in config file i unachecked:<br><br># unbound server key file.<br> server-key-file: "/etc/unbound/unbound_server.key"<br><br> # unbound server certificate file.<br> server-cert-file: "/etc/unbound/unbound_server.pem"<br>
<br> # unbound-control key file.<br> control-key-file: "/etc/unbound/unbound_control.key"<br><br> # unbound-control certificate file.<br> control-cert-file: "/etc/unbound/unbound_control.pem"<br>
<br><br>so it pointed to the right files<br><br>than unbound-control stats<br><br>generated a lot of data<br><br>until now it seems to be fine.<br><br>i will post as i finnish my succesfull way to install unbound on ubuntu<br>
<br>i will come with updates.<br><br>thank you for help<br><br>gabi<br><br><br><div class="gmail_quote">On Mon, May 18, 2009 at 11:12 AM, W.C.A. Wijngaards <span dir="ltr"><<a href="mailto:wouter@nlnetlabs.nl">wouter@nlnetlabs.nl</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="im">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
Hi Gabriel,<br>
<br>
</div>You have the arguments to ln -s in the wrong order.<br>
<br>
Fix that, or edit the file statements in the remote-control section of<br>
the config file to point to the right files.<br>
<div class="im"><br>
Best regards,<br>
Wouter<br>
<br>
Gabriel Petrescu wrote:<br>
<br>
</div><div class="im">> so here I am... the same situation as in installation from sources..:(<br>
><br>
> locate unbound_control.pem<br>
> /etc/unbound/unbound_control.pem<br>
><br>
><br>
> than i created a sym link:<br>
><br>
> ln -s /var/lib/unbound/etc/unbound/unbound_control.pem<br>
> /etc/unbound/unbound_control.pem<br>
> ln: creating symbolic link `/etc/unbound/unbound_control.pem': File exists<br>
> root@unbound5:~# unbound-control stats<br>
> error: Error setting up SSL_CTX client key and cert<br>
> 28444:error:02001002:system library:fopen:No such file or<br>
> directory:bss_file.c:352:fopen('/var/lib/unbound/etc/unbound/unbound_control.pem','r')<br>
> 28444:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:<br>
> 28444:error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system<br>
> lib:ssl_rsa.c:470:<br>
><br>
><br>
> at this momment i have no ideea what to do...<br>
><br>
> Gabi<br>
><br>
> On Mon, May 18, 2009 at 10:52 AM, Jelte Jansen <<a href="mailto:jelte@nlnetlabs.nl">jelte@nlnetlabs.nl</a><br>
</div><div class="im">> <mailto:<a href="mailto:jelte@nlnetlabs.nl">jelte@nlnetlabs.nl</a>>> wrote:<br>
><br>
><br>
> It appears the ubuntu package does indeed install two configuration<br>
> files. We might need to ask the package maintainer why this is done<br>
> (we only provide the source code)<br>
><br>
><br>
> i will try to make it work and generate statistics.. I hope it<br>
> will work<br>
><br>
> unbound it's a bit confusing... i am trying to make also a<br>
> tutorial / rule how to install it on ubuntu for production<br>
> servers, but at this momment:<br>
> - from sources it generates errors;<br>
><br>
><br>
> this should not happen, on my ubuntu system it compiles cleanly, but<br>
> maybe we can help you with this; could you please provide some details?<br>
><br>
><br>
> - from packages, we should use not standard repositories; i hope<br>
> this will work..<br>
><br>
><br>
> I don't understand this sentence; do you mean because unbound hasn't<br>
> been packaged for older versions of Ubuntu than Intrepid?<br>
><br>
> Regards,<br>
><br>
> Jelte<br>
><br>
><br>
<br>
</div><div class="im">-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.9 (GNU/Linux)<br>
Comment: Using GnuPG with Fedora - <a href="http://enigmail.mozdev.org" target="_blank">http://enigmail.mozdev.org</a><br>
<br>
</div>iEYEARECAAYFAkoRGGcACgkQkDLqNwOhpPjOYwCdFMTI3rCiBcKmv22c2wZjny7T<br>
NGYAnR1ZlYM15yHuXIh89JRezF6ZQJ5b<br>
=Jjmy<br>
-----END PGP SIGNATURE-----<br>
</blockquote></div><br>