[Eisfair] warning: shell level (1000) too high, resetting to 1

Marcus Roeckrath marcus.roeckrath at gmx.de
Fr Jul 5 08:12:20 CEST 2019


Hallo Taxena,

Taxena Gasparov wrote:

> mein "6   Identify unrequired certificates/1   Show unrequired
> certificates":
>> │### Find unrequired certificates ###
>> │#  E  - error in certificate chain!
>> │#  C  - client certificate
>> │#  I  - intermediate certificate
>> │#  R  - root certificate
>> │# (x) - number of occurencies
>> │ERROR:E:apache-webmail.pem (1)
>> │ERROR:E:CAcert_chain_256.pem (3)
>> │ERROR:E:PSCProcert.pem (1)
>> │ERROR:E:eis.dommainname.dyndns.dd.pem (1)
>> │ERROR:E:www.dommainname.dyndns.dd.pem (1)
>> │# ^^^ check the certficate chain first ^^^
>> │DELETE:R:024dc131.pem (0)
>> │DELETE:R:039c618a.pem (0)
>> │DELETE:R:03f0efa4.pem (0)
>> │DELETE:R:062cdee6.pem (0)
>> ....
> 
>> *
>> │| certificate : CAcert_chain_256.pem (590d426f)
>> │| subject     : O = CAcert Inc. OU = httpwww.CAcert.org CN = CAcert
>> Class 3 Root
>> │| issuer      : O = Root CA OU = httpwww.cacert.org CN = CA Cert Signing
>> Authority emailAddress = supportcacert.org │| MD5 f-print :
>> F7:25:12:82:4E:67:B5:D0:8D:92:B7:7C:0B:86:7A:42 │| SHA1 f-print:
>> AD:7C:3F:64:FC:44:39:FE:F4:E9:0B:E8:F4:7C:6C:FA:8A:AD:FD:CE │+->|
>> certificate : 99d0fa06.0 (E)
>> │   | subject     :
>> │   | issuer      :
>> │   | MD5 f-print :
>> │   | SHA1 f-print:
>> │   | valid until : 05.07.2019 00:00:00 - CERTIFICATE NEEDS AN IMMEDIATE
>> UPDATE!
>> │   |
>> │   +-> Error: file '/usr/local/ssl/certs/99d0fa06.0' missing!
>>>> │checking certificate chain:
> 
> Was bedeutet dies?

Da scheint ein Zertifikat zu fehlen, und zwar dieses

CA Cert Signing Authority

Wenn du das Mozilla-Bundle nochmal installierst, sollte das dabei sein.

Wo kommen

eis.dommainname.dyndns.dd.pem
www.dommainname.dyndns.dd.pem

her; von offiziellen Signierstellen erstellte Zertifikate (cacert?)?

> certs ist in Version 1.6.5 installiert.

Ist aktuell, aber das Paket bringt selbst keine Zertifikate mit.

-- 
Gruss Marcus


Mehr Informationen über die Mailingliste Eisfair