[Eisfair] Mails: Output from your job

Stefan H. stefan-in-news at web.de
Sa Apr 6 08:06:35 CEST 2024


Hallo Marcus,

>> In /var/spool/atjobs findet sich nur eine Datei mit der Uhrzeit:
                                                    ^^^^^^^^^^^^^^^

>> -rwx------ 1 root root 1346  5. Apr 12:27 a00f1201b376f2
> 
> Das kann so nicht sein, wenn du nicht nur ein Zertifikat
> in /var/certs/ssl/certs hast.

Alle anderen Dateien habe eine andere, ältere Zeit!

Im Menüp: Identify unrequired certificates - Show unrequired certificates
### Find unrequired certificates ###

#  E  - error in certificate chain!
#
#  C  - client certificate
#  I  - intermediate certificate
#  R  - root certificate
# (x) - number of occurencies

DELETE:R:ca.pem (0)
KEEP:R:aaa_certificate_services.pem (2)
KEEP:R:cacert-class-1-root.pem (1)
KEEP:C:cacert-class-3-root.pem (1)
KEEP:R:COMODO_RSA_Certification_Authority.pem (1)
KEEP:C:comodorsadomainvalidationsecureserverca.pem (1)
KEEP:C:d166.x-mailer.de.pem (1)
KEEP:R:digicert_global_root_g2.pem (2)
KEEP:R:DigiCert_High_Assurance_EV_Root_CA.pem (1)
KEEP:C:freenet.de.pem (1)
KEEP:C:geotrust_ev_rsa_ca_2018.pem (1)
KEEP:I:geotrust_ev_rsa_ca_g2.pem (2)
KEEP:R:isrg_root_x1.pem (5)
KEEP:C:mail.gmx.net.pem (1)
KEEP:C:mail.intersales.de.pem (1)
KEEP:C:mx01.heyalter.com.pem (1)
KEEP:C:posteo.de.pem (1)
KEEP:I:r3.pem (5)
KEEP:C:sectigo_rsa_domain_validation_secure_server_ca.pem (1)
KEEP:C:securesmtp.t-online.de.pem (1)
KEEP:C:smtp.web.de.pem (1)
KEEP:I:telekom_security_serverid_ov_class_2_ca.pem (5)
KEEP:R:t-telesec_globalroot_class_2.pem (5)
KEEP:I:usertrust_rsa_certification_authority.pem (2)
KEEP:C:www.fam-heidrich.net.pem (1)

> ls -la /var/certs/ssl/certs
www # ls -la /var/certs/ssl/certs
insgesamt 424
drwxr-xr-x 4 root root  20480  6. Apr 07:54 .
drwxr-xr-x 9 root root   4096 30. M▒r 07:54 ..
lrwxrwxrwx 1 root root     15 17. M▒r 01:00 00e5893e.0 -> smtp.web.de.pem
lrwxrwxrwx 1 root root     43  8. Mai 2022  01017373.0 -> 
comodorsadomainvalidationsecureserverca.pem
lrwxrwxrwx 1 root root     20  8. Mai 2022  03b18d3e.0 -> 
d166.x-mailer.de.pem
lrwxrwxrwx 1 root root     20  8. Mai 2022  06c72eb8.0 -> 
d166.x-mailer.de.pem
lrwxrwxrwx 1 root root     16 12. M▒r 16:13 0795b242.0 -> mail.gmx.net.pem
lrwxrwxrwx 1 root root     32  8. Mai 2022  1e09d511.0 -> 
t-telesec_globalroot_class_2.pem
lrwxrwxrwx 1 root root     38  8. Mai 2022  244b5494.0 -> 
DigiCert_High_Assurance_EV_Root_CA.pem
lrwxrwxrwx 1 root root     27  8. Mai 2022  2b23c5b6.0 -> 
geotrust_ev_rsa_ca_2018.pem
lrwxrwxrwx 1 root root     14 15. Feb 12:47 2d258a25.0 -> freenet.de.pem
lrwxrwxrwx 1 root root     41  8. Mai 2022  35105088.0 -> 
usertrust_rsa_certification_authority.pem
lrwxrwxrwx 1 root root     16  8. Mai 2022  4042bcee.0 -> isrg_root_x1.pem
lrwxrwxrwx 1 root root     48  6. Apr 07:54 4042bcee.r0 -> 
/var/certs/ssl/crl/x1.c.lencr.org-index.html.pem
lrwxrwxrwx 1 root root     13 12. Feb 2023  4bd173d4.0 -> posteo.de.pem
lrwxrwxrwx 1 root root     23  8. Mai 2022  590d426f.0 -> 
cacert-class-3-root.pem
lrwxrwxrwx 1 root root     23  8. Mai 2022  5ed36f99.0 -> 
cacert-class-1-root.pem
lrwxrwxrwx 1 root root     48  6. Apr 07:54 5ed36f99.r0 -> 
/var/certs/ssl/crl/www.cacert.org-revoke.crl.pem
lrwxrwxrwx 1 root root     27 28. Apr 2022  607986c7.0 -> 
digicert_global_root_g2.pem
lrwxrwxrwx 1 root root     16  8. Mai 2022  6187b673.0 -> isrg_root_x1.pem
lrwxrwxrwx 1 root root     48  6. Apr 07:54 6187b673.r0 -> 
/var/certs/ssl/crl/x1.c.lencr.org-index.html.pem
lrwxrwxrwx 1 root root     25 25. Feb 01:00 650aa2c6.0 -> 
geotrust_ev_rsa_ca_g2.pem
lrwxrwxrwx 1 root root     50  8. Mai 2022  65ff7287.0 -> 
sectigo_rsa_domain_validation_secure_server_ca.pem
lrwxrwxrwx 1 root root     22  8. Mai 2022  72da9ae8.0 -> 
mail.intersales.de.pem
lrwxrwxrwx 1 root root     28  8. Mai 2022  75680d2e.0 -> 
aaa_certificate_services.pem
lrwxrwxrwx 1 root root     66  6. Apr 07:54 75680d2e.r0 -> 
/var/certs/ssl/crl/crl.comodoca.com-AAACertificateServices.crl.pem
lrwxrwxrwx 1 root root     38  8. Mai 2022  81b9768f.0 -> 
DigiCert_High_Assurance_EV_Root_CA.pem
lrwxrwxrwx 1 root root     43  8. Mai 2022  8d28ae65.0 -> 
comodorsadomainvalidationsecureserverca.pem
lrwxrwxrwx 1 root root      6  8. Mai 2022  8d33f237.0 -> r3.pem
lrwxrwxrwx 1 root root     21 30. Apr 2023  908e5941.0 -> 
mx01.heyalter.com.pem
lrwxrwxrwx 1 root root     23  8. Mai 2022  99d0fa06.0 -> 
cacert-class-1-root.pem
lrwxrwxrwx 1 root root     48  6. Apr 07:54 99d0fa06.r0 -> 
/var/certs/ssl/crl/www.cacert.org-revoke.crl.pem
lrwxrwxrwx 1 root root     26 10. Dez 01:00 9e61abb9.0 -> 
securesmtp.t-online.de.pem
lrwxrwxrwx 1 root root      6  5. Apr 05:28 a17e4914.0 -> ca.pem
lrwxrwxrwx 1 root root     47  6. Apr 07:54 a17e4914.r0 -> 
/var/certs/ssl/crl/www.fam-heidrich.net-crl.pem
lrwxrwxrwx 1 root root     22  8. Mai 2022  a208bdff.0 -> 
mail.intersales.de.pem
-rw-r--r-- 1 root root   4842  1. Jan 2023  aaa_certificate_services.pem
lrwxrwxrwx 1 root root     50  8. Mai 2022  ac1595c4.0 -> 
sectigo_rsa_domain_validation_secure_server_ca.pem
lrwxrwxrwx 1 root root     43 17. Feb 2023  aea807d1.0 -> 
telekom_security_serverid_ov_class_2_ca.pem
lrwxrwxrwx 1 root root     45  3. M▒r 00:13 apache.pem -> 
/usr/local/ssl/certs/www.fam-heidrich.net.pem
drwxr-xr-x 2 root root  12288 29. M▒r 07:47 archive
lrwxrwxrwx 1 root root     24 11. Mai 2020 
autoconfig.fam-heidrich.net.pem -> www.fam-heidrich.net.pem
lrwxrwxrwx 1 root root     24 11. Mai 2020 
autodiscover.fam-heidrich.net.pem -> www.fam-heidrich.net.pem
lrwxrwxrwx 1 root root     21 30. Apr 2023  b1099364.0 -> 
mx01.heyalter.com.pem
lrwxrwxrwx 1 root root     43 17. Feb 2023  b2896c4f.0 -> 
telekom_security_serverid_ov_class_2_ca.pem
lrwxrwxrwx 1 root root     27  8. Mai 2022  b7b785f5.0 -> 
geotrust_ev_rsa_ca_2018.pem
lrwxrwxrwx 1 root root     15 17. M▒r 01:00 b9b99d0d.0 -> smtp.web.de.pem
lrwxrwxrwx 1 root root     27 28. Apr 2022  c90bc37d.0 -> 
digicert_global_root_g2.pem
-rw-r--r-- 1 root root   2569  7. Jan 2008  cacert-class-1-root.pem
-rw-r--r-- 1 root root   2151  7. Jan 2008  cacert-class-3-root.pem
-rw-r--r-- 1 root root   2155  5. Apr 05:28 ca.pem
lrwxrwxrwx 1 root root     26 10. Dez 01:00 cb9a8d65.0 -> 
securesmtp.t-online.de.pem
-rw-r--r-- 1 root root   1057  1. Dez 2006  COMODOCertificationAuthority.crt
-rw-r--r-- 1 root root   2081 17. Dez 2021 
COMODO_RSA_Certification_Authority.pem
-rw-r--r-- 1 root root   2151 25. Nov 2017 
comodorsadomainvalidationsecureserverca.pem
lrwxrwxrwx 1 root root     32  8. Mai 2022  d06393bb.0 -> 
t-telesec_globalroot_class_2.pem
-rw-r--r-- 1 root root   6912 31. M▒r 01:00 d166.x-mailer.de.pem
lrwxrwxrwx 1 root root     38  8. Mai 2022  d4c339cb.0 -> 
COMODO_RSA_Certification_Authority.pem
lrwxrwxrwx 1 root root     38  8. Mai 2022  d6325660.0 -> 
COMODO_RSA_Certification_Authority.pem
lrwxrwxrwx 1 root root     13 12. Feb 2023  de37a28d.0 -> posteo.de.pem
lrwxrwxrwx 1 root root      6  8. Mai 2022  dec71a0b.0 -> r3.pem
-rw-r--r-- 1 root root   1316 27. Feb 2019  digicert_global_root_g2.pem
-rw-r--r-- 1 root root   1363 17. Dez 2021 
DigiCert_High_Assurance_EV_Root_CA.pem
lrwxrwxrwx 1 root root     25 25. Feb 01:00 e2fab3ba.0 -> 
geotrust_ev_rsa_ca_g2.pem
lrwxrwxrwx 1 root root     23  8. Mai 2022  e5662767.0 -> 
cacert-class-3-root.pem
lrwxrwxrwx 1 root root     16 12. M▒r 16:13 e7438712.0 -> mail.gmx.net.pem
lrwxrwxrwx 1 root root     28  8. Mai 2022  ee64a828.0 -> 
aaa_certificate_services.pem
lrwxrwxrwx 1 root root     66  6. Apr 07:54 ee64a828.r0 -> 
/var/certs/ssl/crl/crl.comodoca.com-AAACertificateServices.crl.pem
lrwxrwxrwx 1 root root     45  3. M▒r 00:13 exim.pem -> 
/usr/local/ssl/certs/www.fam-heidrich.net.pem
lrwxrwxrwx 1 root root     14 15. Feb 12:47 f609fe9f.0 -> freenet.de.pem
lrwxrwxrwx 1 root root     41  8. Mai 2022  fc5a8f99.0 -> 
usertrust_rsa_certification_authority.pem
lrwxrwxrwx 1 root root      6  5. Apr 05:28 fe166b47.0 -> ca.pem
lrwxrwxrwx 1 root root     47  6. Apr 07:54 fe166b47.r0 -> 
/var/certs/ssl/crl/www.fam-heidrich.net-crl.pem
-rw-r--r-- 1 root root  11277 31. M▒r 01:00 freenet.de.pem
-rw-r--r-- 1 root root   5426 18. Feb 01:00 geotrust_ev_rsa_ca_2018.pem
-rw-r--r-- 1 root root   5878 31. M▒r 01:00 geotrust_ev_rsa_ca_g2.pem
lrwxrwxrwx 1 root root     45  3. M▒r 00:13 imapd.pem -> 
/usr/local/ssl/certs/www.fam-heidrich.net.pem
lrwxrwxrwx 1 root root     45  3. M▒r 00:13 ipop3d.pem -> 
/usr/local/ssl/certs/www.fam-heidrich.net.pem
-rw-r--r-- 1 root root   1939 18. Sep 2021  isrg_root_x1.pem
-rw-r--r-- 1 root root  11517 31. M▒r 01:00 mail.gmx.net.pem
-rw-r--r-- 1 root root   7013 31. M▒r 01:00 mail.intersales.de.pem
-rw-r--r-- 1 root root   6914 31. M▒r 01:00 mx01.heyalter.com.pem
drwxr-xr-x 2 root root 180224 31. M▒r 01:00 old
-rw-r--r-- 1 root root  10003 31. M▒r 01:00 posteo.de.pem
-rw-r--r-- 1 root root   6395 18. Sep 2021  r3.pem
-rw-r--r-- 1 root root   6985  1. Jan 2023 
sectigo_rsa_domain_validation_secure_server_ca.pem
-rw-r--r-- 1 root root  13179 31. M▒r 01:00 securesmtp.t-online.de.pem
-rw-r--r-- 1 root root  11332 31. M▒r 01:00 smtp.web.de.pem
-rw-r--r-- 1 root root   6335 31. M▒r 01:00 
telekom_security_serverid_ov_class_2_ca.pem
-rw-r--r-- 1 root root   4476  7. Jan 01:00 t-telesec_globalroot_class_2.pem
-rw-r--r-- 1 root root   6717  1. Jan 2023 
usertrust_rsa_certification_authority.pem
-rw-r--r-- 1 root root   1144  9. Jul 1999  UTN-USERFirst-Hardware.crt
-rw-r--r-- 1 root root   5842  3. M▒r 00:13 www.fam-heidrich.net.pem

> Bitte Inhalt von
> /var/certs/ssl/certs-update-crl-list

www # cat /var/certs/ssl/certs-update-crl-list
#------------------------------------------------------------------------------
# /usr/local/ssl/certs-update-crl-list - url list file for crl download
#
# Copyright (c) 2001-2021 The Eisfair Team, team(at)eisfair(dot)org
#
# Creation:     2007-10-18  jed
# Last Update:  $Id: certs-update-crl-lists.std 2021-10-05 19:30:00Z jed $
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version..
#------------------------------------------------------------------------------


# automatically added on 2024-03-30 07:54:07 (source: 
aaa_certificate_services.pem)
CRL|http://crl.comodoca.com/AAACertificateServices.crl|crl.comodoca.com-AAACertificateServices.crl.pem

# automatically added on 2024-03-30 07:54:08 (source: 
cacert-class-1-root.pem)
CRL|https://www.cacert.org/revoke.crl|www.cacert.org-revoke.crl.pem

# automatically added on 2024-03-30 07:54:08 (source: 
cacert-class-3-root.pem)
OCSP|http://ocsp.cacert.org/!cacert-class-3-root.pem|cacert-class-3-root.ocsp

# automatically added on 2024-03-30 07:54:08 (source: 
comodorsadomainvalidationsecureserverca.pem)
OCSP|http://ocsp.comodoca.com/!comodorsadomainvalidationsecureserverca.pem|comodorsadomainvalidationsecureserverca.ocsp

# automatically added on 2024-03-30 07:54:09 (source: d166.x-mailer.de.pem)
OCSP|http://r3.o.lencr.org/!d166.x-mailer.de.pem|d166.x-mailer.de.ocsp

# automatically added on 2024-03-30 07:54:09 (source: freenet.de.pem)
OCSP|http://ocsp.serverid.telesec.de/ocspr/!freenet.de.pem|freenet.de.ocsp

# automatically added on 2024-03-30 07:54:09 (source: 
geotrust_ev_rsa_ca_2018.pem)
OCSP|http://ocsp.digicert.com/!geotrust_ev_rsa_ca_2018.pem

# automatically added on 2024-03-30 07:54:10 (source: 
geotrust_ev_rsa_ca_g2.pem)
OCSP|http://ocsp.digicert.com/!geotrust_ev_rsa_ca_g2.pem

# automatically added on 2024-03-30 07:54:10 (source: mail.gmx.net.pem)
OCSP|http://ocsp.serverid.telesec.de/ocspr/!mail.gmx.net.pem|mail.gmx.net.ocsp

# automatically added on 2024-03-30 07:54:10 (source: 
mail.intersales.de.pem)
OCSP|http://r3.o.lencr.org/!mail.intersales.de.pem|mail.intersales.de.ocsp

# automatically added on 2024-03-30 07:54:10 (source: mx01.heyalter.com.pem)
OCSP|http://r3.o.lencr.org/!mx01.heyalter.com.pem|mx01.heyalter.com.ocsp

# automatically added on 2024-03-30 07:54:11 (source: posteo.de.pem)
OCSP|http://ocsp.digicert.com/!posteo.de.pem|posteo.de.ocsp

# automatically added on 2024-03-30 07:54:11 (source: r3.pem)
CRL|http://x1.c.lencr.org/|x1.c.lencr.org-index.html.pem

# automatically added on 2024-03-30 07:54:11 (source: 
sectigo_rsa_domain_validation_secure_server_ca.pem)
OCSP|http://ocsp.usertrust.com/!sectigo_rsa_domain_validation_secure_server_ca.pem|sectigo_rsa_domain_validation_secure_server_ca.ocsp

# automatically added on 2024-03-30 07:54:12 (source: 
securesmtp.t-online.de.pem)
OCSP|http://ocsp.serverid.telesec.de/ocspr/!securesmtp.t-online.de.pem|securesmtp.t-online.de.ocsp

# automatically added on 2024-03-30 07:54:12 (source: smtp.web.de.pem)
OCSP|http://ocsp.serverid.telesec.de/ocspr/!smtp.web.de.pem|smtp.web.de.ocsp

# automatically added on 2024-03-30 07:54:12 (source: 
telekom_security_serverid_ov_class_2_ca.pem)
OCSP|http://grcl2.ocsp.telesec.de/ocspr/!telekom_security_serverid_ov_class_2_ca.pem|telekom_security_serverid_ov_class_2_ca.ocsp

# automatically added on 2024-03-30 07:54:13 (source: 
www.fam-heidrich.net.pem)
OCSP|http://r3.o.lencr.org/!www.fam-heidrich.net.pem|www.fam-heidrich.net.ocsp

Ich teste jetzt erstmal den Tipp vom Jürgen.


Viele Grüße
Stefan



Mehr Informationen über die Mailingliste Eisfair