<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word"><head><META content="text/html; charset=utf-8" http-equiv="Content-Type">
<STYLE><!-- /* Style Definitions */ p.2955a484-dcd0-468c-9dc9-5f8f8aabcbb9, li.2955a484-dcd0-468c-9dc9-5f8f8aabcbb9, div.2955a484-dcd0-468c-9dc9-5f8f8aabcbb9, table.2955a484-dcd0-468c-9dc9-5f8f8aabcbb9Table {margin:0cm; margin-bottom:.0001pt;}div.Section1 {page:Section1;}--></STYLE>
<meta content="text/html; charset=utf-8" http-equiv=Content-Type>
<meta content="Microsoft Word 11 (filtered medium)" name=Generator>
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p
{mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
</head><BODY>
<P CLASS="2955a484-dcd0-468c-9dc9-5f8f8aabcbb9">
<div class=Section1>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>We are trying unbound on a couple of type of servers.
Currently on a Sun Netra 240 running Solaris 10.<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>After configure/gmake.gmake install I see the below
unknown option –sha256, and in the end: ./unbound-control-setup fatal
error: could not create unbound_control.pem<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>:<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>root@wnpgmb024rw-ns05# ./unbound-control-setup<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>setup in directory /var/unbound<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>generating unbound_server.key<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>Generating RSA private key, 1536 bit long modulus<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>.....................++++<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>..................................................++++<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>e is 65537 (0x10001)<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>generating unbound_control.key<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>Generating RSA private key, 1536 bit long modulus<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>......................................................++++<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>....................++++<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>e is 65537 (0x10001)<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>create unbound_server.pem (self signed certificate)<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>create unbound_control.pem (signed client
certificate)<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>unknown option -sha256<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>usage: x509 args<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -inform arg - input
format - default PEM (one of DER, NET or PEM)<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -outform arg - output format
- default PEM (one of DER, NET or PEM)<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -keyform arg - private key
format - default PEM<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -CAform arg - CA format
- default PEM<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -CAkeyform arg - CA key format - default
PEM<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -in
arg - input file - default
stdin<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -out
arg - output file - default stdout<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -passin arg - private
key password source<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -serial
- print serial number value<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -hash
- print hash value<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -subject
- print subject DN<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -issuer
- print issuer DN<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -email
- print email address(es)<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -startdate -
notBefore field<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -enddate -
notAfter field<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -purpose
- print out certificate purposes<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -dates
- both Before and After dates<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -modulus
- print the RSA key modulus<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -pubkey
- output the public key<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -fingerprint - print the
certificate fingerprint<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -alias
- output certificate alias<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -noout
- no certificate output<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -ocspid
- print OCSP hash values for the subject name and public key<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -trustout -
output a "trusted" certificate<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -clrtrust -
clear all trusted purposes<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -clrreject -
clear all rejected purposes<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -addtrust arg - trust certificate
for a given purpose<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -addreject arg - reject certificate for a
given purpose<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -setalias arg - set certificate
alias<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -days arg -
How long till expiry of a signed certificate - def 30 days<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -checkend arg - check whether the
cert expires in the next arg seconds<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>
exit 1 if so, 0 if not<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -signkey arg - self sign cert
with arg<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -x509toreq -
output a certification request object<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -req -
input is a certificate request, sign and output.<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -CA
arg - set the CA certificate,
must be PEM format.<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -CAkey arg - set
the CA key, must be PEM format<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>
missing, it is assumed to be in the CA file.<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -CAcreateserial - create serial number file if
it does not exist<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -CAserial arg - serial file<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -set_serial - serial
number to use<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -text
- print the certificate in text form<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -C
- print out C code forms<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -md2/-md5/-sha1/-mdc2 - digest to use<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -extfile
- configuration file with X509V3 extensions to add<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -extensions - section
from config file with X509V3 extensions to add<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -clrext
- delete extensions before signing and input certificate<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -nameopt arg - various
certificate name options<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -engine e -
use engine e, possibly a hardware device.<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'> -certopt arg - various
certificate text options<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>./unbound-control-setup fatal error: could not create
unbound_control.pem<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'>root@wnpgmb024rw-ns05# [B<o:p></o:p></span></font></p>
<p class=MsoNormal><font face=Arial size=2><span lang=EN-CA style='font-size:
10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p><font color=navy face="Times New Roman" size=3><span style='font-size:12.0pt;
color:navy'>Bruce</span></font><o:p></o:p></p>
<p><font color=navy face="Times New Roman" size=1><span style='font-size:7.5pt;
color:navy'>Bruce Hayward, MTS Allstream Inc., (c) 204-792-9174 (p)
204-958-1983 (e) </span></font><a href="mailto:bruce.hayward@mtsallstream.com"><font color=navy size=1><span style='font-size:7.5pt;color:navy'>bruce.hayward@mtsallstream.com</span></font></a><font color=navy size=1><span style='font-size:7.5pt;color:navy'> </span></font><o:p></o:p></p>
<p class=MsoNormal><font face="Times New Roman" size=3><span lang=EN-CA style='font-size:12.0pt'><o:p> </o:p></span></font></p>
</div>
</P>
<P CLASS="2955a484-dcd0-468c-9dc9-5f8f8aabcbb9"> </P>
<P CLASS="2955a484-dcd0-468c-9dc9-5f8f8aabcbb9"> <IMG ALIGN="baseline" ALT="" BORDER="0" HSPACE="0" SRC="cid:homecoming_with_no_top_100_email_signature.gif@004e6aab.30d7465b"></P>
<P CLASS="2955a484-dcd0-468c-9dc9-5f8f8aabcbb9"><SPAN><FONT SIZE="1"><STRONG><FONT FACE="Arial"><SPAN STYLE="FONT-SIZE: 7.5pt; COLOR: green"><FONT SIZE="1">Is it really necessary to print this email?</FONT></SPAN></FONT></STRONG></FONT></SPAN></P>
<P CLASS="MsoNormal" STYLE="MARGIN: 0in 0in 0pt"><SPAN STYLE="FONT-SIZE: 7.5pt; COLOR: green"></SPAN><FONT FACE="Arial" SIZE="1"> </FONT></P><STRONG></STRONG><SPAN></SPAN>
<P CLASS="MsoNormal" STYLE="MARGIN: 0in 0in 0pt; TEXT-ALIGN: justify"><SPAN><FONT FACE="Arial"><FONT SIZE="1"><SPAN STYLE="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'; mso-ansi-language: EN-US; mso-fareast-font-family: 'Times New Roman'; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"><FONT COLOR="#000000" SIZE="1"><STRONG>MTS ALLSTREAM INC.</STRONG></FONT> </SPAN><STRONG>CONFIDENTIALITY WARNING</STRONG>: This email message is confidential and intended only for the named recipient(s). If you are not the intended recipient, or an agent responsible for delivering it to the intended recipient, or if this message has been sent to you in error, you are hereby notified that any review, use, dissemination, distribution or copying of this message or its contents is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete the original message. If there is an agreement attached with this message, such agreement will not be binding until it is signed by all parties named therein.</FONT></FONT></SPAN></P></BODY></HTML>