Re: TLS server key and certificate generation

[Jawad hussain]

Thanks,

Now I got one error related with GNUTLS so can you please help in resolving this.

Sep 25 18:29:03 jawad-desktop openxcap[2781]: Log opened.
Sep 25 18:29:03 jawad-desktop openxcap[2781]: Starting OpenXCAP 1.1.2
Sep 25 18:29:04 jawad-desktop openxcap[2781]: /etc/openxcap/openxcap-1.1.2/xcap/tweaks.py:1: exceptions.DeprecationWarning: the md5 module is deprecated; use hashlib instead

Sep 25 18:29:04 jawad-desktop openxcap[2781]: fatal error: failed to create OpenXCAP 1.1.2: /usr/local/lib/libgnutls.so.26: undefined symbol: gnutls_certificate_get_x509_cas

Sep 25 18:29:04 jawad-desktop openxcap[2781]: Traceback (most recent call last):
Sep 25 18:29:04 jawad-desktop openxcap[2781]: --- <exception caught here> ---
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "./openxcap", line 61, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from xcap.server import XCAPServer
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/etc/openxcap/openxcap-1.1.2/xcap/server.py", line 24, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from xcap.tls import Certificate, PrivateKey
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/etc/openxcap/openxcap-1.1.2/xcap/tls.py", line 8, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.crypto import X509Certificate,  X509PrivateKey
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/usr/lib/pymodules/python2.6/gnutls/crypto.py", line 11, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.validators import method_args, one_of
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/usr/lib/pymodules/python2.6/gnutls/validators.py", line 9, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.constants import *
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/usr/lib/pymodules/python2.6/gnutls/constants.py", line 38, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.library import constants
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/usr/lib/pymodules/python2.6/gnutls/library/__init__.py", line 7, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.library import errors
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/usr/lib/pymodules/python2.6/gnutls/library/errors.py", line 15, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     from gnutls.library.functions import gnutls_strerror, gnutls_alert_get
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/usr/lib/pymodules/python2.6/gnutls/library/functions.py", line 505, in <module>
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     gnutls_certificate_get_x509_cas = _libraries['libgnutls.so.26'].gnutls_certificate_get_x509_cas
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/usr/lib/python2.6/ctypes/__init__.py", line 366, in __getattr__
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     func = self.__getitem__(name)
Sep 25 18:29:04 jawad-desktop openxcap[2781]:   File "/usr/lib/python2.6/ctypes/__init__.py", line 371, in __getitem__
Sep 25 18:29:04 jawad-desktop openxcap[2781]:     func = self._FuncPtr((name_or_ordinal, self))
Sep 25 18:29:04 jawad-desktop openxcap[2781]: exceptions.AttributeError: /usr/local/lib/libgnutls.so.26: undefined symbol: gnutls_certificate_get_x509_cas

Regards,
Jawad Hussain

On Wed, Sep 23, 2009 at 4:43 PM, Simon Josefsson <address@hidden> wrote:

Jawad hussain <address@hidden> writes:

> Hi,
>
> I am trying to setting up a OpenXcap server and doing so I encounter
> following error. So can someone suggest how to generate TLS server
> certificate and key for OpenXcap server.
>
> Sep 23 16:13:55 jawad-desktop openxcap[2710]: fatal error: the TLS
> certificates or the private key could not be loaded

There is not much information to go on here, can you provide more
information on what commands you invoke and the files you use as input?
I'm not familiar with OpenXcap though, so you may find better answers on
a OpenXcap forum.

Generating keys and certificates is covered in the GnuTLS manual:

http://www.gnu.org/software/gnutls/manual/html_node/Invoking-certtool.html

I blogged about how to create CACert keys/certs some time ago:

http://blog.josefsson.org/2009/04/16/cacert-and-gnutls/

/Simon

--