[Box Backup] Certificate question

Wed, 27 Oct 2004 03:00:34 -0500

I hope to accurately outline my ignorance by giving enough information.  
I am having a problem getting my certificate signed.   I don't know 
which piece I don't understand.

I had to install a the newest version of openssl on a friend's server to 
set it up as a boxbackup client.  after changing the path so it would 
the correct openssl in /usr/local/ssl/bin and changing the 
/usr/local/ssl/openssl.cnf file to reflect the right location, name, 
email address etc, I ran this:

/usr/local/bin/bbackupd-config /usr/local/etc/box lazy 0 
sigil.mechanus.org /usr/local/var/bbackupd /home

Things went well:

2) Send /usr/local/etc/box/bbackupd/0-csr.pem
   to the administrator of the backup server, and ask for it to
   be signed.

OK, fine, thats me.  So I took that and pasted it into the new server 
certificate text box at CACert to request a certificate:

I get this:
Unable to match 'BACKUP-0' against any domain validated against your 
account.

without the begin and end banners I get this when I submit:

Make sure the following is correct:

Organisation:
Org. Unit:
Location:
State/Province:
Country:
Email Address:

Well, thats not correct, because this is what openssl says in the 
bbackupd-config output:

"
If you enter '.', the field will be left blank.
-----
US [AU]:Texas [Some-State]:Houston []:Sigil Networks [Internet Widgits 
Pty Ltd]:Organizational Unit Name (eg, section) []:Justin H Haynes 
[]:Justin@Haynes.net []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:An optional company name []:
"

Well, I have Justin@Haynes.net verified with cacert.org as well as 
haynesj@mechanus.org.  So, I'm not sure what is going wrong.  I'm 
assuming I need to leave in the banners when pasting that text.  Also, 
I'm assuming cacert is picking up the certificate since it identifies it 
at BACKUP-0.  I dont' understand what it is looking for.  Does it expect 
an email on file to be in the form of username@hostname?  
sigil.mechanus.org is behind NAT and only resolves to a private IP 
address.  should I tell bbackupd-config the hostname is mechanus.org 
since that does resolve via DNS and because I have haynesj@mechanus.org 
and not haynesj@sigil.mechanus.org (see my bbackupd-config command above 
where I used sigil.mechanus.org as the hostname, which is accurate on 
that machine) ?

Thanks!,

Justin