[Eisfair_dev] [eisfair-1] pure-ftpd testing 2.3.0 released

Fabian Törner toerner at gmx.net
Do Feb 18 20:31:09 CET 2016


Hallo Ansgar,

Am 18.02.2016 um 10:13 schrieb Ansgar Püster:
> Danke für die Rückmeldung.

aber sicher doch :)

> Du hast ein eigenes Zertifikat?

Jürgen hatte 2014 mal einiges an Zertifikaten bei mir erstellt und 
bereinigt - dankenswerterweise :)


> Kannst du mal ein
> grep '^---' /usr/local/ssl/certs/pure-ftpd.pem
> ausführen und hier posten.

eis # grep '^---' /usr/local/ssl/certs/pure-ftpd.pem
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
eis #


> Im Log /var/log/messages sollte eine Fehlermeldung
> pure-ftpd: (?@?) [ERROR] Invalid DH parameters file
> /var/certs/ssl/certs/pure-ftpd.pem
> stehen.

nö :)

--- [messages.log] ---
Feb 17 21:15:57 eis xinetd[2261]: Exiting...
Feb 17 21:16:00 eis xinetd[24389]: Reading included configuration file: 
/etc/xinetd.d/ftp [file=/etc/xinetd.conf] [line=7]
Feb 17 21:16:00 eis xinetd[24389]: Reading included configuration file: 
/etc/xinetd.d/imap [file=/etc/xinetd.d/imap] [line=14]
Feb 17 21:16:00 eis xinetd[24389]: Reading included configuration file: 
/etc/xinetd.d/nntp [file=/etc/xinetd.d/nntp] [line=25]
Feb 17 21:16:00 eis xinetd[24389]: Reading included configuration file: 
/etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=15]
Feb 17 21:16:00 eis xinetd[24389]: Reading included configuration file: 
/etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=25]
Feb 17 21:16:00 eis xinetd[24389]: Reading included configuration file: 
/etc/xinetd.d/talk [file=/etc/xinetd.d/talk] [line=15]
Feb 17 21:16:00 eis xinetd[24389]: xinetd Version 2.3.15 started with 
libwrap loadavg options compiled in.
Feb 17 21:16:00 eis xinetd[24389]: Started working: 8 available services
Feb 17 21:16:02 eis xinetd[24389]: Exiting...
Feb 17 21:16:04 eis xinetd[24673]: Reading included configuration file: 
/etc/xinetd.d/ftp [file=/etc/xinetd.conf] [line=7]
Feb 17 21:16:04 eis xinetd[24673]: Reading included configuration file: 
/etc/xinetd.d/imap [file=/etc/xinetd.d/imap] [line=14]
Feb 17 21:16:04 eis xinetd[24673]: Reading included configuration file: 
/etc/xinetd.d/nntp [file=/etc/xinetd.d/nntp] [line=25]
Feb 17 21:16:04 eis xinetd[24673]: Reading included configuration file: 
/etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=15]
Feb 17 21:16:04 eis xinetd[24673]: Reading included configuration file: 
/etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=25]
Feb 17 21:16:04 eis xinetd[24673]: Reading included configuration file: 
/etc/xinetd.d/talk [file=/etc/xinetd.d/talk] [line=15]
Feb 17 21:16:04 eis xinetd[24673]: xinetd Version 2.3.15 started with 
libwrap loadavg options compiled in.
Feb 17 21:16:04 eis xinetd[24673]: Started working: 9 available services
Feb 17 21:19:38 eis xinetd[24673]: Exiting...
Feb 17 21:19:41 eis xinetd[4573]: Reading included configuration file: 
/etc/xinetd.d/ftp [file=/etc/xinetd.conf] [line=7]
Feb 17 21:19:41 eis xinetd[4573]: Reading included configuration file: 
/etc/xinetd.d/imap [file=/etc/xinetd.d/imap] [line=14]
Feb 17 21:19:41 eis xinetd[4573]: Reading included configuration file: 
/etc/xinetd.d/nntp [file=/etc/xinetd.d/nntp] [line=25]
Feb 17 21:19:41 eis xinetd[4573]: Reading included configuration file: 
/etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=15]
Feb 17 21:19:41 eis xinetd[4573]: Reading included configuration file: 
/etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=25]
Feb 17 21:19:41 eis xinetd[4573]: Reading included configuration file: 
/etc/xinetd.d/talk [file=/etc/xinetd.d/talk] [line=15]
Feb 17 21:19:41 eis xinetd[4573]: xinetd Version 2.3.15 started with 
libwrap loadavg options compiled in.
Feb 17 21:19:41 eis xinetd[4573]: Started working: 9 available services
Feb 17 21:20:00 eis su: (to news) root on none
Feb 17 21:20:00 eis su: pam_unix(su:session): session opened for user 
news by (uid=0)
Feb 17 21:20:03 eis su: pam_unix(su:session): session closed for user news
Feb 17 21:20:21 eis xinetd[4573]: Exiting...
Feb 17 21:20:23 eis xinetd[7767]: Reading included configuration file: 
/etc/xinetd.d/ftp [file=/etc/xinetd.conf] [line=7]
Feb 17 21:20:23 eis xinetd[7767]: Reading included configuration file: 
/etc/xinetd.d/imap [file=/etc/xinetd.d/imap] [line=14]
Feb 17 21:20:23 eis xinetd[7767]: Reading included configuration file: 
/etc/xinetd.d/nntp [file=/etc/xinetd.d/nntp] [line=25]
Feb 17 21:20:23 eis xinetd[7767]: Reading included configuration file: 
/etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=15]
Feb 17 21:20:23 eis xinetd[7767]: Reading included configuration file: 
/etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=25]
Feb 17 21:20:23 eis xinetd[7767]: Reading included configuration file: 
/etc/xinetd.d/talk [file=/etc/xinetd.d/talk] [line=15]
Feb 17 21:20:23 eis xinetd[7767]: xinetd Version 2.3.15 started with 
libwrap loadavg options compiled in.
Feb 17 21:20:23 eis xinetd[7767]: Started working: 8 available services
Feb 17 21:20:24 eis xinetd[7767]: Exiting...
Feb 17 21:20:26 eis xinetd[7877]: Reading included configuration file: 
/etc/xinetd.d/ftp [file=/etc/xinetd.conf] [line=7]
Feb 17 21:20:26 eis xinetd[7877]: Reading included configuration file: 
/etc/xinetd.d/imap [file=/etc/xinetd.d/imap] [line=14]
Feb 17 21:20:26 eis xinetd[7877]: Reading included configuration file: 
/etc/xinetd.d/nntp [file=/etc/xinetd.d/nntp] [line=25]
Feb 17 21:20:26 eis xinetd[7877]: Reading included configuration file: 
/etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=15]
Feb 17 21:20:26 eis xinetd[7877]: Reading included configuration file: 
/etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=25]
Feb 17 21:20:26 eis xinetd[7877]: Reading included configuration file: 
/etc/xinetd.d/talk [file=/etc/xinetd.d/talk] [line=15]
Feb 17 21:20:26 eis xinetd[7877]: xinetd Version 2.3.15 started with 
libwrap loadavg options compiled in.
Feb 17 21:20:26 eis xinetd[7877]: Started working: 9 available services
Feb 17 21:23:01 eis xinetd[7877]: Exiting...
Feb 17 21:23:03 eis xinetd[19309]: Reading included configuration file: 
/etc/xinetd.d/ftp [file=/etc/xinetd.conf] [line=7]
Feb 17 21:23:03 eis xinetd[19309]: Reading included configuration file: 
/etc/xinetd.d/imap [file=/etc/xinetd.d/imap] [line=14]
Feb 17 21:23:03 eis xinetd[19309]: Reading included configuration file: 
/etc/xinetd.d/nntp [file=/etc/xinetd.d/nntp] [line=25]
Feb 17 21:23:03 eis xinetd[19309]: Reading included configuration file: 
/etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=15]
Feb 17 21:23:03 eis xinetd[19309]: Reading included configuration file: 
/etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=25]
Feb 17 21:23:03 eis xinetd[19309]: Reading included configuration file: 
/etc/xinetd.d/talk [file=/etc/xinetd.d/talk] [line=15]
Feb 17 21:23:03 eis xinetd[19309]: xinetd Version 2.3.15 started with 
libwrap loadavg options compiled in.
Feb 17 21:23:03 eis xinetd[19309]: Started working: 8 available services
Feb 17 21:23:05 eis xinetd[19309]: Exiting...
Feb 17 21:23:07 eis xinetd[19882]: Reading included configuration file: 
/etc/xinetd.d/ftp [file=/etc/xinetd.conf] [line=7]
Feb 17 21:23:07 eis xinetd[19882]: Reading included configuration file: 
/etc/xinetd.d/imap [file=/etc/xinetd.d/imap] [line=14]
Feb 17 21:23:07 eis xinetd[19882]: Reading included configuration file: 
/etc/xinetd.d/nntp [file=/etc/xinetd.d/nntp] [line=25]
Feb 17 21:23:07 eis xinetd[19882]: Reading included configuration file: 
/etc/xinetd.d/pop3 [file=/etc/xinetd.d/pop3] [line=15]
Feb 17 21:23:07 eis xinetd[19882]: Reading included configuration file: 
/etc/xinetd.d/ssh [file=/etc/xinetd.d/ssh] [line=25]
Feb 17 21:23:07 eis xinetd[19882]: Reading included configuration file: 
/etc/xinetd.d/talk [file=/etc/xinetd.d/talk] [line=15]
Feb 17 21:23:07 eis xinetd[19882]: xinetd Version 2.3.15 started with 
libwrap loadavg options compiled in.
Feb 17 21:23:07 eis xinetd[19882]: Started working: 9 available services
Feb 17 21:23:31 eis pure-ftpd: pam_unix(pure-ftpd:session): session 
opened for user root by (uid=0)
Feb 17 21:23:31 eis pure-ftpd: pam_unix(pure-ftpd:session): session 
closed for user root
Feb 17 21:30:00 eis su: (to news) root on none

--- [/messages.log] ---

aber dafür in der /var/log/pureftpd ;)

--- [pureftpd.log] ---
Feb 17 21:19:24 eis pure-ftpd: (?@?) [ERROR] Invalid DH parameters file 
/var/certs/ssl/certs/pure-ftpd.pem
Feb 17 21:19:58 eis last message repeated 3 times
Feb 17 21:21:10 eis last message repeated 6 times
Feb 17 21:21:11 eis pure-ftpd: (?@?) [ERROR] Invalid DH parameters file 
/var/certs/ssl/certs/pure-ftpd.pem
Feb 17 21:23:12 eis pure-ftpd: (?@109.90.146.27) [INFO] New connection 
from 109.90.146.27
Feb 17 21:23:12 eis pure-ftpd: (?@109.90.146.27) [INFO] Logout.
Feb 17 21:23:21 eis pure-ftpd: (?@109.90.146.27) [INFO] New connection 
from 109.90.146.27
Feb 17 21:23:21 eis pure-ftpd: (?@109.90.146.27) [INFO] SSL/TLS: Enabled 
TLSv1/SSLv3 with DHE-RSA-AES128-SHA, 128 secret bits cipher
Feb 17 21:23:22 eis pure-ftpd: (?@109.90.146.27) [INFO] downloads is now 
logged in
Feb 17 21:23:22 eis pure-ftpd: (downloads at 109.90.146.27) [INFO] SSL/TLS: 
Enabled TLSv1/SSLv3 with DHE-RSA-AES128-SHA, 128 secret bits cipher
Feb 17 21:23:28 eis pure-ftpd: (downloads at 109.90.146.27) [INFO] Logout.
Feb 17 21:23:31 eis pure-ftpd: (?@172.23.56.49) [INFO] New connection 
from 172.23.56.49
Feb 17 21:23:31 eis pure-ftpd: (?@172.23.56.49) [INFO] root is now logged in
Feb 17 21:23:37 eis pure-ftpd: (root at 172.23.56.49) [INFO] Logout.
--- [/pureftpd.log] ---


> Ich werde /tmp/install.sh überarbeiten und auch den Start
> in /etc/init.d/pure-ftpd, da diese Fehlersituation offensichtlich
> nicht sauber abgefangen wird. Außerdem muss auch hier die Dokumentation
> deutlicher werden.

Klasse freue mich über Deine Unterstützung und das ich dabei behilflich 
sein kann/konnte.

Vielen Dank & viele Grüße
Fabian




Mehr Informationen über die Mailingliste Eisfair_dev