[Mageia-sysadm] CatDap overloaded?

[Michael Scherer]

Le mercredi 01 juin 2011 à 12:32 +0200, Michael Scherer a écrit :
> Le mercredi 01 juin 2011 à 12:03 +0200, Wolfgang Bornath a écrit :
> > 2011/6/1 Michael Scherer <misc at zarb.org>:
> > > Le mercredi 01 juin 2011 à 11:34 +0200, Wolfgang Bornath a écrit :
> > >> People trying to register today have complained that
> > >> identity.mageia.org does not work correctly:
> > >>  - you fill in your data
> > >>  - when you click on "Register" you get a message "Please come back later"
> > >>
> > >> I tested that, confirmed.
> > >
> > >
> > > [Wed Jun 01 09:48:10 2011] [error] [client 82.38.26.139] FastCGI: server "/var/www/identity/script/catdap_fastcgi.pl"
> > > stderr: [error] Caught exception in CatDap::Controller::register->check "LDAP TLS error: Invalid certificate authority
> > > locationserror:00000000:lib(0):func(0):reason(0) at /usr/lib/perl5/vendor_perl/5.10.1/Catalyst/Model/LDAP.pm line 139",
> > > referer: https://identity.mageia.org/register
> > >
> > > I guess this is linked to this :
> > > r1662 | misc | 2011-05-29 14:09:35 +0200 (dim. 29 mai 2011) | 1 ligne
> > >
> > > fix the path of the ssl certificate
> > >
> > > I will correct this and mail once it is good.
> > 
> > Thx a lot
> 
> The issue is that : 
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4334
> 
> So server got updated for security fix, but this one broke catdap.

I downgraded the rpm ( with -e --nodeps and -ivh, do not do this at one
), and will investigate later a better fix.

I think we just need to create a empty CRL, if someone not allergic to
openssl can tell me how, this would help :)

-- 
Michael Scherer