ELOG Forum

Demo Discussion

Forum Config Examples Contributions Vulnerabilities

Discussion forum about ELOG, Page 277 of 808

Not logged in

Find | Login | Help

New entries since:

Thu Jan 1 01:00:00 1970

Full | Summary | Threaded | Hide attachments

6457 Entries

Goto page Previous 1, 2, 3 ... 276, 277, 278 ... 806, 807, 808 Next

Wed Aug 14 18:36:17 2019

Antonio Bulgheroni

antonio.bulgheroni@gmail.com

Question

Windows

3.1.4

Re: Unable to add entries with command line elog.exe with SSL

Dear Andreas,

thanks for your message.

Here are the answers to your questions.

Tomorrow I will try to restart the server on port 443, at least temporary, to see if it makes any difference
We don't have a real certificate, but just the self-signed certificate that comes with the standard distribution of elog. Of course, I have to accept an exception when connecting from the browser. When I try to add an entry to via the command line from the server itself, I get the message Possibly invalid certificate, continue on your own risk! but it works.
I hope so. This is the elog.exe that comes with the standard distribution, so I have to presume so. It is the same version that is installed on the server, where it works.

Thanks again and more tomorrow...

Andreas Luedeke wrote:

I am using SSL with ELOG and it works fine with the "elog" executable. I am no expert on SSL, but I can provide my two cent what you could try, maybe it helps:

SSL desires to run on the port 443 - I have no idea if you can force it to run on an arbitrary port, it might be possible. But does it make sense?
Certificates are checked against the provider of the certificate. I guess this works fine from your web browser? Or did you just add a security exception?
Has the installed "elog.exe" been compiled with SSL support on?

Antonio Bulgheroni wrote:

Any news for my problem?

Your help is very much appreaciated!

thanks :)

Antonio Bulgheroni wrote:

Dear all,

we have a running elog installation using SSL (with the self-signed certificate). Generally we use the web interface, but we have been asked if it was possible to automatically insert elog entries via command line.

elog.exe should be the answer and so I gave it a try.

I was trying the following command line:

elog.exe. -h server-ip-address -p 8080 -l demo -s -v -u username password -a "Mass=0" This is a test entry

Of course server-ip-address and username / password were proper fields.

When I was doing this from the server itself, I got the following message:

Successfully connected to host server-ip-address, port 8080
Possibly invalid certificate, continue on your own risk!

and then the entry was inserted, but when I was typing the same from any other PC I got the error message:

Successfully connected to host server-ip-address, port 8080
elogd server does not run SSL protocol

The entry is of course not added and also the server (that is running in very verbose mode) reported a

SSL_accept failed

How can I fix it?

Thanks for helping,

Antonio

Draft

Thu Aug 15 09:45:37 2019

Antonio Bulgheroni

antonio.bulgheroni@gmail.com

Question

Windows

3.1.4

Re: Unable to add entries with command line elog.exe with SSL

As promised, here is the results of the additional debugging.

Changing to port 443 doesn't help. I keep having exactly the same behaviour, it is to say:

from the server itself I get

Antonio Bulgheroni wrote:

Dear Andreas,

thanks for your message.

Here are the answers to your questions.

Tomorrow I will try to restart the server on port 443, at least temporary, to see if it makes any difference
We don't have a real certificate, but just the self-signed certificate that comes with the standard distribution of elog. Of course, I have to accept an exception when connecting from the browser. When I try to add an entry to via the command line from the server itself, I get the message Possibly invalid certificate, continue on your own risk! but it works.
I hope so. This is the elog.exe that comes with the standard distribution, so I have to presume so. It is the same version that is installed on the server, where it works.

Thanks again and more tomorrow...

Andreas Luedeke wrote:

I am using SSL with ELOG and it works fine with the "elog" executable. I am no expert on SSL, but I can provide my two cent what you could try, maybe it helps:

SSL desires to run on the port 443 - I have no idea if you can force it to run on an arbitrary port, it might be possible. But does it make sense?
Certificates are checked against the provider of the certificate. I guess this works fine from your web browser? Or did you just add a security exception?
Has the installed "elog.exe" been compiled with SSL support on?

Antonio Bulgheroni wrote:

Any news for my problem?

Your help is very much appreaciated!

thanks :)

Antonio Bulgheroni wrote:

Dear all,

elog.exe should be the answer and so I gave it a try.

I was trying the following command line:

elog.exe. -h server-ip-address -p 8080 -l demo -s -v -u username password -a "Mass=0" This is a test entry

Of course server-ip-address and username / password were proper fields.

When I was doing this from the server itself, I got the following message:

Successfully connected to host server-ip-address, port 8080
Possibly invalid certificate, continue on your own risk!

and then the entry was inserted, but when I was typing the same from any other PC I got the error message:

Successfully connected to host server-ip-address, port 8080
elogd server does not run SSL protocol

The entry is of course not added and also the server (that is running in very verbose mode) reported a

SSL_accept failed

How can I fix it?

Thanks for helping,

Antonio

69002

Thu Aug 15 19:00:12 2019

Antonio Bulgheroni

antonio.bulgheroni@gmail.com

Question

Windows

3.1.4

Re: Unable to add entries with command line elog.exe with SSL

So as promised, I add some more information.

Unfortunately changing the port where the server is listening did not make any change. The situation is still the same. If I try directly from the server, I get a warning about the fake certificate and if I do it from elsewhere, I get the error that the server is not running SSL.

I had a look at the source code of elog.c and found the point where the error is produced. in order to produce this message, the ssl_connect should be returning -1 and this is only possible in two cases:

if (SSL_connect(*ssl_con) <= 0)
return -1;

cert = SSL_get_peer_certificate(*ssl_con);
if (cert == NULL)
return -1;

So, in the first case, it means that the SSL connection failed completly. In the second case, the peer certificate is invalid.

Is it possible to discriminate between the two, for example changing the return value? Unfortunately I don't have a windows computer with development tools. So it would be great if you could prepare an executable for me with this small change.

Thanks in advance for your help,

cheers,

68540

Mon Jan 9 17:18:15 2017

How do you believe that you can preset a Submission item? Preset only works for attributes, so you have to define an attribute like "Submission UTC" or similar and preset this attribute with

Preset Submission UTC = $utcdate

Luca wrote:

Dear all,

I am trying to have the elog timestamp in UTC time instead of local time using the following config file but without success. Do you know what I am doing wrong?

Thanks

Luca

Theme = default
Comment = XENON1T LogBook
Attributes = Subject, Author, Category, Type, Status
Locked Attributes = Author
Required Attributes = Category, Type
Preset Author = $long_name
Preset Submission = $utcdate
Options Category = General, CRY - Cryogenics, PUR - Purification, RSX- ReStoX, DST - Distillation Column, MUV - Muon Veto, TPC - Detector, WTR - Water Tank, RAD - Gas Purity, CAL - Calibration, SCT - Slow Control, SOP - Shiftoperation
Options Type = Software Installation, Hardware Installation, Failure/Problem, Configuration, Authorization, Other, Leak Check, xenon operation, Shared Resources, Log, Alarm Tests, Hardware test
Options Status = Info, Open - in progress, Closed - unsolved, Closed - solved, Other
Cell Style Status Info = background-color:lightblue
Cell Style Status Closed - solved = background-color:lightgreen
Cell Style Status Open - in progress = background-color:yellow
Cell Style Status Closed - unsolved = background-color:red
Extendable Options = Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type, Category

68541

Mon Jan 9 17:26:37 2017

Dear Steve,

thanks a lot. Sorry but I am not expert of elog. I "inherited" from a colleague and wanted to see if I can keep it alive but to do it I would need to move to UTC. Should this command affect the "INSERT CURRENT TIME/DATE" button? It does not seem to change.

Best

Luca

Stefan Ritt wrote:

How do you believe that you can preset a Submission item? Preset only works for attributes, so you have to define an attribute like "Submission UTC" or similar and preset this attribute with

Preset Submission UTC = $utcdate

Luca wrote:

Dear all,

I am trying to have the elog timestamp in UTC time instead of local time using the following config file but without success. Do you know what I am doing wrong?

Thanks

Luca

68544

Thu Jan 12 02:35:02 2017

Any suggestion?

Luca wrote:

Dear Steve,

Best

Luca

Stefan Ritt wrote:

How do you believe that you can preset a Submission item? Preset only works for attributes, so you have to define an attribute like "Submission UTC" or similar and preset this attribute with

Preset Submission UTC = $utcdate

Luca wrote:

Dear all,

I am trying to have the elog timestamp in UTC time instead of local time using the following config file but without success. Do you know what I am doing wrong?

Thanks

Luca

68545

Thu Jan 12 08:28:45 2017

The INSERT CURRENT TIME/DATE button is not affected by this setting.

Luca wrote:

Dear Steve,

Best

Luca

Stefan Ritt wrote:

How do you believe that you can preset a Submission item? Preset only works for attributes, so you have to define an attribute like "Submission UTC" or similar and preset this attribute with

Preset Submission UTC = $utcdate

Luca wrote:

Dear all,

I am trying to have the elog timestamp in UTC time instead of local time using the following config file but without success. Do you know what I am doing wrong?

Thanks

Luca

68546

Thu Jan 12 09:10:06 2017

Andreas Luedeke

andreas.luedeke@psi.ch

Hi Luca,

if you want to change all datetime properties to UTC time, then you'll just need to set the timezone on the server to UTC, before elogd is started.

Cheers, Andreas

Luca wrote:

Dear Steve,

Best

Luca

Stefan Ritt wrote:

How do you believe that you can preset a Submission item? Preset only works for attributes, so you have to define an attribute like "Submission UTC" or similar and preset this attribute with

Preset Submission UTC = $utcdate

Luca wrote:

Dear all,

I am trying to have the elog timestamp in UTC time instead of local time using the following config file but without success. Do you know what I am doing wrong?

Thanks

Luca

Goto page Previous 1, 2, 3 ... 276, 277, 278 ... 806, 807, 808 Next

ELOG V3.1.5-3fb85fa6