Any views expressed within media held on this service are those of the contributors, should not be taken as approved or endorsed by the University, and do not necessarily reflect the views of the University in respect of any particular issue.

LCFG Project

LCFG Project

Recent Activity for the LCFG project

  1. LCFG Project
  2. Uncategorised
  3. x509 and Let’s Encrypt

x509 and Let’s Encrypt

It appears that the recent 0.7.0 update for the dehydrated package on both SL7 and Ubuntu causes connection problems for some services.

In Informatics we have experienced problems with connecting to remote desktop (XRDP) services and the jabber chat service once certificates are renewed using the new dehydrated client. This is related to the change of default key algorithm from rsa to secp384r1 (as mentioned in the release notes). To resolve this issue we have issued a new stable release – 2021110801b – which has the default reverted to rsa via the x509.le_key_algo resource in the lcfg/defaults/x509.h header file. It’s not yet clear if the problem only affects certain services or certain clients, further investigations are required to fully explain the source of the problems.

x509 and Let’s Encrypt / LCFG Project by blogadmin is licensed under a Creative Commons Attribution CC BY 3.0

Posted by

Categories

Uncategorised

Tags

No tags have been added to this post.

Previous post

Next post

Leave a reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

css.php

Report this page

To report inappropriate content on this page, please use the form below. Upon receiving your report, we will be in touch as per the Take Down Policy of the service.

Please note that personal data collected through this form is used and stored for the purposes of processing this report and communication with you.

If you are unable to report a concern about content via this form please contact the Service Owner.

Please enter an email address you wish to be contacted on. Please describe the unacceptable content in sufficient detail to allow us to locate it, and why you consider it to be unacceptable.
By submitting this report, you accept that it is accurate and that fraudulent or nuisance complaints may result in action by the University.

  Cancel