tls

Forum Replies Created

Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • in reply to: Heartbleed bug, update openssl package? #53272

    tls
    Member

    @flashengineer wrote:

    Hi, is it possible we get the newer openssl to avoid heartbleed bug?

    I answered my own reply when I read more about the issue. Currently the version of OpenSSL on 3.0 and 2.0RC3 is “OpenSSL 0.9.8u 12 Mar 2012”.

    According to the CVE and other docs 0.9.8 is not effected, so no update is needed. Though it would be nice to update to current version to nail other issues, but this issue does not have an affect on ZS

    –tls

    in reply to: Heartbleed bug, update openssl package? #53271

    tls
    Member

    I asked the same question in the 3.0.0 release forum. I hope there is some patch that can be applied to versions going back a bit. I have 3 different versions deployed 🙂

    in reply to: Zeroshell 3.0.0 #53056

    tls
    Member

    Fulvio,

    When can we expect a patch for the OpenSSL “Heartbleed Bug” for 3.0. Any chance you can do this for previous releases in a way that we can just drop in the binary to make it an easy upgrade?

    Nevermind —

    I answered my own reply when I read more about the issue. Currently the version of OpenSSL on 3.0 and 2.0RC3 is “OpenSSL 0.9.8u 12 Mar 2012”.

    According to the CVE and other docs 0.9.8 is not effected, so no update is needed. Though it would be nice to update to current version to nail other issues, but this issue does not have an affect on ZS

    –tls

    in reply to: Disabling serial console to allow serial port to be used. #47617

    tls
    Member

    The code did not exactly work for me, so I make it a little cleaner, thus building on your idea:


    [ -f /etc/inittab.original ] || cp /etc/inittab{,.original}
    sed -i 's/(^.*ttyS0.*$)/#1/' /etc/inittab
    telinit q

    Many thanks for posting the initial issue – I had the same problem, wanted to ttyS0 to hook into my edge switch on the serial line so I could always get to my systems.

    –tls

    in reply to: Xen kernel support #52416

    tls
    Member

    Add one more vote to the list.

    I would also like to put ZS into AWS if possible. I think adding Zen support might go a long way to doing that.

    –tls

    in reply to: Hyper-V VM rebuild of Renato’s 3.2.9 ZeroShell to VHD #52301

    tls
    Member

    Has anyone made any progress getting ZS working in AWS?

    I have tunnel to AWS using a tap interface in openvpn solution. But I would rather host the ZS in the system.

    –tls

    in reply to: X.509 CA – Creation problem #48487

    tls
    Member

    If you are getting an error, make sure your country field is only 2 letters US, IT, BR,…. USA causes an error.

    in reply to: zs-dev beta 16 #52039

    tls
    Member

    Are there any tricks, comments or config files that need to be loaded to make this work. What version of Xen (3 or 4) did you compile to and what arch 64bit or 32bit?

    I am just about to install your image into my new Xen server (4.12/64bit) and would love to know; I will let you know if it works. I hope your fixes get pushed into the main line, can you comment on that also please.

    Regards,
    ty

    @renato.morano wrote:

    Hi,

    added xen support DomU

    http://dl.dropbox.com/u/59053096/zs_322_zen.img.bz2

    in reply to: some requests #51866

    tls
    Member

    Regarding – CF Cards with 2,4 and 8 GB will be nice for storing the log files

    1). Load the 2,4,8,16 GB SD with ZS like you normally do
    — you will have a big free space at the end of the disk
    2). Now boot with the ISO image from CD with SD in reader
    2). redo the IP address and access web interface
    3). Get to the profile mgnt in setup and backup the current one
    4). Delete the Profiles partition on the SD card using the web interface
    5). Create the new partition with size you desire on SD, name it “Profiles”
    6). Restore the profile
    7). Reboot to SD

    Boom done, new bigger Profiles area

    Regarding Alix 2.0 — I am using a NetGate SD3, works great and cheap too.

    I second the VPN 1411 support, I personally would be willing to buy the card and send it to Dev staff if they would add support.

Viewing 9 posts - 1 through 9 (of 9 total)