Servlet Web Hosting - Discount Web Hosting, Subdomain, Vps Hosting, Cpanel, Programming Blog

If you encounter an error that says the smbd executable is missing the file ssl.h, you probably didn t install SSLeay in the default directory. Use the configure option –with-sslincto point to the base directory of the SSL distribution - in this case, the directory that contains include/ssl.h. On the other hand, if you have a clean compile, you re ready to move on to the next step: creating certificates. A.3.3 Becoming a Certificate Authority The SSL protocol requires the use of X.509 certificates in the protocol handshake to ensure that either one or both parties involved in the communication are indeed who they say they are. Certificates in real life, such as those use for SSL connections on public web sites, can cost in the arena of $300 a year. This is because the certificate must have a digital signature placed on it by a certificate authority. A certificate authority is an entity that vouches for the authenticity of a digital certificate by signing it with its own private key. This way, anyone who wishes to check the authenticity of the certificate can simply use the certificate authority s public key to check the signature. You are allowed to use a public certificate authority with SSLeay. However, you don t have to. Instead, SSLeay will allow you to declare yourself a trusted certificate authority - specifying which clients you choose to trust and which clients you do not. In order to do this, you will need to perform several tasks with the SSLeay distribution. The first thing you need to do is specify a secure location where the certificates of the clients and potentially the server will be stored. We have chosen /etc/certificates as our default. Execute the following commands as root: # cd /etc # mkdir certificates # chmod 700 certificates Note that we shut out all access to users other than rootfor this directory. This is very important. Next, you need to set up the SSLeay scripts and configuration files to use the certificates stored in this directory. In order to do this, first modify the CA.sh script located at /usr/local/ssl/bin/CA.sh to specify the location of the directory you just created. Find the line that contains the following entry: CATOP=./demoCA Then change it to: CATOP=/etc/certificates Next, you need to modify the /usr/local/ssl/lib/ssleay.cnf file to specify the same directory. Find the entry: [ CA_default ] dir = ./demoCA # Where everything is kept 338
If you are looking for affordable and reliable webhost to host and run your business application visit our ftp web hosting services.

A.3.1 Configuring SSLeay for Your System The first thing you need to do is to set the PATHenvironment variable on your system to include the /bin directory of the SSL distribution. This can be done with the following statement: PATH=$PATH:/usr/local/ssl/bin That s the easy part. Following that, you will need to create a random series of characters that will be used to prime SSLeay s random number generator. The random number generator will be used to create key pairs for both the clients and the server. You can create this random series by filling a text file of a long series of random characters. For example, you can use your favorite editor to create a text file with random characters, or use this command and enter arbitrary characters at the standard input: cat >/tmp/private.txt The Samba documentation recommends that you type characters for longer than a minute before interrupting the input stream by hitting Control-D. Try not to type only the characters that are under your fingers on the keyboard; throw in some symbols and numbers as well. Once you ve completed the random file, you can prime the random number generator with the following command: # ssleay genrsa -rand /tmp/private.txt >/dev/null 2451 semi-random bytes loaded Generating RSA private key, 512 bit long modulus ..+++++ ……………………………+++++ e is 65537 (0×10001) You can safely ignore the output of this command. After it has completed, remove the series of characters used to create the key because this could be used to recreate any private keys that were generated from this random number generator: rm -f /tmp/private.txt The result of this command is the hidden file .rnd, which is stored in your home directory. SSLeay will use this file when creating key pairs in the future. A.3.2 Configuring Samba to use SSL At this point, you can compile Samba to use SSL. Recall that in Chapter 2, Installing Samba on a Unix System, we said you have to first run the configure script, which initializes the makefile, before you compile Samba. In order to use SSL with Samba, you will need to reconfigure the makefile: ./configure –with-ssl After that, you can compile Samba with the following commands: # make clean # make all 337
Looking for affordable and reliable webhost to host and run your business application? Then look no more and go to servlet web hosting services.

Perl executable file on your Unix system. For example, you can type the following to locate the Perl executable: # which perl /usr/bin/perl Then modify the first line of the configure script to force it to use the correct Perl executable. For example, on our Red Hat Linux system: #!/usr/bin/perl # # see PROBLEMS for instructions on what sort of things to do # when tracking a bug -tjh … After that, you need to run the configure script by specifying a target platform for the distribution. This target platform can be any of the following: BC-16 BC-32 FreeBSD NetBSD-m86 NetBSD-sparc NetBSD-x86 SINIX-N VC-MSDOS VC-NT VC-W31-16 VC-W31-32 VC-WIN16 VC-WIN32 aix-cc aix-gcc alpha-cc alpha-gcc alpha400-cc cc cray-t90-cc debug debug-irix-cc debug-linux-elf dgux-R3-gcc dgux-R4-gcc dgux-R4-x86-gcc dist gcc hpux-cc hpux-gcc hpux-kr-cc irix-cc irix-gcc linux-aout linux-elf ncr-scde nextstep purify sco5-cc solaris-sparc-cc solaris-sparc-gcc solaris-sparc-sc4 solaris-usparc-sc4 solaris-x86-gcc sunos-cc sunos-gcc unixware-2.0 unixware For our system, we would enter the following: # ./Configure linux-elf CC =gcc CFLAG =-DL_ENDIAN -DTERMIO -DBN_ASM -O3 -fomit-frame-pointer EX_LIBS = BN_MULW =asm/bn86-elf.o DES_ENC =asm/dx86-elf.o asm/yx86-elf.o BF_ENC =asm/bx86-elf.o CAST_ENC =asm/cx86-elf.o RC4_ENC =asm/rx86-elf.o RC5_ENC =asm/r586-elf.o MD5_OBJ_ASM =asm/mx86-elf.o SHA1_OBJ_ASM =asm/sx86-elf.o RMD160_OBJ_ASM=asm/rm86-elf.o THIRTY_TWO_BIT mode DES_PTR used DES_RISC1 used DES_UNROLL used BN_LLONG mode RC4_INDEX mode After the package has been configured, you can build it by typing make. If the build did not successfully complete, consult the documentation that comes with the distribution or the FAQ at http://www.cryptsoft.com/ssleay/ for more information on what may have happened. If the build did complete, type makeinstallto install the libraries on the system. Note that the makefile installs the package in /usr/local/ssl by default. If you decide to install it in another directory, remember the directory when configuring Samba to use SSL. 336
If you are searching for cheap webhost for your web application, please visit MySQL5 Web Hosting services.

Using Samba Robert Eckstein, David Collier-Brown, Peter Kelly 1st Edition November 1999 1-56592-449-5, Order Number: 4495 416 pages, $34.95 Buy the hardcopy Table of Contents Appendix A Configuring Samba with SSL A.3 Installing SSLeay Samba uses the SSLeay package, written by Eric Young, to provide Secure Sockets Layer support on the server side. Because of U.S. export law, however, the SSLeay package cannot be shipped with Samba distributions that are based in the United States. For that reason, the Samba creators decided to leave it as a separate package entirely. You can download the SSLeay distribution from any of the following sites: ftp://ftp.psy.uq.oz.au/pub/Crypto/SSL/ ftp://ftp.uni-mainz.de/pub/internet/security/ssl ftp://ftp.cert.dfn.de/pub/tools/crypt/sslapps ftp://ftp.funet.fi/pub/crypt/mirrors/ftp.psy.uq.oz.au ftp://ftp.sunet.se/ftp/pub/security/tools/crypt/ssleay The latest version as of this printing is 0.9.0b. Download it to the same server as the Samba distribution, then uncompress and untar it. You should be left with a directory entitled SSLeay-0.9.0b. After changing to that directory, you will need to configure and build the SSL encryption package in the same way that you did with Samba. SSLeay uses a Perl-based configure script. This script modifies the Makefile that constructs the utilities and libraries of the SSLeay package. However, the default script is hardcoded to find Perl at /usr/local/bin/perl. You may need to change the configure script to point to the location of the 335
Searching for affordable and reliable webhost to host and run your web applications? Go to our java web server services and you will be pleased.

For the purposes of this chapter, we will create a simple SSL connection between the Samba server and a Windows NT client. This configuration can be used to set up more complex networks at the administrator s discretion. A.1 About Certificates A.3 Installing SSLeay O Reilly Home | O Reilly Bookstores | How to Order | O Reilly Contacts International | About O Reilly | Affiliated Companies 1999, O Reilly & Associates, Inc. 334
If you are searching for cheap webhost for your web application, please visit MySQL5 Web Hosting services.

Using Samba Robert Eckstein, David Collier-Brown, Peter Kelly 1st Edition November 1999 1-56592-449-5, Order Number: 4495 416 pages, $34.95 Buy the hardcopy Table of Contents Appendix A Configuring Samba with SSL A.2 Requirements To set up SSL connections, you will need to download two programs in addition to Samba: SSLeay Eric Young s implementation of the Secure Socket s Layer (SSL) protocol as a series of Unix programming libraries SSL Proxy A freeware SSL application from Objective Development, which can be used to proxy a secure link on Unix or Windows NT platforms These two products assist with the server and client side of the encrypted SSL connection. The SSLeay libraries are compiled and installed directly on the Unix system. SSL Proxy, on the other hand, can be downloaded and compiled (or downloaded in binary format) and located on the client side. If you intend to have a Windows NT client or a Samba client on the other end of the SSL connection, you will not require a special setup. SSL Proxy, however, does not work on Windows 95/98 machines. Therefore, if you want to have a secure connection between a Samba server and Windows 95/98 client, you will need to place either a Unix server or a Windows NT machine on the same subnet with the Windows 9x clients and route all network connections through the SSL-Proxy-enabled machine. See Figure A.1. Figure A.1: Two possible ways of proxying Windows 95/98 clients 333
If you are looking for affordable and reliable webhost to host and run your business application visit our ftp web hosting services.

A CA is needed. The client can t simply issue local certificates for servers it trusts because the server determines which certificate it presents. 9.3 Extra Resources A.2 Requirements O Reilly Home | O Reilly Bookstores | How to Order | O Reilly Contacts International | About O Reilly | Affiliated Companies 1999, O Reilly & Associates, Inc. 332
If you are in need for cheap and reliable webhost to host your website, we recommend http web server services.

A.1.1 What is a Certificate? A certifcate is issued by an issuer, usually a Certification Authority (CA), who confirms something by issuing the certificate. The subject of this confirmation depends on the CA s policy. CAs for secure web servers (used for shopping malls, etc.) usually attest only that the given public key belongs the given domain name. Company-wide CAs might attest that you are an employee of the company, that you have permissions to use a server, and so on. A.1.2 What is an X.509 certificate, technically? Technically, the certificate is a block of data signed by the certificate issuer (the CA). The relevant fields are: Unique identifier (name) of the certificate issuer Time range during which the certificate is valid Unique identifier (name) of the certified object Public key of the certified object The issuer s signature over all the above If this certificate is to be verified, the verifier must have a table of the names and public keys of trusted CAs. For simplicity, these tables should list certificates issued by the respective CAs for themselves (self-signed certificates). A.1.3 What are the implications of this certificate structure? Four implications follow: Because the certificate contains the subjects s public key, the certificate and the private key together are all that is needed to encrypt and decrypt. To verify certificates, you need the certificates of all CAs you trust. The simplest form of a dummy-certificate is one that is signed by the subject. 331
Note: In case you are looking for affordable and reliable webhost to host and run your j2ee application check Vision J2ee Web Hosting services.

Using Samba Robert Eckstein, David Collier-Brown, Peter Kelly 1st Edition November 1999 1-56592-449-5, Order Number: 4495 416 pages, $34.95 Buy the hardcopy Table of Contents Appendix A A. Configuring Samba with SSL Contents: About Certificates Requirements Installing SSLeay Setting Up SSL Proxy SSL Configuration Options This appendix describes how to set up Samba to use secure connections between the Samba server and its clients. The protocol used here is Netscape s Secure Sockets Layer (SSL). For this example, we will establish a secure connection between a Samba server and a Windows NT workstation. Before we begin, we will assume that you are familiar with the fundamentals of public-key cryptography and X.509 certificates. If not, we highly recommend Bruce Schneier s Applied Cryptography, 2nd Edition (Wiley) as the premiere source for learning the many secret faces of cryptography. If you would like more information on Samba and SSL, be sure to look at the document SSLeay.txt in the docs/textdocs directory of the Samba distribution, which is the basis for this appendix. A.1 About Certificates Here are a few quick questions and answers from the SSLeay.txt file in the Samba documentation, regarding the benefits of SSL and certificates. This text was written by Christian Starkjohann for the Samba projects. 330
You need excellent and relaible webhost company to host your web applications? Then pay a visit to Inexpensive Web Hosting services.

3. Albitz, Paul, and Cricket Liu; DNS and Bind, 3rd Edition. Sebastopol, CA: O Reilly & Associates, 1998 (ISBN 1-56592-512-2). 4. Stern, Hal; Managing NFS and NIS. Sebastopol, CA: O Reilly & Associates, 1991 (ISBN 0-937175-75-7). 9.2 The Fault Tree A. Configuring Samba with SSL O Reilly Home | O Reilly Bookstores | How to Order | O Reilly Contacts International | About O Reilly | Affiliated Companies 1999, O Reilly & Associates, Inc. 329
Please visit our professional web hosting services to find out about cheap and reliable webhost service that will surely answer all your demands.