maindavfs2 - Support: sr #107556, Automaticaly accept server...

 
 

sr #107556: Automaticaly accept server certificate

Submitter:  Mario Gzuk <gzuki>
Submitted:  Wed 22 Dec 2010 02:34:44 PM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  Wont Do
Privacy:  Public Assigned to:  _71007
Open/Closed:  Closed Operating System:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 04 Jan 2011 11:45:49 AM UTC, comment #4: 

Hi Werner,
thank you for your help! The following should be done via a boot from a linux boot-cd (https://sourceforge.net/projects/uranos/files/uranos-boot/1.5.1/):
add kernel command line options:
username
password
path (to the dav server)
to mount a dav enabled directory. After that the scripts located on the davfs will be executed. The boot cd (or PXE) is designed to work without remastering. So it would be hard for people to add certificates to this. So I have searched for a way to auto accept the certificate.
You dont need to do any thing in this case because it is now working for me. I have only send this through this tracker because I dont want to send this to you directly (some people dont like this). So feel free to close/delete this SR.

BTW: http://sourceforge.net/projects/uranos/files/uranos-boot/uranos.sf.net-gpxe.iso is booting via http from the sf.net site. There are some examples in the boot-menu where it boots directly via http and mount the SVN via davfs after booting (without username/password). So thank you again for this possibilities!

Thnak you!

Mario Gzuk <gzuki>
Mon 27 Dec 2010 09:56:31 AM UTC, comment #3: 

"This should only be an hint for those people who wants to use it in this way. I searched for a solution and find much questions but no working answers for that ..."
Please tell me the problem you want to solve.
Just "I want to do it this way" does not look like a problem to me, but "I can't do ..." or "it's very hard to do ..." would be regarded as a problem I would like to help solving.

Cheers
Werner

- <_71007>
Sun 26 Dec 2010 08:45:48 PM UTC, comment #2: 

I know. This should only be an hint for those people who wants to use it in this way. I searched for a solution and find much questions but no working answers for that.... So I posted the solution here.

Cheers.

Mario Gzuk <gzuki>
Thu 23 Dec 2010 05:20:44 PM UTC, comment #1: 

Concerning username and password:
What is the advantage of storing username and password in environment variables instead of the secrets file? After all, if you use a service that requires authentication you will probably use it more than once. Writing two lines of configuration (fstab and secrets) once, will save you the trouble of typing URL, credentials and mount options again and again. I can't see any gain in convinience here.
When you enter the password on the commandline everybody may be able to read it using ps.

Server certificate:
Server certificates are for authenticating the server. I strongly discourage to blindly accept certificates that can't be verified using the stored CA-certificates. There is already to much confusion about certificates which is already used to break TLS-security.
There is a corner case when you are not interested in authentication but only want encryption. The latest version of the TLS-protocoll offers a clean way to do this but hardly any server supports it.
Until this changes I strongly recommend to set up valid server certificates and to use davfs2's 'server_cert' option.

Cheers
Werner

- <_71007>
Wed 22 Dec 2010 02:34:44 PM UTC, original submission:  

Hi.
here is a short solution how to auto accept the server cert and add also username and password:

echo "$USERNAME
$PASS
y" | mount -t davfs https://server/path /mnt

Maybe you can add this to the docs?

Thank you again for this software!

Cheers Mario

Mario Gzuk <gzuki>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by _71007 (Posted a comment)
  • -email is unavailable- added by gzuki (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-07-19 _71007 Open/ClosedOpen Closed
    2010-12-23 _71007 StatusNone Wont Do
        Assigned toNone _71007

    Back to the top

    Powered by Savane 3.13-758e.
    Corresponding source code