tls import
Certificate, PrivateKey
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/etc/openxcap/openxcap-1.1.2/xcap/tls.py", line 8, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.crypto import
X509Certificate,  X509PrivateKey
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/usr/lib/pymodules/python2.6/gnutls/crypto.py", line 11, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.validators
import method_args, one_of
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/usr/lib/pymodules/python2.6/gnutls/validators.py", line 9, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.constants
import *
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/usr/lib/pymodules/python2.6/gnutls/constants.py", line 38, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.library import
constants
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/usr/lib/pymodules/python2.6/gnutls/library/__init__.py", line 7, in
<module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.library import
errors
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/usr/lib/pymodules/python2.6/gnutls/library/errors.py", line 15, in
<module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from
gnutls.library.functions import gnutls_strerror, gnutls_alert_get
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/usr/lib/pymodules/python2.6/gnutls/library/functions.py", line 505, in
<module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:
gnutls_certificate_get_x509_cas =
_libraries['libgnutls.so.26'].gnutls_certificate_get_x509_cas
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/usr/lib/python2.6/ctypes/__init__.py", line 366, in __getattr__
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     func =
self.__getitem__(name)
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File
"/usr/lib/python2.6/ctypes/__init__.py", line 371, in __getitem__
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     func =
self._FuncPtr((name_or_ordinal, self))
Sep 25 18:29:04 jawad-desktop openxcap[2781]: exceptions.AttributeError:
/usr/local/lib/libgnutls.so.26: undefined symbol:
gnutls_certificate_get_x509_cas

Regards,
Jawad Hussain

On Wed, Sep 23, 2009 at 4:43 PM, Simon Josefsson <simon at josefsson.org>wrote:

> Jawad hussain <jawad.ssuet at gmail.com> writes:
>
> > Hi,
> >
> > I am trying to setting up a OpenXcap server and doing so I encounter
> > following error. So can someone suggest how to generate TLS server
> > certificate and key for OpenXcap server.
> >
> > Sep 23 16:13:55 jawad-desktop openxcap[2710]: fatal error: the TLS
> > certificates or the private key could not be loaded
>
> There is not much information to go on here, can you provide more
> information on what commands you invoke and the files you use as input?
> I'm not familiar with OpenXcap though, so you may find better answers on
> a OpenXcap forum.
>
> Generating keys and certificates is covered in the GnuTLS manual:
>
> http://www.gnu.org/software/gnutls/manual/html_node/Invoking-certtool.html
>
> I blogged about how to create CACert keys/certs some time ago:
>
> http://blog.josefsson.org/2009/04/16/cacert-and-gnutls/
>
> /Simon
>



--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20090925/384092cb/attachment.htm>