Open Source certificate authority?

[Philip J. Koenig]

On 7 Oct 2002 at 13:30, Philip J. Koenig boldly uttered:

> On 6 Oct 2002 at 15:51, David A. Bandel boldly uttered: 
> 
> > On Sun, 06 Oct 2002 13:39:01 -0700
> > begin  "Philip J. Koenig" <pjklist at ekahuna.com> spewed forth:
> > 
> > > I'm looking for the simplest possible way to generate an X.509 
> > > certificate. (specifically, I have a piece of network hardware which 
> > > supports SSL, but which requires the user to import their own 
> > > certificate and I don't feel like paying for one.  Validation of the 
> > > certificate by a 'legit' CA is not an issue in this case)
> > > 
> > > There is a project called "openCA" but it seems somewhat complicated 
> > > and I can't find any RPMs out there.
> > > 
> > > So I was looking at this "tinyCA" thingy, but I can't tell if it has 
> > > everything I need to create a certificate.  Does anyone have 
> > > experience with this?  Can I create certificates with just this, perl-
> > > tk, and OpenSSL?
> > > 
> > > http://tinyca.sm-zone.net/
> > 
> > The latest tinyCA is _exactly_ what you need, and it's all graphical (Perl
> > w/ the Tk Perl module -- and a few others).
> 
> 
> Thanks very much for that info - now to my next problem. :-)
> 
> I'm trying to install Perl-tk on COL 3.1.1.  I'm following the 
> "manual" install instructions located in the root of the tarball.
> 
> So I do "perl Makefile.PL" , everything seems to work fine. (I tried 
> it again later explicitly specifying the X11 directory, no change)
> 
> Then I do "make", no obvious errors.
> 
> Then when I try to do "make test", lots of stuff fails.  Chief among 
> them being that I have no authorization to talk to the X-server.  
> 
> Typical error:
> 
> 
> > t/zzTixGrid.........Xlib: connection to ":0.0" refused by server
> > Xlib: Client is not authorized to connect to Server
> > couldn't connect to display ":0" at blib/lib/Tk/MainWindow.pm line 55.
> 
> 
> So I did a little searching on the comp.lang.perl.tk group, some 
> people suggested I use "xhost".  Well I tried that, no joy there 
> either (I'm running as root):
> 
> > # xhost +localhost
> > Xlib: connection to ":0.0" refused by server
> > Xlib: Client is not authorized to connect to server
> > xhost: unable to open display ":0.0"
> 
> 
> Another suggestion on the newsgroup was to modify the "DISPLAY" 
> variable.
> 
> I suspect this is a simple problem.. can anyone point me in the right 
> direction?
> 
> Thanks,
> 
> Phil


OK, found the answer myself in the SCO/Caldera Knowledgebase. :-)

I had "su'd" to root in a konsole window, this apparently was the 
problem.

Using these commands in that session solved the problem (SCO 
knowledgebase Ref #010711-0025):


# export DISPLAY=:0.0
# export XAUTHORITY=/home/<username>/.Xauthority


Sorry for the list noise..

Phil


--
Philip J. Koenig                                       pjklist at ekahuna.com
Electric Kahuna Systems -- Computers & Communications for the New Millenium