Posts Tagged ‘security’

Red Hat Support EOL Dates

I spoke to a customer recently who was concerned about their Red Hat Enterprise Linux 2.1 server and its Red Hat support status. After some digging, I found these items on Red Hat’s security site:
Red Hat Enterprise Linux (version 5)
End of Full Support: Mar 31, 2010
End of Maintenance Support: Mar 31, 2014
Red Hat Enterprise [...]

Adding SSL encryption to vsftpd

There may be some situations where you want to encrypt FTP traffic with SSL certificates rather than using SFTP with SSH. Using vsftpd with SSL encryption is quite easy, and here’s how it’s done:
First, you’ll need to make a new self-signed SSL certificate (if you don’t have a key and certificate available already):
openssl req [...]

OpenSSL Tricks

Create a strong CSR and private key
openssl req -new -nodes -newkey rsa:2048 -out server.crt -keyout server.key
Parsing out the data within a certificate
openssl asn1parse -in server.crt
Checking a certificate/key modulus to see if they correspond
openssl rsa -in server.key -modulus -noout | openssl md5
openssl x509 -in server.crt -modulus -noout | openssl md5
Convert a key from PEM -> DER
openssl [...]

Enforcing mode requested but no policy loaded. Halting now.

Here’s a pretty weird kernel panic that I came across the other day:
Enforcing mode requested but no policy loaded. Halting now.
Kernel panic - not syncing: Attempted to kill init!
This usually means that you’ve set SELINUX in enforcing mode within /etc/sysconfig/selinux or /etc/selinux/selinux.conf but you don’t have the appropriate SELINUX packages installed. To fix [...]

BIND: ‘RRset exists (value dependent)’ prerequisite not satisfied (NXRRSET)

I was recently working on a server where a user on the server was concerned with these log messages:
Oct 7 20:59:33 web named[13698]: client 111.222.333.444#50389: updating zone ‘domain.com/IN’: update failed: ‘RRset exists (value dependent)’ prerequisite not satisfied (NXRRSET)
Oct 7 20:59:34 web named[13698]: client 111.222.333.444#50392: update ‘domain.com/IN’ denied
Oct 7 21:59:35 web named[13698]: client 111.222.333.444#50422: updating zone [...]