Index: /branches/fc17-dev/host/debian/scripts-syslog-ng-config/d_zroot.pl =================================================================== --- /branches/fc17-dev/host/debian/scripts-syslog-ng-config/d_zroot.pl (revision 2194) +++ /branches/fc17-dev/host/debian/scripts-syslog-ng-config/d_zroot.pl (revision 2195) @@ -17,6 +17,15 @@ @USERS{@USERS} = undef; -sub zwrite($;$$@) { - my ($message, $class, $instance, @recipients) = @_; +sub zwrite($;$$\@) { + my ($message, $class, $instance, $recipref) = @_; + my @recipients = (); + if (defined($recipref)) { + if (@$recipref) { + @recipients = @$recipref; + } else { + $message = '@b(Empty recipient list specified, message redacted)'; + $class = $ZCLASS; + } + } $class ||= $ZCLASS; $instance ||= 'root.'.hostname; @@ -24,4 +33,9 @@ print ZWRITE $message; close(ZWRITE); +} + +unless (@RECIPIENTS) { + # Also give a warning at startup + zwrite('@b(No .k5login found, sensitive logs will not be zephyred)', $ZCLASS); } @@ -120,4 +134,5 @@ } elsif ($message =~ m|^ *root : TTY=|) { } elsif ($message =~ m|^Set /proc/self/oom_adj to |) { + } elsif ($message =~ m|^fatal: mm_request_receive: read: Connection reset by peer$|) { } else { sendmsg($message, "scripts-spew"); @@ -126,5 +141,5 @@ foreach my $class (keys %toclass) { - if ($class eq "scripts-auto") { + if ($class eq $ZCLASS) { zwrite($toclass{$class}, $class); } else { Index: /branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/changelog =================================================================== --- /branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/changelog (revision 2194) +++ /branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/changelog (revision 2195) @@ -1,2 +1,15 @@ +scripts-syslog-ng-config (0.4) stable; urgency=low + + * Synchronize filtered logs with Fedora copy (r2095). + * Avoid accidentally sending sensitive logs to a public class (r2096). + + -- Geoffrey Thomas Sat, 17 Dec 2011 03:06:59 -0500 + +scripts-syslog-ng-config (0.3) stable; urgency=low + + * Depend on debathena-zephyr-config + + -- Alexander Chernyakhovsky Sat, 12 Nov 2011 23:27:51 -0500 + scripts-syslog-ng-config (0.2) stable; urgency=low Index: /branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/control =================================================================== --- /branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/control (revision 2194) +++ /branches/fc17-dev/host/debian/scripts-syslog-ng-config/debian/control (revision 2195) @@ -10,5 +10,5 @@ Architecture: all Depends: ${misc:Depends}, - syslog-ng, + syslog-ng, debathena-zephyr-config Description: Configures syslog-ng for zephyr logging Configures a machine to log messages sent to syslog-ng to zephyr. Index: /branches/fc17-dev/locker/deploy/bin/git =================================================================== --- /branches/fc17-dev/locker/deploy/bin/git (revision 2194) +++ /branches/fc17-dev/locker/deploy/bin/git (revision 2195) @@ -77,4 +77,6 @@ print " $gitbase/$addrend.git/\n"; print "To clone, run\n git clone https://$USER.scripts.mit.edu/$addrend/$addrend.git\n\n"; +print "Note: Push over HTTP is a relatively new feature in Git, so if git push fails\n"; +print "try a newer version of Git, e.g. if you're on Athena, 'add -f git' and try again.\n\n"; press_enter; Index: /branches/fc17-dev/locker/deploy/bin/rails =================================================================== --- /branches/fc17-dev/locker/deploy/bin/rails (revision 2194) +++ /branches/fc17-dev/locker/deploy/bin/rails (revision 2195) @@ -5,4 +5,5 @@ use onserver; use Tie::File; +use Cwd; setup(); @@ -38,5 +39,9 @@ my $prod_db = make_db("production"); -system qw{rails -D -d mysql .}; +my $cwd = getcwd; +system("rails", "new", $cwd ,"-d", "mysql"); +my $appdir = `basename $cwd`; +chomp $appdir; +my $appclass = ucfirst $appdir; open PUBLIC_HTACCESS, ">public/.htaccess"; @@ -120,13 +125,37 @@ untie @railsfcgi; open RAILSFCGI, ">>public/dispatch.fcgi"; +print RAILSFCGI "#!/usr/bin/ruby\n"; print RAILSFCGI < ${appclass}::Application)) + rescue => e + dispatch_logger.error(e) + raise e + end end - t2 = Thread.new do # List of directories to watch for changes before reload. @@ -195,4 +224,10 @@ ## End of scripts.mit.edu autoinstaller additions EOF +chmod 0755,'public/dispatch.fcgi'; + +# have to explicitly take a dependency on fcgi +open GEMFILE, ">>Gemfile"; +print GEMFILE "gem 'fcgi'\n"; +close GEMFILE; print "Your application is located in:\n"; Index: /branches/fc17-dev/locker/sbin/delete-user =================================================================== --- /branches/fc17-dev/locker/sbin/delete-user (revision 2195) +++ /branches/fc17-dev/locker/sbin/delete-user (revision 2195) @@ -0,0 +1,89 @@ +#!/usr/bin/python +import ldap +import ldap.filter +import pwd +import sys + +actuallyRun = False + +def delete_record(l, full_name): + if actuallyRun: + print "Deleting %s..." % (full_name,) + l.delete_s(full_name) + else: + print "Would have deleted %s" % (full_name,) + +def findUser(l, username): + # Try to delete the + user_record, = ll.search_s( + "ou=People,dc=scripts,dc=mit,dc=edu", + ldap.SCOPE_SUBTREE, + ldap.filter.filter_format( + "(&(objectClass=posixAccount)" + + "(uid=%s))", + [username])) + + return user_record + +def findGroup(l, username): + group_record, = ll.search_s( + "ou=Groups,dc=scripts,dc=mit,dc=edu", + ldap.SCOPE_SUBTREE, + ldap.filter.filter_format( + "(&(objectClass=posixGroup)" + + "(cn=%s))", + [username])) + + return group_record + +def findApacheConfig(l, uid): + host_records = ll.search_s( + "ou=VirtualHosts,dc=scripts,dc=mit,dc=edu", + ldap.SCOPE_SUBTREE, + ldap.filter.filter_format( + "(&(objectClass=apacheConfig)" + + "(apacheSuexecUid=%s))", + [uid])) + + return host_records + +def findVhost(l, full_name): + host_records = ll.search_s( + "ou=VirtualHosts,dc=scripts,dc=mit,dc=edu", + ldap.SCOPE_SUBTREE, + ldap.filter.filter_format( + "(&(objectClass=scriptsVhost)" + + "(scriptsVhostAccount=%s))", + [full_name])) + + return host_records + +if __name__ == '__main__': + (self, user) = sys.argv + + print "Binding to ldap..." + + ll = ldap.initialize("ldapi://%2fvar%2frun%2fslapd-scripts.socket/") + ll.simple_bind_s("cn=Directory Manager", open('/etc/signup-ldap-pw').read()) + + print "Finding user '%s'..." % (user,) + user_record = findUser(ll, user) + + print "Finding group '%s'..." % (user,) + group_record = findGroup(ll, user) + + print "Searching for apache configurations..." + apache_configs = findApacheConfig(ll, user_record[1]['uidNumber'][0]) + + print "Searching for vhost configurations..." + vhost_configs = findVhost(ll, user_record[0]) + + print "Deleting..." + delete_record(ll, user_record[0]) + delete_record(ll, group_record[0]) + + for config in apache_configs: + delete_record(ll, config[0]) + + for vhost in vhost_configs: + delete_record(ll, vhost[0]) Index: /branches/fc17-dev/locker/sbin/scripts-createrepo =================================================================== --- /branches/fc17-dev/locker/sbin/scripts-createrepo (revision 2195) +++ /branches/fc17-dev/locker/sbin/scripts-createrepo (revision 2195) @@ -0,0 +1,29 @@ +#!/bin/sh + +# Runs createrepo on the primary scripts server and copies the resulting +# metadata to the live yum repository. + +set -eux + +ssh='ssh -o GSSAPIAuthentication=yes -o GSSAPIDelegateCredentials=no' + +yum=/afs/athena.mit.edu/contrib/scripts/yum-repos/rpm-fc$($ssh root@scripts.mit.edu 'lsb_release -rs') +[ -d "$yum" ] + +tmp=$($ssh root@scripts.mit.edu "\ +set -eux +tmp=\$(mktemp -dt createrepo.XXXXXX) +createrepo -d -o \"\$tmp\" -- '$yum' >&2 +printf '%s' \"\$tmp\" +") +[ "$tmp" ] + +new=$(mktemp -d -- "$yum/repodata.XXXXXX") +rsync -avz -e "$ssh" -- "root@scripts.mit.edu:$tmp/repodata/" "$new" +mv -b -T -- "$new" "$yum/repodata" +rm -rf -- "$yum/repodata~" + +$ssh root@scripts.mit.edu "\ +set -eux +rm -rf -- '$tmp' +" Index: /branches/fc17-dev/lvs/debian/config/etc/ha.d/ldirectord.cf =================================================================== --- /branches/fc17-dev/lvs/debian/config/etc/ha.d/ldirectord.cf (revision 2194) +++ /branches/fc17-dev/lvs/debian/config/etc/ha.d/ldirectord.cf (revision 2195) @@ -8,5 +8,5 @@ virtual=3 #real=18.181.0.53:25 gate 4096 # old-faithful - #real=18.181.0.57:25 gate 4096 # better-mousetrap + real=18.181.0.57:25 gate 4096 # better-mousetrap real=18.181.0.167:25 gate 4096 # bees-knees real=18.181.0.228:25 gate 1024 # cats-whiskers @@ -15,5 +15,5 @@ #real=18.181.0.237:25 gate 4096 # pancake-bunny #real=18.181.0.236:25 gate 4096 # whole-enchilada - #real=18.181.0.135:25 gate 1024 # shining-armor + real=18.181.0.135:25 gate 4096 # shining-armor real=18.181.0.141:25 gate 4096 # golden-egg service=smtp @@ -27,5 +27,5 @@ virtual=2 #real=18.181.0.53 gate 4096 # old-faithful - #real=18.181.0.57 gate 4096 # better-mousetrap + real=18.181.0.57 gate 4096 # better-mousetrap real=18.181.0.167 gate 4096 # bees-knees real=18.181.0.228 gate 1024 # cats-whiskers @@ -34,5 +34,5 @@ #real=18.181.0.237 gate 4096 # pancake-bunny #real=18.181.0.236 gate 4096 # whole-enchilada - #real=18.181.0.135 gate 1024 # shining-armor + real=18.181.0.135 gate 4096 # shining-armor real=18.181.0.141 gate 4096 # golden-egg fallback=127.0.0.1 gate @@ -50,5 +50,5 @@ virtual=1 #real=18.181.0.53 gate "heartbeat/services", "1" # old-faithful - #real=18.181.0.57 gate "heartbeat/services", "2" # better-mousetrap + real=18.181.0.57 gate "heartbeat/services", "2" # better-mousetrap real=18.181.0.167 gate "heartbeat/services", "3" # bees-knees real=18.181.0.228 gate "heartbeat/services", "4" # cats-whiskers @@ -57,5 +57,5 @@ #real=18.181.0.237 gate "heartbeat/services", "7" # pancake-bunny #real=18.181.0.236 gate "heartbeat/services", "8" # whole-enchilada - #real=18.181.0.135 gate "heartbeat/services", "9" # shining-armor + real=18.181.0.135 gate "heartbeat/services", "9" # shining-armor real=18.181.0.141 gate "heartbeat/services", "10" # golden-egg service=http Index: /branches/fc17-dev/lvs/debian/config/etc/lighttpd/scripts-maint/index.html =================================================================== --- /branches/fc17-dev/lvs/debian/config/etc/lighttpd/scripts-maint/index.html (revision 2194) +++ /branches/fc17-dev/lvs/debian/config/etc/lighttpd/scripts-maint/index.html (revision 2195) @@ -5,6 +5,4 @@ - scripts.mit.edu: Service unavailable Index: /branches/fc17-dev/server/common/oursrc/accountadm/Makefile.in =================================================================== --- /branches/fc17-dev/server/common/oursrc/accountadm/Makefile.in (revision 2194) +++ /branches/fc17-dev/server/common/oursrc/accountadm/Makefile.in (revision 2195) @@ -8,8 +8,8 @@ sysconfdir = @sysconfdir@ -all-local: admof signup-scripts-frontend +all-local: admof -admof: admof.c - $(CC) $(CPPFLAGS) $(CFLAGS) $< -L/usr/lib/afs -L/usr/lib64/afs -lprot -lauth -lrxkad -lubik -laudit -lsys -lrx -llwp -lsys -lafsutil -lcom_err -lresolv -lkrb5 -ldes -o $@ +admof: LDLIBS = -lafsauthent_pic -lafsrpc_pic -lresolv -lkrb5 -lpthread +admof: admof.o install: @@ -18,5 +18,4 @@ install -p -m755 -D admof $(DESTDIR)$(bindir)/admof install -p -m755 -D admof $(DESTDIR)$(sbindir)/ssh-admof - install -p -m755 -D signup-scripts-frontend $(DESTDIR)$(sbindir)/signup-scripts-frontend install -p -m755 -D signup-scripts-backend $(DESTDIR)$(sbindir)/signup-scripts-backend install -p -m755 -D cronload $(DESTDIR)$(bindir)/cronload @@ -26,5 +25,5 @@ clean: - rm -f admof signup-scripts-frontend + rm -f admof admof.o distclean: clean Index: /branches/fc17-dev/server/common/oursrc/accountadm/admof.c =================================================================== --- /branches/fc17-dev/server/common/oursrc/accountadm/admof.c (revision 2194) +++ /branches/fc17-dev/server/common/oursrc/accountadm/admof.c (revision 2195) @@ -21,4 +21,5 @@ #include #include +#include #include #include @@ -90,7 +91,5 @@ } - /* Note: this first free probably should be xdr_free in OpenAFS 1.5. - * See commits b40b606 and f02f2e8 */ - free(tids.idlist_val); + xdr_free((xdrproc_t) xdr_idlist, &tids); tids.idlist_val = NULL; free(tnames.namelist_val); Index: /branches/fc17-dev/server/common/oursrc/accountadm/configure.in =================================================================== --- /branches/fc17-dev/server/common/oursrc/accountadm/configure.in (revision 2194) +++ /branches/fc17-dev/server/common/oursrc/accountadm/configure.in (revision 2195) @@ -1,3 +1,3 @@ -AC_INIT(signup-scripts-frontend.c) +AC_INIT(signup-scripts-backend.in) AC_PROG_CC Index: /branches/fc17-dev/server/common/oursrc/accountadm/mrproper =================================================================== --- /branches/fc17-dev/server/common/oursrc/accountadm/mrproper (revision 2194) +++ /branches/fc17-dev/server/common/oursrc/accountadm/mrproper (revision 2195) @@ -1,5 +1,5 @@ #!/bin/sh -rm -f signup-scripts-frontend admof signup-scripts-backend mbash +rm -f admof signup-scripts-backend mbash rm -f configure config.* Makefile rm -rf auto*.cache Index: /branches/fc17-dev/server/common/oursrc/accountadm/signup-scripts-backend.in =================================================================== --- /branches/fc17-dev/server/common/oursrc/accountadm/signup-scripts-backend.in (revision 2194) +++ /branches/fc17-dev/server/common/oursrc/accountadm/signup-scripts-backend.in (revision 2195) @@ -32,5 +32,5 @@ while () { chomp; - complain("banned username") if ($_ eq $username); + complain("banned username") if (lc eq lc $username); } close(BANNEDUSERS); Index: anches/fc17-dev/server/common/oursrc/accountadm/signup-scripts-frontend.c =================================================================== --- /branches/fc17-dev/server/common/oursrc/accountadm/signup-scripts-frontend.c (revision 2194) +++ (revision ) @@ -1,48 +1,0 @@ -/* - * signup-scripts-frontend - * Copyright (C) 2006 Jeff Arnold - * - * This program is free software; you can redistribute it and/or - * modify it under the terms of the GNU General Public License - * as published by the Free Software Foundation; either version 2 - * of the License, or (at your option) any later version. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public License - * along with this program; if not, write to the Free Software - * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA - * - * See /COPYRIGHT in this repository for more information. - */ - -#include -#include - -extern char **environ; - -int main(int argc, char **argv) { - environ=NULL; - if(argc != 2) { - exit(1); - } - - char uid[21]; // 64-bit uid requires 21 - int retval = snprintf(uid, 21, "%d", getuid()); - if(retval < 0 || retval >= 21) { - exit(1); - } - if(setreuid(geteuid(), -1) != 0) { - exit(1); - } - char *v[3]; -#define BACKEND_PATH "/usr/local/sbin/signup-scripts-backend" - v[0] = BACKEND_PATH; - v[1] = argv[1]; - v[2] = NULL; - execv(BACKEND_PATH, v); - return 1; -} Index: /branches/fc17-dev/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs =================================================================== --- /branches/fc17-dev/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (revision 2195) +++ /branches/fc17-dev/server/common/oursrc/fuse-better-mousetrapfs/better-mousetrapfs (revision 2195) @@ -0,0 +1,90 @@ +#!/usr/bin/python +# -*- coding: utf-8 -*- + +# better-mousetrapfs: Filesystem that logs and kills any accessors +# version 1.0, released 2010-03-31 +# Copyright © 2010 Anders Kaseorg +# +# Permission is hereby granted, free of charge, to any person +# obtaining a copy of this software and associated documentation files +# (the “Software”), to deal in the Software without restriction, +# including without limitation the rights to use, copy, modify, merge, +# publish, distribute, sublicense, and/or sell copies of the Software, +# and to permit persons to whom the Software is furnished to do so, +# subject to the following conditions: +# +# The above copyright notice and this permission notice shall be +# included in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, +# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND +# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS +# BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN +# ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN +# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +# SOFTWARE. + +import errno +import fuse +import grp +import os +import pwd +import signal +import stat +import syslog + +fuse.fuse_python_api = (0, 2) + +class BetterMousetrapFS(fuse.Fuse): + def __init__(self, *args, **kwargs): + syslog.openlog('better-mousetrapfs') + fuse.Fuse.__init__(self, *args, **kwargs) + + def getattr(self, path): + if path == '/': + return fuse.Stat(st_mode = stat.S_IFDIR | 0755, st_nlink = 2) + else: + return -errno.EACCES + + def opendir(self, path): + self.spring(fuse.FuseGetContext()) + return -errno.EACCES + + def spring(self, context): + pid = context['pid'] + uid = context['uid'] + gid = context['gid'] + try: + user = '%d %r' % (uid, pwd.getpwuid(uid).pw_name) + except KeyError: + user = '%d' % uid + try: + group = '%d %r' % (gid, grp.getgrgid(gid).gr_name) + except KeyError: + group = '%d' % gid + cmdline = open('/proc/%d/cmdline' % pid).read().split('\0')[:-1] + exe = os.readlink('/proc/%d/exe' % pid) + status = dict(tuple(v.strip() for v in l.split(':', 1)) + for l in open('/proc/%d/status' % pid).readlines()) + cwd = os.readlink('/proc/%d/cwd' % pid) + + syslog.syslog( + syslog.LOG_WARNING | 80, # 80 = LOG_AUTHPRIV + 'mousetrap caught process %d, uid=%s, gid=%s, exe=%r, cmdline=%r, cwd=%r' % + (pid, user, group, exe, cmdline, cwd)) + + try: + nonlocal_gid = grp.getgrnam('nss-nonlocal-users').gr_gid + except KeyError: + nonlocal_gid = None + if str(nonlocal_gid) in status['Groups'].split(): + os.kill(pid, signal.SIGKILL) + pass + +if __name__ == '__main__': + fs = BetterMousetrapFS() + fs.parse(errex=1) + fs.fuse_args.add('allow_other') + fs.fuse_args.add('ro') + fs.main() Index: /branches/fc17-dev/server/common/oursrc/whoisd/scripts-whoisd.service =================================================================== --- /branches/fc17-dev/server/common/oursrc/whoisd/scripts-whoisd.service (revision 2194) +++ /branches/fc17-dev/server/common/oursrc/whoisd/scripts-whoisd.service (revision 2195) @@ -1,9 +1,9 @@ [Unit] Description=Scripts whois Service -After=syslog.target +After=syslog.target dirsrv.service [Service] Type=simple -ExecStart=/usr/bin/twistd --nodaemon -l /var/log/scripts-whoisd.log -y /usr/local/libexec/whoisd.tac +ExecStart=/usr/bin/twistd --nodaemon -l /var/log/scripts-whoisd.log --pidfile /var/run/whoisd.pid -y /usr/local/libexec/whoisd.tac [Install] Index: /branches/fc17-dev/server/common/patches/httpd-suexec-scripts.patch =================================================================== --- /branches/fc17-dev/server/common/patches/httpd-suexec-scripts.patch (revision 2194) +++ /branches/fc17-dev/server/common/patches/httpd-suexec-scripts.patch (revision 2195) @@ -314,5 +314,5 @@ exit(121); } -@@ -614,6 +767,23 @@ +@@ -614,6 +767,30 @@ /* * Execute the command, replacing our image with its own. @@ -331,4 +331,11 @@ + argv[1] = PHP_PATH; + argv[2] = "-f"; ++ /* ++ * argv[3] is the command to run. argv[4] is either an argument or ++ * already null. We don't want to pass any arguments through from ++ * Apache (since they're untrusted), so we chop off the remainder ++ * of argv here. ++ */ ++ argv[4] = 0; + execv(PHP_PATH, &argv[1]); + log_err("(%d)%s: php exec failed (%s)\n", errno, strerror(errno), argv[1]); Index: /branches/fc17-dev/server/common/patches/openafs-linux-3.2-nlink.patch =================================================================== --- /branches/fc17-dev/server/common/patches/openafs-linux-3.2-nlink.patch (revision 2195) +++ /branches/fc17-dev/server/common/patches/openafs-linux-3.2-nlink.patch (revision 2195) @@ -0,0 +1,28 @@ +As of v3.2-rc1~84^2~1, struct inode.i_nlink is now const to prevent +direct modification. + +Original patch was: + +From c4442772286c0a1fdb99500d65e7d6f295388feb Mon Sep 17 00:00:00 2001 +From: Anders Kaseorg +Date: Sun, 20 Nov 2011 19:00:00 -0500 +Subject: [PATCH] Linux: 3.2: Use set_nlink to update i_nlink +Change-Id: I685aa6e8638e8fe864f1a6a7e428dfb6839ebcea + +Since handling m4 changes is annoying with spec files, we assume +that set_nlink is available. This patch will break on old versions +of Linux, specifically prior to v3.1-8781-gd211858. + +diff --git a/src/afs/LINUX/osi_vfsops.c b/src/afs/LINUX/osi_vfsops.c +index 596d064..d32720f 100644 +--- a/src/afs/LINUX/osi_vfsops.c ++++ b/src/afs/LINUX/osi_vfsops.c +@@ -439,7 +439,7 @@ void + vattr2inode(struct inode *ip, struct vattr *vp) + { + ip->i_ino = vp->va_nodeid; +- ip->i_nlink = vp->va_nlink; ++ set_nlink(ip, vp->va_nlink); + ip->i_blocks = vp->va_blocks; + #ifdef STRUCT_INODE_HAS_I_BLKBITS + ip->i_blkbits = AFS_BLKBITS; Index: anches/fc17-dev/server/common/patches/openafs-localcsdb.patch =================================================================== --- /branches/fc17-dev/server/common/patches/openafs-localcsdb.patch (revision 2194) +++ (revision ) @@ -1,11 +1,0 @@ ---- openafs-1.4/src/packaging/RedHat/openafs-client.init.orig 2009-04-14 04:28:32.000000000 -0400 -+++ openafs-1.4/src/packaging/RedHat/openafs-client.init 2009-04-14 04:27:08.000000000 -0400 -@@ -14,7 +14,7 @@ - - start() { - echo -n $"Updating CellServDB: " -- cat /usr/vice/etc/CellServDB.local /usr/vice/etc/CellServDB.dist > \ -+ cat /usr/vice/etc/CellServDB.local > \ - /usr/vice/etc/CellServDB - chmod 644 /usr/vice/etc/CellServDB - echo Index: /branches/fc17-dev/server/common/patches/openafs-systemd-crond.patch =================================================================== --- /branches/fc17-dev/server/common/patches/openafs-systemd-crond.patch (revision 2194) +++ /branches/fc17-dev/server/common/patches/openafs-systemd-crond.patch (revision 2195) @@ -14,4 +14,4 @@ [Install] --WantedBy=multi-user.target -+WantedBy=multi-user.target crond.service +-WantedBy=multi-user.target remote-fs.target ++WantedBy=multi-user.target remote-fs.target crond.service Index: /branches/fc17-dev/server/common/patches/openafs-systemd-csdb.patch =================================================================== --- /branches/fc17-dev/server/common/patches/openafs-systemd-csdb.patch (revision 2195) +++ /branches/fc17-dev/server/common/patches/openafs-systemd-csdb.patch (revision 2195) @@ -0,0 +1,11 @@ +--- a/src/packaging/RedHat/openafs-client.service 2012-03-26 17:04:18.177919348 -0400 ++++ b/src/packaging/RedHat/openafs-client.service 2012-03-26 17:15:17.206630779 -0400 +@@ -6,7 +6,7 @@ + [Service] + Type=forking + EnvironmentFile=/etc/sysconfig/openafs +-ExecStartPre=/bin/sed -n 'w/usr/vice/etc/CellServDB' /usr/vice/etc/CellServDB.local /usr/vice/etc/CellServDB.dist ++ExecStartPre=-/bin/sed -n 'w/usr/vice/etc/CellServDB' /usr/vice/etc/CellServDB.local /usr/vice/etc/CellServDB.mousetrap + ExecStartPre=/bin/chmod 0644 /usr/vice/etc/CellServDB + ExecStartPre=/sbin/modprobe openafs + ExecStart=/usr/vice/etc/afsd $AFSD_ARGS Index: /branches/fc17-dev/server/common/patches/openafs-systemd.patch =================================================================== --- /branches/fc17-dev/server/common/patches/openafs-systemd.patch (revision 2194) +++ /branches/fc17-dev/server/common/patches/openafs-systemd.patch (revision 2195) @@ -32,5 +32,5 @@ + +[Install] -+WantedBy=multi-user.target ++WantedBy=multi-user.target remote-fs.target diff --git a/src/packaging/RedHat/openafs-server.service b/src/packaging/RedHat/openafs-server.service new file mode 100644 Index: /branches/fc17-dev/server/common/patches/php-cve-2012-1823.patch =================================================================== --- /branches/fc17-dev/server/common/patches/php-cve-2012-1823.patch (revision 2195) +++ /branches/fc17-dev/server/common/patches/php-cve-2012-1823.patch (revision 2195) @@ -0,0 +1,20 @@ +--- sapi/cgi/cgi_main.c.orig 2012-05-03 14:33:04.243763906 -0400 ++++ sapi/cgi/cgi_main.c 2012-05-03 14:34:03.294241200 -0400 +@@ -1552,7 +1552,7 @@ + } + } + +- while ((c = php_getopt(argc, argv, OPTIONS, &php_optarg, &php_optind, 0, 2)) != -1) { ++ if (!cgi) while ((c = php_getopt(argc, argv, OPTIONS, &php_optarg, &php_optind, 0, 2)) != -1) { + switch (c) { + case 'c': + if (cgi_sapi_module.php_ini_path_override) { +@@ -1801,7 +1801,7 @@ + } + + zend_first_try { +- while ((c = php_getopt(argc, argv, OPTIONS, &php_optarg, &php_optind, 1, 2)) != -1) { ++ if (!cgi) while ((c = php_getopt(argc, argv, OPTIONS, &php_optarg, &php_optind, 1, 2)) != -1) { + switch (c) { + case 'T': + benchmark = 1; Index: /branches/fc17-dev/server/doc/install-howto.sh =================================================================== --- /branches/fc17-dev/server/doc/install-howto.sh (revision 2194) +++ /branches/fc17-dev/server/doc/install-howto.sh (revision 2195) @@ -84,6 +84,11 @@ yum remove NetworkManager -# Make sure sendmail isn't installed - yum remove sendmail +# Make sure sendmail isn't installed, replace it with postfix + yum shell < packages.txt # arrange for packages.txt to be passed to the server, then run: -# --skip-broken will (usually) prevent you from having to sit through -# several minutes of dependency resolution until it decides that -# it can't install /one/ package. - yum install -y --skip-broken $(cat packages.txt) + cd /tmp + yumdownloader --disablerepo=scripts ghc-cgi ghc-cgi-devel + yum localinstall ghc-cgi*.x86_64.rpm + yum install -y $(cat packages.txt) +# The reason this works is that ghc-cgi is marked as installonlypkgs +# in yum.conf, telling yum to install them side-by-side rather than +# updating them. If it doesn't work, use --skip-broken on the yum +# command line. # Check which packages are installed on your new server that are not @@ -140,19 +153,12 @@ # ModemManager PackageKit -# We need an upstream version of cgi which we've packaged ourselves, but -# it doesn't work with the haskell-platform package which expects -# explicit versions. So temporarily rpm -e the package, and then -# install it again after you install haskell-platform. [Note: You -# probably won't need this in Fedora 17 or something, when the Haskell -# Platform gets updated.] [It's not obvious to me that this actually -# works] - rpm -e ghc-cgi-devel ghc-cgi - yum install -y haskell-platform - yumdownloader ghc-cgi - yumdownloader ghc-cgi-devel - rpm -i ghc-cgi*1.8.2*.rpm - # ----------------------------->8-------------------------------------- # SPHEROID SHENANIGANS + +# Install the Python eggs and Ruby gems and PEAR/PECL doohickeys that are on +# the other scripts.mit.edu servers and do not have RPMs. +# The general mode of operation will be to run the "list" command +# on both servers, see what the differences are, check if those diffs +# are packaged up as rpms, and install them (rpm if possible, native otherwise) # Note: Since ultimately we'd like to move away from using per-language @@ -163,4 +169,21 @@ # packaged up the RPM. Unfortunately we don't really have good incants # for this. + +# Warning: If you're installing a new server mid-lifecycle (or even if +# this is the start of a cycle, but you've been staggering the +# installation of servers), upstream may have moved on. Because we +# don't normally upgrade spheroid projects, that means executing these +# instructions directly means that you will have mismatched versions +# (the new servers will have newer versions.) Please follow the +# UPGRADE commentary attached to each of these. + +# Warning: The package lists that are generated are inconsistent on +# the question of whether or not they contain all packages (locally +# installed as well as distro packaged), or if they just contain locally +# installed packages. Check this carefully; many of the install incants +# filter out already installed packages. + +# PERL CPAN +# --------- # Install the full list of perl modules that users expect to be on the @@ -174,13 +197,22 @@ perldoc -u perllocal | grep head2 | cut -f 3 -d '<' | cut -f 1 -d '|' | sort -u | perl -ne 'chomp; print "notest install $_\n" if system("rpm -q --whatprovides \"perl($_)\" >/dev/null 2>/dev/null")' > perl-packages.txt # arrange for perl-packages.txt to be transferred to server + # Package list only contains new packages cat perl-packages.txt | perl -MCPAN -e shell - -# Install the Python eggs and Ruby gems and PEAR/PECL doohickeys that are on -# the other scripts.mit.edu servers and do not have RPMs. -# The general mode of operation will be to run the "list" command -# on both servers, see what the differences are, check if those diffs -# are packaged up as rpms, and install them (rpm if possible, native otherwise) -# - Look at /usr/lib/python2.6/site-packages and -# /usr/lib64/python2.6/site-packages for Python eggs and modules. +# These are in /usr/local + +# UPGRADE: Installing old versions of CPAN modules requires you to +# specify the full path of a module, e.g. +# M/MS/MSCHWERN/Test-Simple-0.62.tar.gz. It is not currently clear how +# to get this information programatically. Furthermore, we have a lot +# of CPAN managed modules. Since CPAN is the only thing +# placed in /usr/local at this point, it may be easier to simple tar and +# cp the Perl modules from one server to another, to keep them +# consistent. But doing this is fiddly XXX + +# PYTHON EGGS +# ----------- + +# - Look at /usr/lib/python2.7/site-packages and +# /usr/lib64/python2.7/site-packages for Python eggs and modules. # There will be a lot of gunk that was installed from packages; # easy-install.pth in /usr/lib/ will tell you what was easy_installed. @@ -192,5 +224,16 @@ # 'easy_install AuthKit jsonlib2 pygit' cat /usr/lib/python2.7/site-packages/easy-install.pth | grep "^./" | cut -c3- | cut -f1 -d- > egg.txt + # Package list only contains new packages cat egg.txt | xargs easy_install -Z +# These are in /usr + +# UPGRADE: Use 'easy_install -n' to see what new versions are installed, and if there +# are updates validate them and upgrade them on the old servers. Since +# we have a really small package list (around 4) checking these manually +# should be fine. Note that dry run is slightly buggy and may fail +# midway processing files on account of a missing build directory. + +# RUBY GEMS +# --------- # - Look at `gem list` for Ruby gems. @@ -200,7 +243,31 @@ # XXX This doesn't do the right thing for old version gems gem list --no-version > gem.txt + # Package list contains distro gems too gem install $(gem list --no-version | grep -Fxvf - gem.txt) # Also, we need to install the old rails version gem install -v=2.3.5 rails +# These are in /usr + +# UPGRADE: You can either upgrade out-of-date gems, or leave them at +# the old version. We recommend the latter (see below for the +# rationale), but note that the install script described here doesn't +# pin against version, so you'll need to supply the -v parameters +# manually (the gems we install manually don't move too quickly, so this +# is fairly tractable if you check 'gem outdated'.) +# +# If you want to upgrade, do NOT use wildcard 'gem update'; use 'gem +# outdated' to find out all gems that are out of date, and verify this +# against our locally installed gems (there will be a lot of out of date +# gems, but this is simply because Fedora packaging lags behind the +# canonical versions (this is a good thing). Manually upgrade just +# those gems. Note that this doesn't save you from having to install +# old gems on the servers that are being installed out-of-cycle, +# because Ruby supports pinning against old versions, and if those gems +# then mysteriously disappear, things will be sad (note that this isn't +# a *huge* problem, because usually when you pin gems it's in +# conjunction with rvm, so they have their local copy of the gem.) + +# PHP PEAR +# -------- # - Look at `pear list` for Pear fruits (or whatever they're called). @@ -209,7 +276,12 @@ # (you might get complaints about the php_scripts module; ignore them) pear list | tail -n +4 | cut -f 1 -d " " > pear.txt + # Package list contains distro packages pear config-set preferred_state beta pear channel-update pear.php.net pear install $(pear list | tail -n +4 | cut -f 1 -d " " | grep -Fxvf - pear.txt) +# These are in /usr + +# PHP PECL +# -------- # - Look at `pecl list` for PECL things. 'yum search', and if you must, @@ -217,13 +289,20 @@ # pecl/foo' or 'pecl install foo-beta' or those two combined. pecl list | tail -n +4 | cut -f 1 -d " " > pecl.txt + # Package list contains distro packages pecl install --nodeps $(pecl list | tail -n +4 | cut -f 1 -d " " | grep -Fxvf - pecl.txt) +# These are in /usr # ----------------------------->8-------------------------------------- # INFINITE CONFIGURATION -# Create fedora-ds user (needed for credit-card) +# [PROD] Create fedora-ds user (needed for credit-card) useradd -u 103 -r -d /var/lib/dirsrv fedora-ds # Run credit-card to clone in credentials and make things runabble +# NOTE: You may be tempted to run credit-card earlier in the install +# process in order, for example, to be able to SSH in to the servers +# with Kerberos. However, it is better to install the credentials +# *after* we have run a boatload untrusted code as part of the +# spheroids objects process. So don't move this step earlier! python host.py push $server @@ -238,25 +317,20 @@ # # [TESTSERVER] daemon.scripts-test -# [PRODUCTION/WIZARD] Fix the openafs /usr/vice/etc <-> /etc/openafs -# mapping. - echo "/afs:/usr/vice/cache:10000000" > /usr/vice/etc/cacheinfo - echo "athena.mit.edu" > /usr/vice/etc/ThisCell +# Test that zephyr is working + systemctl enable zhm.service + systemctl start zhm.service + echo 'Test!' | zwrite -d -c scripts -i test + +# Check out the scripts /usr/vice/etc configuration + cd /root/vice + \cp -a etc /usr/vice # [TESTSERVER] If you're installing a test server, this needs to be # much smaller; the max filesize on XVM is 10GB. Pick something like # 500000. Also, some of the AFS parameters are kind of retarded (and if # you're low on disk space, will actually exhaust our inodes). Edit -# these parameters in /etc/sysconfig/openafs (This doesn't work in the -# new systemd world order: try editing the unit file instead.) +# these parameters in /etc/sysconfig/openafs (I just chopped a zero +# off of all of our parameters) echo "/afs:/usr/vice/cache:500000" > /usr/vice/etc/cacheinfo vim /etc/sysconfig/openafs - -# Test that zephyr is working - systemctl enable zhm.service - systemctl start zhm.service - echo 'Test!' | zwrite -d -c scripts -i test - -# Check out the scripts /usr/vice/etc configuration - cd /root/vice - \cp -a etc /usr/vice # [PRODUCTION] Set up replication (see ./install-ldap). @@ -300,10 +374,4 @@ # (Note: this errors on XeTeX which is ok.) fmtutil-sys --all - -# Ensure that PHP isn't broken: - mkdir /tmp/sessions - chmod 01777 /tmp/sessions - # XXX: this seems to get deleted if tmp gets cleaned up, so we - # might need something a little better (maybe init script.) # Fix etc by making sure none of our config files got overwritten @@ -374,6 +442,7 @@ # or do SSL. Generate with: openssl req -new -x509 -keyout /etc/pki/tls/private/scripts.key -out /etc/pki/tls/certs/scripts.cert -nodes -# Also make /etc/pki/tls/certs/ca.pem match up (XXX what's the -# incant for that?) + ln -s /etc/pki/tls/private/scripts.key /etc/pki/tls/private/scripts-1024.key +# Also make /etc/pki/tls/certs/ca.pem match up + openssl rsa -in /etc/pki/tls/private/scripts.key -pubout > /etc/pki/tls/certs/ca.pem # [TESTSERVER] More stuff for test servers Index: /branches/fc17-dev/server/fedora/Makefile =================================================================== --- /branches/fc17-dev/server/fedora/Makefile (revision 2194) +++ /branches/fc17-dev/server/fedora/Makefile (revision 2195) @@ -19,9 +19,9 @@ # See /COPYRIGHT in this repository for more information. -upstream_yum = krb5 krb5.i686 httpd openssh redland-bindings rubygems +upstream_yum = krb5 krb5.i686 httpd openssh redland-bindings rubygems php hackage = MonadCatchIO-mtl-0.3.0.2 cgi-3001.1.8.2 unix-handle-0.0.0 upstream_hackage = ghc-MonadCatchIO-mtl ghc-cgi ghc-unix-handle -upstream = openafs $(upstream_yum) $(upstream_hackage) moira zephyr zephyr.i686 python-zephyr athena-aclocal discuss -oursrc = execsys tokensys accountadm httpdmods logview sql-signup nss_nonlocal nss_nonlocal.i686 whoisd athrun php_scripts scripts-wizard scripts-base scripts-static-cat +upstream = openafs $(upstream_yum) $(upstream_hackage) moira zephyr zephyr.i686 python-zephyr python-afs athena-aclocal discuss +oursrc = execsys tokensys accountadm httpdmods logview sql-signup nss_nonlocal nss_nonlocal.i686 whoisd athrun php_scripts scripts-wizard scripts-base scripts-static-cat fuse-better-mousetrapfs allsrc = $(upstream) $(oursrc) oursrcdir = ${PWD}/../common/oursrc @@ -48,7 +48,7 @@ info: - @echo "The following packages are available:"; \ - echo "$(allsrc)"; \ - echo "Run 'make all' to build all packages." + @echo "The following packages are available:" + @echo "$(allsrc)" + @echo "Run 'make all' to build all packages." minimal-clean: @@ -60,5 +60,5 @@ mkdir-tree: - @rpmdev-setuptree + rpmdev-setuptree mkdir -p $(out_sbin) ln -sTf $(topdir) rpmbuild @@ -66,5 +66,5 @@ download: download_stamp download_stamp: - @mkdir -p $(dload); \ + mkdir -p $(dload) #wget -qO- -nv $(server_url)/$(server_arch) | xargs make cd $(dload) && yumdownloader --disablerepo=scripts --source $(upstream_yum) @@ -76,4 +76,5 @@ cp -a $(hackage:%=~/.cabal/packages/*/*/*/%.tar.gz) $(tmp_src) spectool -g -R $(specs)/python-zephyr.spec + spectool -g -R $(specs)/python-afs.spec touch download_stamp @@ -85,9 +86,8 @@ copy-patches: mkdir-tree - @cp $(patches)/*.patch $(tmp_src); \ - cd $(tmp_src); + cp $(patches)/*.patch $(tmp_src) install-srpms: mkdir-tree download - rpm $(rpm_args) -i $(dload)/*.src.rpm 2>/dev/null; + rpm $(rpm_args) -i $(dload)/*.src.rpm 2>/dev/null copy-specs: mkdir-tree @@ -96,5 +96,6 @@ # Remove old .orig files so we're not mislead patch-specs: install-srpms - @cd ${tmp_specs}; \ + @set -ex; \ + cd ${tmp_specs}; \ list=`ls ${specs}/*.spec.patch`; \ rm -f *.orig; \ @@ -106,4 +107,5 @@ for i in $$list2; do \ base=`basename $$i`; \ + [ -e ${tmp_specs}/$$base.spec ] || continue; \ version=`svnversion ${oursrcdir}/$$i`; \ version=$${version//:/_}; \ @@ -112,10 +114,11 @@ -e "s/SVNVERSION_TO_UPDATE/$${version}/" \ ${tmp_specs}/$$base.spec; \ - done; + done # 1. use the package's Makefile to delete leftover files and run autoconf # 2. create a tarball (we want it to contain the autoconf output) tarballs: mkdir-tree - @cd ${oursrcdir}; \ + @set -ex; \ + cd ${oursrcdir}; \ list=`find -mindepth 1 -maxdepth 1 -type d | grep -v ".svn"`; \ for i in $$list; do \ @@ -123,9 +126,11 @@ if [ -x ./mrproper ]; then \ ./mrproper; \ - autoconf; \ + if [ -e configure.in ] || [ -e configure.ac ]; then \ + autoconf; \ + fi; \ fi; \ popd; \ tar -czf $(tmp_src)/$$i.tar.gz $$i; \ - done; + done #setup: install-srpms copy-patches copy-specs patch-specs tarballs @@ -177,5 +182,6 @@ frob-openafs: - @if [ ! -d "/etc/openafs/" ]; then \ + @set -ex; \ + if [ ! -d "/etc/openafs/" ]; then \ echo "/etc/openafs does not exist"; \ exit 1; \ Index: anches/fc17-dev/server/fedora/config/etc/cron.d/slapdagent =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/cron.d/slapdagent (revision 2194) +++ (revision ) @@ -1,3 +1,0 @@ -KRB5CCNAME=/var/run/dirsrv/krb5cc -MAILTO=scripts-root@mit.edu -0 */3 * * * fedora-ds /usr/bin/kinit -k -t /etc/dirsrv/keytab ldap/$(hostname) Index: anches/fc17-dev/server/fedora/config/etc/environment.cron =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/environment.cron (revision 2194) +++ (revision ) @@ -1,1 +1,0 @@ -SELINUX_ROLE_TYPE="user_u:user_r:user_t" Index: /branches/fc17-dev/server/fedora/config/etc/httpd/conf.d/scripts-special.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (revision 2195) @@ -30,5 +30,5 @@ RewriteCond %{HTTP_USER_AGENT} Mac\ OS\ X.*AppleWebKit - RewriteRule /afs/athena.mit.edu/contrib/scripts/www/needcerts(.*) /__scripts/safarihack$1 [L] + RewriteRule /afs/athena.mit.edu/contrib/scripts/www/needcerts(.*) /__scripts/certerror$1 [L] RewriteRule /afs/athena.mit.edu/contrib/scripts/www/needcerts(.+) $1 [L] @@ -36,7 +36,7 @@ - + SSLVerifyClient require - RewriteRule /afs/athena.mit.edu/contrib/scripts/www/safarihack(.+) $1 [L] - RewriteRule /afs/athena.mit.edu/contrib/scripts/www/safarihack /__scripts/unauthorized.html [L] + RewriteRule /afs/athena.mit.edu/contrib/scripts/www/certerror(.+) $1 [L] + RewriteRule /afs/athena.mit.edu/contrib/scripts/www/certerror /__scripts/unauthorized.html [L] Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/asa.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/asa.conf (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/asa.conf (revision 2195) @@ -4,7 +4,7 @@ ServerName asa.mit.edu ServerAlias asa - DocumentRoot /afs/athena.mit.edu/activity/a/asa/web_scripts - Alias /~asa /afs/athena.mit.edu/activity/a/asa/web_scripts - SuExecUserGroup asa asa + DocumentRoot /afs/athena.mit.edu/activity/a/asa-db/web_scripts/db + Alias /~asa-db /afs/athena.mit.edu/activity/a/asa-db/web_scripts + SuExecUserGroup asa-db asa-db Include conf.d/vhosts-common.conf @@ -14,7 +14,7 @@ ServerName asa.mit.edu ServerAlias asa - DocumentRoot /afs/athena.mit.edu/activity/a/asa/web_scripts - Alias /~asa /afs/athena.mit.edu/activity/a/asa/web_scripts - SuExecUserGroup asa asa + DocumentRoot /afs/athena.mit.edu/activity/a/asa-db/web_scripts/db + Alias /~asa-db /afs/athena.mit.edu/activity/a/asa-db/web_scripts + SuExecUserGroup asa-db asa-db Include conf.d/vhosts-common-ssl.conf SSLCertificateFile /etc/pki/tls/certs/asa.pem @@ -24,7 +24,7 @@ ServerName asa.mit.edu ServerAlias asa - DocumentRoot /afs/athena.mit.edu/activity/a/asa/web_scripts - Alias /~asa /afs/athena.mit.edu/activity/a/asa/web_scripts - SuExecUserGroup asa asa + DocumentRoot /afs/athena.mit.edu/activity/a/asa-db/web_scripts/db + Alias /~asa-db /afs/athena.mit.edu/activity/a/asa-db/web_scripts + SuExecUserGroup asa-db asa-db Include conf.d/vhosts-common-ssl.conf Include conf.d/vhosts-common-ssl-cert.conf Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/bakerfoundation.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/bakerfoundation.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/bakerfoundation.conf (revision 2195) @@ -0,0 +1,34 @@ +# do not trailing-slash DocumentRoot + + + ServerName bakerfoundation.mit.edu + ServerAlias bakerfoundation + DocumentRoot /afs/athena.mit.edu/activity/b/baker-foundation/web_scripts/foundation + Alias /~baker-foundation /afs/athena.mit.edu/activity/b/baker-foundation/web_scripts + SuExecUserGroup baker-foundation baker-foundation + Include conf.d/vhosts-common.conf + + + + + ServerName bakerfoundation.mit.edu + ServerAlias bakerfoundation + DocumentRoot /afs/athena.mit.edu/activity/b/baker-foundation/web_scripts/foundation + Alias /~baker-foundation /afs/athena.mit.edu/activity/b/baker-foundation/web_scripts + SuExecUserGroup baker-foundation baker-foundation + Include conf.d/vhosts-common-ssl.conf + SSLCertificateFile /etc/pki/tls/certs/bakerfoundation.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + + ServerName bakerfoundation.mit.edu + ServerAlias bakerfoundation + DocumentRoot /afs/athena.mit.edu/activity/b/baker-foundation/web_scripts/foundation + Alias /~baker-foundation /afs/athena.mit.edu/activity/b/baker-foundation/web_scripts + SuExecUserGroup baker-foundation baker-foundation + Include conf.d/vhosts-common-ssl.conf + Include conf.d/vhosts-common-ssl-cert.conf + SSLCertificateFile /etc/pki/tls/certs/bakerfoundation.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/blog.gregbrockman.com.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/blog.gregbrockman.com.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/blog.gregbrockman.com.conf (revision 2195) @@ -0,0 +1,36 @@ +# do not trailing-slash DocumentRoot + + + ServerName blog.gregbrockman.com + + DocumentRoot /afs/athena.mit.edu/user/g/d/gdb/web_scripts/blog + Alias /~gdb /afs/athena.mit.edu/user/g/d/gdb/web_scripts + SuExecUserGroup gdb gdb + Include conf.d/vhosts-common.conf + + + + + ServerName blog.gregbrockman.com + + DocumentRoot /afs/athena.mit.edu/user/g/d/gdb/web_scripts/blog + Alias /~gdb /afs/athena.mit.edu/user/g/d/gdb/web_scripts + SuExecUserGroup gdb gdb + Include conf.d/vhosts-common-ssl.conf + SSLCertificateFile /etc/pki/tls/certs/blog.gregbrockman.com.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + SSLCertificateChainFile /etc/pki/tls/certs/blog.gregbrockman.com.pem + + + ServerName blog.gregbrockman.com + + DocumentRoot /afs/athena.mit.edu/user/g/d/gdb/web_scripts/blog + Alias /~gdb /afs/athena.mit.edu/user/g/d/gdb/web_scripts + SuExecUserGroup gdb gdb + Include conf.d/vhosts-common-ssl.conf + Include conf.d/vhosts-common-ssl-cert.conf + SSLCertificateFile /etc/pki/tls/certs/blog.gregbrockman.com.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + SSLCertificateChainFile /etc/pki/tls/certs/blog.gregbrockman.com.pem + + Index: anches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/cook.bluechi.ps.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/cook.bluechi.ps.conf (revision 2194) +++ (revision ) @@ -1,34 +1,0 @@ -# do not trailing-slash DocumentRoot - - - ServerName cook.bluechi.ps - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/cook.bluechi.ps - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common.conf - - - - - ServerName cook.bluechi.ps - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/cook.bluechi.ps - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common-ssl.conf - SSLCertificateFile /etc/pki/tls/certs/cook.bluechi.ps.pem - SSLCertificateKeyFile /etc/pki/tls/private/scripts.key - - - ServerName cook.bluechi.ps - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/cook.bluechi.ps - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common-ssl.conf - Include conf.d/vhosts-common-ssl-cert.conf - SSLCertificateFile /etc/pki/tls/certs/cook.bluechi.ps.pem - SSLCertificateKeyFile /etc/pki/tls/private/scripts.key - - Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/courseroad.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/courseroad.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/courseroad.conf (revision 2195) @@ -0,0 +1,34 @@ +# do not trailing-slash DocumentRoot + + + ServerName courseroad.mit.edu + ServerAlias courseroad + DocumentRoot /afs/athena.mit.edu/user/d/a/dannybd/web_scripts/courseroad + Alias /~dannybd /afs/athena.mit.edu/user/d/a/dannybd/web_scripts + SuExecUserGroup dannybd dannybd + Include conf.d/vhosts-common.conf + + + + + ServerName courseroad.mit.edu + ServerAlias courseroad + DocumentRoot /afs/athena.mit.edu/user/d/a/dannybd/web_scripts/courseroad + Alias /~dannybd /afs/athena.mit.edu/user/d/a/dannybd/web_scripts + SuExecUserGroup dannybd dannybd + Include conf.d/vhosts-common-ssl.conf + SSLCertificateFile /etc/pki/tls/certs/courseroad.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + + ServerName courseroad.mit.edu + ServerAlias courseroad + DocumentRoot /afs/athena.mit.edu/user/d/a/dannybd/web_scripts/courseroad + Alias /~dannybd /afs/athena.mit.edu/user/d/a/dannybd/web_scripts + SuExecUserGroup dannybd dannybd + Include conf.d/vhosts-common-ssl.conf + Include conf.d/vhosts-common-ssl-cert.conf + SSLCertificateFile /etc/pki/tls/certs/courseroad.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/dchang.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/dchang.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/dchang.conf (revision 2195) @@ -0,0 +1,34 @@ +# do not trailing-slash DocumentRoot + + + ServerName dchang.mit.edu + ServerAlias dchang + DocumentRoot /afs/athena.mit.edu/user/d/c/dchang/web_scripts + Alias /~dchang /afs/athena.mit.edu/user/d/c/dchang/web_scripts + SuExecUserGroup dchang dchang + Include conf.d/vhosts-common.conf + + + + + ServerName dchang.mit.edu + ServerAlias dchang + DocumentRoot /afs/athena.mit.edu/user/d/c/dchang/web_scripts + Alias /~dchang /afs/athena.mit.edu/user/d/c/dchang/web_scripts + SuExecUserGroup dchang dchang + Include conf.d/vhosts-common-ssl.conf + SSLCertificateFile /etc/pki/tls/certs/dchang.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + + ServerName dchang.mit.edu + ServerAlias dchang + DocumentRoot /afs/athena.mit.edu/user/d/c/dchang/web_scripts + Alias /~dchang /afs/athena.mit.edu/user/d/c/dchang/web_scripts + SuExecUserGroup dchang dchang + Include conf.d/vhosts-common-ssl.conf + Include conf.d/vhosts-common-ssl-cert.conf + SSLCertificateFile /etc/pki/tls/certs/dchang.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/debathena.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/debathena.conf (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/debathena.conf (revision 2195) @@ -3,5 +3,5 @@ ServerName debathena.mit.edu - ServerAlias debathena + ServerAlias *.debathena.com *.debathena.net *.debathena.org debathena debathena.com debathena.net debathena.org DocumentRoot /afs/sipb.mit.edu/project/debathena/web_scripts Alias /~debathena /afs/sipb.mit.edu/project/debathena/web_scripts @@ -14,15 +14,16 @@ ServerName debathena.mit.edu - ServerAlias debathena + ServerAlias *.debathena.com *.debathena.net *.debathena.org debathena debathena.com debathena.net debathena.org DocumentRoot /afs/sipb.mit.edu/project/debathena/web_scripts Alias /~debathena /afs/sipb.mit.edu/project/debathena/web_scripts SuExecUserGroup debathena debathena Include conf.d/vhosts-common-ssl.conf + CustomLog /home/logview/debathena.log combined SSLCertificateFile /etc/pki/tls/certs/debathena.pem - CustomLog /home/logview/debathena.log combined + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key ServerName debathena.mit.edu - ServerAlias debathena + ServerAlias *.debathena.com *.debathena.net *.debathena.org debathena debathena.com debathena.net debathena.org DocumentRoot /afs/sipb.mit.edu/project/debathena/web_scripts Alias /~debathena /afs/sipb.mit.edu/project/debathena/web_scripts @@ -30,6 +31,7 @@ Include conf.d/vhosts-common-ssl.conf Include conf.d/vhosts-common-ssl-cert.conf + CustomLog /home/logview/debathena.log combined SSLCertificateFile /etc/pki/tls/certs/debathena.pem - CustomLog /home/logview/debathena.log combined + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key Index: anches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/finance.blue-sun-corp.com.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/finance.blue-sun-corp.com.conf (revision 2194) +++ (revision ) @@ -1,34 +1,0 @@ -# do not trailing-slash DocumentRoot - - - ServerName finance.blue-sun-corp.com - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/finance - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common.conf - - - - - ServerName finance.blue-sun-corp.com - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/finance - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common-ssl.conf - SSLCertificateFile /etc/pki/tls/certs/blue-sun-corp.com.pem - SSLCertificateKeyFile /etc/pki/tls/private/scripts.key - - - ServerName finance.blue-sun-corp.com - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/finance - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common-ssl.conf - Include conf.d/vhosts-common-ssl-cert.conf - SSLCertificateFile /etc/pki/tls/certs/blue-sun-corp.com.pem - SSLCertificateKeyFile /etc/pki/tls/private/scripts.key - - Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/impact.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/impact.conf (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/impact.conf (revision 2195) @@ -19,4 +19,5 @@ Include conf.d/vhosts-common-ssl.conf SSLCertificateFile /etc/pki/tls/certs/impact.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key @@ -29,4 +30,5 @@ Include conf.d/vhosts-common-ssl-cert.conf SSLCertificateFile /etc/pki/tls/certs/impact.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/ldpreload.com.conf (revision 2195) @@ -0,0 +1,36 @@ +# do not trailing-slash DocumentRoot + + + ServerName ldpreload.com + ServerAlias www.ldpreload.com + DocumentRoot /afs/athena.mit.edu/user/g/e/geofft/web_scripts/geofft + Alias /~geofft /afs/athena.mit.edu/user/g/e/geofft/web_scripts + SuExecUserGroup geofft geofft + Include conf.d/vhosts-common.conf + + + + + ServerName ldpreload.com + ServerAlias www.ldpreload.com + DocumentRoot /afs/athena.mit.edu/user/g/e/geofft/web_scripts/geofft + Alias /~geofft /afs/athena.mit.edu/user/g/e/geofft/web_scripts + SuExecUserGroup geofft geofft + Include conf.d/vhosts-common-ssl.conf + SSLCertificateFile /etc/pki/tls/certs/ldpreload.com.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + SSLCertificateChainFile /etc/pki/tls/certs/ldpreload.com.pem + + + ServerName ldpreload.com + ServerAlias www.ldpreload.com + DocumentRoot /afs/athena.mit.edu/user/g/e/geofft/web_scripts/geofft + Alias /~geofft /afs/athena.mit.edu/user/g/e/geofft/web_scripts + SuExecUserGroup geofft geofft + Include conf.d/vhosts-common-ssl.conf + Include conf.d/vhosts-common-ssl-cert.conf + SSLCertificateFile /etc/pki/tls/certs/ldpreload.com.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + SSLCertificateChainFile /etc/pki/tls/certs/ldpreload.com.pem + + Index: anches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/music.blue-sun-corp.com.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/music.blue-sun-corp.com.conf (revision 2194) +++ (revision ) @@ -1,34 +1,0 @@ -# do not trailing-slash DocumentRoot - - - ServerName music.blue-sun-corp.com - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/music - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common.conf - - - - - ServerName music.blue-sun-corp.com - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/music - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common-ssl.conf - SSLCertificateFile /etc/pki/tls/certs/blue-sun-corp.com.pem - SSLCertificateKeyFile /etc/pki/tls/private/scripts.key - - - ServerName music.blue-sun-corp.com - - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/music - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common-ssl.conf - Include conf.d/vhosts-common-ssl-cert.conf - SSLCertificateFile /etc/pki/tls/certs/blue-sun-corp.com.pem - SSLCertificateKeyFile /etc/pki/tls/private/scripts.key - - Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/peoplesearch.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/peoplesearch.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/peoplesearch.conf (revision 2195) @@ -0,0 +1,34 @@ +# do not trailing-slash DocumentRoot + + + ServerName peoplesearch.mit.edu + ServerAlias peoplesearch + DocumentRoot /afs/athena.mit.edu/user/d/c/dchang/web_scripts/lookup + Alias /~dchang /afs/athena.mit.edu/user/d/c/dchang/web_scripts + SuExecUserGroup dchang dchang + Include conf.d/vhosts-common.conf + + + + + ServerName peoplesearch.mit.edu + ServerAlias peoplesearch + DocumentRoot /afs/athena.mit.edu/user/d/c/dchang/web_scripts/lookup + Alias /~dchang /afs/athena.mit.edu/user/d/c/dchang/web_scripts + SuExecUserGroup dchang dchang + Include conf.d/vhosts-common-ssl.conf + SSLCertificateFile /etc/pki/tls/certs/peoplesearch.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + + ServerName peoplesearch.mit.edu + ServerAlias peoplesearch + DocumentRoot /afs/athena.mit.edu/user/d/c/dchang/web_scripts/lookup + Alias /~dchang /afs/athena.mit.edu/user/d/c/dchang/web_scripts + SuExecUserGroup dchang dchang + Include conf.d/vhosts-common-ssl.conf + Include conf.d/vhosts-common-ssl-cert.conf + SSLCertificateFile /etc/pki/tls/certs/peoplesearch.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + Index: /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/pickr.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/pickr.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/pickr.conf (revision 2195) @@ -0,0 +1,34 @@ +# do not trailing-slash DocumentRoot + + + ServerName pickr.mit.edu + ServerAlias pickr + DocumentRoot /afs/athena.mit.edu/course/urop/picker/web_scripts + Alias /~picker /afs/athena.mit.edu/course/urop/picker/web_scripts + SuExecUserGroup picker picker + Include conf.d/vhosts-common.conf + + + + + ServerName pickr.mit.edu + ServerAlias pickr + DocumentRoot /afs/athena.mit.edu/course/urop/picker/web_scripts + Alias /~picker /afs/athena.mit.edu/course/urop/picker/web_scripts + SuExecUserGroup picker picker + Include conf.d/vhosts-common-ssl.conf + SSLCertificateFile /etc/pki/tls/certs/pickr.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + + ServerName pickr.mit.edu + ServerAlias pickr + DocumentRoot /afs/athena.mit.edu/course/urop/picker/web_scripts + Alias /~picker /afs/athena.mit.edu/course/urop/picker/web_scripts + SuExecUserGroup picker picker + Include conf.d/vhosts-common-ssl.conf + Include conf.d/vhosts-common-ssl-cert.conf + SSLCertificateFile /etc/pki/tls/certs/pickr.pem + SSLCertificateKeyFile /etc/pki/tls/private/scripts.key + + Index: anches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/trac.blue-sun-corp.com.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/httpd/vhosts.d/trac.blue-sun-corp.com.conf (revision 2194) +++ (revision ) @@ -1,34 +1,0 @@ -# do not trailing-slash DocumentRoot - - - ServerName trac.blue-sun-corp.com - ServerAlias wiki.blue-sun-corp.com - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/trac - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common.conf - - - - - ServerName trac.blue-sun-corp.com - ServerAlias wiki.blue-sun-corp.com - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/trac - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common-ssl.conf - SSLCertificateFile /etc/pki/tls/certs/blue-sun-corp.com.pem - SSLCertificateKeyFile /etc/pki/tls/private/scripts.key - - - ServerName trac.blue-sun-corp.com - ServerAlias wiki.blue-sun-corp.com - DocumentRoot /afs/sipb.mit.edu/contrib/blue-sun/web_scripts/trac - Alias /~blue-sun /afs/sipb.mit.edu/contrib/blue-sun/web_scripts - SuExecUserGroup blue-sun blue-sun - Include conf.d/vhosts-common-ssl.conf - Include conf.d/vhosts-common-ssl-cert.conf - SSLCertificateFile /etc/pki/tls/certs/blue-sun-corp.com.pem - SSLCertificateKeyFile /etc/pki/tls/private/scripts.key - - Index: /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc11-i386.cfg =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc11-i386.cfg (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc11-i386.cfg (revision 2195) @@ -25,5 +25,5 @@ name=updates #mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f11&arch=i386 -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/11/i386/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/11/i386/ failovermethod=priority Index: /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc11-x86_64.cfg (revision 2195) @@ -29,5 +29,5 @@ name=updates #mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f11&arch=x86_64 -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/11/x86_64/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/11/x86_64/ failovermethod=priority Index: /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc13-i386.cfg =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc13-i386.cfg (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc13-i386.cfg (revision 2195) @@ -24,5 +24,5 @@ [updates-released] name=updates -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/13/i386/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/13/i386/ failovermethod=priority @@ -36,5 +36,5 @@ name=Scripts baseurl=http://web.mit.edu/scripts/yum-repos/rpm-fc13/ -enabled=0 +enabled=1 gpgcheck=0 """ # end config_opts['yum.conf'] Index: /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc13-x86_64.cfg =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc13-x86_64.cfg (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc13-x86_64.cfg (revision 2195) @@ -29,10 +29,10 @@ name=updates #mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f13&arch=x86_64 -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/13/x86_64/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/13/x86_64/ failovermethod=priority [updates-testing] name=updates-testing -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/testing/13/x86_64/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/testing/13/x86_64/ failovermethod=priority enabled=0 Index: /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc15-i386.cfg =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc15-i386.cfg (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc15-i386.cfg (revision 2195) @@ -28,5 +28,5 @@ name=updates #mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f15&arch=i386 -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/15/i386/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/15/i386/ failovermethod=priority @@ -40,5 +40,5 @@ name=Scripts baseurl=http://web.mit.edu/scripts/yum-repos/rpm-fc15/ -enabled=0 +enabled=1 gpgcheck=0 """ Index: /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc15-x86_64.cfg =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc15-x86_64.cfg (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/mock/scripts-fc15-x86_64.cfg (revision 2195) @@ -32,5 +32,5 @@ name=updates #mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f15&arch=x86_64 -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/15/x86_64/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/15/x86_64/ failovermethod=priority @@ -44,5 +44,5 @@ name=Scripts baseurl=http://web.mit.edu/scripts/yum-repos/rpm-fc15/ -enabled=0 +enabled=1 gpgcheck=0 """ Index: /branches/fc17-dev/server/fedora/config/etc/modules-load.d/fuse.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/modules-load.d/fuse.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/modules-load.d/fuse.conf (revision 2195) @@ -0,0 +1,1 @@ +fuse Index: /branches/fc17-dev/server/fedora/config/etc/nagios/check_afs =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/nagios/check_afs (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/nagios/check_afs (revision 2195) @@ -2,5 +2,10 @@ . /usr/lib64/nagios/plugins/utils.sh -CHECKS=`/usr/bin/fs checks -all -fast` +if [ $# -ge 1 ]; then + CHECKS=`/usr/bin/fs checks -cell "$1" -fast` +else + CHECKS=`/usr/bin/fs checks -all -fast` +fi + STATUS=$? Index: /branches/fc17-dev/server/fedora/config/etc/nagios/nrpe.cfg =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/nagios/nrpe.cfg (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/nagios/nrpe.cfg (revision 2195) @@ -77,5 +77,5 @@ # NOTE: This option is ignored if NRPE is running under either inetd or xinetd -allowed_hosts=18.187.1.128,18.181.0.65 +allowed_hosts=18.181.0.61,18.181.0.65,18.181.0.51 @@ -219,5 +219,8 @@ command[check_postfix_mailq]=/usr/lib64/nagios/plugins/check_mailq -w 500 -c 1000 -M postfix command[check_afs]=/etc/nagios/check_afs +command[check_afs_athena]=/etc/nagios/check_afs athena +command[check_afs_sipb]=/etc/nagios/check_afs sipb command[check_cron_working]=/etc/nagios/check_cron_working command[check_ldap_mmr]=/etc/nagios/check_ldap_mmr command[check_kern_taint]=/etc/nagios/check_kern_taint +command[check_backend]=/usr/lib64/nagios/plugins/check_ping -H 172.21.0.52 -w 500.0,30% -c 3000.0,80% # sql.mit.edu backend IP Index: /branches/fc17-dev/server/fedora/config/etc/pam.d/crond =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pam.d/crond (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pam.d/crond (revision 2195) @@ -10,4 +10,3 @@ session required pam_loginuid.so session [default=1 success=ignore] pam_succeed_if.so user notin root quiet -session required pam_env.so envfile=/etc/environment.cron session include system-auth Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/asa.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/asa.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/asa.pem (revision 2195) @@ -1,9 +1,7 @@ - --------- Original Message -------- -Subject: [help.mit.edu #1547750] CSR for asa.mit.edu and bc.mit.edu -Date: Mon, 11 Apr 2011 11:55:38 -0400 +From mitcert@MIT.EDU Thu Mar 29 13:45:20 2012 +Date: Thu, 29 Mar 2012 13:45:18 -0400 From: mitcert@MIT.EDU -Reply-To: mitcert@MIT.EDU -To: adehnert@mit.edu +To: achernya@mit.edu +Subject: [help.mit.edu #1938931] certificate renewal for scripts-vhost asa.mit.edu Certificate: @@ -11,10 +9,10 @@ Version: 3 (0x2) Serial Number: - f7:03:bd:64:23:2f:eb:2c:1e:fd:f1:af:a0:cd:c4:6c + c6:db:43:24:bc:b9:65:e5:c7:32:8b:25:fc:76:81:ee Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Apr 9 16:00:00 2011 GMT - Not After : Apr 10 16:00:00 2012 GMT + Not Before: Mar 28 16:00:00 2012 GMT + Not After : Mar 28 16:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=asa.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -59,32 +57,32 @@ Exponent: 65537 (0x10001) X509v3 extensions: - X509v3 Basic Constraints: + X509v3 Basic Constraints: CA:FALSE - Netscape Cert Type: + Netscape Cert Type: SSL Client, SSL Server, S/MIME - X509v3 Extended Key Usage: + X509v3 Extended Key Usage: TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication - X509v3 Key Usage: + X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment - X509v3 Subject Key Identifier: + X509v3 Subject Key Identifier: CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 - X509v3 CRL Distribution Points: + X509v3 CRL Distribution Points: URI:http://ca.mit.edu/ca/mitserver.crl Signature Algorithm: sha1WithRSAEncryption - 09:79:1b:c2:fb:62:3c:2b:ff:0f:27:fe:15:a1:84:3d:3a:f3: - b2:e1:d6:09:0e:75:8e:cd:d1:5f:81:c0:ae:85:11:6b:50:e9: - c4:8e:52:bf:38:9e:38:9a:c0:cb:27:ec:11:65:91:34:ad:fa: - a8:84:72:c4:3a:35:cc:ad:1c:59:1b:2b:c0:8e:30:c7:4a:4a: - fd:d8:f9:99:00:84:08:35:25:43:ac:47:92:06:34:07:2c:49: - 47:7f:c9:a1:44:80:86:ef:ab:75:f8:b4:90:d4:e5:be:04:db: - b8:03:f5:a4:c6:6d:b8:a3:fe:44:35:93:6e:a3:7a:b2:75:ae: - 06:f7 + 48:1c:cf:c1:73:3c:ba:43:26:49:cf:d7:95:cc:1a:cf:d3:5c: + dc:99:d7:e9:f6:b0:ee:52:49:b0:c8:69:bb:37:ab:b4:3c:c8: + d5:05:f2:f1:e7:e4:27:38:0f:b5:4c:31:a1:dd:72:f0:e5:70: + de:df:23:aa:88:ca:0d:a5:d4:8b:1a:cc:e6:e4:08:bf:d4:01: + fe:5d:22:be:18:d0:a5:31:ab:10:2b:58:42:b0:1d:33:f9:59: + 14:33:9a:2c:2b:db:02:92:27:52:e1:82:cb:a3:73:f3:41:f6: + dc:a2:d6:b8:33:55:ce:fc:8c:87:02:46:47:32:82:5e:ca:e6: + b3:78 -----BEGIN CERTIFICATE----- -MIIE/zCCBGigAwIBAgIRAPcDvWQjL+ssHv3xr6DNxGwwDQYJKoZIhvcNAQEFBQAw +MIIE/zCCBGigAwIBAgIRAMbbQyS8uWXlxzKLJfx2ge4wDQYJKoZIhvcNAQEFBQAw ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTA0MDkxNjAwMDBaFw0x -MjA0MTAxNjAwMDBaMIHNMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjAzMjgxNjAwMDBaFw0x +MzAzMjgxNjAwMDBaMIHNMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l @@ -106,6 +104,7 @@ VR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAmoCSGImh0 dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcNAQEFBQAD -gYEACXkbwvtiPCv/Dyf+FaGEPTrzsuHWCQ51js3RX4HAroURa1DpxI5SvzieOJrA -yyfsEWWRNK36qIRyxDo1zK0cWRsrwI4wx0pK/dj5mQCECDUlQ6xHkgY0ByxJR3/J -oUSAhu+rdfi0kNTlvgTbuAP1pMZtuKP+RDWTbqN6snWuBvc= ------END CERTIFICATE----- +gYEASBzPwXM8ukMmSc/Xlcwaz9Nc3JnX6faw7lJJsMhpuzertDzI1QXy8efkJzgP +tUwxod1y8OVw3t8jqojKDaXUixrM5uQIv9QB/l0ivhjQpTGrECtYQrAdM/lZFDOa +LCvbApInUuGCy6Nz80H23KLWuDNVzvyMhwJGRzKCXsrms3g= +-----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/bakerfoundation.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/bakerfoundation.pem (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/bakerfoundation.pem (revision 2195) @@ -0,0 +1,109 @@ +Subject: [help.mit.edu #1820526] CSR for bakerfoundation.mit.edu +From: mitcert@MIT.EDU +To: ezyang@mit.edu +Date: Tue, 6 Dec 2011 15:07:57 -0500 + +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 5e:32:8c:04:b9:a3:0c:49:f2:07:6f:d9:61:95:f4:14 + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority + Validity + Not Before: Dec 5 17:00:00 2011 GMT + Not After : Dec 5 17:00:00 2012 GMT + Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=bakerfoundation.mit.edu/emailAddress=scripts@mit.edu + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (4096 bit) + Modulus (4096 bit): + 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56: + f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3: + 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17: + 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91: + d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1: + b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24: + 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55: + 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b: + 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc: + 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad: + 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87: + 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06: + f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25: + 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59: + 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2: + a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4: + 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c: + 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d: + 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc: + c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43: + c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7: + 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa: + ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31: + 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b: + 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51: + 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3: + a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e: + 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0: + f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18: + 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc: + f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35: + f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76: + 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb: + 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46: + ce:8b:6d + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Cert Type: + SSL Client, SSL Server, S/MIME + X509v3 Extended Key Usage: + TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Subject Key Identifier: + CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 + X509v3 CRL Distribution Points: + URI:http://ca.mit.edu/ca/mitserver.crl + + Signature Algorithm: sha1WithRSAEncryption + 6f:cd:7a:05:c6:48:36:59:63:c9:68:f0:6f:30:8f:fc:45:6b: + 82:c9:63:c1:99:e6:27:18:a8:2f:db:ef:49:5c:ce:30:a1:b7: + c8:16:2a:0a:72:e1:c7:88:40:82:45:f8:19:1e:ba:9b:f0:6d: + ce:f0:9f:d7:91:02:a8:3e:62:07:5f:6e:1c:fe:9a:35:09:c9: + 3a:c7:25:97:cc:d1:2a:9c:de:20:ad:f3:f2:68:3f:34:9b:1c: + d6:09:73:2e:f8:dd:18:0e:4a:61:e0:2d:07:e8:30:43:01:ff: + 49:53:28:5b:2e:12:a5:94:30:a9:1d:4b:4f:e2:34:60:d4:71: + 59:c8 +-----BEGIN CERTIFICATE----- +MIIFCjCCBHOgAwIBAgIQXjKMBLmjDEnyB2/ZYZX0FDANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMTIwNTE3MDAwMFoXDTEy +MTIwNTE3MDAwMFowgdkxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMSAwHgYDVQQDExdiYWtlcmZvdW5kYXRpb24u +bWl0LmVkdTEeMBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkq +hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3w +z4mHc+OT97cBVzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUP +TfGwx141BmL+KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts +86DY09xrRLBeAVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCs +rd9UwO32IVH6xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBI +MGjwbgMmdMKhs9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS +9tF/Yx0II1JfwvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlM +iudUJyLGgK6HI1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE +6lVk995WndC20H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjo +g0w92zS2JAyQV8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7W +qGJCk1t89TX4MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6 +TIsJ/0bOi20CAwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF +4DAnBgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1Ud +DwQEAwIF4DAdBgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCww +KjAooCagJIYiaHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkq +hkiG9w0BAQUFAAOBgQBvzXoFxkg2WWPJaPBvMI/8RWuCyWPBmeYnGKgv2+9JXM4w +obfIFioKcuHHiECCRfgZHrqb8G3O8J/XkQKoPmIHX24c/po1Cck6xyWXzNEqnN4g +rfPyaD80mxzWCXMu+N0YDkph4C0H6DBDAf9JUyhbLhKllDCpHUtP4jRg1HFZyA== +-----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/bc.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/bc.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/bc.pem (revision 2195) @@ -1,9 +1,7 @@ - --------- Original Message -------- -Subject: [help.mit.edu #1547750] CSR for asa.mit.edu and bc.mit.edu -Date: Mon, 11 Apr 2011 11:55:07 -0400 +From mitcert@MIT.EDU Thu Mar 29 13:44:52 2012 +Date: Thu, 29 Mar 2012 13:44:49 -0400 From: mitcert@MIT.EDU -Reply-To: mitcert@MIT.EDU -To: adehnert@mit.edu +To: achernya@mit.edu +Subject: [help.mit.edu #1938930] certificate renewal for scripts-vhost bc.mit.edu Certificate: @@ -11,10 +9,10 @@ Version: 3 (0x2) Serial Number: - 26:a6:2a:37:79:0a:c0:9a:bf:ed:7a:7e:21:fb:4a:f0 + c9:b6:55:c1:c2:29:32:7e:43:18:35:ee:e2:a9:4c:35 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Apr 9 16:00:00 2011 GMT - Not After : Apr 10 16:00:00 2012 GMT + Not Before: Mar 28 16:00:00 2012 GMT + Not After : Mar 28 16:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=bc.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -59,53 +57,54 @@ Exponent: 65537 (0x10001) X509v3 extensions: - X509v3 Basic Constraints: + X509v3 Basic Constraints: CA:FALSE - Netscape Cert Type: + Netscape Cert Type: SSL Client, SSL Server, S/MIME - X509v3 Extended Key Usage: + X509v3 Extended Key Usage: TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication - X509v3 Key Usage: + X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment - X509v3 Subject Key Identifier: + X509v3 Subject Key Identifier: CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 - X509v3 CRL Distribution Points: + X509v3 CRL Distribution Points: URI:http://ca.mit.edu/ca/mitserver.crl Signature Algorithm: sha1WithRSAEncryption - 49:8b:46:ea:3c:61:a7:57:4a:3b:a3:41:3c:51:d4:0c:00:46: - d7:3c:f5:1b:4a:55:17:df:97:fd:fc:e0:5f:3e:9b:ba:db:d4: - ad:c0:a1:fd:45:0a:37:7d:29:7a:4f:40:e9:77:4f:8f:82:37: - 83:81:99:80:03:3f:e1:e5:7b:a6:c5:70:39:97:2d:30:65:aa: - fc:1c:45:5c:87:1e:18:03:bd:d4:50:49:52:ac:4a:d9:0a:52: - 49:2e:7d:07:3a:5c:21:39:b2:5a:72:69:c8:03:65:4a:66:11: - 2b:66:e0:27:69:02:7a:8b:5d:db:f6:29:be:e3:d5:7d:77:e3: - 9c:4a + 3f:85:e9:b2:d4:58:d8:1d:7c:db:74:61:03:e7:c6:12:67:8a: + 26:07:ad:d5:81:6b:e9:79:d4:fe:7a:e0:9f:c9:ab:3d:09:56: + 70:bb:b4:3e:3c:be:64:2f:7f:a3:fa:de:a6:c9:be:5e:a1:d3: + 48:be:b0:46:c4:92:3d:74:d2:38:c0:7a:1e:60:b1:ab:30:5a: + 39:0b:16:fa:01:7a:d3:fe:05:22:ca:cb:0b:89:5a:f4:e5:3d: + f3:15:40:87:20:96:e1:04:84:3f:c3:2c:08:91:2d:f2:0f:84: + d2:e2:57:d8:00:9a:47:06:00:ec:51:fd:3e:7e:61:ac:11:75: + 03:ad -----BEGIN CERTIFICATE----- -MIIE/TCCBGagAwIBAgIQJqYqN3kKwJq/7Xp+IftK8DANBgkqhkiG9w0BAQUFADB7 -MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl -TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb -TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMDQwOTE2MDAwMFoXDTEy -MDQxMDE2MDAwMFowgcwxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl -dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg -SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk -dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRMwEQYDVQQDEwpiYy5taXQuZWR1MR4wHAYJ -KoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3DQEBAQUAA4IC -DwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz45P3twFXOG7p -/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDHXjUGYv4q1g8b -LLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT3GtEsF4BUdMC -zEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA7fYhUfrFBvAb -66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBuAyZ0wqGz18uU -/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9jHQgjUl/C+U2s -pETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51QnIsaArocjVvGN -SZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT33lad0LbQfR4b -UVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3bNLYkDJBXwPnQ -ZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKTW3z1NfgxEHs4 -1EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/Rs6LbQIDAQAB -o4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcGA1UdJQQgMB4G -CCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXgMB0GA1Ud -DgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCigJqAkhiJodHRw -Oi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3DQEBBQUAA4GB -AEmLRuo8YadXSjujQTxR1AwARtc89RtKVRffl/384F8+m7rb1K3Aof1FCjd9KXpP -QOl3T4+CN4OBmYADP+Hle6bFcDmXLTBlqvwcRVyHHhgDvdRQSVKsStkKUkkufQc6 -XCE5slpyacgDZUpmEStm4CdpAnqLXdv2Kb7j1X1345xK ------END CERTIFICATE----- +MIIE/jCCBGegAwIBAgIRAMm2VcHCKTJ+Qxg17uKpTDUwDQYJKoZIhvcNAQEFBQAw +ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT +JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjAzMjgxNjAwMDBaFw0x +MzAzMjgxNjAwMDBaMIHMMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz +IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l +ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTETMBEGA1UEAxMKYmMubWl0LmVkdTEeMBwG +CSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG9w0BAQEFAAOC +Ag8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mHc+OT97cBVzhu +6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGwx141BmL+KtYP +Gyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY09xrRLBeAVHT +AsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9UwO32IVH6xQbw +G+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjwbgMmdMKhs9fL +lPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/Yx0II1JfwvlN +rKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudUJyLGgK6HI1bx +jUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk995WndC20H0e +G1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w92zS2JAyQV8D5 +0GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJCk1t89TX4MRB7 +ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ/0bOi20CAwEA +AaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAnBgNVHSUEIDAe +BggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQEAwIF4DAdBgNV +HQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCagJIYiaHR0 +cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0BAQUFAAOB +gQA/hemy1FjYHXzbdGED58YSZ4omB63VgWvpedT+euCfyas9CVZwu7Q+PL5kL3+j ++t6myb5eodNIvrBGxJI9dNI4wHoeYLGrMFo5Cxb6AXrT/gUiyssLiVr05T3zFUCH +IJbhBIQ/wywIkS3yD4TS4lfYAJpHBgDsUf0+fmGsEXUDrQ== +-----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/blog.gregbrockman.com.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/blog.gregbrockman.com.pem (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/blog.gregbrockman.com.pem (revision 2195) @@ -0,0 +1,121 @@ +blog_gregbrockman_com.crt +-----BEGIN CERTIFICATE----- +MIIGNDCCBRygAwIBAgIQAdZltKTcjnqxE5k6xsKK5jANBgkqhkiG9w0BAQUFADBx +MQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD +VQQHEwdTYWxmb3JkMRowGAYDVQQKExFDb21vZG8gQ0EgTGltaXRlZDEXMBUGA1UE +AxMOUG9zaXRpdmVTU0wgQ0EwHhcNMTIwMTIyMDAwMDAwWhcNMTMwMTIxMjM1OTU5 +WjBZMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsT +C1Bvc2l0aXZlU1NMMR4wHAYDVQQDExVibG9nLmdyZWdicm9ja21hbi5jb20wggIi +MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOe +ak81nfDPiYdz45P3twFXOG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZ +DLJGBQ9N8bDHXjUGYv4q1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+01 +0AO6G2zzoNjT3GtEsF4BUdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMu +hy9BcKyt31TA7fYhUfrFBvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/ +w2SUQEgwaPBuAyZ0wqGz18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU +0LLx2lL20X9jHQgjUl/C+U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS +0jHWeUyK51QnIsaArocjVvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7 +uyytS4TqVWT33lad0LbQfR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2f +fgenOOiDTD3bNLYkDJBXwPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAO +x0eNLtaoYkKTW3z1NfgxEHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQp +Hc7mFLpMiwn/Rs6LbQIDAQABo4IB3jCCAdowHwYDVR0jBBgwFoAUuMoR6QYxedvD +lMboGSq8uzUWMaQwHQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMA4GA1Ud +DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr +BgEFBQcDAjBGBgNVHSAEPzA9MDsGCysGAQQBsjEBAgIHMCwwKgYIKwYBBQUHAgEW +Hmh0dHA6Ly93d3cucG9zaXRpdmVzc2wuY29tL0NQUzBpBgNVHR8EYjBgMC+gLaAr +hilodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9Qb3NpdGl2ZVNTTENBLmNybDAtoCug +KYYnaHR0cDovL2NybC5jb21vZG8ubmV0L1Bvc2l0aXZlU1NMQ0EuY3JsMGsGCCsG +AQUFBwEBBF8wXTA1BggrBgEFBQcwAoYpaHR0cDovL2NydC5jb21vZG9jYS5jb20v +UG9zaXRpdmVTU0xDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9k +b2NhLmNvbTA7BgNVHREENDAyghVibG9nLmdyZWdicm9ja21hbi5jb22CGXd3dy5i +bG9nLmdyZWdicm9ja21hbi5jb20wDQYJKoZIhvcNAQEFBQADggEBAB7MDgyAb9aD +NdTlWepNxjjO02YV7FHbAWeolR/vDomlx1BDbhlet0OL1PfP5iD1OltK7VNEvouX +e+TSPuouJkH9CFXAwGKrJnrPRPWiFO8FiFlEG9FBwfNOKkJBwEl4gncDXbSJa2+C +nGHJxt52ZXVC4LasbmV+nyJSGVZF7ovdIJa1dmjKs6jxJdm7H3Wa/jxHPQDJs3XH +ItNb1Piku5+Zber5E89rQdDdDDHA+7vlfMgJs4L3TPnPWsdysqPIfaVh8AhIL9bR +yFY0dia2VUuRKbQld2YYvHyoYT2UdvrAyDYd5o9yoMzda5ZHkPpUwcz+BV13fU8i +mMpY8lfzCLI= +-----END CERTIFICATE----- +PositiveSSLCA.crt +-----BEGIN CERTIFICATE----- +MIIFAzCCA+ugAwIBAgIQTM1KmltFEyGMz5AviytRcTANBgkqhkiG9w0BAQUFADCB +lzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug +Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExho +dHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xHzAdBgNVBAMTFlVUTi1VU0VSRmlyc3Qt +SGFyZHdhcmUwHhcNMDYwOTE4MDAwMDAwWhcNMjAwNTMwMTA0ODM4WjBxMQswCQYD +VQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT +YWxmb3JkMRowGAYDVQQKExFDb21vZG8gQ0EgTGltaXRlZDEXMBUGA1UEAxMOUG9z +aXRpdmVTU0wgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9T3lY +IpPJKD5SEQAvwKkgitctVR4Q57h/4oYqpOxe6eSSWJZUDfMXukGeFZFV78LuACAY +RYMm3yDMPbOhEzEKIVx5g3mrJBVcVvC0lZih2tIb6ha1y7ewwVP5pEba8C4kuGKe +joteK1qWoOpQ6Yj7KCpNmpxIT4O2h65Pxci12f2+P9GnncYsEw3AAcezcPOPabuw +PBDf6wkAhD9u7/zjLbTHXRHM9/Lx9uLjAH4SDt6NfQDKOj32cuh5JaYIFveriP9W +XgkXwFqCBWI0KyhIMpfQhAysExjbnmbHqhSLEWlN8QnTul2piDdi2L8Dm53X5gV+ +wmpSqo0HgOqODvMdAgMBAAGjggFuMIIBajAfBgNVHSMEGDAWgBShcl8mGyiYQ5Vd +BzfVhZadS9LDRTAdBgNVHQ4EFgQUuMoR6QYxedvDlMboGSq8uzUWMaQwDgYDVR0P +AQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwewYDVR0fBHQwcjA4oDagNIYy +aHR0cDovL2NybC5jb21vZG9jYS5jb20vVVROLVVTRVJGaXJzdC1IYXJkd2FyZS5j +cmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29tb2RvLm5ldC9VVE4tVVNFUkZpcnN0LUhh +cmR3YXJlLmNybDCBhgYIKwYBBQUHAQEEejB4MDsGCCsGAQUFBzAChi9odHRwOi8v +Y3J0LmNvbW9kb2NhLmNvbS9VVE5BZGRUcnVzdFNlcnZlckNBLmNydDA5BggrBgEF +BQcwAoYtaHR0cDovL2NydC5jb21vZG8ubmV0L1VUTkFkZFRydXN0U2VydmVyQ0Eu +Y3J0MA0GCSqGSIb3DQEBBQUAA4IBAQAdtOf5GEhd7fpawx3jt++GFclsE0kWDTGM +MVzn2odkjq8SFqRaLZIaOz4hZaoXw5V+QBz9FGkGGM2sMexq8RaeiSY9WyGN6Oj5 +qz2qPMuZ8oZfiFMVBRflqNKFp05Jfdbdx4/OiL9lBeAUtTF37r0qhujop2ot2mUZ +jGfibfZKhWaDtjJNn0IjF9dFQWp2BNStuY9u3MI+6VHyntjzf/tQKvCL/W8NIjYu +zg5G8t6P2jt9HpOs/PQyKw+rAR+lQI/jJJkfXbKqDLnioeeSDJBLU30fKO5WPa8Y +Z0nf1R7CqJgrTEeDgUwuRMLvyGPui3tbMfYmYb95HLCpTqnJUHvi +-----END CERTIFICATE----- +UTNAddTrustServerCA.crt +-----BEGIN CERTIFICATE----- +MIIEhjCCA26gAwIBAgIQUkIGSk83/kNpSHqWZ/9dJzANBgkqhkiG9w0BAQUFADBv +MQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFk +ZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBF +eHRlcm5hbCBDQSBSb290MB4XDTA1MDYwNzA4MDkxMFoXDTIwMDUzMDEwNDgzOFow +gZcxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtl +IENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMY +aHR0cDovL3d3dy51c2VydHJ1c3QuY29tMR8wHQYDVQQDExZVVE4tVVNFUkZpcnN0 +LUhhcmR3YXJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsffDOD+0 +qH/POYJRZ9Btn9L/WPPnnyvsDYlUmbk4mRb34CF5SMK7YXQSlh08anLVPBBnOjnt +KxPNZuuVCTOkbJex6MbswXV5nEZejavQav25KlUXEFSzGfCa9vGxXbanbfvgcRdr +ooj7AN/+GjF3DJoBerEy4ysBBzhuw6VeI7xFm3tQwckwj9vlK3rTW/szQB6g1ZgX +vIuHw4nTXaCOsqqq9o5piAbF+okh8widaS4JM5spDUYPjMxJNLBpUb35Bs1orWZM +vD6sYb0KiA7I3z3ufARMnQpea5HW7sftKI2rTYeJc9BupNAeFosU4XZEA39jrOTN +SZzFkvSrMqFIWwIDAQABo4H0MIHxMB8GA1UdIwQYMBaAFK29mHo0tCb3+sQmVO8D +veAky1QaMB0GA1UdDgQWBBShcl8mGyiYQ5VdBzfVhZadS9LDRTAOBgNVHQ8BAf8E +BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zARBgNVHSAECjAIMAYGBFUdIAAwewYDVR0f +BHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20vQWRkVHJ1c3RFeHRl +cm5hbENBUm9vdC5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29tb2RvLm5ldC9BZGRU +cnVzdEV4dGVybmFsQ0FSb290LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAYGQ5WaJD +ZS79+R/WrjO76FMTxIjuIxpszthkWVNTkOg239T88055L9XmjwzvKkFtcb2beDgj +03BLhgz9EqciYhLYzOBR7y3lzQxFoura7X7s9zKa5wU1Xm7CLGhonf+M8cpVh8Qv +sUAG3IQiXG2zzdGbGgozKGYWDL0zwvYH8eOheZTg+NDQ099Shj+p4ckdPoaEsdtf +7uRJQ8E5fc8vlqd1XX5nZ4TlWSBAvzcivwdDtDDhQ4rNA11tuSnZhKf1YmOEhtY3 +vm9nu/9iVzmdDE2yKmE9HZzvmncgoC/uGnKdsJ2/eBMnBwpgEZP1Dy7J72skg/6b +kLRLaIHQwvrgPw== +-----END CERTIFICATE----- +AddTrustExternalCARoot.crt +-----BEGIN CERTIFICATE----- +MIIENjCCAx6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJTRTEU +MBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFs +IFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290 +MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFowbzELMAkGA1UEBhMCU0Ux +FDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5h +bCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9v +dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALf3GjPm8gAELTngTlvt +H7xsD821+iO2zt6bETOXpClMfZOfvUq8k+0DGuOPz+VtUFrWlymUWoCwSXrbLpX9 +uMq/NzgtHj6RQa1wVsfwTz/oMp50ysiQVOnGXw94nZpAPA6sYapeFI+eh6FqUNzX +mk6vBbOmcZSccbNQYArHE504B4YCqOmoaSYYkKtMsE8jqzpPhNjfzp/haW+710LX +a0Tkx63ubUFfclpxCDezeWWkWaCUN/cALw3CknLa0Dhy2xSoRcRdKn23tNbE7qzN +E0S3ySvdQwAl+mG5aWpYIxG3pzOPVnVZ9c0p10a3CitlttNCbxWyuHv77+ldU9U0 +WicCAwEAAaOB3DCB2TAdBgNVHQ4EFgQUrb2YejS0Jvf6xCZU7wO94CTLVBowCwYD +VR0PBAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wgZkGA1UdIwSBkTCBjoAUrb2YejS0 +Jvf6xCZU7wO94CTLVBqhc6RxMG8xCzAJBgNVBAYTAlNFMRQwEgYDVQQKEwtBZGRU +cnVzdCBBQjEmMCQGA1UECxMdQWRkVHJ1c3QgRXh0ZXJuYWwgVFRQIE5ldHdvcmsx +IjAgBgNVBAMTGUFkZFRydXN0IEV4dGVybmFsIENBIFJvb3SCAQEwDQYJKoZIhvcN +AQEFBQADggEBALCb4IUlwtYj4g+WBpKdQZic2YR5gdkeWxQHIzZlj7DYd7usQWxH +YINRsPkyPef89iYTx4AWpb9a/IfPeHmJIZriTAcKhjW88t5RxNKWt9x+Tu5w/Rw5 +6wwCURQtjr0W4MHfRnXnJK3s9EK0hZNwEGe6nQY1ShjTK3rMUUKhemPR5ruhxSvC +Nr4TDea9Y355e6cJDUCrat2PisP29owaQgVR1EX1n6diIWgVIEM8med8vSTYqZEX +c4g/VhsxOBi0cQ+azcgOno4uG+GMmIPLHzHxREzGBHNJdmAPx/i9F4BrLunMTA5a +mnkPIAou1Z5jJh5VkpTYghdae9C8x49OhgQ= +-----END CERTIFICATE----- Index: anches/fc17-dev/server/fedora/config/etc/pki/tls/certs/blue-sun-corp.com.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/blue-sun-corp.com.pem (revision 2194) +++ (revision ) @@ -1,29 +1,0 @@ ------BEGIN CERTIFICATE----- -MIIE6DCCBFGgAwIBAgIJAKbekIcoh850MA0GCSqGSIb3DQEBBQUAMIGUMQswCQYD -VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEdMBsGA1UEChMUQmx1ZSBT -dW4gQ29ycG9yYXRpb24xJzAlBgNVBAMTHkJsdWUgU3VuIENlcnRpZmljYXRlIEF1 -dGhvcml0eTElMCMGCSqGSIb3DQEJARYWcm9vdEBibHVlLXN1bi1jb3JwLmNvbTAe -Fw0xMTAxMDMwMDM2MjhaFw0xMjAxMDMwMDM2MjhaMIHVMQswCQYDVQQGEwJVUzEW -MBQGA1UECBMNTWFzc2FjaHVzZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYD -VQQKEyVNYXNzYWNodXNldHRzIEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYD -VQQLEyNzY3JpcHRzLm1pdC5lZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEcMBoGA1UE -AwwTKi5ibHVlLXN1bi1jb3JwLmNvbTEeMBwGCSqGSIb3DQEJARYPc2NyaXB0c0Bt -aXQuZWR1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX -5pKFNFbx42KDnmpPNZ3wz4mHc+OT97cBVzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm -4JHTBlyMfA5smQyyRgUPTfGwx141BmL+KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVL -zLxRPXZoW9PtNdADuhts86DY09xrRLBeAVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWL -ETZ/hxz9hNpDLocvQXCsrd9UwO32IVH6xQbwG+uhsL9NHEI0itVv9yVmc49gxNeN -M5H0RjqXCVkB/8NklEBIMGjwbgMmdMKhs9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4 -nEVGGwwhceuElNCy8dpS9tF/Yx0II1JfwvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M -80PDlscJKilFEtIx1nlMiudUJyLGgK6HI1bxjUmbyPrtM1tfVnbID36FFGnESDEH -OaU0gfJrFVAi+7ssrUuE6lVk995WndC20H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgc -R8dRAAXv7rA9n34Hpzjog0w92zS2JAyQV8D50GQUipNHm0H1oxQdnhhd1dhmr/Xz -yC+8pwKn79zwDsdHjS7WqGJCk1t89TX4MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lk -j6+PgrskKfnUKR3O5hS6TIsJ/0bOi20CAwEAAaN7MHkwCQYDVR0TBAIwADAsBglg -hkgBhvhCAQ0EHxYdT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0O -BBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMB8GA1UdIwQYMBaAFGKnOr2peXKe7el+ -KIadYlHQD3U7MA0GCSqGSIb3DQEBBQUAA4GBAI7FacB+AS8KWaM5ISimMgWgOn5P -yMiMdRXAOh7XUOfX5Y9JoUqwK1wVSGIK8Fj8C/BPwC9SOwnSVgxAMjsboBW3zEx3 -MKRpB6Ja3uX6NHwZz6WnH4WbMOA06BfDbH9WrCPoQjh8qwOsf2QcpXfLY4RyNY2c -wpEVBOT1+qc8gkaf ------END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/carepackages.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/carepackages.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/carepackages.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Tue Apr 19 14:44:59 2011 -Date: Tue, 19 Apr 2011 14:44:57 -0400 +From mitcert@MIT.EDU Fri Apr 6 16:53:19 2012 +Date: Fri, 6 Apr 2012 16:53:17 -0400 From: mitcert@MIT.EDU -To: geofft@mit.edu -Subject: [help.mit.edu #1582630] Certificate request for carepackages.mit.edu +To: achernya@mit.edu +Subject: [help.mit.edu #1948946] certificate renewal for scripts-vhost carepackages.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - 91:ca:bd:82:34:d5:b7:15:35:f1:ea:a5:f9:08:74:70 + 0a:91:73:90:71:e9:a7:75:8a:df:48:65:d3:20:7b:33 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Apr 18 16:00:00 2011 GMT - Not After : Apr 18 16:00:00 2012 GMT + Not Before: Apr 5 16:00:00 2012 GMT + Not After : Apr 4 16:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=carepackages.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,40 +71,40 @@ Signature Algorithm: sha1WithRSAEncryption - 62:09:ad:c1:43:17:16:6c:aa:9d:ef:91:91:50:e8:3b:f4:b1: - a2:81:2d:fd:94:0c:d0:8e:8f:73:d1:6e:bc:4e:9d:d9:ab:46: - 6b:24:37:ef:5a:08:e9:38:8f:1f:6e:9d:b7:df:b9:2d:dc:53: - 9d:d0:fd:8e:b0:f5:02:f0:22:b1:d3:c9:da:e8:b4:5e:90:ce: - 05:94:c2:8d:81:19:a1:0f:89:da:55:78:29:74:56:2c:26:67: - 8d:c9:5d:ad:62:95:a9:21:b5:ce:87:a0:a1:39:75:1e:0c:92: - 2f:b8:53:59:8d:06:09:44:62:e7:0e:db:33:cb:04:8c:4d:1a: - 00:db + 7d:dc:a7:37:45:ad:a1:70:67:76:03:eb:02:1d:4c:e4:20:2a: + 9e:6c:fb:f9:5c:2b:4a:d1:45:f5:63:a2:62:e0:1d:03:9d:0b: + 67:b6:90:d5:cf:52:dd:70:a2:12:81:0e:90:63:c4:f1:6c:c4: + 36:b1:a0:38:53:1d:23:e1:86:53:df:fa:05:b5:19:0c:e9:81: + e4:84:5a:db:38:a2:16:11:ab:97:8d:3a:dc:0d:1d:55:03:a5: + c2:0e:9d:c9:8f:95:ef:ea:92:6b:5b:79:3c:df:1b:be:f6:16: + eb:b1:77:9c:1d:4a:1a:b7:c0:79:f8:76:9b:65:93:f4:2f:83: + 6a:13 -----BEGIN CERTIFICATE----- -MIIFCDCCBHGgAwIBAgIRAJHKvYI01bcVNfHqpfkIdHAwDQYJKoZIhvcNAQEFBQAw -ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT -JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTA0MTgxNjAwMDBaFw0x -MjA0MTgxNjAwMDBaMIHWMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz -ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz -IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l -ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEdMBsGA1UEAxMUY2FyZXBhY2thZ2VzLm1p -dC5lZHUxHjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZI -hvcNAQEBBQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+J -h3Pjk/e3AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03x -sMdeNQZi/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg -2NPca0SwXgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3f -VMDt9iFR+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo -8G4DJnTCobPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbR -f2MdCCNSX8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrn -VCcixoCuhyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpV -ZPfeVp3QttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INM -Pds0tiQMkFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhi -QpNbfPU1+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyL -Cf9GzottAgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAw -JwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8E -BAMCBeAwHQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCow -KKAmoCSGImh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZI -hvcNAQEFBQADgYEAYgmtwUMXFmyqne+RkVDoO/SxooEt/ZQM0I6Pc9FuvE6d2atG -ayQ371oI6TiPH26dt9+5LdxTndD9jrD1AvAisdPJ2ui0XpDOBZTCjYEZoQ+J2lV4 -KXRWLCZnjcldrWKVqSG1zoegoTl1HgySL7hTWY0GCURi5w7bM8sEjE0aANs= +MIIFBzCCBHCgAwIBAgIQCpFzkHHpp3WK30hl0yB7MzANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEyMDQwNTE2MDAwMFoXDTEz +MDQwNDE2MDAwMFowgdYxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMR0wGwYDVQQDExRjYXJlcGFja2FnZXMubWl0 +LmVkdTEeMBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG +9w0BAQEFAAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mH +c+OT97cBVzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGw +x141BmL+KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY +09xrRLBeAVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9U +wO32IVH6xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjw +bgMmdMKhs9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/ +Yx0II1JfwvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudU +JyLGgK6HI1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk +995WndC20H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w9 +2zS2JAyQV8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJC +k1t89TX4MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ +/0bOi20CAwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAn +BgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQE +AwIF4DAdBgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAo +oCagJIYiaHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG +9w0BAQUFAAOBgQB93Kc3Ra2hcGd2A+sCHUzkICqebPv5XCtK0UX1Y6Ji4B0DnQtn +tpDVz1LdcKISgQ6QY8TxbMQ2saA4Ux0j4YZT3/oFtRkM6YHkhFrbOKIWEauXjTrc +DR1VA6XCDp3Jj5Xv6pJrW3k83xu+9hbrsXecHUoat8B5+HabZZP0L4NqEw== -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/classmates.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/classmates.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/classmates.pem (revision 2195) @@ -1,12 +1,18 @@ +From mitcert@MIT.EDU Mon Jan 23 14:56:10 2012 +Date: Mon, 23 Jan 2012 14:56:09 -0500 +From: mitcert@MIT.EDU +To: achernya@mit.edu +Subject: [help.mit.edu #1868525] certificate renewal for scripts-vhost classmates.mit.edu + Certificate: Data: Version: 3 (0x2) Serial Number: - bb:57:1d:06:30:9d:77:47:f9:00:d8:fc:e2:f6:0e:67 + 4f:3d:03:fa:fb:f8:ae:da:a8:3a:a3:72:8a:11:0b:d8 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Jan 22 17:00:00 2011 GMT - Not After : Jan 24 17:00:00 2012 GMT + Not Before: Jan 22 17:00:00 2012 GMT + Not After : Jan 22 17:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=classmates.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -65,39 +71,39 @@ Signature Algorithm: sha1WithRSAEncryption - 77:11:0a:a2:b8:7a:b8:07:2e:b2:a1:76:8e:a0:28:dc:f1:b9: - c3:3c:9f:5d:3a:2d:4f:91:a0:bd:8e:ee:4a:a3:87:c8:24:0f: - c4:9f:55:a4:16:31:c5:97:83:d2:78:e1:81:c3:a9:44:e1:5d: - d0:33:b9:35:81:11:03:3f:2b:9d:cc:6c:f3:83:56:57:28:7f: - a3:66:da:df:48:1a:1c:db:e5:e0:dc:47:59:99:03:57:ba:b6: - e9:42:3c:50:87:ad:68:07:e5:a6:26:11:37:09:a8:7e:bc:b0: - 6e:21:1e:8e:95:46:1d:a0:00:a6:00:db:f6:1e:3c:64:f2:15: - 64:ea + 0f:bb:81:7f:56:75:64:ae:17:21:6d:7c:5c:b9:3b:8e:a0:94: + e3:bc:9c:3d:57:2a:5b:7a:d6:11:d9:33:fa:70:12:8e:15:7a: + 40:d3:01:76:60:cf:d8:8e:60:1f:83:3b:77:f2:2f:aa:9d:94: + dc:75:ad:bc:01:57:03:df:9a:37:b7:17:c8:0e:8a:14:9e:d8: + 9a:42:08:79:2b:21:57:69:5c:a9:b3:e2:66:b0:d2:c2:d2:d5: + c0:70:11:5b:40:98:a8:c2:0f:51:f2:f7:90:e1:8c:b8:f5:1a: + 28:e8:47:e3:b7:10:bc:03:07:3f:47:07:02:0a:7f:91:8d:f5: + 54:e2 -----BEGIN CERTIFICATE----- -MIIFBjCCBG+gAwIBAgIRALtXHQYwnXdH+QDY/OL2DmcwDQYJKoZIhvcNAQEFBQAw -ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT -JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMjIxNzAwMDBaFw0x -MjAxMjQxNzAwMDBaMIHUMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz -ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz -IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l -ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEbMBkGA1UEAxMSY2xhc3NtYXRlcy5taXQu -ZWR1MR4wHAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3 -DQEBAQUAA4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz -45P3twFXOG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDH -XjUGYv4q1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT -3GtEsF4BUdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA -7fYhUfrFBvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBu -AyZ0wqGz18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9j -HQgjUl/C+U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51Qn -IsaArocjVvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT3 -3lad0LbQfR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3b -NLYkDJBXwPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKT -W3z1NfgxEHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/ -Rs6LbQIDAQABo4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcG -A1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQD -AgXgMB0GA1UdDgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCig -JqAkhiJodHRwOi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3 -DQEBBQUAA4GBAHcRCqK4ergHLrKhdo6gKNzxucM8n106LU+RoL2O7kqjh8gkD8Sf -VaQWMcWXg9J44YHDqUThXdAzuTWBEQM/K53MbPODVlcof6Nm2t9IGhzb5eDcR1mZ -A1e6tulCPFCHrWgH5aYmETcJqH68sG4hHo6VRh2gAKYA2/YePGTyFWTq +MIIFBTCCBG6gAwIBAgIQTz0D+vv4rtqoOqNyihEL2DANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEyMDEyMjE3MDAwMFoXDTEz +MDEyMjE3MDAwMFowgdQxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRswGQYDVQQDExJjbGFzc21hdGVzLm1pdC5l +ZHUxHjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZIhvcN +AQEBBQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pj +k/e3AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMde +NQZi/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPc +a0SwXgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt +9iFR+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4D +JnTCobPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2Md +CCNSX8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCci +xoCuhyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpVZPfe +Vp3QttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INMPds0 +tiQMkFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhiQpNb +fPU1+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyLCf9G +zottAgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYD +VR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMC +BeAwHQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAm +oCSGImh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcN +AQEFBQADgYEAD7uBf1Z1ZK4XIW18XLk7jqCU47ycPVcqW3rWEdkz+nASjhV6QNMB +dmDP2I5gH4M7d/Ivqp2U3HWtvAFXA9+aN7cXyA6KFJ7YmkIIeSshV2lcqbPiZrDS +wtLVwHARW0CYqMIPUfL3kOGMuPUaKOhH47cQvAMHP0cHAgp/kY31VOI= -----END CERTIFICATE----- Index: anches/fc17-dev/server/fedora/config/etc/pki/tls/certs/cook.bluechi.ps.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/cook.bluechi.ps.pem (revision 2194) +++ (revision ) @@ -1,37 +1,0 @@ ------BEGIN CERTIFICATE----- -MIIGYTCCBUmgAwIBAgIHBEBFIbHXlzANBgkqhkiG9w0BAQUFADCByjELMAkGA1UE -BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY -BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMTMwMQYDVQQLEypodHRwOi8vY2VydGlm -aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkxMDAuBgNVBAMTJ0dvIERhZGR5 -IFNlY3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTERMA8GA1UEBRMIMDc5Njky -ODcwHhcNMTEwMTAzMDMwMjE1WhcNMTIwMTAzMDMwMjE1WjBXMRgwFgYDVQQKEw9j -b29rLmJsdWVjaGkucHMxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl -ZDEYMBYGA1UEAxMPY29vay5ibHVlY2hpLnBzMIICIjANBgkqhkiG9w0BAQEFAAOC -Ag8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mHc+OT97cBVzhu -6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGwx141BmL+KtYP -Gyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY09xrRLBeAVHT -AsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9UwO32IVH6xQbw -G+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjwbgMmdMKhs9fL -lPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/Yx0II1JfwvlN -rKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudUJyLGgK6HI1bx -jUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk995WndC20H0e -G1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w92zS2JAyQV8D5 -0GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJCk1t89TX4MRB7 -ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ/0bOi20CAwEA -AaOCAbwwggG4MA8GA1UdEwEB/wQFMAMBAQAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG -CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAzBgNVHR8ELDAqMCigJqAkhiJodHRw -Oi8vY3JsLmdvZGFkZHkuY29tL2dkczEtMjguY3JsME0GA1UdIARGMEQwQgYLYIZI -AYb9bQEHFwEwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv -bS9yZXBvc2l0b3J5LzCBgAYIKwYBBQUHAQEEdDByMCQGCCsGAQUFBzABhhhodHRw -Oi8vb2NzcC5nb2RhZGR5LmNvbS8wSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZXJ0aWZp -Y2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZF9pbnRlcm1lZGlhdGUuY3J0 -MB8GA1UdIwQYMBaAFP2sYTKTbEXW4u6FX5q653aZaMznMC8GA1UdEQQoMCaCD2Nv -b2suYmx1ZWNoaS5wc4ITd3d3LmNvb2suYmx1ZWNoaS5wczAdBgNVHQ4EFgQUyxG3 -AV+GVU9FXqsnab7hPIl6VWIwDQYJKoZIhvcNAQEFBQADggEBALB49kGSy5S8NpOe -Bg0ULh5v0umDTl1tDwvHfkEvCJzu83Z7W1ull3DOsYiHRe0IxAZa0DbChZV4AM8R -xRfAr7F8z77aeEyd4/J20dtrVd6Gfg7muG3/47V9JT7nDTJFV8yL+NyJqlmBm1KI -HSrFrRmZn6J0MwKHKHrvwWEaGEoP/YNiEmqxGjWbAbGHDX8MKwIxBCxf4hD0/Xnj -esnpGuEQwze3KQwJLFtXQF8gYJXTXuxzw6zYcSXAdw/qdyVcASn2TeCnFDmWS/FV -WojdgcyBt+wid1J7N62b32MjeR/jgXqpK95oGkPLoZH8dqnqQJsN8Vm0mCfLIQrD -Wp7xmiM= ------END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/courseroad.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/courseroad.pem (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/courseroad.pem (revision 2195) @@ -0,0 +1,121 @@ +From achernya@MIT.EDU Thu Apr 26 15:33:41 2012 +Date: Thu, 26 Apr 2012 22:33:37 +0000 +From: Alexander Chernyakhovsky +To: "scripts-root@mit.edu" +Subject: FW: [help.mit.edu #1967190] certificate signing request for scripts-vhost courseroad.mit.edu + +Hi, + +Could someone please install this certificate? + +-Alex +________________________________________ +From: mitcert@MIT.EDU [mitcert@MIT.EDU] +Sent: Thursday, April 26, 2012 10:57 AM +To: Alexander Chernyakhovsky +Subject: [help.mit.edu #1967190] certificate signing request for scripts-vhost courseroad.mit.edu + +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 7f:a7:fe:92:1a:7f:42:d6:33:23:2f:09:04:59:fb:0b + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority + Validity + Not Before: Apr 24 16:00:00 2012 GMT + Not After : Apr 25 16:00:00 2013 GMT + Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=courseroad.mit.edu/emailAddress=scripts@mit.edu + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (4096 bit) + Modulus (4096 bit): + 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56: + f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3: + 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17: + 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91: + d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1: + b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24: + 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55: + 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b: + 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc: + 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad: + 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87: + 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06: + f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25: + 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59: + 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2: + a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4: + 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c: + 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d: + 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc: + c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43: + c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7: + 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa: + ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31: + 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b: + 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51: + 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3: + a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e: + 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0: + f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18: + 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc: + f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35: + f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76: + 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb: + 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46: + ce:8b:6d + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Cert Type: + SSL Client, SSL Server, S/MIME + X509v3 Extended Key Usage: + TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Subject Key Identifier: + CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 + X509v3 CRL Distribution Points: + URI:http://ca.mit.edu/ca/mitserver.crl + + Signature Algorithm: sha1WithRSAEncryption + 8b:17:f3:95:a6:a9:bb:0a:db:71:ee:41:6d:48:90:f0:79:58: + 3f:39:5a:68:db:83:d6:5c:f6:01:ae:79:87:3f:3e:c2:e8:c3: + bb:80:c8:ae:ce:ab:6e:6f:fe:65:22:ff:bd:f8:4e:67:c4:ba: + 85:90:b6:e7:63:53:aa:c2:66:83:ee:06:6a:16:88:f9:73:66: + b9:31:c9:3a:b9:7c:05:77:4b:b0:1c:48:8c:61:df:67:10:a2: + 74:02:0f:f8:e8:b4:ce:ea:fc:39:8d:27:09:c3:de:32:7a:83: + 07:16:29:fb:91:e0:39:74:37:5c:f1:c2:a5:b3:cb:5b:34:f4: + da:52 +-----BEGIN CERTIFICATE----- +MIIFBTCCBG6gAwIBAgIQf6f+khp/QtYzIy8JBFn7CzANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEyMDQyNDE2MDAwMFoXDTEz +MDQyNTE2MDAwMFowgdQxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRswGQYDVQQDExJjb3Vyc2Vyb2FkLm1pdC5l +ZHUxHjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZIhvcN +AQEBBQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pj +k/e3AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMde +NQZi/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPc +a0SwXgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt +9iFR+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4D +JnTCobPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2Md +CCNSX8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCci +xoCuhyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpVZPfe +Vp3QttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INMPds0 +tiQMkFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhiQpNb +fPU1+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyLCf9G +zottAgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYD +VR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMC +BeAwHQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAm +oCSGImh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcN +AQEFBQADgYEAixfzlaapuwrbce5BbUiQ8HlYPzlaaNuD1lz2Aa55hz8+wujDu4DI +rs6rbm/+ZSL/vfhOZ8S6hZC252NTqsJmg+4GahaI+XNmuTHJOrl8BXdLsBxIjGHf +ZxCidAIP+Oi0zur8OY0nCcPeMnqDBxYp+5HgOXQ3XPHCpbPLWzT02lI= +-----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/cs6090.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/cs6090.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/cs6090.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Wed Jan 19 10:39:57 2011 -Date: Wed, 19 Jan 2011 10:39:56 -0500 (EST) +From mitcert@MIT.EDU Thu Jan 12 16:08:17 2012 +Date: Thu, 12 Jan 2012 16:08:15 -0500 From: mitcert@MIT.EDU -To: mitchb@mit.edu -Subject: Certificate signing request for cs6090.mit.edu [help.mit.edu #1458903] +To: achernya@mit.edu +Subject: [help.mit.edu #1857759] certificate renewal for scripts-vhost cs6090.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - 80:e2:6f:5e:88:02:b2:80:d1:84:bd:e3:e3:80:17:b3 + 4d:ca:7c:3f:74:bb:9e:63:23:a0:f9:21:9a:5b:22:b6 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Jan 17 17:00:00 2011 GMT - Not After : Jan 19 17:00:00 2012 GMT + Not Before: Jan 11 17:00:00 2012 GMT + Not After : Jan 10 17:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=cs6090.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,40 +71,40 @@ Signature Algorithm: sha1WithRSAEncryption - 73:2a:f0:52:7e:3b:0b:20:61:18:e1:0d:cc:8f:de:96:2f:8f: - 45:b2:6b:48:a7:ad:68:99:06:e0:df:b0:73:63:f8:f0:bc:57: - 8c:38:e4:ee:8e:c6:2d:3c:af:61:c2:a1:6b:6f:c1:c9:86:4a: - 79:65:65:08:d8:56:26:56:d0:b5:b8:b0:37:df:f7:76:84:07: - db:fb:6b:75:ce:9d:91:cb:a9:6a:0a:ac:bb:47:c3:ca:5f:e5: - 32:f8:ed:d6:5b:d1:52:13:ea:0e:3d:0a:3b:79:fd:2f:16:b7: - 6f:e0:bd:7e:27:43:46:e5:2e:f6:27:70:5f:ba:67:b0:3d:b3: - cd:41 + 2f:54:31:1a:5a:d3:e9:0c:23:15:26:29:47:eb:46:e7:b7:eb: + cd:51:b0:e8:99:29:6d:d6:4f:3c:f0:0d:2c:3f:7e:f5:82:86: + 2c:f3:eb:0f:8c:73:b0:42:02:32:fd:0a:57:6f:b9:1b:78:ae: + 71:e6:ac:fb:bd:9a:8b:aa:38:83:3a:3d:d7:73:1f:eb:9c:40: + 00:04:89:ba:4d:cf:1e:5b:fe:7b:e9:ce:2e:90:a5:03:73:61: + 44:90:1c:f8:40:ec:ff:55:42:a7:4a:eb:8c:21:ab:d9:2e:f3: + 0a:41:30:86:11:db:f6:d9:64:d5:c9:d2:f8:e6:89:ea:b2:49: + 0b:ff -----BEGIN CERTIFICATE----- -MIIFAjCCBGugAwIBAgIRAIDib16IArKA0YS94+OAF7MwDQYJKoZIhvcNAQEFBQAw -ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT -JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMTcxNzAwMDBaFw0x -MjAxMTkxNzAwMDBaMIHQMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz -ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz -IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l -ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEXMBUGA1UEAxMOY3M2MDkwLm1pdC5lZHUx -HjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZIhvcNAQEB -BQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pjk/e3 -AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMdeNQZi -/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPca0Sw -XgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt9iFR -+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4DJnTC -obPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2MdCCNS -X8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCcixoCu -hyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpVZPfeVp3Q -ttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INMPds0tiQM -kFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhiQpNbfPU1 -+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyLCf9Gzott -AgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYDVR0l -BCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMCBeAw -HQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAmoCSG -Imh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcNAQEF -BQADgYEAcyrwUn47CyBhGOENzI/eli+PRbJrSKetaJkG4N+wc2P48LxXjDjk7o7G -LTyvYcKha2/ByYZKeWVlCNhWJlbQtbiwN9/3doQH2/trdc6dkcupagqsu0fDyl/l -Mvjt1lvRUhPqDj0KO3n9Lxa3b+C9fidDRuUu9idwX7pnsD2zzUE= +MIIFATCCBGqgAwIBAgIQTcp8P3S7nmMjoPkhmlsitjANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEyMDExMTE3MDAwMFoXDTEz +MDExMDE3MDAwMFowgdAxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRcwFQYDVQQDEw5jczYwOTAubWl0LmVkdTEe +MBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mHc+OT97cB +Vzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGwx141BmL+ +KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY09xrRLBe +AVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9UwO32IVH6 +xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjwbgMmdMKh +s9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/Yx0II1Jf +wvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudUJyLGgK6H +I1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk995WndC2 +0H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w92zS2JAyQ +V8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJCk1t89TX4 +MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ/0bOi20C +AwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAnBgNVHSUE +IDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQEAwIF4DAd +BgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCagJIYi +aHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0BAQUF +AAOBgQAvVDEaWtPpDCMVJilH60bnt+vNUbDomSlt1k888A0sP371goYs8+sPjHOw +QgIy/QpXb7kbeK5x5qz7vZqLqjiDOj3Xcx/rnEAABIm6Tc8eW/576c4ukKUDc2FE +kBz4QOz/VUKnSuuMIavZLvMKQTCGEdv22WTVydL45onqskkL/w== -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/dchang.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/dchang.pem (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/dchang.pem (revision 2195) @@ -0,0 +1,110 @@ +From mitcert@MIT.EDU Mon Mar 5 17:44:38 2012 +Date: Mon, 5 Mar 2012 17:44:36 -0500 +From: mitcert@MIT.EDU +To: achernya@mit.edu +Subject: [help.mit.edu #1913659] certificate signing request for scripts-vhost dchang.mit.edu + +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 5e:5d:7b:b6:d4:e2:9b:30:5a:4b:4a:41:d0:7c:d2:58 + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority + Validity + Not Before: Mar 4 17:00:00 2012 GMT + Not After : Mar 5 17:00:00 2013 GMT + Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=dchang.mit.edu/emailAddress=scripts@mit.edu + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (4096 bit) + Modulus (4096 bit): + 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56: + f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3: + 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17: + 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91: + d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1: + b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24: + 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55: + 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b: + 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc: + 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad: + 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87: + 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06: + f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25: + 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59: + 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2: + a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4: + 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c: + 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d: + 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc: + c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43: + c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7: + 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa: + ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31: + 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b: + 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51: + 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3: + a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e: + 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0: + f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18: + 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc: + f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35: + f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76: + 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb: + 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46: + ce:8b:6d + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Cert Type: + SSL Client, SSL Server, S/MIME + X509v3 Extended Key Usage: + TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Subject Key Identifier: + CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 + X509v3 CRL Distribution Points: + URI:http://ca.mit.edu/ca/mitserver.crl + + Signature Algorithm: sha1WithRSAEncryption + 44:c3:a5:2b:99:0b:d0:93:20:94:11:a3:f3:20:bd:cc:a6:5e: + 15:ab:f4:2c:d1:8e:d6:8f:88:7e:9d:65:ed:d6:57:6d:d7:11: + b7:02:4e:7d:a3:91:e5:5b:d7:2f:74:1b:2e:0c:cf:ac:fd:e1: + d3:ea:27:64:f5:b1:6a:c0:e4:8f:c3:9f:3d:c6:68:e4:91:6f: + 4d:96:84:51:b5:f4:38:ba:4e:9d:7d:10:2c:ce:9d:c4:80:5a: + 2e:1f:03:54:c5:6c:7f:02:1f:b7:ce:aa:e2:cf:99:b5:a5:f1: + 0d:6d:4d:ea:dd:16:ac:00:88:2c:73:d4:cf:d8:3f:1c:f3:38: + 87:19 +-----BEGIN CERTIFICATE----- +MIIFATCCBGqgAwIBAgIQXl17ttTimzBaS0pB0HzSWDANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEyMDMwNDE3MDAwMFoXDTEz +MDMwNTE3MDAwMFowgdAxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRcwFQYDVQQDEw5kY2hhbmcubWl0LmVkdTEe +MBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mHc+OT97cB +Vzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGwx141BmL+ +KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY09xrRLBe +AVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9UwO32IVH6 +xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjwbgMmdMKh +s9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/Yx0II1Jf +wvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudUJyLGgK6H +I1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk995WndC2 +0H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w92zS2JAyQ +V8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJCk1t89TX4 +MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ/0bOi20C +AwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAnBgNVHSUE +IDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQEAwIF4DAd +BgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCagJIYi +aHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0BAQUF +AAOBgQBEw6UrmQvQkyCUEaPzIL3Mpl4Vq/Qs0Y7Wj4h+nWXt1ldt1xG3Ak59o5Hl +W9cvdBsuDM+s/eHT6idk9bFqwOSPw589xmjkkW9NloRRtfQ4uk6dfRAszp3EgFou +HwNUxWx/Ah+3zqriz5m1pfENbU3q3RasAIgsc9TP2D8c8ziHGQ== +-----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/debathena.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/debathena.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/debathena.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Fri Dec 24 10:55:50 2010 -Date: Fri, 24 Dec 2010 10:55:49 -0500 (EST) -From: mitcert@MIT.EDU -To: mitchb@mit.edu -Subject: Certificate signing request for debathena.mit.edu [help.mit.edu #1439484] +From mitcert@MIT.EDU Mon Dec 19 16:31:29 2011 +Date: Mon, 19 Dec 2011 16:31:27 -0500 +From: "mitcert@MIT.EDU" +To: Alexander Chernyakhovsky +Subject: [help.mit.edu #1834662] certificate renewal for scripts-vhost debathena.mit.edu Certificate: @@ -9,24 +9,50 @@ Version: 3 (0x2) Serial Number: - 97:33:25:86:14:7b:cb:f8:59:da:fd:ae:c5:39:16:2d + c7:14:15:31:37:de:2c:da:d3:8b:4e:ad:87:8a:cc:f3 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Dec 22 17:00:00 2010 GMT - Not After : Dec 22 17:00:00 2011 GMT + Not Before: Dec 18 17:00:00 2011 GMT + Not After : Dec 18 17:00:00 2012 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=debathena.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: Public Key Algorithm: rsaEncryption - RSA Public Key: (1024 bit) - Modulus (1024 bit): - 00:b5:3e:21:4d:c1:89:6b:01:8c:47:80:fe:b3:37: - 27:76:f8:52:41:e6:a2:3d:4b:76:78:e5:f2:66:3c: - 0f:b1:ad:fb:97:8f:2e:a2:b6:53:d3:b6:0e:e2:66: - f9:b9:0b:b7:ce:b4:d5:f5:1c:1f:6f:22:7d:48:f5: - 6d:f0:16:cd:8e:48:79:d1:14:4a:14:2f:2f:f8:c4: - bd:1d:87:cf:7d:8b:5c:77:ad:58:24:b0:0e:a1:6d: - d6:0a:c7:d8:bc:2f:67:65:c8:5d:d8:d8:31:c2:67: - 4b:4a:f4:a1:a5:54:82:af:cb:34:08:2a:04:7f:8e: - 7c:4c:b7:db:dc:6a:8a:5d:81 + RSA Public Key: (4096 bit) + Modulus (4096 bit): + 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56: + f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3: + 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17: + 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91: + d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1: + b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24: + 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55: + 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b: + 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc: + 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad: + 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87: + 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06: + f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25: + 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59: + 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2: + a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4: + 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c: + 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d: + 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc: + c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43: + c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7: + 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa: + ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31: + 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b: + 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51: + 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3: + a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e: + 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0: + f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18: + 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc: + f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35: + f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76: + 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb: + 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46: + ce:8b:6d Exponent: 65537 (0x10001) X509v3 extensions: @@ -40,37 +66,45 @@ Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Key Identifier: - 54:11:7C:09:55:44:1C:94:45:A9:A2:76:46:2B:2C:24:26:6A:44:E8 + CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 X509v3 CRL Distribution Points: URI:http://ca.mit.edu/ca/mitserver.crl Signature Algorithm: sha1WithRSAEncryption - 6a:65:fb:a5:d2:ea:36:53:a6:91:cf:1c:f8:f1:31:30:23:a3: - 64:68:2e:bc:91:f7:ae:af:ac:00:7b:84:e7:e2:a1:99:34:26: - 36:95:3e:fa:ca:fe:02:81:b6:6e:f4:c4:70:64:03:2a:bf:ad: - 92:ea:ba:cc:3e:a4:54:4a:77:47:41:51:07:f1:1e:2a:b6:1c: - 46:32:d4:56:86:bb:1a:2f:08:37:e7:77:b3:a8:e1:58:2e:2d: - 43:34:4f:33:ff:40:72:7b:f1:e1:b2:a1:dd:09:64:fb:44:59: - fe:2b:eb:4b:32:15:6f:d0:f4:2e:c4:2d:79:20:e7:9b:1c:64: - 3c:2d + 38:fc:94:f1:f2:a2:6a:ae:9d:7f:46:db:33:39:33:a0:80:3c: + 92:94:28:cd:7c:55:0f:f0:29:5b:de:b4:ff:d2:08:d7:5b:73: + 7f:90:30:94:fa:6c:cc:da:1a:83:94:ba:33:22:17:9f:0c:a0: + 0a:9f:a0:06:f9:f9:cf:a9:07:7d:9a:c0:6d:5d:1d:8a:71:50: + b6:9c:0b:1e:2c:4b:12:e5:50:8b:d9:fc:ff:53:3d:00:31:8f: + f4:b0:1d:77:7f:f2:21:b9:22:58:82:db:6e:8f:1f:1e:46:96: + e0:26:a4:46:0c:cf:4a:51:fc:f7:8f:9f:28:3e:c5:1c:c1:05: + 69:a3 -----BEGIN CERTIFICATE----- -MIIDgTCCAuqgAwIBAgIRAJczJYYUe8v4Wdr9rsU5Fi0wDQYJKoZIhvcNAQEFBQAw +MIIFBTCCBG6gAwIBAgIRAMcUFTE33iza04tOrYeKzPMwDQYJKoZIhvcNAQEFBQAw ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMDEyMjIxNzAwMDBaFw0x -MTEyMjIxNzAwMDBaMIHTMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTEyMTgxNzAwMDBaFw0x +MjEyMTgxNzAwMDBaMIHTMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEaMBgGA1UEAxMRZGViYXRoZW5hLm1pdC5l -ZHUxHjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCBnzANBgkqhkiG9w0B -AQEFAAOBjQAwgYkCgYEAtT4hTcGJawGMR4D+szcndvhSQeaiPUt2eOXyZjwPsa37 -l48uorZT07YO4mb5uQu3zrTV9RwfbyJ9SPVt8BbNjkh50RRKFC8v+MS9HYfPfYtc -d61YJLAOoW3WCsfYvC9nZchd2NgxwmdLSvShpVSCr8s0CCoEf458TLfb3GqKXYEC -AwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAnBgNVHSUE -IDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQEAwIF4DAd -BgNVHQ4EFgQUVBF8CVVEHJRFqaJ2RissJCZqROgwMwYDVR0fBCwwKjAooCagJIYi -aHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0BAQUF -AAOBgQBqZful0uo2U6aRzxz48TEwI6NkaC68kfeur6wAe4Tn4qGZNCY2lT76yv4C -gbZu9MRwZAMqv62S6rrMPqRUSndHQVEH8R4qthxGMtRWhrsaLwg353ezqOFYLi1D -NE8z/0Bye/HhsqHdCWT7RFn+K+tLMhVv0PQuxC15IOebHGQ8LQ== +ZHUxHjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZIhvcN +AQEBBQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pj +k/e3AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMde +NQZi/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPc +a0SwXgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt +9iFR+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4D +JnTCobPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2Md +CCNSX8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCci +xoCuhyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpVZPfe +Vp3QttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INMPds0 +tiQMkFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhiQpNb +fPU1+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyLCf9G +zottAgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYD +VR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMC +BeAwHQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAm +oCSGImh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcN +AQEFBQADgYEAOPyU8fKiaq6df0bbMzkzoIA8kpQozXxVD/ApW960/9II11tzf5Aw +lPpszNoag5S6MyIXnwygCp+gBvn5z6kHfZrAbV0dinFQtpwLHixLEuVQi9n8/1M9 +ADGP9LAdd3/yIbkiWILbbo8fHkaW4CakRgzPSlH894+fKD7FHMEFaaM= -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/eastgate.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/eastgate.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/eastgate.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Sat Jan 15 10:20:42 2011 -Date: Sat, 15 Jan 2011 10:20:41 -0500 (EST) +From mitcert@MIT.EDU Tue Jan 3 11:08:29 2012 +Date: Tue, 3 Jan 2012 11:08:24 -0500 From: mitcert@MIT.EDU -To: mitchb@mit.edu -Subject: Certificate signing request for eastgate.mit.edu [help.mit.edu #1456826] +To: achernya@mit.edu +Subject: [help.mit.edu #1846036] certificate renewal for scripts-vhost eastgate.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - 21:05:bc:0b:0e:5f:eb:c9:f3:38:24:3e:fc:7a:1b:e2 + de:39:42:c7:9a:8d:44:c6:b5:75:ed:1c:26:35:74:28 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Jan 13 17:00:00 2011 GMT - Not After : Jan 12 17:00:00 2012 GMT + Not Before: Jan 1 17:00:00 2012 GMT + Not After : Jan 2 17:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=eastgate.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,40 +71,40 @@ Signature Algorithm: sha1WithRSAEncryption - ae:70:9c:e3:ef:df:3b:3d:12:c2:34:9b:05:36:93:7a:4c:76: - 7d:1d:bc:22:05:34:df:8a:d6:2e:a1:05:0d:06:1d:d5:cb:1b: - 52:c6:ab:fe:3e:0f:6a:97:cb:36:6d:25:f2:06:da:4b:9b:52: - f2:2a:4b:61:2d:8f:b9:3f:e2:74:89:20:a7:69:26:50:1f:38: - 18:33:38:f4:fc:a3:95:85:5c:24:5b:32:12:bd:da:24:68:94: - c0:9d:f6:c7:a7:12:db:b9:d4:4a:2a:97:9d:1c:7b:87:5f:96: - 4a:97:1f:d0:bb:4b:ed:fa:42:05:93:62:ac:2f:63:bc:d2:61: - 5b:97 + bf:79:1f:eb:d1:bf:0b:1b:bb:5a:38:bc:f9:7f:33:30:80:3f: + 69:1a:79:3b:db:a0:db:53:52:fb:11:a5:64:aa:84:26:ac:c7: + cf:d2:20:2d:39:46:f0:3e:98:35:de:e0:70:54:f5:d5:60:ae: + a9:ad:f3:3c:22:55:7c:09:aa:6e:96:e0:0e:72:03:a9:69:8b: + 00:a3:3c:01:a5:3b:d0:78:fe:bb:0a:84:f2:57:ba:0e:40:0d: + 5d:bc:8a:19:30:c5:67:a4:e3:07:59:03:af:7c:e0:5e:bb:44: + 8f:27:4f:a2:d3:2e:e2:31:12:32:8e:60:2c:2a:05:ef:8a:62: + ad:b6 -----BEGIN CERTIFICATE----- -MIIFAzCCBGygAwIBAgIQIQW8Cw5f68nzOCQ+/Hob4jANBgkqhkiG9w0BAQUFADB7 -MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl -TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb -TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMDExMzE3MDAwMFoXDTEy -MDExMjE3MDAwMFowgdIxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl -dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg -SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk -dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRkwFwYDVQQDExBlYXN0Z2F0ZS5taXQuZWR1 -MR4wHAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3DQEB -AQUAA4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz45P3 -twFXOG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDHXjUG -Yv4q1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT3GtE -sF4BUdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA7fYh -UfrFBvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBuAyZ0 -wqGz18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9jHQgj -Ul/C+U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51QnIsaA -rocjVvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT33lad -0LbQfR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3bNLYk -DJBXwPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKTW3z1 -NfgxEHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/Rs6L -bQIDAQABo4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcGA1Ud -JQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXg -MB0GA1UdDgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCigJqAk -hiJodHRwOi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3DQEB -BQUAA4GBAK5wnOPv3zs9EsI0mwU2k3pMdn0dvCIFNN+K1i6hBQ0GHdXLG1LGq/4+ -D2qXyzZtJfIG2kubUvIqS2Etj7k/4nSJIKdpJlAfOBgzOPT8o5WFXCRbMhK92iRo -lMCd9senEtu51Eoql50ce4dflkqXH9C7S+36QgWTYqwvY7zSYVuX +MIIFBDCCBG2gAwIBAgIRAN45QseajUTGtXXtHCY1dCgwDQYJKoZIhvcNAQEFBQAw +ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT +JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjAxMDExNzAwMDBaFw0x +MzAxMDIxNzAwMDBaMIHSMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz +IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l +ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEZMBcGA1UEAxMQZWFzdGdhdGUubWl0LmVk +dTEeMBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG9w0B +AQEFAAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mHc+OT +97cBVzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGwx141 +BmL+KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY09xr +RLBeAVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9UwO32 +IVH6xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjwbgMm +dMKhs9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/Yx0I +I1JfwvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudUJyLG +gK6HI1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk995W +ndC20H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w92zS2 +JAyQV8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJCk1t8 +9TX4MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ/0bO +i20CAwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAnBgNV +HSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQEAwIF +4DAdBgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCag +JIYiaHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0B +AQUFAAOBgQC/eR/r0b8LG7taOLz5fzMwgD9pGnk726DbU1L7EaVkqoQmrMfP0iAt +OUbwPpg13uBwVPXVYK6prfM8IlV8CapuluAOcgOpaYsAozwBpTvQeP67CoTyV7oO +QA1dvIoZMMVnpOMHWQOvfOBeu0SPJ0+i0y7iMRIyjmAsKgXvimKttg== -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/finboard.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/finboard.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/finboard.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Tue Apr 19 13:48:37 2011 -Date: Tue, 19 Apr 2011 13:48:34 -0400 +From mitcert@MIT.EDU Fri Apr 6 16:52:44 2012 +Date: Fri, 6 Apr 2012 16:52:43 -0400 From: mitcert@MIT.EDU -To: geofft@mit.edu -Subject: [help.mit.edu #1582629] Certificate renewal request for finboard.mit.edu +To: achernya@mit.edu +Subject: [help.mit.edu #1948945] certificate renewal for scripts-vhost finboard.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - db:fb:e9:9c:73:3e:ac:a0:fa:8b:82:fb:8f:3a:69:99 + e2:7a:21:81:23:49:d6:8b:a9:b0:da:d1:c2:c5:55:18 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Apr 18 16:00:00 2011 GMT - Not After : Apr 18 16:00:00 2012 GMT + Not Before: Apr 5 16:00:00 2012 GMT + Not After : Apr 4 16:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=finboard.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,18 +71,18 @@ Signature Algorithm: sha1WithRSAEncryption - 7a:69:0c:91:e2:fb:49:59:50:9f:7f:e5:ad:3f:3e:c7:56:f7: - 14:0e:f4:b7:7c:9b:da:1c:33:6c:62:f4:c2:b3:82:fc:28:17: - f4:87:3e:29:ea:da:c2:1a:15:6f:bd:ab:af:87:81:d8:43:b6: - f2:32:f3:f1:7d:37:e3:04:67:23:f5:13:67:a4:80:e7:c4:9f: - fa:b1:ff:53:53:24:bd:ce:ff:9a:89:b9:4f:13:04:e1:9c:f5: - 54:e3:ff:e6:de:09:a8:f8:2e:50:66:b2:c4:67:ac:34:ae:78: - f8:b7:4a:3b:48:70:1b:f9:ec:8f:a7:e6:3d:cd:28:8e:28:b5: - fd:f7 + 6c:de:a7:0e:c2:e8:5f:79:9e:5b:a5:d5:45:42:9e:38:a1:78: + f6:27:67:e2:cb:2c:e1:29:0c:12:6b:c4:9f:45:4d:46:32:fd: + 69:f0:e6:fd:82:3c:a9:d6:b3:c4:f7:67:0d:86:e1:5e:81:32: + 03:1a:67:df:0a:e8:94:59:37:81:8c:f4:37:14:ce:47:5c:24: + 75:18:d8:63:59:75:88:a9:92:66:2e:5b:ed:ab:ec:51:cd:d9: + 63:6d:2d:0d:bd:24:5c:39:fe:4d:8d:2c:05:ec:46:b9:63:00: + 99:a9:5d:d2:79:78:71:0b:43:6f:49:f6:4e:71:6a:1d:19:33: + 90:89 -----BEGIN CERTIFICATE----- -MIIFBDCCBG2gAwIBAgIRANv76ZxzPqyg+ouC+486aZkwDQYJKoZIhvcNAQEFBQAw +MIIFBDCCBG2gAwIBAgIRAOJ6IYEjSdaLqbDa0cLFVRgwDQYJKoZIhvcNAQEFBQAw ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTA0MTgxNjAwMDBaFw0x -MjA0MTgxNjAwMDBaMIHSMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjA0MDUxNjAwMDBaFw0x +MzA0MDQxNjAwMDBaMIHSMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l @@ -104,7 +104,7 @@ 4DAdBgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCag JIYiaHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0B -AQUFAAOBgQB6aQyR4vtJWVCff+WtPz7HVvcUDvS3fJvaHDNsYvTCs4L8KBf0hz4p -6trCGhVvvauvh4HYQ7byMvPxfTfjBGcj9RNnpIDnxJ/6sf9TUyS9zv+aiblPEwTh -nPVU4//m3gmo+C5QZrLEZ6w0rnj4t0o7SHAb+eyPp+Y9zSiOKLX99w== +AQUFAAOBgQBs3qcOwuhfeZ5bpdVFQp44oXj2J2fiyyzhKQwSa8SfRU1GMv1p8Ob9 +gjyp1rPE92cNhuFegTIDGmffCuiUWTeBjPQ3FM5HXCR1GNhjWXWIqZJmLlvtq+xR +zdljbS0NvSRcOf5NjSwF7Ea5YwCZqV3SeXhxC0NvSfZOcWodGTOQiQ== -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/gsc.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/gsc.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/gsc.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Thu Mar 3 17:10:35 2011 -Date: Thu, 3 Mar 2011 17:10:33 -0500 +From mitcert@MIT.EDU Tue Feb 21 12:04:47 2012 +Date: Tue, 21 Feb 2012 12:04:46 -0500 From: mitcert@MIT.EDU -To: geofft@mit.edu -Subject: [help.mit.edu #1500999] CSR for scripts site gsc.mit.edu +To: achernya@mit.edu +Subject: [help.mit.edu #1898846] certificate renewal for scripts-vhost gsc.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - af:40:8c:39:3a:43:35:f2:65:80:a6:24:d9:f7:1a:03 + f4:d9:df:b1:ad:e2:15:1c:b4:5d:77:fb:dc:f9:5b:93 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Mar 2 17:00:00 2011 GMT - Not After : Mar 1 17:00:00 2012 GMT + Not Before: Feb 19 17:00:00 2012 GMT + Not After : Feb 20 17:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=gsc.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,18 +71,18 @@ Signature Algorithm: sha1WithRSAEncryption - c5:32:c5:a3:74:ba:59:16:ec:5d:f5:f9:12:3c:c7:c1:fc:90: - be:9f:50:48:1a:1e:a1:aa:04:cc:e4:29:ac:e0:ab:96:9e:54: - 35:be:4a:f9:1e:fb:1a:7e:fc:94:e1:a4:74:f6:7f:10:35:74: - 3b:7d:2f:5c:de:e9:d3:3d:9f:bd:59:92:e2:82:2b:49:b9:4f: - 04:17:9a:0d:9d:ea:e6:2a:30:4d:33:0e:ac:31:ac:af:94:8d: - 4f:6c:d7:d1:86:5c:49:c0:3b:a9:f1:83:68:5e:ce:02:da:65: - 87:eb:97:e6:8b:d9:6e:6c:83:9f:94:5e:ba:35:d7:47:67:45: - ee:7c + 5e:0c:59:ed:68:ef:5a:38:20:58:d1:b1:fb:ed:7b:0d:9c:53: + f0:29:58:23:82:39:fa:3d:23:86:52:3f:68:b4:57:f9:f4:51: + 9d:42:03:ff:bf:2f:49:62:6d:74:32:cb:2a:ba:2b:27:fd:8e: + 01:48:2f:af:2d:66:e1:36:2c:59:b0:88:f9:cc:14:60:81:d1: + dc:e3:70:5f:5b:dd:21:fc:4a:09:d9:e3:cf:53:96:87:fe:89: + 31:67:30:39:15:79:1b:d3:e7:c0:1b:c1:4f:98:ec:30:72:ef: + b1:a1:f6:57:06:64:ce:dd:56:58:b2:29:26:ff:9c:4b:f0:0d: + 59:cd -----BEGIN CERTIFICATE----- -MIIE/zCCBGigAwIBAgIRAK9AjDk6QzXyZYCmJNn3GgMwDQYJKoZIhvcNAQEFBQAw +MIIE/zCCBGigAwIBAgIRAPTZ37Gt4hUctF13+9z5W5MwDQYJKoZIhvcNAQEFBQAw ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAzMDIxNzAwMDBaFw0x -MjAzMDExNzAwMDBaMIHNMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjAyMTkxNzAwMDBaFw0x +MzAyMjAxNzAwMDBaMIHNMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l @@ -104,7 +104,7 @@ VR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAmoCSGImh0 dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcNAQEFBQAD -gYEAxTLFo3S6WRbsXfX5EjzHwfyQvp9QSBoeoaoEzOQprOCrlp5UNb5K+R77Gn78 -lOGkdPZ/EDV0O30vXN7p0z2fvVmS4oIrSblPBBeaDZ3q5iowTTMOrDGsr5SNT2zX -0YZcScA7qfGDaF7OAtplh+uX5ovZbmyDn5ReujXXR2dF7nw= +gYEAXgxZ7WjvWjggWNGx++17DZxT8ClYI4I5+j0jhlI/aLRX+fRRnUID/78vSWJt +dDLLKrorJ/2OAUgvry1m4TYsWbCI+cwUYIHR3ONwX1vdIfxKCdnjz1OWh/6JMWcw +ORV5G9PnwBvBT5jsMHLvsaH2VwZkzt1WWLIpJv+cS/ANWc0= -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/impact.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/impact.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/impact.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Fri Dec 24 10:54:43 2010 -Date: Fri, 24 Dec 2010 10:54:42 -0500 (EST) -From: mitcert@MIT.EDU -To: mitchb@mit.edu -Subject: Certificate signing request for impact.mit.edu [help.mit.edu #1439483] +From mitcert@MIT.EDU Mon Dec 19 16:34:22 2011 +Date: Mon, 19 Dec 2011 16:34:20 -0500 +From: "mitcert@MIT.EDU" +To: Alexander Chernyakhovsky +Subject: [help.mit.edu #1834661] certificate renewal for scripts-vhost impact.mit.edu Certificate: @@ -9,24 +9,50 @@ Version: 3 (0x2) Serial Number: - 29:d0:86:34:f6:2a:b1:40:60:12:1b:fe:a3:2c:86:5d + 0d:25:a4:f7:28:7c:c6:21:cc:cf:c7:ec:e9:70:1a:c7 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Dec 22 17:00:00 2010 GMT - Not After : Dec 22 17:00:00 2011 GMT + Not Before: Dec 18 17:00:00 2011 GMT + Not After : Dec 18 17:00:00 2012 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=impact.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: Public Key Algorithm: rsaEncryption - RSA Public Key: (1024 bit) - Modulus (1024 bit): - 00:b5:3e:21:4d:c1:89:6b:01:8c:47:80:fe:b3:37: - 27:76:f8:52:41:e6:a2:3d:4b:76:78:e5:f2:66:3c: - 0f:b1:ad:fb:97:8f:2e:a2:b6:53:d3:b6:0e:e2:66: - f9:b9:0b:b7:ce:b4:d5:f5:1c:1f:6f:22:7d:48:f5: - 6d:f0:16:cd:8e:48:79:d1:14:4a:14:2f:2f:f8:c4: - bd:1d:87:cf:7d:8b:5c:77:ad:58:24:b0:0e:a1:6d: - d6:0a:c7:d8:bc:2f:67:65:c8:5d:d8:d8:31:c2:67: - 4b:4a:f4:a1:a5:54:82:af:cb:34:08:2a:04:7f:8e: - 7c:4c:b7:db:dc:6a:8a:5d:81 + RSA Public Key: (4096 bit) + Modulus (4096 bit): + 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56: + f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3: + 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17: + 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91: + d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1: + b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24: + 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55: + 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b: + 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc: + 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad: + 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87: + 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06: + f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25: + 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59: + 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2: + a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4: + 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c: + 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d: + 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc: + c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43: + c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7: + 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa: + ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31: + 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b: + 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51: + 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3: + a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e: + 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0: + f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18: + 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc: + f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35: + f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76: + 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb: + 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46: + ce:8b:6d Exponent: 65537 (0x10001) X509v3 extensions: @@ -40,37 +66,45 @@ Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Key Identifier: - 54:11:7C:09:55:44:1C:94:45:A9:A2:76:46:2B:2C:24:26:6A:44:E8 + CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 X509v3 CRL Distribution Points: URI:http://ca.mit.edu/ca/mitserver.crl Signature Algorithm: sha1WithRSAEncryption - 32:b8:3d:70:49:81:5c:2d:ee:fa:0b:c4:bd:72:36:d0:f4:d2: - f5:5f:7b:b5:eb:8c:3e:0c:45:49:5f:f3:3d:57:da:f8:93:d8: - fe:a0:f1:11:26:35:8c:d3:e4:c4:c4:bf:bf:fe:b0:38:67:9d: - 4f:96:2c:5d:80:b3:39:18:b9:13:72:a9:24:ee:83:33:de:71: - 6e:28:16:a3:88:79:ff:e9:c7:e0:4f:ee:ab:b3:d0:e8:f4:32: - 2a:99:55:6b:aa:f0:c2:3b:71:0d:c2:d8:47:d3:14:65:6f:75: - 1b:cf:39:38:3e:d0:24:ff:17:08:42:93:3d:ff:90:ea:6e:7b: - 7f:b4 + 9d:e6:78:31:1e:f2:bb:23:38:08:51:86:8e:8b:d0:c2:94:03: + f5:8d:a0:c6:6d:86:e6:31:a0:22:8d:7a:db:98:ef:97:4c:7c: + 35:ab:c0:86:73:db:2d:cc:bb:75:8f:69:84:ac:fa:87:8b:ca: + a1:99:29:74:f1:f9:ee:fe:0b:e9:fb:6e:1b:3d:b1:13:98:64: + ed:21:a9:fd:42:9a:20:33:46:1c:1c:7e:cd:d7:16:e1:84:5e: + 50:83:40:03:a8:98:44:55:c3:47:94:2e:fc:0b:df:0c:63:d8: + 73:30:4e:49:af:48:3a:d7:e6:86:13:64:03:cd:29:b3:fe:a8: + 94:71 -----BEGIN CERTIFICATE----- -MIIDfTCCAuagAwIBAgIQKdCGNPYqsUBgEhv+oyyGXTANBgkqhkiG9w0BAQUFADB7 +MIIFATCCBGqgAwIBAgIQDSWk9yh8xiHMz8fs6XAaxzANBgkqhkiG9w0BAQUFADB7 MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb -TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEwMTIyMjE3MDAwMFoXDTEx -MTIyMjE3MDAwMFowgdAxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMTIxODE3MDAwMFoXDTEy +MTIxODE3MDAwMFowgdAxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRcwFQYDVQQDEw5pbXBhY3QubWl0LmVkdTEe -MBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIGfMA0GCSqGSIb3DQEBAQUA -A4GNADCBiQKBgQC1PiFNwYlrAYxHgP6zNyd2+FJB5qI9S3Z45fJmPA+xrfuXjy6i -tlPTtg7iZvm5C7fOtNX1HB9vIn1I9W3wFs2OSHnRFEoULy/4xL0dh899i1x3rVgk -sA6hbdYKx9i8L2dlyF3Y2DHCZ0tK9KGlVIKvyzQIKgR/jnxMt9vcaopdgQIDAQAB -o4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcGA1UdJQQgMB4G -CCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXgMB0GA1Ud -DgQWBBRUEXwJVUQclEWponZGKywkJmpE6DAzBgNVHR8ELDAqMCigJqAkhiJodHRw -Oi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3DQEBBQUAA4GB -ADK4PXBJgVwt7voLxL1yNtD00vVfe7XrjD4MRUlf8z1X2viT2P6g8REmNYzT5MTE -v7/+sDhnnU+WLF2AszkYuRNyqSTugzPecW4oFqOIef/px+BP7quz0Oj0MiqZVWuq -8MI7cQ3C2EfTFGVvdRvPOTg+0CT/FwhCkz3/kOpue3+0 +MBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mHc+OT97cB +Vzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGwx141BmL+ +KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY09xrRLBe +AVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9UwO32IVH6 +xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjwbgMmdMKh +s9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/Yx0II1Jf +wvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudUJyLGgK6H +I1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk995WndC2 +0H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w92zS2JAyQ +V8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJCk1t89TX4 +MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ/0bOi20C +AwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAnBgNVHSUE +IDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQEAwIF4DAd +BgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCagJIYi +aHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0BAQUF +AAOBgQCd5ngxHvK7IzgIUYaOi9DClAP1jaDGbYbmMaAijXrbmO+XTHw1q8CGc9st +zLt1j2mErPqHi8qhmSl08fnu/gvp+24bPbETmGTtIan9QpogM0YcHH7N1xbhhF5Q +g0ADqJhEVcNHlC78C98MY9hzME5Jr0g61+aGE2QDzSmz/qiUcQ== -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/isawyou.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/isawyou.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/isawyou.pem (revision 2195) @@ -1,12 +1,18 @@ +From mitcert@MIT.EDU Thu Jan 12 14:40:49 2012 +Date: Thu, 12 Jan 2012 14:40:47 -0500 +From: mitcert@MIT.EDU +To: achernya@mit.edu +Subject: [help.mit.edu #1857760] certificate renewal for scripts-vhost isawyou.mit.edu + Certificate: Data: Version: 3 (0x2) Serial Number: - 67:93:dd:7b:4e:e4:b2:43:31:0b:cd:0f:dc:44:29:52 + 9b:5e:3d:70:49:ee:f7:d4:a4:0c:9e:52:03:0a:c3:92 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Jan 22 17:00:00 2011 GMT - Not After : Jan 24 17:00:00 2012 GMT + Not Before: Jan 11 17:00:00 2012 GMT + Not After : Jan 10 17:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=isawyou.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -65,39 +71,40 @@ Signature Algorithm: sha1WithRSAEncryption - 7c:f1:f7:30:bf:36:e8:e1:8e:ea:af:46:e8:ab:d3:80:26:10: - 84:70:a9:cc:36:b2:4e:62:02:29:25:a0:81:14:a5:56:51:f0: - 59:94:d7:c7:bc:2a:29:61:11:7f:f5:e2:34:25:8d:ae:d1:e3: - e4:dc:3b:60:f1:e5:30:a0:d6:93:f8:b6:81:62:cd:02:e2:a9: - 3f:5a:ac:6d:b8:eb:7c:90:e7:e6:09:78:17:58:c8:0f:e8:ac: - 45:29:db:22:49:17:18:1e:ed:59:91:40:6e:71:42:9e:82:3f: - fa:2c:6e:18:b2:f7:2d:58:bc:52:04:11:65:59:39:ff:31:29: - fc:e8 + 33:58:9e:2d:17:cf:48:d9:5f:94:86:13:d9:db:61:19:1e:db: + be:73:96:dd:97:97:ee:a3:91:68:c7:61:08:0f:a9:06:e7:85: + 46:1c:bd:43:7a:8e:ed:e8:1e:56:bb:ed:9b:96:b5:c9:ba:6c: + fa:c1:1a:01:d2:a2:88:c8:81:41:ff:0e:d0:34:7e:aa:0e:19: + 56:bc:b0:99:f6:e7:19:c5:03:c2:45:03:69:3d:1e:22:fa:2d: + f0:0a:c4:2f:b6:2f:ca:fa:0a:18:14:53:68:d1:ce:25:91:49: + 78:5f:69:b7:20:26:fb:a2:65:b7:db:39:dd:e4:bc:4e:d9:04: + 02:36 -----BEGIN CERTIFICATE----- -MIIFAjCCBGugAwIBAgIQZ5Pde07kskMxC80P3EQpUjANBgkqhkiG9w0BAQUFADB7 -MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl -TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb -TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMDEyMjE3MDAwMFoXDTEy -MDEyNDE3MDAwMFowgdExCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl -dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg -SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk -dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRgwFgYDVQQDEw9pc2F3eW91Lm1pdC5lZHUx -HjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZIhvcNAQEB -BQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pjk/e3 -AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMdeNQZi -/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPca0Sw -XgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt9iFR -+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4DJnTC -obPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2MdCCNS -X8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCcixoCu -hyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpVZPfeVp3Q -ttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INMPds0tiQM -kFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhiQpNbfPU1 -+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyLCf9Gzott -AgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYDVR0l -BCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMCBeAw -HQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAmoCSG -Imh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcNAQEF -BQADgYEAfPH3ML826OGO6q9G6KvTgCYQhHCpzDayTmICKSWggRSlVlHwWZTXx7wq -KWERf/XiNCWNrtHj5Nw7YPHlMKDWk/i2gWLNAuKpP1qsbbjrfJDn5gl4F1jID+is -RSnbIkkXGB7tWZFAbnFCnoI/+ixuGLL3LVi8UgQRZVk5/zEp/Og= +MIIFAzCCBGygAwIBAgIRAJtePXBJ7vfUpAyeUgMKw5IwDQYJKoZIhvcNAQEFBQAw +ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT +JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjAxMTExNzAwMDBaFw0x +MzAxMTAxNzAwMDBaMIHRMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz +IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l +ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEYMBYGA1UEAxMPaXNhd3lvdS5taXQuZWR1 +MR4wHAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3DQEB +AQUAA4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz45P3 +twFXOG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDHXjUG +Yv4q1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT3GtE +sF4BUdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA7fYh +UfrFBvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBuAyZ0 +wqGz18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9jHQgj +Ul/C+U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51QnIsaA +rocjVvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT33lad +0LbQfR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3bNLYk +DJBXwPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKTW3z1 +NfgxEHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/Rs6L +bQIDAQABo4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcGA1Ud +JQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXg +MB0GA1UdDgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCigJqAk +hiJodHRwOi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3DQEB +BQUAA4GBADNYni0Xz0jZX5SGE9nbYRke275zlt2Xl+6jkWjHYQgPqQbnhUYcvUN6 +ju3oHla77ZuWtcm6bPrBGgHSoojIgUH/DtA0fqoOGVa8sJn25xnFA8JFA2k9HiL6 +LfAKxC+2L8r6ChgUU2jRziWRSXhfabcgJvuiZbfbOd3kvE7ZBAI2 -----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/ldpreload.com.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/ldpreload.com.pem (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/ldpreload.com.pem (revision 2195) @@ -0,0 +1,63 @@ +-----BEGIN CERTIFICATE----- +MIIF1TCCBL2gAwIBAgIQUcT/rqk6bFsG+OiDSZj53DANBgkqhkiG9w0BAQUF +ADBBMQswCQYDVQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMR4wHAYDVQQD +ExVHYW5kaSBTdGFuZGFyZCBTU0wgQ0EwHhcNMTIwMjIyMDAwMDAwWhcNMTMw +MjIxMjM1OTU5WjBYMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0 +ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNTTDEWMBQGA1UEAxMNbGRw +cmVsb2FkLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL+j +8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pjk/e3AVc4bun8WU0k66cXR8os +UQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMdeNQZi/irWDxsstQIkTMMG +ceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPca0SwXgFR0wLMStpS +Et41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt9iFR+sUG8Bvr +obC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4DJnTCobPX +y5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2MdCCNS +X8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCci +xoCuhyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpV +ZPfeVp3QttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c4 +6INMPds0tiQMkFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7H +R40u1qhiQpNbfPU1+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn5 +1CkdzuYUukyLCf9GzottAgMBAAGjggGwMIIBrDAfBgNVHSMEGDAWgBS2qP+i +qC/Qps1LsWjz51AQMad5ITAdBgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6 +VWIwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI +KwYBBQUHAwEGCCsGAQUFBwMCMFYGA1UdIARPME0wSwYLKwYBBAGyMQECAhow +PDA6BggrBgEFBQcCARYuaHR0cDovL3d3dy5nYW5kaS5uZXQvY29udHJhY3Rz +L2ZyL3NzbC9jcHMvcGRmLzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Js +LmdhbmRpLm5ldC9HYW5kaVN0YW5kYXJkU1NMQ0EuY3JsMGoGCCsGAQUFBwEB +BF4wXDA3BggrBgEFBQcwAoYraHR0cDovL2NydC5nYW5kaS5uZXQvR2FuZGlT +dGFuZGFyZFNTTENBLmNydDAhBggrBgEFBQcwAYYVaHR0cDovL29jc3AuZ2Fu +ZGkubmV0MCsGA1UdEQQkMCKCDWxkcHJlbG9hZC5jb22CEXd3dy5sZHByZWxv +YWQuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQAIXsnlaB4VnchXtTlFRWb/G78/ +nO/YzlXBkoyN/m9ZFVK2UGmZOL+ns0CQGELdAPAwUvCBeG9gfDi3OMJAn3KM +TDZapRagJBW9gsGC5I7k3ghtMLrF/HOlT3GIZaeSHBWzqT9TlLGWl+VYUptl +HBsp9w4TYEGzTyhCyEl02G4684e134dopGjVLDzFVkyIaVYDDICnhQHJTwXx +OaevFfsnMwoVJX0RrPncmJzlCIghMrtiJkR/8gEdHvPMwyr9606CNG7Kbqz0 +9HDwaIcMgCfo1trEXOO+QLQ6bWS8dE4HMFMOLOoXcF1pHeYvZLqEnJGM8Oqz +y1/58Zpz9hB6QC6C +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIEozCCA4ugAwIBAgIQWrYdrB5NogYUx1U9Pamy3DANBgkqhkiG9w0BAQUFADCB +lzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug +Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExho +dHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xHzAdBgNVBAMTFlVUTi1VU0VSRmlyc3Qt +SGFyZHdhcmUwHhcNMDgxMDIzMDAwMDAwWhcNMjAwNTMwMTA0ODM4WjBBMQswCQYD +VQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMR4wHAYDVQQDExVHYW5kaSBTdGFu +ZGFyZCBTU0wgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VD2l +2w0ieFBqWiOJP5eh1AcaqVgIm6AVwzK2t/HouaVvrTf2bnEbtHUtSF6fxhWqge/l +xIiVijpsd8y1zWXkZ+VzyVBSlMEnST6ga0EWQbaUmUGuPsviBkYJ6U2+yUxVqRh+ +pt9u/UqyzGxO2chQFZOz8unjwmqtOtX7w3lQnyV5KbJHZHwgPuIITZMpFLY0bs9x +Rn52EPT9bKoB0sIG3pKDzFiQLpLeHmW3Yy89sutwjEzgvhWd3sFNVvgLxo4HuV3f +lfB7QB8aLNecK0t29Fn1Q8EsZhCenmaWYJ0cdBtOGFwIsG5symkaAum7ynjvZi7j +Mv1BXJV0gU302v5LAgMBAAGjggE+MIIBOjAfBgNVHSMEGDAWgBShcl8mGyiYQ5Vd +BzfVhZadS9LDRTAdBgNVHQ4EFgQUtqj/oqgv0KbNS7Fo8+dQEDGneSEwDgYDVR0P +AQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQAwGAYDVR0gBBEwDzANBgsrBgEE +AbIxAQICGjBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5j +b20vVVROLVVTRVJGaXJzdC1IYXJkd2FyZS5jcmwwdAYIKwYBBQUHAQEEaDBmMD0G +CCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVROQWRkVHJ1c3RT +ZXJ2ZXJfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu +Y29tMA0GCSqGSIb3DQEBBQUAA4IBAQAZU78DPZvia1r9ukkfT+zhxoI5PNIDBA+r +ez6CqYUQH/TeMq9YP/9w8zAdly1MmuLsDD4ULS+YSJ2uFmqsLUKqtWSkcLvrc5R7 +RkznehR2W0wdhKEgdB8uS1xwiNy99xk97VkN4j8m4pyspDyVHPi+jAOu8OWcTbzH +m1gAv6+t+jducW0YNA7B6mr4Dd9pVFYV8iiz/qRj7MUEZGC7/irw9IehsK69quQv +4wMLL2ZfhaQye0btJQzn8bfnGf1gul+Hd96YB5bkXupjfajeVdphXDyQg0MEBzzd +8/ifBlIK3se2e4/hEfcEejX/arxbx1BJCHBvlEPNnsdw8dvQbdqP +-----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/peoplesearch.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/peoplesearch.pem (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/peoplesearch.pem (revision 2195) @@ -0,0 +1,109 @@ +Subject: [help.mit.edu #1820530] CSR for peoplesearch.mit.edu +From: mitcert@MIT.EDU +To: ezyang@mit.edu +Date: Tue, 6 Dec 2011 15:04:19 -0500 + +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 4a:0a:8e:ff:dd:97:5e:3c:e3:43:15:d7:3a:83:65:40 + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority + Validity + Not Before: Dec 5 17:00:00 2011 GMT + Not After : Dec 5 17:00:00 2012 GMT + Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=peoplesearch.mit.edu/emailAddress=scripts@mit.edu + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (4096 bit) + Modulus (4096 bit): + 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56: + f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3: + 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17: + 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91: + d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1: + b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24: + 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55: + 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b: + 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc: + 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad: + 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87: + 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06: + f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25: + 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59: + 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2: + a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4: + 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c: + 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d: + 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc: + c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43: + c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7: + 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa: + ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31: + 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b: + 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51: + 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3: + a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e: + 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0: + f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18: + 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc: + f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35: + f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76: + 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb: + 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46: + ce:8b:6d + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Cert Type: + SSL Client, SSL Server, S/MIME + X509v3 Extended Key Usage: + TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Subject Key Identifier: + CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 + X509v3 CRL Distribution Points: + URI:http://ca.mit.edu/ca/mitserver.crl + + Signature Algorithm: sha1WithRSAEncryption + b3:b0:75:06:e3:95:80:18:8a:05:88:a1:27:cf:86:02:76:a7: + 87:3c:91:5d:82:da:3a:ff:c7:34:80:3b:c0:f8:42:7c:f9:f5: + 5e:31:e0:6a:bb:4d:a2:9b:fb:ef:d8:60:f2:b8:57:24:9e:23: + 5d:da:ea:ea:8b:5d:95:d7:d4:22:3c:d1:1e:5a:57:c6:82:53: + f0:83:f3:72:84:46:7b:3d:ad:ab:78:30:59:28:ff:f9:6a:22: + 42:e4:d5:af:fa:7a:38:b9:fe:8b:46:57:3f:32:c9:4b:cf:b8: + 73:88:fb:29:06:3e:ef:a2:3f:9d:3a:53:b4:de:79:6a:0f:5c: + 87:92 +-----BEGIN CERTIFICATE----- +MIIFBzCCBHCgAwIBAgIQSgqO/92XXjzjQxXXOoNlQDANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMTIwNTE3MDAwMFoXDTEy +MTIwNTE3MDAwMFowgdYxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMR0wGwYDVQQDExRwZW9wbGVzZWFyY2gubWl0 +LmVkdTEeMBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG +9w0BAQEFAAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mH +c+OT97cBVzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGw +x141BmL+KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY +09xrRLBeAVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9U +wO32IVH6xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjw +bgMmdMKhs9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/ +Yx0II1JfwvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudU +JyLGgK6HI1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk +995WndC20H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w9 +2zS2JAyQV8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJC +k1t89TX4MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ +/0bOi20CAwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAn +BgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQE +AwIF4DAdBgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAo +oCagJIYiaHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG +9w0BAQUFAAOBgQCzsHUG45WAGIoFiKEnz4YCdqeHPJFdgto6/8c0gDvA+EJ8+fVe +MeBqu02im/vv2GDyuFckniNd2urqi12V19QiPNEeWlfGglPwg/NyhEZ7Pa2reDBZ +KP/5aiJC5NWv+no4uf6LRlc/MslLz7hziPspBj7voj+dOlO03nlqD1yHkg== +-----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/picker.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/picker.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/picker.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Thu Jan 13 08:56:19 2011 -Date: Thu, 13 Jan 2011 08:56:18 -0500 (EST) +From mitcert@MIT.EDU Tue Jan 3 11:07:26 2012 +Date: Tue, 3 Jan 2012 11:07:24 -0500 From: mitcert@MIT.EDU -To: geofft@mit.edu -Subject: Certificate renewal for picker.mit.edu [help.mit.edu #1454794] +To: achernya@mit.edu +Subject: [help.mit.edu #1846037] certificate renewal for scripts-vhost picker.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - ce:6b:53:f0:d7:ae:e2:7e:06:b8:6d:da:be:ea:19:14 + 78:76:e4:c1:f5:59:04:cd:24:39:17:f0:9f:34:da:ce Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Jan 11 17:00:00 2011 GMT - Not After : Jan 12 17:00:00 2012 GMT + Not Before: Jan 1 17:00:00 2012 GMT + Not After : Jan 2 17:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=picker.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,40 +71,40 @@ Signature Algorithm: sha1WithRSAEncryption - a5:bf:b9:21:ac:37:d7:32:fb:4e:84:59:80:4f:84:a5:aa:b8: - 00:e5:51:ab:75:4d:ee:fe:86:db:16:a0:56:d6:9c:a5:84:3d: - 39:48:24:d2:0a:3d:d6:61:e7:52:e1:32:3f:68:d5:df:1b:7f: - d5:c7:18:f7:4c:eb:d0:ff:7e:8a:67:42:19:98:bb:2a:1a:bb: - 67:bb:1f:2e:53:68:d4:a5:cd:97:4e:a3:b6:45:fa:13:cb:57: - a8:f9:6c:12:29:3a:8c:dd:98:76:05:4b:34:0f:fd:39:87:18: - f1:5d:ca:b9:dc:13:52:d8:e8:33:d2:13:34:54:de:9e:2b:26: - a3:b5 + 85:bf:fb:ec:77:ee:e8:3d:9c:7d:65:5e:dc:a3:f4:7e:ff:98: + 06:98:36:6a:7e:7d:43:93:05:c6:16:2e:53:f4:07:fe:af:05: + cc:75:4f:de:6f:d0:03:3e:d1:83:4d:b2:da:2e:62:57:0b:34: + b8:98:73:15:84:d4:34:1b:4e:4b:9e:38:2e:17:61:8f:4b:af: + ed:22:ae:36:98:f8:b0:b7:fc:4f:35:21:73:c8:5e:35:d9:ca: + 5d:18:cd:8a:9d:9a:06:8e:56:9f:ff:f8:15:d2:f4:73:30:c4: + df:4e:bd:dc:87:62:b8:34:9b:ae:58:6f:ed:33:b2:61:44:07: + b5:30 -----BEGIN CERTIFICATE----- -MIIFAjCCBGugAwIBAgIRAM5rU/DXruJ+Brht2r7qGRQwDQYJKoZIhvcNAQEFBQAw -ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT -JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMTExNzAwMDBaFw0x -MjAxMTIxNzAwMDBaMIHQMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz -ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz -IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l -ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEXMBUGA1UEAxMOcGlja2VyLm1pdC5lZHUx -HjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZIhvcNAQEB -BQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pjk/e3 -AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMdeNQZi -/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPca0Sw -XgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt9iFR -+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4DJnTC -obPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2MdCCNS -X8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCcixoCu -hyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpVZPfeVp3Q -ttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INMPds0tiQM -kFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhiQpNbfPU1 -+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyLCf9Gzott -AgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYDVR0l -BCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMCBeAw -HQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAmoCSG -Imh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcNAQEF -BQADgYEApb+5Iaw31zL7ToRZgE+Epaq4AOVRq3VN7v6G2xagVtacpYQ9OUgk0go9 -1mHnUuEyP2jV3xt/1ccY90zr0P9+imdCGZi7Khq7Z7sfLlNo1KXNl06jtkX6E8tX -qPlsEik6jN2YdgVLNA/9OYcY8V3KudwTUtjoM9ITNFTenismo7U= +MIIFATCCBGqgAwIBAgIQeHbkwfVZBM0kORfwnzTazjANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEyMDEwMTE3MDAwMFoXDTEz +MDEwMjE3MDAwMFowgdAxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRcwFQYDVQQDEw5waWNrZXIubWl0LmVkdTEe +MBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mHc+OT97cB +Vzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGwx141BmL+ +KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY09xrRLBe +AVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9UwO32IVH6 +xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjwbgMmdMKh +s9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/Yx0II1Jf +wvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudUJyLGgK6H +I1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk995WndC2 +0H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w92zS2JAyQ +V8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJCk1t89TX4 +MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ/0bOi20C +AwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAnBgNVHSUE +IDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQEAwIF4DAd +BgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCagJIYi +aHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0BAQUF +AAOBgQCFv/vsd+7oPZx9ZV7co/R+/5gGmDZqfn1DkwXGFi5T9Af+rwXMdU/eb9AD +PtGDTbLaLmJXCzS4mHMVhNQ0G05LnjguF2GPS6/tIq42mPiwt/xPNSFzyF412cpd +GM2KnZoGjlaf//gV0vRzMMTfTr3ch2K4NJuuWG/tM7JhRAe1MA== -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/pickr.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/pickr.pem (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/pickr.pem (revision 2195) @@ -0,0 +1,110 @@ +From mitcert@MIT.EDU Tue Jan 3 13:25:20 2012 +Date: Tue, 3 Jan 2012 13:25:19 -0500 +From: mitcert@MIT.EDU +To: achernya@mit.edu +Subject: [help.mit.edu #1847684] certificate signing request for scripts-vhost pickr.mit.edu + +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + d4:06:25:0f:20:0c:18:1b:1b:97:c7:72:05:3d:e5:f3 + Signature Algorithm: sha1WithRSAEncryption + Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority + Validity + Not Before: Jan 2 17:00:00 2012 GMT + Not After : Jan 2 17:00:00 2013 GMT + Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=pickr.mit.edu/emailAddress=scripts@mit.edu + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (4096 bit) + Modulus (4096 bit): + 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56: + f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3: + 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17: + 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91: + d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1: + b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24: + 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55: + 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b: + 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc: + 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad: + 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87: + 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06: + f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25: + 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59: + 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2: + a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4: + 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c: + 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d: + 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc: + c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43: + c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7: + 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa: + ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31: + 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b: + 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51: + 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3: + a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e: + 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0: + f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18: + 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc: + f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35: + f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76: + 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb: + 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46: + ce:8b:6d + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: + CA:FALSE + Netscape Cert Type: + SSL Client, SSL Server, S/MIME + X509v3 Extended Key Usage: + TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication + X509v3 Key Usage: + Digital Signature, Non Repudiation, Key Encipherment + X509v3 Subject Key Identifier: + CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62 + X509v3 CRL Distribution Points: + URI:http://ca.mit.edu/ca/mitserver.crl + + Signature Algorithm: sha1WithRSAEncryption + 09:47:31:95:9f:a3:6a:3c:00:42:9b:cf:7c:e8:ba:39:54:27: + 66:eb:3b:47:62:c5:3e:1f:00:43:c2:4a:05:5b:c3:89:fd:ff: + 76:59:1d:a3:f3:27:cb:83:1a:04:55:f4:9a:da:51:df:ec:22: + 5b:29:9c:cd:82:eb:9b:26:83:3f:f7:0d:55:71:8a:1c:42:ab: + 15:a4:68:de:9d:58:9d:e6:dd:64:28:d1:17:7e:1b:9e:2d:16: + 6f:24:8c:71:73:85:3d:11:24:93:e0:0e:5d:1f:08:c3:ba:09: + 31:3a:57:21:cd:18:bf:12:6d:60:7f:ca:a5:19:93:14:ab:93: + a3:c9 +-----BEGIN CERTIFICATE----- +MIIFATCCBGqgAwIBAgIRANQGJQ8gDBgbG5fHcgU95fMwDQYJKoZIhvcNAQEFBQAw +ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT +JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjAxMDIxNzAwMDBaFw0x +MzAxMDIxNzAwMDBaMIHPMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz +IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l +ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEWMBQGA1UEAxMNcGlja3IubWl0LmVkdTEe +MBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mHc+OT97cB +Vzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGwx141BmL+ +KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY09xrRLBe +AVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9UwO32IVH6 +xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjwbgMmdMKh +s9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/Yx0II1Jf +wvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudUJyLGgK6H +I1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk995WndC2 +0H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w92zS2JAyQ +V8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJCk1t89TX4 +MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ/0bOi20C +AwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAnBgNVHSUE +IDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQEAwIF4DAd +BgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCagJIYi +aHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0BAQUF +AAOBgQAJRzGVn6NqPABCm8986Lo5VCdm6ztHYsU+HwBDwkoFW8OJ/f92WR2j8yfL +gxoEVfSa2lHf7CJbKZzNguubJoM/9w1VcYocQqsVpGjenVid5t1kKNEXfhueLRZv +JIxxc4U9ESST4A5dHwjDugkxOlchzRi/Em1gf8qlGZMUq5OjyQ== +-----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/psetcentral.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/psetcentral.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/psetcentral.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Tue Feb 1 00:18:22 2011 -Date: Tue, 1 Feb 2011 00:18:21 -0500 +From mitcert@MIT.EDU Mon Jan 23 14:55:16 2012 +Date: Mon, 23 Jan 2012 14:55:14 -0500 From: mitcert@MIT.EDU -To: geofft@mit.edu -Subject: [help.mit.edu #1471389] CSR for psetcentral.mit.edu +To: achernya@mit.edu +Subject: [help.mit.edu #1868526] certificate renewal for scripts-vhost psetcentral.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - be:7c:4e:58:02:ec:57:f0:69:51:fe:7e:31:a0:eb:f4 + 1d:a2:5a:7d:2a:5f:7b:5b:ae:5c:03:48:62:6c:3d:47 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Jan 30 17:00:00 2011 GMT - Not After : Feb 1 17:00:00 2012 GMT + Not Before: Jan 22 17:00:00 2012 GMT + Not After : Jan 22 17:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=psetcentral.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,40 +71,40 @@ Signature Algorithm: sha1WithRSAEncryption - 7e:40:2e:c8:61:8f:b8:70:30:f7:83:d1:75:20:7e:27:e6:f9: - 2e:7e:14:c6:39:95:06:ac:49:6b:11:a1:d5:76:5a:e1:4a:7e: - 34:16:96:e1:ef:83:4b:c0:26:50:87:6d:c2:bb:ea:f3:24:34: - 15:58:28:48:85:06:54:05:53:ab:65:62:3f:bc:9e:56:c3:1a: - dd:72:8b:0d:5f:da:a7:bf:8a:08:5d:f5:48:62:70:84:f7:c5: - 1d:4c:2c:7a:30:00:1c:0f:f3:f9:f8:13:0a:71:24:d2:8c:d1: - 42:39:d0:49:1e:dd:b5:dd:7f:ee:31:f9:af:7a:5b:ee:86:3d: - 6b:12 + 63:d6:94:10:fc:73:c9:7a:b9:bf:cc:cc:14:31:0d:02:ba:b4: + 04:ea:19:91:b9:ae:9a:13:e0:66:54:bd:3d:62:67:24:85:da: + eb:7e:cf:41:95:a8:17:3b:16:26:5c:97:ac:37:6f:b1:c1:68: + 47:cb:23:ca:65:74:22:3f:9c:17:77:32:ec:b5:83:2e:8b:15: + 59:60:fb:3a:e7:f1:a6:55:9f:98:10:c4:22:a7:5c:f7:8b:d3: + 7b:5d:29:e9:6b:7c:8b:75:96:af:5f:13:da:8c:1b:07:e7:50: + b6:6e:d9:a9:0e:ac:9b:d3:af:f8:99:40:cf:f4:11:67:6f:a9: + d7:ee -----BEGIN CERTIFICATE----- -MIIFBzCCBHCgAwIBAgIRAL58TlgC7FfwaVH+fjGg6/QwDQYJKoZIhvcNAQEFBQAw -ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT -JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMzAxNzAwMDBaFw0x -MjAyMDExNzAwMDBaMIHVMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz -ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz -IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l -ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEcMBoGA1UEAxMTcHNldGNlbnRyYWwubWl0 -LmVkdTEeMBwGCSqGSIb3DQEJARYPc2NyaXB0c0BtaXQuZWR1MIICIjANBgkqhkiG -9w0BAQEFAAOCAg8AMIICCgKCAgEAv6Pye5jMFqdX5pKFNFbx42KDnmpPNZ3wz4mH -c+OT97cBVzhu6fxZTSTrpxdHyixRDkXIt2jJDjIm4JHTBlyMfA5smQyyRgUPTfGw -x141BmL+KtYPGyy1AiRMwwZx7JTKHaqvfrktwFVLzLxRPXZoW9PtNdADuhts86DY -09xrRLBeAVHTAsxK2lIS3jUxaRZaSIsPzq1N5NWLETZ/hxz9hNpDLocvQXCsrd9U -wO32IVH6xQbwG+uhsL9NHEI0itVv9yVmc49gxNeNM5H0RjqXCVkB/8NklEBIMGjw -bgMmdMKhs9fLlPxuU4oqnv2xT8R0ViVjH6q9lSV4nEVGGwwhceuElNCy8dpS9tF/ -Yx0II1JfwvlNrKRE5ZpUcPzJ/NTUtx11lQDjvz5M80PDlscJKilFEtIx1nlMiudU -JyLGgK6HI1bxjUmbyPrtM1tfVnbID36FFGnESDEHOaU0gfJrFVAi+7ssrUuE6lVk -995WndC20H0eG1FQN0SU5sQV60Ux8bPsD7OpDPgcR8dRAAXv7rA9n34Hpzjog0w9 -2zS2JAyQV8D50GQUipNHm0H1oxQdnhhd1dhmr/XzyC+8pwKn79zwDsdHjS7WqGJC -k1t89TX4MRB7ONRAJGiBEyfL+3YO0ZkU2NXr92lkj6+PgrskKfnUKR3O5hS6TIsJ -/0bOi20CAwEAAaOBqzCBqDAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF4DAn -BgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwQGCCsGAQUFBwMCMAsGA1UdDwQE -AwIF4DAdBgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAo -oCagJIYiaHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG -9w0BAQUFAAOBgQB+QC7IYY+4cDD3g9F1IH4n5vkufhTGOZUGrElrEaHVdlrhSn40 -Fpbh74NLwCZQh23Cu+rzJDQVWChIhQZUBVOrZWI/vJ5WwxrdcosNX9qnv4oIXfVI -YnCE98UdTCx6MAAcD/P5+BMKcSTSjNFCOdBJHt213X/uMfmvelvuhj1rEg== +MIIFBjCCBG+gAwIBAgIQHaJafSpfe1uuXANIYmw9RzANBgkqhkiG9w0BAQUFADB7 +MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl +TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb +TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEyMDEyMjE3MDAwMFoXDTEz +MDEyMjE3MDAwMFowgdUxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl +dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg +SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk +dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRwwGgYDVQQDExNwc2V0Y2VudHJhbC5taXQu +ZWR1MR4wHAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3 +DQEBAQUAA4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz +45P3twFXOG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDH +XjUGYv4q1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT +3GtEsF4BUdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA +7fYhUfrFBvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBu +AyZ0wqGz18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9j +HQgjUl/C+U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51Qn +IsaArocjVvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT3 +3lad0LbQfR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3b +NLYkDJBXwPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKT +W3z1NfgxEHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/ +Rs6LbQIDAQABo4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcG +A1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQD +AgXgMB0GA1UdDgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCig +JqAkhiJodHRwOi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3 +DQEBBQUAA4GBAGPWlBD8c8l6ub/MzBQxDQK6tATqGZG5rpoT4GZUvT1iZySF2ut+ +z0GVqBc7FiZcl6w3b7HBaEfLI8pldCI/nBd3Muy1gy6LFVlg+zrn8aZVn5gQxCKn +XPeL03tdKelrfIt1lq9fE9qMGwfnULZu2akOrJvTr/iZQM/0EWdvqdfu -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/schuh.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/schuh.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/schuh.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Fri Feb 11 09:07:58 2011 -Date: Fri, 11 Feb 2011 09:07:56 -0500 +From mitcert@MIT.EDU Mon Jan 30 09:07:05 2012 +Date: Mon, 30 Jan 2012 09:07:03 -0500 From: mitcert@MIT.EDU -To: mitchb@mit.edu -Subject: [help.mit.edu #1482315] Certificate signing request for schuh.mit.edu +To: achernya@mit.edu +Subject: [help.mit.edu #1875469] certificate renewal for scripts-vhost schuh.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - c8:78:ed:28:f4:f0:be:3e:8c:b4:c2:d4:d3:b0:41:22 + 82:36:a9:1c:b3:dc:e9:72:e9:66:1c:9b:2e:00:32:cb Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Feb 9 17:00:00 2011 GMT - Not After : Feb 9 17:00:00 2012 GMT + Not Before: Jan 28 17:00:00 2012 GMT + Not After : Jan 29 17:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=schuh.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,18 +71,18 @@ Signature Algorithm: sha1WithRSAEncryption - be:5e:5b:06:8a:30:ce:ad:19:f4:22:4c:f5:b2:67:8a:26:b8: - 0e:13:b0:49:9a:be:54:64:fa:6e:be:98:db:16:0c:44:f0:b0: - fc:9d:f4:53:d8:a0:ef:bd:b4:f4:19:93:af:ae:bd:13:3a:cc: - e8:ab:31:73:e9:41:61:f6:af:93:c0:c6:cb:96:45:2a:7a:b3: - 69:e9:6f:55:a1:94:18:0b:50:e5:77:4f:36:ef:5b:2a:f6:6d: - 4c:3c:fd:77:e3:be:8e:70:ae:d6:22:c5:8a:71:cf:54:38:bb: - 27:6f:56:93:c6:0c:78:9c:9f:65:4b:ae:b2:a3:14:6f:6e:f1: - 92:6a + 66:1a:be:fb:db:ab:f6:c6:82:64:b1:da:17:ac:a8:1a:60:ad: + 60:24:c5:71:3b:65:d0:c6:52:99:3c:96:0f:b7:19:46:ad:15: + dc:50:aa:e3:ed:eb:1b:a1:b3:d5:b8:e5:04:62:99:35:17:ff: + db:30:82:c1:e0:89:b5:cd:4c:ed:84:01:03:ea:2c:63:35:e4: + f5:6d:28:d0:59:ae:e2:4b:00:e1:9a:23:5d:3b:01:96:8e:b3: + b6:24:9a:57:20:c0:fd:69:17:7a:ab:4e:f6:75:0e:8f:15:45: + 3a:ff:b7:2c:65:62:94:4d:85:6b:59:fe:4e:03:d4:d3:76:c7: + 36:3e -----BEGIN CERTIFICATE----- -MIIFATCCBGqgAwIBAgIRAMh47Sj08L4+jLTC1NOwQSIwDQYJKoZIhvcNAQEFBQAw +MIIFATCCBGqgAwIBAgIRAII2qRyz3Oly6WYcmy4AMsswDQYJKoZIhvcNAQEFBQAw ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT -G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAyMDkxNzAwMDBaFw0x -MjAyMDkxNzAwMDBaMIHPMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjAxMjgxNzAwMDBaFw0x +MzAxMjkxNzAwMDBaMIHPMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l @@ -104,7 +104,7 @@ BgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwMwYDVR0fBCwwKjAooCagJIYi aHR0cDovL2NhLm1pdC5lZHUvY2EvbWl0c2VydmVyLmNybDANBgkqhkiG9w0BAQUF -AAOBgQC+XlsGijDOrRn0Ikz1smeKJrgOE7BJmr5UZPpuvpjbFgxE8LD8nfRT2KDv -vbT0GZOvrr0TOszoqzFz6UFh9q+TwMbLlkUqerNp6W9VoZQYC1Dld08271sq9m1M -PP13476OcK7WIsWKcc9UOLsnb1aTxgx4nJ9lS66yoxRvbvGSag== +AAOBgQBmGr7726v2xoJksdoXrKgaYK1gJMVxO2XQxlKZPJYPtxlGrRXcUKrj7esb +obPVuOUEYpk1F//bMILB4Im1zUzthAED6ixjNeT1bSjQWa7iSwDhmiNdOwGWjrO2 +JJpXIMD9aRd6q072dQ6PFUU6/7csZWKUTYVrWf5OA9TTdsc2Pg== -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/tibetforum.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/tibetforum.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/tibetforum.pem (revision 2195) @@ -1,12 +1,18 @@ +From mitcert@MIT.EDU Mon Mar 12 14:28:19 2012 +Date: Mon, 12 Mar 2012 14:28:17 -0400 +From: mitcert@MIT.EDU +To: achernya@mit.edu +Subject: [help.mit.edu #1919659] certificate renewal for scripts-vhost tibetforum.mit.edu + Certificate: Data: Version: 3 (0x2) Serial Number: - 52:ef:bd:fa:26:8e:7c:4b:ed:d7:84:8e:53:86:76:a2 + 88:ea:3d:45:7b:b4:7d:86:d8:a3:c8:2b:ba:0f:6c:ca Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Mar 19 16:00:00 2011 GMT - Not After : Mar 20 16:00:00 2012 GMT + Not Before: Mar 11 16:00:00 2012 GMT + Not After : Mar 12 16:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=tibetforum.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -65,39 +71,40 @@ Signature Algorithm: sha1WithRSAEncryption - 11:54:74:f0:83:d8:d8:d0:d6:5b:c5:f1:ee:95:6b:d7:73:db: - 73:20:19:d1:a4:52:83:31:13:29:d5:13:8e:cc:03:2f:75:e1: - d6:2f:65:2a:92:7d:7a:8b:94:db:db:01:2a:d1:b1:b6:96:fa: - 12:91:1d:44:b3:df:b3:3c:d2:34:4b:6d:43:3e:f6:19:35:08: - ed:ef:49:1f:3c:bb:6d:c2:a3:a1:2c:ed:6c:ef:21:7c:68:88: - f4:95:d1:2f:02:ed:18:17:e2:47:82:23:4e:57:99:77:22:22: - e3:37:2d:55:a5:42:85:1a:ad:5d:ba:19:bd:37:62:cd:62:f1: - e8:b9 + d0:e0:42:a2:66:b7:a9:b8:62:20:c7:40:09:f7:6e:b9:48:d0: + 41:78:d8:81:11:10:14:d6:6e:2d:cd:17:32:a5:6c:c7:d5:ae: + b0:a5:6c:96:34:97:77:79:72:0a:2b:29:5e:b9:90:b5:63:2f: + 76:b9:65:80:99:d2:6a:e8:f5:72:53:cc:27:b0:00:7b:4b:6d: + 2d:82:fa:c0:b6:22:47:cf:ff:2c:0b:f1:7c:ae:78:34:5b:0a: + ea:56:22:21:2e:73:b2:af:09:82:41:8e:fa:7b:45:03:7a:68: + dd:5c:af:8c:4f:0c:8d:88:11:f9:e7:b3:e0:58:6e:74:58:cf: + 6b:46 -----BEGIN CERTIFICATE----- -MIIFBTCCBG6gAwIBAgIQUu+9+iaOfEvt14SOU4Z2ojANBgkqhkiG9w0BAQUFADB7 -MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl -TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb -TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMDMxOTE2MDAwMFoXDTEy -MDMyMDE2MDAwMFowgdQxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl -dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg -SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk -dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRswGQYDVQQDExJ0aWJldGZvcnVtLm1pdC5l -ZHUxHjAcBgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZIhvcN -AQEBBQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pj -k/e3AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMde -NQZi/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPc -a0SwXgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt -9iFR+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4D -JnTCobPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2Md -CCNSX8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCci -xoCuhyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpVZPfe -Vp3QttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INMPds0 -tiQMkFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhiQpNb -fPU1+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyLCf9G -zottAgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYD -VR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMC -BeAwHQYDVR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAm -oCSGImh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcN -AQEFBQADgYEAEVR08IPY2NDWW8Xx7pVr13PbcyAZ0aRSgzETKdUTjswDL3Xh1i9l -KpJ9eouU29sBKtGxtpb6EpEdRLPfszzSNEttQz72GTUI7e9JHzy7bcKjoSztbO8h -fGiI9JXRLwLtGBfiR4IjTleZdyIi4zctVaVChRqtXboZvTdizWLx6Lk= +MIIFBjCCBG+gAwIBAgIRAIjqPUV7tH2G2KPIK7oPbMowDQYJKoZIhvcNAQEFBQAw +ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT +JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjAzMTExNjAwMDBaFw0x +MzAzMTIxNjAwMDBaMIHUMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz +IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l +ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEbMBkGA1UEAxMSdGliZXRmb3J1bS5taXQu +ZWR1MR4wHAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3 +DQEBAQUAA4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz +45P3twFXOG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDH +XjUGYv4q1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT +3GtEsF4BUdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA +7fYhUfrFBvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBu +AyZ0wqGz18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9j +HQgjUl/C+U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51Qn +IsaArocjVvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT3 +3lad0LbQfR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3b +NLYkDJBXwPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKT +W3z1NfgxEHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/ +Rs6LbQIDAQABo4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcG +A1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQD +AgXgMB0GA1UdDgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCig +JqAkhiJodHRwOi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3 +DQEBBQUAA4GBANDgQqJmt6m4YiDHQAn3brlI0EF42IEREBTWbi3NFzKlbMfVrrCl +bJY0l3d5cgorKV65kLVjL3a5ZYCZ0mro9XJTzCewAHtLbS2C+sC2IkfP/ywL8Xyu +eDRbCupWIiEuc7KvCYJBjvp7RQN6aN1cr4xPDI2IEfnns+BYbnRYz2tG -----END CERTIFICATE----- + Index: /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/ties.pem =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/ties.pem (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/pki/tls/certs/ties.pem (revision 2195) @@ -1,7 +1,7 @@ -From mitcert@MIT.EDU Thu May 19 12:07:49 2011 -Date: Thu, 19 May 2011 12:07:47 -0400 +From mitcert@MIT.EDU Mon May 14 09:29:28 2012 +Date: Mon, 14 May 2012 09:29:26 -0400 From: mitcert@MIT.EDU -To: geofft@mit.edu -Subject: [help.mit.edu #1611578] CSR for scripts vhost ties.mit.edu +To: achernya@mit.edu +Subject: [help.mit.edu #1987094] certificate renewal for scripts-vhost ties.mit.edu Certificate: @@ -9,10 +9,10 @@ Version: 3 (0x2) Serial Number: - 10:7b:ef:ff:12:5b:2c:ce:64:a1:4c:2d:5f:63:1b:0f + ad:4d:c7:9a:02:c8:7e:1c:b7:4d:e1:c4:bc:c8:69:fe Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: May 17 16:00:00 2011 GMT - Not After : May 17 16:00:00 2012 GMT + Not Before: May 12 16:00:00 2012 GMT + Not After : May 14 16:00:00 2013 GMT Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=ties.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: @@ -71,40 +71,40 @@ Signature Algorithm: sha1WithRSAEncryption - 92:17:5a:90:61:e4:58:f7:84:21:e1:87:9d:96:67:8b:a8:d2: - 38:3c:b3:43:c0:c7:b5:ed:e1:3a:12:1a:01:f2:62:f5:d9:fc: - 74:b8:c0:73:f6:39:04:f1:74:3e:73:1a:11:e3:fe:84:4a:42: - a1:bf:b6:5c:a1:55:a7:54:91:4d:dd:14:ee:44:24:ed:84:bb: - 82:6a:42:56:7c:b4:d7:ed:a5:56:7c:65:08:cc:30:65:ed:95: - 61:ab:00:dc:60:ea:fd:81:38:dc:5b:24:ae:3e:ef:3d:d3:00: - 8d:5d:dd:1e:0a:88:0d:7f:e5:3b:56:14:01:45:ed:7e:87:97: - bb:1f + 23:ec:34:e2:79:a4:07:a4:12:8f:ce:72:42:7f:c7:30:4a:93: + 7f:de:52:9f:76:0c:6b:41:fd:d5:09:45:33:84:9d:b4:6c:ec: + de:53:61:4d:78:06:34:3d:d2:2d:4b:16:0a:86:77:13:47:78: + 4b:7e:4b:f6:fc:64:1d:13:5e:7a:dc:06:47:3a:34:74:7c:ee: + 39:c0:5a:b2:9b:f3:b0:1e:5a:93:3e:a3:61:67:52:b2:db:13: + a2:ed:8c:d1:40:fe:1d:8e:53:e2:d5:e3:d4:f2:b2:d2:3f:8f: + f4:5f:a1:44:19:b8:6b:2d:86:5a:5c:d7:4f:11:11:3b:ae:dc: + 93:92 -----BEGIN CERTIFICATE----- -MIIE/zCCBGigAwIBAgIQEHvv/xJbLM5koUwtX2MbDzANBgkqhkiG9w0BAQUFADB7 -MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl -TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb -TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMDUxNzE2MDAwMFoXDTEy -MDUxNzE2MDAwMFowgc4xCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl -dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg -SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk -dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRUwEwYDVQQDEwx0aWVzLm1pdC5lZHUxHjAc -BgkqhkiG9w0BCQEWD3NjcmlwdHNAbWl0LmVkdTCCAiIwDQYJKoZIhvcNAQEBBQAD -ggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+Jh3Pjk/e3AVc4 -bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03xsMdeNQZi/irW -DxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg2NPca0SwXgFR -0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3fVMDt9iFR+sUG -8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo8G4DJnTCobPX -y5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbRf2MdCCNSX8L5 -TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrnVCcixoCuhyNW -8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpVZPfeVp3QttB9 -HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INMPds0tiQMkFfA -+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhiQpNbfPU1+DEQ -ezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyLCf9GzottAgMB -AAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYDVR0lBCAw -HgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMCBeAwHQYD -VR0OBBYEFMsRtwFfhlVPRV6rJ2m+4TyJelViMDMGA1UdHwQsMCowKKAmoCSGImh0 -dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcNAQEFBQAD -gYEAkhdakGHkWPeEIeGHnZZni6jSODyzQ8DHte3hOhIaAfJi9dn8dLjAc/Y5BPF0 -PnMaEeP+hEpCob+2XKFVp1SRTd0U7kQk7YS7gmpCVny01+2lVnxlCMwwZe2VYasA -3GDq/YE43Fskrj7vPdMAjV3dHgqIDX/lO1YUAUXtfoeXux8= +MIIFADCCBGmgAwIBAgIRAK1Nx5oCyH4ct03hxLzIaf4wDQYJKoZIhvcNAQEFBQAw +ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT +JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMjA1MTIxNjAwMDBaFw0x +MzA1MTQxNjAwMDBaMIHOMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz +IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l +ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEVMBMGA1UEAxMMdGllcy5taXQuZWR1MR4w +HAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3DQEBAQUA +A4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz45P3twFX +OG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDHXjUGYv4q +1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT3GtEsF4B +UdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA7fYhUfrF +BvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBuAyZ0wqGz +18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9jHQgjUl/C ++U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51QnIsaArocj +VvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT33lad0LbQ +fR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3bNLYkDJBX +wPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKTW3z1Nfgx +EHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/Rs6LbQID +AQABo4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcGA1UdJQQg +MB4GCCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXgMB0G +A1UdDgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCigJqAkhiJo +dHRwOi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3DQEBBQUA +A4GBACPsNOJ5pAekEo/OckJ/xzBKk3/eUp92DGtB/dUJRTOEnbRs7N5TYU14BjQ9 +0i1LFgqGdxNHeEt+S/b8ZB0TXnrcBkc6NHR87jnAWrKb87AeWpM+o2FnUrLbE6Lt +jNFA/h2OU+LV49TystI/j/RfoUQZuGsthlpc108RETuu3JOS -----END CERTIFICATE----- Index: /branches/fc17-dev/server/fedora/config/etc/postfix/main.cf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/postfix/main.cf (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/postfix/main.cf (revision 2195) @@ -17,6 +17,6 @@ recipient_delimiter = + inet_interfaces = all -readme_directory = /usr/share/doc/postfix-2.8.5/README_FILES -sample_directory = /usr/share/doc/postfix-2.8.5/samples +readme_directory = /usr/share/doc/postfix-2.8.10/README_FILES +sample_directory = /usr/share/doc/postfix-2.8.10/samples sendmail_path = /usr/sbin/sendmail html_directory = no Index: /branches/fc17-dev/server/fedora/config/etc/scripts/allowed-filecaps.list =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/scripts/allowed-filecaps.list (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/scripts/allowed-filecaps.list (revision 2195) @@ -1,2 +1,4 @@ /bin/ping /bin/ping6 +/usr/sbin/fping +/usr/sbin/fping6 Index: /branches/fc17-dev/server/fedora/config/etc/scripts/allowed-setugid.list =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/scripts/allowed-setugid.list (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/scripts/allowed-setugid.list (revision 2195) @@ -12,7 +12,4 @@ /usr/libexec/utempter/utempter /usr/local/bin/logview -/usr/local/sbin/signup-scripts-frontend -/usr/sbin/fping -/usr/sbin/fping6 /usr/sbin/lockdev /usr/sbin/mtr Index: /branches/fc17-dev/server/fedora/config/etc/sudoers =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/sudoers (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/sudoers (revision 2195) @@ -71,5 +71,4 @@ scripts ALL=(root) NOPASSWD: /usr/local/sbin/ldap-backup "" -rebecca ALL=(root) NOPASSWD: /sbin/service nscd restart nrpe ALL=(signup) NOPASSWD: /etc/nagios/check_ldap_mmr.real Index: /branches/fc17-dev/server/fedora/config/etc/sysconfig/dirsrv =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/sysconfig/dirsrv (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/sysconfig/dirsrv (revision 2195) @@ -29,10 +29,4 @@ KRB5_KTNAME=/etc/dirsrv/keytab ; export KRB5_KTNAME -# Use a disk ccache instead of a memory one (this is renewed by the -# slapdagent cronjob) -- geofft 30 October 2010 -KRB5CCNAME=/var/run/dirsrv/krb5cc; export KRB5CCNAME -/usr/bin/kinit -k -t "$KRB5_KTNAME" ldap/"$(hostname)" -chown --reference="$KRB5_KTNAME" "$KRB5CCNAME" - # other environment settings can be added here too OS=`uname -s` Index: /branches/fc17-dev/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (revision 2195) @@ -13,2 +13,3 @@ 18.181.0.135 via 172.21.0.135 18.181.0.141 via 172.21.0.141 +18.181.0.199 via 172.21.0.199 Index: /branches/fc17-dev/server/fedora/config/etc/syslog-ng/d_zroot.pl =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/syslog-ng/d_zroot.pl (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/syslog-ng/d_zroot.pl (revision 2195) @@ -17,6 +17,15 @@ @USERS{@USERS} = undef; -sub zwrite($;$$@) { - my ($message, $class, $instance, @recipients) = @_; +sub zwrite($;$$\@) { + my ($message, $class, $instance, $recipref) = @_; + my @recipients = (); + if (defined($recipref)) { + if (@$recipref) { + @recipients = @$recipref; + } else { + $message = '@b(Empty recipient list specified, message redacted)'; + $class = $ZCLASS; + } + } $class ||= $ZCLASS; $instance ||= 'root.'.hostname; @@ -24,4 +33,9 @@ print ZWRITE $message; close(ZWRITE); +} + +unless (@RECIPIENTS) { + # Also give a warning at startup + zwrite('@b(No .k5login found, sensitive logs will not be zephyred)', $ZCLASS); } @@ -108,4 +122,5 @@ } elsif ($message =~ m|^error: PAM: Authentication failure|) { } elsif ($message =~ m|^pam_unix\(sshd:auth\): authentication failure|) { + } elsif ($message =~ m|^pam_unix\(sshd:auth\): check pass; user unknown|) { } elsif ($message =~ m|^Postponed keyboard-interactive for invalid user |) { } elsif ($message =~ m|^Failed keyboard-interactive/pam for invalid user |) { @@ -119,4 +134,5 @@ } elsif ($message =~ m|^ *root : TTY=|) { } elsif ($message =~ m|^Set /proc/self/oom_adj to |) { + } elsif ($message =~ m|^Set /proc/self/oom_score_adj to |) { } elsif ($message =~ m|^fatal: mm_request_receive: read: Connection reset by peer$|) { } else { @@ -126,5 +142,5 @@ foreach my $class (keys %toclass) { - if ($class eq "scripts-auto") { + if ($class eq $ZCLASS) { zwrite($toclass{$class}, $class); } else { Index: /branches/fc17-dev/server/fedora/config/etc/syslog-ng/syslog-ng.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/syslog-ng/syslog-ng.conf (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/syslog-ng/syslog-ng.conf (revision 2195) @@ -23,5 +23,5 @@ source s_sys { file ("/proc/kmsg" program_override("kernel: ")); - unix-stream ("/dev/log"); + unix-dgram ("/dev/log"); internal(); # udp(ip(0.0.0.0) port(514)); Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system.conf (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system.conf (revision 2195) @@ -0,0 +1,25 @@ +# This file is part of systemd. +# +# systemd is free software; you can redistribute it and/or modify it +# under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2 of the License, or +# (at your option) any later version. +# +# See systemd.conf(5) for details + +[Manager] +#LogLevel=info +#LogTarget=syslog-or-kmsg +#LogColor=yes +#LogLocation=no +#DumpCore=yes +#CrashShell=no +#ShowStatus=yes +#SysVConsole=yes +#CrashChVT=1 +#CPUAffinity=1 2 +#MountAuto=yes +#SwapAuto=yes +#DefaultControllers=cpu +#DefaultStandardOutput=inherit +#DefaultStandardError=inherit Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/afs-000.mount =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/afs-000.mount (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/afs-000.mount (revision 2195) @@ -0,0 +1,10 @@ +[Unit] +Description=FUSE better mousetrap filesystem +After=openafs-client.service +[Mount] +What=/usr/sbin/better-mousetrapfs +Where=/afs/000 +Type=fuse +Options=defaults,nonempty +[Install] +WantedBy=multi-user.target Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/afs-000.mount =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/afs-000.mount (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/afs-000.mount (revision 2195) @@ -0,0 +1,1 @@ +link /etc/systemd/system/afs-000.mount Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/crond.service =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/crond.service (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/crond.service (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/crond.service Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/ntpd.service =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/ntpd.service (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/ntpd.service (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/ntpd.service Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/openafs-client.service =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/openafs-client.service (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/openafs-client.service (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/openafs-client.service Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/remote-fs.target =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/remote-fs.target (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/remote-fs.target (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/remote-fs.target Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent-startup.service =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent-startup.service (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent-startup.service (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/scripts-afsagent-startup.service Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.service =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.service (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.service (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/scripts-afsagent.service Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.timer =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.timer (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-afsagent.timer (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/scripts-afsagent.timer Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-whoisd.service =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-whoisd.service (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/scripts-whoisd.service (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/scripts-whoisd.service Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/syslog-ng.service =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/syslog-ng.service (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/syslog-ng.service (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/syslog-ng.service Index: /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/yum-updatesd.service =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/yum-updatesd.service (revision 2195) +++ /branches/fc17-dev/server/fedora/config/etc/systemd/system/multi-user.target.wants/yum-updatesd.service (revision 2195) @@ -0,0 +1,1 @@ +link /lib/systemd/system/yum-updatesd.service Index: /branches/fc17-dev/server/fedora/config/etc/yum.conf =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/yum.conf (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/yum.conf (revision 2195) @@ -10,4 +10,6 @@ metadata_expire=1800 installonlypkgs=kernel kernel-devel kmod-openafs ghc-cgi ghc-cgi-devel +# Don't ever remove installonly packages: +installonly_limit=0 # PUT YOUR REPOS HERE OR IN separate files named file.repo Index: /branches/fc17-dev/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/yum.repos.d/fedora-updates-testing.repo (revision 2195) @@ -3,5 +3,5 @@ failovermethod=priority #baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/$basearch/ -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/testing/$releasever/$basearch/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/$basearch/ #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f$releasever&arch=$basearch enabled=0 @@ -13,5 +13,5 @@ failovermethod=priority #baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/$basearch/debug/ -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/testing/$releasever/$basearch/debug/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/$basearch/debug/ #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-debug-f$releasever&arch=$basearch enabled=0 @@ -23,5 +23,5 @@ failovermethod=priority #baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/SRPMS/ -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/testing/$releasever/SRPMS/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/SRPMS/ #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=updates-testing-source-f$releasever&arch=$basearch enabled=0 Index: /branches/fc17-dev/server/fedora/config/etc/yum.repos.d/fedora-updates.repo =================================================================== --- /branches/fc17-dev/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (revision 2194) +++ /branches/fc17-dev/server/fedora/config/etc/yum.repos.d/fedora-updates.repo (revision 2195) @@ -3,5 +3,5 @@ failovermethod=priority #baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/$releasever/$basearch/ -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/$releasever/$basearch/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/$basearch/ #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=updates-released-f$releasever&arch=$basearch enabled=1 @@ -13,5 +13,5 @@ failovermethod=priority #baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/$releasever/$basearch/debug/ -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/$releasever/$basearch/debug/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/$basearch/debug/ #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=updates-released-debug-f$releasever&arch=$basearch enabled=0 @@ -23,5 +23,5 @@ failovermethod=priority #baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/$releasever/SRPMS/ -baseurl=http://download3.fedora.redhat.com/pub/fedora/linux/updates/$releasever/SRPMS/ +baseurl=http://dl.fedoraproject.org/pub/fedora/linux/updates/$releasever/SRPMS/ #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=updates-released-source-f$releasever&arch=$basearch enabled=0 Index: /branches/fc17-dev/server/fedora/config/usr/vice/etc/CellServDB.local =================================================================== --- /branches/fc17-dev/server/fedora/config/usr/vice/etc/CellServDB.local (revision 2194) +++ /branches/fc17-dev/server/fedora/config/usr/vice/etc/CellServDB.local (revision 2195) @@ -3,8 +3,4 @@ 18.9.48.11 #castor.mit.edu 18.9.48.12 #pollux.mit.edu. ->dev.mit.edu #MIT/IS Development cell -18.9.48.13 #saw.mit.edu. -18.9.60.110 #hammer.mit.edu. -18.9.60.111 #screw.mit.edu. >net.mit.edu #MIT/Network Group cell 18.7.7.73 #gracie.mit.edu @@ -16,9 +12,5 @@ 18.181.0.22 #rosebud.mit.edu 18.181.0.23 #ronald-ann.mit.edu ->soap.mit.edu #MIT School Of Architecture & Planning -18.89.1.204 #crypt.mit.edu -18.89.3.46 #soap.mit.edu -18.89.4.9 #arch.mit.edu ->grand.central.org #GCO Public CellServDB 28 Feb 2010 +>grand.central.org #GCO Public CellServDB 14 Aug 2011 18.9.48.14 #grand.mit.edu 128.2.203.61 #penn.central.org @@ -43,4 +35,8 @@ 132.216.24.122 #germain.sums.math.mcgill.ca 132.216.24.125 #turing.sums.math.mcgill.ca +>ualberta.ca #University of Alberta +129.128.1.131 #file13.ucs.ualberta.ca +129.128.98.17 #mystery.ucs.ualberta.ca +129.128.125.40 #drake.ucs.ualberta.ca >cern.ch #European Laboratory for Particle Physics, Geneva 137.138.128.148 #afsdb1.cern.ch @@ -68,7 +64,4 @@ 130.85.24.11 #weasel 130.85.24.13 #straykitten ->setfilepointer.com #SetFilePointer.com -69.164.193.174 #alpha.setfilepointer.com -174.143.159.53 #beta.setfilepointer.com >sodre.cx #Sodre.cx 128.8.140.165 #greed.sodre.cx @@ -89,4 +82,8 @@ 131.169.2.20 #afsdb3.desy.de 131.169.244.60 #solar00.desy.de +>naf.desy.de #National Analysis Facility at DESY +141.34.220.32 #tcsh1-vm1.naf.desy.de +141.34.230.33 #tcsh2-vm1.naf.desy.de +141.34.230.34 #tcsh3-vm1.naf.desy.de >gppc.de #GPP Chemnitz mbH 213.187.92.33 #gpp1.gppc.de @@ -121,4 +118,8 @@ >combi.tfh-wildau.de #Philips Research Lab 194.95.50.106 #joda13.combi.tfh-wildau.de +>tu-berlin.de #TU Berlin +130.149.204.10 #afsc-pr-1.tubit.tu-berlin.de +130.149.204.11 #afsc-pr-2.tubit.tu-berlin.de +130.149.204.70 #afsc-ba-1.tubit.tu-berlin.de >tu-bs.de #Technical University of Braunschweig, Germany 134.169.1.1 #rzafs1.rz.tu-bs.de @@ -127,7 +128,8 @@ >tu-chemnitz.de #Technische Universitaet Chemnitz, Germany 134.109.2.1 #zuse.hrz.tu-chemnitz.de +134.109.2.2 #andrew.hrz.tu-chemnitz.de 134.109.2.15 #phoenix.hrz.tu-chemnitz.de -134.109.200.7 #aetius.hrz.tu-chemnitz.de >e18.ph.tum.de #Experimental Physics, TU Munich, Germany +129.187.154.165 #dionysos.e18.physik.tu-muenchen.de 129.187.154.223 #hamlet.e18.physik.tu-muenchen.de >atlass01.physik.uni-bonn.de #Bonn ATLAS @@ -152,4 +154,5 @@ >ziti.uni-heidelberg.de #Institute of Computer Science at the University of Heidelberg 147.142.42.246 #mp-sun.ziti.uni-heidelberg.de +147.142.42.252 #mp-pizza.ziti.uni-heidelberg.de >uni-hohenheim.de #University of Hohenheim 144.41.2.2 #rs13.serv.uni-hohenheim.de @@ -160,6 +163,4 @@ 141.35.2.181 #afs01.rz.uni-jena.de 141.35.2.182 #afs02.rz.uni-jena.de ->impetus.uni-koeln.de #Univ. of Cologne - Geophysics/Meteorology Inst. -134.95.80.39 #forano.meteo.uni-koeln.de >meteo.uni-koeln.de #Univ. of Cologne - Inst. for Geophysics & Meteorology 134.95.144.22 #afs1.meteo.uni-koeln.de @@ -194,13 +195,8 @@ 129.219.10.70 #authen1.asu.edu 129.219.10.72 #authen3.asu.edu -129.219.100.16 #authen4.asu.edu >mars.asu.edu #Mars Space Flight Facility - ASU Mars Research 149.169.146.57 #kdc1.mars.asu.edu 149.169.146.58 #kdc2.mars.asu.edu 149.169.146.59 #kdc3.mars.asu.edu ->eecs.berkeley.edu #University of California, Berkeley - EECS Dept. -128.32.139.34 #greed.eecs.berkeley.edu -128.32.139.35 #gluttony.eecs.berkeley.edu -169.229.60.112 #envy.eecs.berkeley.edu >hep.caltech.edu #Caltech High Energy Physics 131.215.116.20 #afs.hep.caltech.edu @@ -230,8 +226,5 @@ 128.2.172.58 #date.srv.cs.cmu.edu 128.2.172.60 #fig.srv.cs.cmu.edu -128.2.184.215 #pumpkin.srv.cs.cmu.edu 128.2.200.97 #watermelon.srv.cs.cmu.edu -128.2.201.46 #strawberry.srv.cs.cmu.edu -128.2.201.48 #cherry.srv.cs.cmu.edu >ece.cmu.edu #Carnegie Mellon University - Elec. Comp. Eng. Dept. 128.2.129.7 #porok.ece.cmu.edu @@ -267,5 +260,5 @@ 129.170.16.43 #cygnusx1.dartmouth.edu >cs.hm.edu #Department Computer Science Munich University Of Applied Science -129.187.208.2 #srv1.informatik.fh-muenchen.de +129.187.208.31 #afs1.cs.hm.edu >eecs.harvard.edu #Harvard - EECS 140.247.60.64 #lefkada.eecs.harvard.edu @@ -338,12 +331,8 @@ 128.174.251.9 #alnilam.acm.uiuc.edu 128.174.251.10 #mintaka.acm.uiuc.edu ->illigal.uiuc.edu #Illinois Genetic Algorithms Labaratory -128.174.193.200 #ial.illigal.uiuc.edu -128.174.193.201 #cac.illigal.uiuc.edu -128.174.193.202 #gcs.illigal.uiuc.edu ->ncsa.uiuc.edu #University of Illinois -141.142.3.5 #congo.ncsa.uiuc.edu -141.142.3.8 #nile.ncsa.uiuc.edu -141.142.3.9 #kaskaskia.ncsa.uiuc.edu +>ncsa.uiuc.edu #National Center for Supercomputing Applications at Illinois +141.142.192.66 #nile-vm.ncsa.uiuc.edu +141.142.192.143 #congo-vm.ncsa.uiuc.edu +141.142.192.144 #kaskaskia-vm.ncsa.uiuc.edu >umbc.edu #University of Maryland, Baltimore County 130.85.24.23 #db2.afs.umbc.edu @@ -413,7 +402,4 @@ >ific.uv.es #Instituto de Fisica Corpuscular, Valencia, Spain 147.156.163.11 #alpha.ific.uv.es ->biocenter.helsinki.fi #University of Helsinki, Institute of Biotechnology -128.214.58.174 #afsdb1.biocenter.helsinki.fi -128.214.88.114 #afsdb2.biocenter.helsinki.fi >dapnia.saclay.cea.fr #CEA DAPNIA 132.166.32.7 #dphrsg.saclay.cea.fr @@ -445,6 +431,4 @@ 131.225.68.4 #fsus03.fnal.gov 131.225.68.14 #fsus04.fnal.gov ->ic-afs.arc.nasa.gov #Code IC, Ames Research Center -128.102.105.62 #udanax.arc.nasa.gov >jpl.nasa.gov #Jet Propulsion Laboratory 137.78.160.21 #afsdb08.jpl.nasa.gov @@ -495,6 +479,7 @@ 193.206.84.122 #afs2.lnf.infn.it 193.206.84.123 #afs3.lnf.infn.it ->lngs.infn.it #INFN, Laboratori Nazionali di Gran Sasso -192.84.135.21 #rsgs05.lngs.infn.it +>lngs.infn.it #INFN, Laboratori Nazionali del Gran Sasso +192.84.135.21 #afs1.lngs.infn.it +192.84.135.133 #afs2.lngs.infn.it >pi.infn.it #INFN, Sezione di Pisa 192.84.133.50 #aix1.pi.infn.it @@ -512,5 +497,6 @@ 151.100.85.253 #alfa.ing.uniroma1.it >dia.uniroma3.it #University Roma Tre - DIA -193.204.161.79 #plm.dia.uniroma3.it +193.204.161.67 #srv.dia.uniroma3.it +193.204.161.79 #aux.dia.uniroma3.it 193.204.161.118 #afs.dia.uniroma3.it >vn.uniroma3.it #University of Rome 3, Area Vasca Navale @@ -528,4 +514,6 @@ 132.250.114.4 #afs2.lcp.nrl.navy.mil 132.250.114.6 #afs3.lcp.nrl.navy.mil +>crossproduct.net #crossproduct.net +207.114.88.164 #enigma.crossproduct.net >epitech.net #EPITECH, France 163.5.255.41 #afs-db-1.epitech.net @@ -535,9 +523,12 @@ 198.128.3.22 #fs2.es.net 198.128.3.23 #fs3.es.net +>gorlaeus.net #Gorlaeus Laboratories, Leiden University +132.229.170.27 #fwncisafs1.gorlaeus.net >laroia.net #Laroia Networks 66.66.102.254 #supercore.laroia.net >sinenomine.net #Sine Nomine Associates -66.135.48.108 #tx2srv03.sinenomine.net -72.73.30.42 #va.sinenomine.net +72.73.25.18 #afsdb2.sinenomine.net +72.73.30.74 #afsdb3.sinenomine.net +74.121.192.42 #afsdb1.sinenomine.net >slackers.net #The Slackers' Network 199.4.150.159 #alexandria.slackers.net @@ -563,7 +554,12 @@ 66.93.61.184 #vice1.coed.org 128.237.157.35 #vice3.coed.org ->dementia.org #Dementia Unlimited -128.2.13.209 #dedlock.dementia.org -128.2.235.26 #meredith.dementia.org +>dementia.org #Dementia Unlimited (old) +128.2.13.209 #dedlock.dementix.org +128.2.234.204 #vorkana.dementix.org +128.2.235.26 #meredith.dementix.org +>dementix.org #Dementia Unlimited +128.2.13.209 #dedlock.dementix.org +128.2.234.204 #vorkana.dementix.org +128.2.235.26 #meredith.dementix.org >idahofuturetruck.org #University of Idaho hybrid vehicle development 12.18.238.210 #dsle210.fsr.net @@ -593,11 +589,16 @@ 130.237.48.7 #anden.e.kth.se 130.237.48.244 #fadern.e.kth.se +>ict.kth.se #Royal Institute of Technology, Information and Communication tec +130.237.216.11 #afsdb1.ict.kth.se +130.237.216.12 #afsdb2.ict.kth.se +130.237.216.13 #afsdb3.ict.kth.se >isk.kth.se #Royal Institute of Technology, ISK -130.237.209.5 #afsdb2.isk.kth.se 130.237.216.17 #afsdb1.isk.kth.se ->it.kth.se #Royal Institute of Technology, IT -130.237.212.15 #ptah.it.kth.se -130.237.212.16 #toth.it.kth.se -130.237.215.7 #isis.it.kth.se +130.237.216.82 #afsdb2.isk.kth.se +130.237.216.83 #afsdb3.isk.kth.se +>it.kth.se #Royal Institute of Technology, Teleinformatics, Kista +130.237.216.14 #afsdb1.it.kth.se +130.237.216.15 #afsdb2.it.kth.se +130.237.216.16 #afsdb3.it.kth.se >md.kth.se #Royal Institute of Technology, MMK 130.237.57.21 #euler.md.kth.se @@ -637,4 +638,6 @@ >p-ng.si #Nova Gorica Polytechnic 193.2.120.2 #solkan.p-ng.si +>ihep.su #Institute for High-Energy Physics +194.190.165.195 #afssrv00.ihep.su >hep-ex.physics.metu.edu.tr #METU Department of Physics, Experimental HEP group, Ankara/Turke 144.122.31.131 #neutrino.physics.metu.edu.tr Index: /branches/fc17-dev/server/fedora/config/usr/vice/etc/CellServDB.mousetrap =================================================================== --- /branches/fc17-dev/server/fedora/config/usr/vice/etc/CellServDB.mousetrap (revision 2195) +++ /branches/fc17-dev/server/fedora/config/usr/vice/etc/CellServDB.mousetrap (revision 2195) @@ -0,0 +1,1 @@ +>000 #better-mousetrapfs (see /usr/local/sbin/better-mousetrapfs) Index: /branches/fc17-dev/server/fedora/config/usr/vice/etc/README =================================================================== --- /branches/fc17-dev/server/fedora/config/usr/vice/etc/README (revision 2195) +++ /branches/fc17-dev/server/fedora/config/usr/vice/etc/README (revision 2195) @@ -0,0 +1,14 @@ +CellServDB maintains a mapping of cell names to IP addresses of servers +serving them. + +Under normal operation, CellServDB.dist (which is distributed by the +OpenAFS package) and CellServDB.local (which is normally empty, but can +be used to add local AFS cells.) + +However, we patch OpenAFS's systemd unit file to instead concatenate +CellServDB.local (which is Athena Ops provided database) and +CellServDB.mousetrap (which is a bogus entry for better-mousetrapfs, +which catches and kills 'find /afs'). + +CellServDB.mousetrap must be concatenated at the end, as readdir on +/afs returns cells in reverse order they are in CellServDB. Index: /branches/fc17-dev/server/fedora/specs/accountadm.spec =================================================================== --- /branches/fc17-dev/server/fedora/specs/accountadm.spec (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/accountadm.spec (revision 2195) @@ -9,5 +9,5 @@ Source: %{name}.tar.gz BuildRoot: %{_tmppath}/%(%{__id_u} -n)-%{name}-%{version}-root -BuildRequires: scripts-openafs-devel +BuildRequires: scripts-openafs-devel, scripts-openafs-authlibs-devel BuildRequires: hesinfo BuildRequires: openldap-clients @@ -25,5 +25,4 @@ Contains: - Perl script for checking whether a user is a locker admin - - setuid C program used to start a signup request - Perl script that handles signup requests - vhostadd,vhostedit: admin tools for adding and editing virtualhosts @@ -57,6 +56,4 @@ /usr/local/sbin/vhostedit /usr/local/sbin/ldap-backup -%defattr(4755, signup, signup) -/usr/local/sbin/signup-scripts-frontend %pre Index: /branches/fc17-dev/server/fedora/specs/fuse-better-mousetrapfs.spec =================================================================== --- /branches/fc17-dev/server/fedora/specs/fuse-better-mousetrapfs.spec (revision 2195) +++ /branches/fc17-dev/server/fedora/specs/fuse-better-mousetrapfs.spec (revision 2195) @@ -0,0 +1,40 @@ +Summary: FUSE-Filesystem that logs and kills any accessors +Group: System Environment/Base +Name: fuse-better-mousetrapfs +Version: 0 +Release: 1.%{scriptsversion}%{?dist} +Vendor: The scripts.mit.edu Team (scripts@mit.edu) +URL: http://scripts.mit.edu +License: BSD +Source0: %{name}.tar.gz +BuildArch: noarch + +%define debug_package %{nil} + +Requires: fuse >= 2.2 +Requires: fuse-python + +%description +This is a FUSE-filesystem client which logs and kills any accessors. +It is useful for detecting compromised accounts which are performing +filesystem scans. + +%prep +%setup -q -n %{name} + +%build + +%install +rm -rf %{buildroot} +install -D better-mousetrapfs %{buildroot}/usr/sbin/better-mousetrapfs + +%clean +rm -rf %{buildroot} + +%files +%defattr(-,root,root,-) +/usr/sbin/better-mousetrapfs + +%changelog +* Mon Mar 26 2012 Edward Z. Yang - 0-1.2150 +- Initial release. Index: /branches/fc17-dev/server/fedora/specs/httpd.spec.patch =================================================================== --- /branches/fc17-dev/server/fedora/specs/httpd.spec.patch (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/httpd.spec.patch (revision 2195) @@ -1,8 +1,8 @@ ---- httpd.spec.orig 2011-09-13 09:43:36.000000000 -0400 -+++ httpd.spec 2011-11-05 20:57:13.910145847 -0400 +--- httpd.spec.~1~ 2012-02-13 09:46:36.000000000 -0500 ++++ httpd.spec 2012-03-26 01:33:53.247271289 -0400 @@ -8,7 +8,7 @@ Summary: Apache HTTP Server Name: httpd - Version: 2.2.21 + Version: 2.2.22 -Release: 1%{?dist} +Release: 1%{?dist}.scripts.%{scriptsversion} @@ -26,5 +26,5 @@ The Apache HTTP Server is a powerful, efficient, and extensible web server. -@@ -64,6 +73,7 @@ +@@ -64,6 +76,7 @@ Obsoletes: secureweb-devel, apache-devel, stronghold-apache-devel Requires: apr-devel, apr-util-devel, pkgconfig @@ -34,5 +34,5 @@ %description devel The httpd-devel package contains the APXS binary and other files -@@ -102,6 +112,7 @@ +@@ -102,6 +115,7 @@ Requires(post): openssl, /bin/cat Requires(pre): httpd @@ -42,5 +42,5 @@ %description -n mod_ssl -@@ -110,6 +121,11 @@ +@@ -110,6 +124,11 @@ Security (TLS) protocols. @@ -54,5 +54,5 @@ %patch1 -p1 -b .apctl %patch2 -p1 -b .apxs -@@ -128,6 +144,13 @@ +@@ -128,6 +147,14 @@ # Patch in vendor/release string sed "s/@RELEASE@/%{vstring}/" < %{PATCH20} | patch -p1 @@ -64,9 +64,10 @@ +%patch1006 -p1 -b .cloexec +%patch1007 -p1 -b .fixup-vhost ++# Note that patch1008 is not here, as it patches the initscript elsewhere in this .spec + # Safety check: prevent build if defined MMN does not equal upstream MMN. vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n '/^2/p'` if test "x${vmmn}" != "x%{mmn}"; then -@@ -175,10 +198,12 @@ +@@ -175,10 +205,12 @@ --with-apr=%{_prefix} --with-apr-util=%{_prefix} \ --enable-suexec --with-suexec \ Index: /branches/fc17-dev/server/fedora/specs/krb5.spec.patch =================================================================== --- /branches/fc17-dev/server/fedora/specs/krb5.spec.patch (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/krb5.spec.patch (revision 2195) @@ -1,16 +1,16 @@ ---- krb5.spec.orig 2011-11-16 12:37:32.246736120 -0500 -+++ krb5.spec 2011-11-16 12:42:47.134740975 -0500 +--- krb5.spec.~1~ 2012-03-08 16:20:41.000000000 -0500 ++++ krb5.spec 2012-04-01 22:07:14.834013302 -0400 @@ -6,7 +6,7 @@ Summary: The Kerberos network authentication system Name: krb5 - Version: 1.9.1 --Release: 14%{?dist} -+Release: 14%{?dist}.scripts.%{scriptsversion} + Version: 1.9.3 +-Release: 1%{?dist} ++Release: 1%{?dist}.scripts.%{scriptsversion} # Maybe we should explode from the now-available-to-everybody tarball instead? - # http://web.mit.edu/kerberos/dist/krb5/1.9/krb5-1.9.1-signed.tar + # http://web.mit.edu/kerberos/dist/krb5/1.9/krb5-1.9.3-signed.tar Source0: krb5-%{version}.tar.gz -@@ -65,6 +65,8 @@ - Patch89: krb5-1.9.1-sendto_poll3.patch - Patch90: krb5-1.9-MITKRB5-SA-2011-006.patch +@@ -64,6 +64,8 @@ + Patch102: krb5-1.9-7048.patch + Patch103: krb5-kvno-230379.patch +Patch1000: krb5-kuserok-scripts.patch @@ -19,5 +19,5 @@ URL: http://web.mit.edu/kerberos/www/ Group: System Environment/Libraries -@@ -114,6 +116,7 @@ +@@ -113,6 +115,7 @@ %package libs Summary: The shared libraries used by Kerberos 5 @@ -27,8 +27,8 @@ %description libs Kerberos is a network authentication system. The krb5-libs package -@@ -221,6 +224,7 @@ - %patch88 -p1 -b .crossrealm - %patch89 -p1 -b .sendto_poll3 - %patch90 -p1 -b .2011-006 +@@ -219,6 +222,7 @@ + %patch101 -p1 -b .7047 + %patch102 -p1 -b .7048 + %patch103 -p1 -b .kvno +%patch1000 -p1 -b .kuserok gzip doc/*.ps Index: /branches/fc17-dev/server/fedora/specs/openafs-systemd.spec.patch =================================================================== --- /branches/fc17-dev/server/fedora/specs/openafs-systemd.spec.patch (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/openafs-systemd.spec.patch (revision 2195) @@ -1,14 +1,15 @@ ---- rpmbuild/SPECS/openafs.spec.orig 2011-10-17 23:46:35.000000000 -0400 -+++ rpmbuild/SPECS/openafs.spec 2011-10-17 23:48:41.000000000 -0400 -@@ -224,7 +224,7 @@ - BuildRoot: %{_tmppath}/%{name}-%{version}-root +--- openafs.spec.orig 2011-12-11 04:48:08.257676312 -0500 ++++ openafs.spec 2011-12-11 04:49:43.101175888 -0500 +@@ -225,6 +225,9 @@ Packager: OpenAFS Gatekeepers Group: Networking/Filesystems --BuildRequires: %{?kdepend:%{kdepend}, } pam-devel, ncurses-devel, flex, bison -+BuildRequires: %{?kdepend:%{kdepend}, } pam-devel, ncurses-devel, flex, bison, systemd-units + BuildRequires: %{?kdepend:%{kdepend}, } pam-devel, ncurses-devel, flex, bison ++%if 0%{?fedora} >= 15 ++BuildRequires: systemd-units ++%endif %if 0%{?fedora} BuildRequires: perl-devel perl-ExtUtils-Embed %endif -@@ -323,6 +323,12 @@ +@@ -326,6 +329,12 @@ %package client Provides: scripts-openafs-client @@ -23,5 +24,5 @@ %if %{fedorakmod} Requires: %{name}-kmod >= %{version} -@@ -347,6 +353,12 @@ +@@ -350,6 +359,12 @@ Requires: openafs = %{version} Summary: OpenAFS Filesystem Server @@ -36,5 +37,5 @@ %description server The AFS distributed filesystem. AFS is a distributed filesystem -@@ -999,7 +1011,12 @@ +@@ -1005,7 +1020,12 @@ mkdir -p $RPM_BUILD_ROOT%{_sbindir} mkdir -p $RPM_BUILD_ROOT%{_libdir} @@ -49,5 +50,5 @@ mkdir -p $RPM_BUILD_ROOT%{pamdir} mkdir -p $RPM_BUILD_ROOT%{_prefix}/afs/etc -@@ -1029,8 +1046,14 @@ +@@ -1035,8 +1055,14 @@ # Copy root.client config files @@ -64,5 +65,5 @@ # Copy PAM modules install -m 755 ${sysname}/dest/lib/pam* $RPM_BUILD_ROOT%{pamdir} -@@ -1310,7 +1333,14 @@ +@@ -1318,7 +1344,14 @@ fi @@ -79,5 +80,5 @@ mkdir /afs chown root.root /afs -@@ -1327,10 +1357,17 @@ +@@ -1335,10 +1368,17 @@ %post server @@ -97,5 +98,5 @@ %if %{build_authlibs} %post authlibs -@@ -1346,16 +1383,45 @@ +@@ -1354,16 +1394,39 @@ fi @@ -127,24 +128,19 @@ +%endif + ++%if 0%{?fedora} >= 15 +%postun client +/bin/systemctl daemon-reload >/dev/null 2>&1 || : -+if [ $1 -ge 1 ] ; then -+ # Package upgrade, not uninstall -+ /bin/systemctl try-restart openafs-client.service >/dev/null 2>&1 || : -+fi + +%postun server +/bin/systemctl daemon-reload >/dev/null 2>&1 || : -+if [ $1 -ge 1 ] ; then -+ # Package upgrade, not uninstall -+ /bin/systemctl try-restart openafs-server.service >/dev/null 2>&1 || : -+fi ++%endif %if %{build_dkmspkg} %post -n dkms-%{name} -@@ -1413,6 +1479,32 @@ +@@ -1421,6 +1484,26 @@ %endif %endif ++%if 0%{?fedora} >= 15 +%triggerun -- openafs-client < 1.6.0-1 +# Save the current service runlevel info @@ -153,10 +149,6 @@ +/usr/bin/systemd-sysv-convert --save openafs-client >/dev/null 2>&1 ||: + -+# If the package is allowed to autostart: -+/bin/systemctl --no-reload enable openafs-client.service >/dev/null 2>&1 ||: -+ -+# Run these because the SysV package being removed won't do them ++# Run this because the SysV package being removed won't do it +/sbin/chkconfig --del openafs-client >/dev/null 2>&1 || : -+/bin/systemctl try-restart openafs-client.service >/dev/null 2>&1 || : + +%triggerun -- openafs-server < 1.6.0-1 @@ -166,15 +158,12 @@ +/usr/bin/systemd-sysv-convert --save openafs-server >/dev/null 2>&1 ||: + -+# If the package is allowed to autostart: -+/bin/systemctl --no-reload enable openafs-server.service >/dev/null 2>&1 ||: -+ -+# Run these because the SysV package being removed won't do them ++# Run this because the SysV package being removed won't do it +/sbin/chkconfig --del openafs-server >/dev/null 2>&1 || : -+/bin/systemctl try-restart openafs-server.service >/dev/null 2>&1 || : ++%endif + ############################################################################## ### ### file lists -@@ -1450,7 +1542,12 @@ +@@ -1458,7 +1541,12 @@ %{pamdir}/pam_afs.krb.so %{pamdir}/pam_afs.so.1 @@ -189,5 +178,5 @@ %{_mandir}/man1/copyauth.* %{_mandir}/man1/up.* -@@ -1498,7 +1595,11 @@ +@@ -1506,7 +1594,11 @@ %{_sbindir}/vldb_check %{_sbindir}/vldb_convert Index: /branches/fc17-dev/server/fedora/specs/openafs.spec.patch =================================================================== --- /branches/fc17-dev/server/fedora/specs/openafs.spec.patch (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/openafs.spec.patch (revision 2195) @@ -1,4 +1,4 @@ ---- rpmbuild/SPECS/openafs.spec -+++ rpmbuild/SPECS/openafs.spec.~3~ 2011-11-20 20:13:52.211673609 -0500 +--- openafs.spec 2012-02-13 15:41:02.757592190 -0500 ++++ openafs.spec.~3~ 2012-02-13 15:48:25.366294629 -0500 @@ -4,7 +4,7 @@ %define pkgvers 1.6.0 @@ -10,20 +10,21 @@ %{!?fedorakmod: %define fedorakmod 1} %{!?build_dkmspkg: %define build_dkmspkg 1} -@@ -237,6 +237,14 @@ +@@ -237,6 +237,15 @@ ExclusiveArch: %{ix86} x86_64 ia64 s390 s390x sparc64 ppc ppc64 +Patch1000: openafs-scripts.patch -+Patch1001: openafs-localcsdb.patch -+Patch1002: openafs-systemd.patch -+Patch1003: openafs-systemd-crond.patch ++Patch1001: openafs-systemd.patch ++Patch1002: openafs-systemd-crond.patch ++Patch1003: openafs-systemd-csdb.patch +Patch1004: openafs-linux-3.1-rcu.patch +Patch1005: openafs-linux-3.1-fsync.patch +Patch1006: openafs-linux-3.1-zalloc.patch ++Patch1007: openafs-linux-3.2-nlink.patch + # http://dl.openafs.org/dl/openafs/candidate/%{afsvers}/... Source0: http://www.openafs.org/dl/openafs/%{afsvers}/openafs-%{afsvers}-src.tar.bz2 Source1: http://www.openafs.org/dl/openafs/%{afsvers}/openafs-%{afsvers}-doc.tar.bz2 -@@ -316,6 +324,7 @@ +@@ -316,6 +325,7 @@ %if %{build_userspace} @@ -33,5 +34,5 @@ %if %{fedorakmod} -@@ -376,6 +385,7 @@ +@@ -376,6 +386,7 @@ %if %{build_authlibs} @@ -41,5 +42,5 @@ Group: Networking/Filesystems -@@ -392,6 +402,7 @@ +@@ -392,6 +403,7 @@ %endif @@ -49,5 +50,5 @@ Requires: openafs-authlibs = %{version}-%{release} %endif -@@ -410,6 +421,7 @@ +@@ -410,6 +422,7 @@ libraries. @@ -57,5 +58,5 @@ Group: Development/Filesystems Requires: openafs = %{version}-%{release} -@@ -439,6 +451,7 @@ +@@ -439,6 +452,7 @@ administrators. @@ -65,5 +66,5 @@ Group: Networking/Filesystems Provides: openafs-kernel = %{version} -@@ -488,6 +501,7 @@ +@@ -488,6 +502,7 @@ %if %{krb5support} @@ -73,5 +74,5 @@ Requires: openafs = %{version} Group: Networking/Filesystems -@@ -514,7 +528,7 @@ +@@ -514,7 +529,7 @@ %if %{build_modules} @@ -82,5 +83,5 @@ %else -@@ -671,6 +685,15 @@ +@@ -671,6 +686,16 @@ #%setup -q -n %{srcdir} %setup -q -b 1 -n %{srcdir} @@ -88,15 +89,16 @@ +# Apply the Scripts patch +%patch1000 -p1 -b .scripts -+%patch1001 -p1 -b .localcsdb -+%patch1002 -p1 -b .systemd -+%patch1003 -p1 -b .systemd-crond ++%patch1001 -p1 -b .systemd ++%patch1002 -p1 -b .systemd-crond ++%patch1003 -p1 -b .systemd-csdb +%patch1004 -p1 -b .rcu +%patch1005 -p1 -b .fsync +%patch1006 -p1 -b .zalloc ++%patch1007 -p1 -b .nlink + ############################################################################## # # building -@@ -1212,6 +1235,13 @@ +@@ -1212,6 +1237,13 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/libafsrpc.so rm -f $RPM_BUILD_ROOT%{_libdir}/libafsauthent.so.* Index: /branches/fc17-dev/server/fedora/specs/openssh.spec.patch =================================================================== --- /branches/fc17-dev/server/fedora/specs/openssh.spec.patch (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/openssh.spec.patch (revision 2195) @@ -1,10 +1,10 @@ ---- openssh.spec.orig 2010-05-31 06:20:02.000000000 -0400 -+++ openssh.spec 2010-09-06 21:53:21.000000000 -0400 +--- openssh.spec.~1~ 2012-02-14 11:06:13.000000000 -0500 ++++ openssh.spec 2012-02-25 13:02:28.660616538 -0500 @@ -78,7 +78,7 @@ Summary: An open source implementation of SSH protocol versions 1 and 2 Name: openssh Version: %{openssh_ver} --Release: %{openssh_rel}%{?dist}%{?rescue_rel}.1 -+Release: %{openssh_rel}%{?dist}%{?rescue_rel}.1.scripts.%{scriptsversion} +-Release: %{openssh_rel}%{?dist}%{?rescue_rel} ++Release: %{openssh_rel}%{?dist}%{?rescue_rel}.scripts.%{scriptsversion} URL: http://www.openssh.com/portable.html #URL1: http://pamsshagentauth.sourceforge.net @@ -15,8 +15,8 @@ Source5: pam_ssh_agent-rmheaders +Patch1001: openssh-4.7p1-gssapi-name-in-env.patch - + Patch100: openssh-5.6p1-wIm.patch Patch0: openssh-5.6p1-redhat.patch -@@ -207,6 +209,7 @@ +@@ -214,6 +215,7 @@ Requires(pre): /usr/sbin/useradd Requires: pam >= 1.0.1-3 @@ -26,7 +26,7 @@ %if %{ldap} %package ldap -@@ -323,6 +326,8 @@ - %patch80 -p1 -b .biguid - %patch81 -p1 -b .clientloop +@@ -333,6 +335,8 @@ + %patch83 -p0 -b .oomkiller + %patch84 -p1 -b .legacy +%patch1001 -p1 -b .gssapi-env @@ -35,3 +35,2 @@ pushd pam_ssh_agent_auth-%{pam_ssh_agent_ver} autoreconf - Index: /branches/fc17-dev/server/fedora/specs/php.spec.patch =================================================================== --- /branches/fc17-dev/server/fedora/specs/php.spec.patch (revision 2195) +++ /branches/fc17-dev/server/fedora/specs/php.spec.patch (revision 2195) @@ -0,0 +1,30 @@ +--- php.spec.~1~ 2012-02-02 17:13:59.000000000 -0500 ++++ php.spec 2012-05-03 14:18:22.234721036 -0400 +@@ -37,7 +37,7 @@ + Summary: PHP scripting language for creating dynamic web sites + Name: php + Version: 5.3.10 +-Release: 1%{?dist} ++Release: 1%{?dist}.scripts.%{scriptsversion} + License: PHP + Group: Development/Languages + URL: http://www.php.net/ +@@ -76,6 +76,9 @@ + # Fixes for tests + Patch61: php-5.0.4-tests-wddx.patch + ++Provides: scripts-php ++Patch100: php-cve-2012-1823.patch ++ + BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) + + BuildRequires: bzip2-devel, curl-devel >= 7.9, db4-devel, gmp-devel +@@ -544,6 +547,8 @@ + + %patch61 -p1 -b .tests-wddx + ++%patch100 -p0 -b .cve-2012-1823 ++ + # Prevent %%doc confusion over LICENSE files + cp Zend/LICENSE Zend/ZEND_LICENSE + cp TSRM/LICENSE TSRM_LICENSE Index: /branches/fc17-dev/server/fedora/specs/python-afs.spec =================================================================== --- /branches/fc17-dev/server/fedora/specs/python-afs.spec (revision 2195) +++ /branches/fc17-dev/server/fedora/specs/python-afs.spec (revision 2195) @@ -0,0 +1,49 @@ +Name: python-afs +Version: 0.1.1 +%define commit_hash dceee3da +%define tag_hash fb29c26 +Release: 0.%{scriptsversion}%{?dist} +Summary: Python access to AFS library + +Group: Development/Languages +License: GPL +URL: http://github.com/ebroder/pyafs +Source0: http://github.com/ebroder/pyafs/tarball/%{version}/ebroder-%{name}-%{version}-0-g%{commit_hash}.tar.gz +Patch1: https://github.com/ebroder/pyafs/commit/94a09d55edd7d3c1b53424ee1a39245db751c5e9.patch +Patch2: https://github.com/ebroder/pyafs/commit/d6425bd9fa52034a2a62ed95c8fec8cbcfd2707d.patch +BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) + +BuildRequires: python-devel, python-setuptools, Cython, openafs-devel, openafs-authlibs-devel, krb5-devel + +%description +Get at AFS from Python. + + +%prep +%setup -q -n ebroder-pyafs-%{tag_hash} +%patch1 -p1 +%patch2 -p1 + + +%build +CFLAGS="$RPM_OPT_FLAGS" CPPFLAGS="-I%{_includedir}/et" %{__python} setup.py build + + +%install +rm -rf $RPM_BUILD_ROOT +%{__python} setup.py install -O1 --skip-build --root $RPM_BUILD_ROOT + + +%clean +rm -rf $RPM_BUILD_ROOT + + +%files +%defattr(-,root,root,-) +%{python_sitearch}/* + + +%changelog +* Thu Dec 15 2011 Alex Dehnert - 0.1.1 +- Initial RPM release + Index: /branches/fc17-dev/server/fedora/specs/rubygems.spec.patch =================================================================== --- /branches/fc17-dev/server/fedora/specs/rubygems.spec.patch (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/rubygems.spec.patch (revision 2195) @@ -1,16 +1,16 @@ ---- rubygems.spec.orig 2011-11-04 14:16:37.000000000 -0400 -+++ rubygems.spec 2011-11-04 14:32:02.000000000 -0400 +--- rubygems.spec.~1~ 2012-04-20 14:46:27.000000000 -0400 ++++ rubygems.spec 2012-05-03 14:12:52.421863447 -0400 @@ -15,7 +15,7 @@ Summary: The Ruby standard for packaging ruby libraries Name: rubygems Version: 1.7.2 --Release: 3%{?dist} -+Release: 3%{?dist}.scripts.%{scriptsversion} +-Release: 5%{?dist} ++Release: 5%{?dist}.scripts.%{scriptsversion} Group: Development/Libraries # No GPL version is specified. License: Ruby or GPL+ -@@ -40,6 +40,9 @@ - # ... and spec_file is not supported yet - Patch7: rubygems-1.7.2-escape-string-skip-test.patch +@@ -42,6 +42,9 @@ + # Insecure connection to SSL repository fix + Patch10: rubygems-1.x.x-ssl-connection-don_t-revert.patch +Provides: scripts-rubygems = %{version}-%{release} @@ -20,7 +20,7 @@ Requires: ruby >= 1.8.7 Requires: ruby-rdoc -@@ -69,6 +72,8 @@ - %patch6 -p1 -b .esc +@@ -83,6 +86,8 @@ %patch7 -p1 -b .esc.skip + %patch10 -p1 -b .ssl +%patch1000 -p1 -b .thread Index: /branches/fc17-dev/server/fedora/specs/scripts-base.spec =================================================================== --- /branches/fc17-dev/server/fedora/specs/scripts-base.spec (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/scripts-base.spec (revision 2195) @@ -27,4 +27,5 @@ Requires: whoisd Requires: logview +Requires: fuse-better-mousetrapfs Requires: %{all_archs nss-pam-ldapd} Requires: php_scripts Index: /branches/fc17-dev/server/fedora/specs/scripts-static-cat.spec =================================================================== --- /branches/fc17-dev/server/fedora/specs/scripts-static-cat.spec (revision 2194) +++ /branches/fc17-dev/server/fedora/specs/scripts-static-cat.spec (revision 2195) @@ -2,4 +2,7 @@ # - https://fedoraproject.org/wiki/Packaging:Haskell # - https://fedoraproject.org/wiki/PackagingDrafts/Haskell + +# Link Haskell libs statically for 3x faster startup speed. +%define ghc_without_dynamic 1 Name: scripts-static-cat