<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
OK, imported the .p12 certificate into both Firefox and Internet
Explorer, and both now show it in the list of personal
certificates. Then, I temporarily disabled routing 44.x.x.x
addresses out the MikroTik. A "traceroute" confirms I'm not going
out the MikroTik radio.<br>
<br>
I get the same message: "We need to authenticate you, but we can't
use encryption over ham radio." Do I have to reboot Windows?<br>
<br>
<div class="moz-cite-prefix">On 2014-06-08 17:43, Cory (NQ1E) wrote:<br>
</div>
<blockquote
cite="mid:CAGOhXwLr-T-UJKED317NjywWkcbpcgxpXSO9yGrgzTNOqUxHmQ@mail.gmail.com"
type="cite">
<p dir="ltr">Dean,</p>
<p dir="ltr">Using that specific version of Opera is only if you
want to visit the authenticated portal site over the RF
network. It's the only browser that we could get to work with
unencrypted SSL mutual certificate authentication. Nobody else
on the internet seems to do that, so there's not a lot of
support for it.</p>
<p dir="ltr">If you're using your commercial internet connection
instead, you don't have to worry about that and you can use just
about any browser if you have your LotW certificate setup in it.</p>
<p dir="ltr">-Cory<br>
NQ1E<br>
</p>
<div class="gmail_quote">On Jun 8, 2014 5:24 PM, "Dean Gibson
AE7Q" <<a moz-do-not-send="true"
href="mailto:hamwan@ae7q.com">hamwan@ae7q.com</a>> wrote:<br
type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
This requires a specific (and non-current) version of a
specific browser (eg, Opera) ?!?!?!?<br>
<br>
On 2014-05-15 23:32, Tom Hayward wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
On Thu, May 15, 2014 at 9:49 PM, Dean Gibson AE7Q <<a
moz-do-not-send="true" href="mailto:hamwan@ae7q.com"
target="_blank">hamwan@ae7q.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
Now, this is not correct. While I appreciate the PTR
record for <a moz-do-not-send="true"
href="tel:44.24.240.173" value="+14424240173"
target="_blank">44.24.240.173</a>, it needs to point to
a hostname record ("A" or CNAME"), not a domainname
record. This is not the fault of the PTR record, but the
record that it points to: The NS record for <a
moz-do-not-send="true" href="http://ae7q.hamwan.net"
target="_blank">ae7q.hamwan.net</a> effectively declares
<a moz-do-not-send="true" href="http://ae7q.hamwan.net"
target="_blank">ae7q.hamwan.net</a> as a subdomain, with
<a moz-do-not-send="true" href="http://ns1.ae7q.ampr.org"
target="_blank">ns1.ae7q.ampr.org</a> as its nameserver.
Now, <a moz-do-not-send="true"
href="http://ns1.ae7q.ampr.org" target="_blank">ns1.ae7q.ampr.org</a>
has the IP address of <a moz-do-not-send="true"
href="tel:44.24.240.173" value="+14424240173"
target="_blank">44.24.240.173</a>, but that doesn't mean
that the domain <a moz-do-not-send="true"
href="http://ae7q.hamwan.net" target="_blank">ae7q.hamwan.net</a>
is anywhere near 44.24.240.x.<br>
</blockquote>
Dean,<br>
<br>
The reason there is an NS record at <a
moz-do-not-send="true" href="http://ae7q.hamwan.net"
target="_blank">ae7q.hamwan.net</a> is because I needed to
test user NS records while working on the portal UI. On
April 10 you talked about running your own DNS server, and
complained that <a moz-do-not-send="true"
href="http://ampr.org" target="_blank">ampr.org</a> did
not allow NS records. Not wanting HamWAN to be accused of
the same thing, I made sure you could create NS records
yourself from the portal.<br>
<br>
Use your Logbook of the World certificate to log in here: <a
moz-do-not-send="true"
href="http://portal.hamwan.org/dns/" target="_blank">http://portal.hamwan.org/dns/</a><br>
<br>
It will allow you to create, edit, and delete any DNS record
within the {LoTW callsign}.<a moz-do-not-send="true"
href="http://hamwan.net" target="_blank">hamwan.net</a>
domain (e.g., <a moz-do-not-send="true"
href="http://AE7Q.hamwan.net" target="_blank">AE7Q.hamwan.net</a>).
You can manipulate the records as you see fit.<br>
<br>
Tom KD7LXL<br>
<br>
</blockquote>
<br>
<br>
_______________________________________________<br>
PSDR mailing list<br>
<a moz-do-not-send="true" href="mailto:PSDR@hamwan.org"
target="_blank">PSDR@hamwan.org</a><br>
<a moz-do-not-send="true"
href="http://mail.hamwan.org/mailman/listinfo/psdr_hamwan.org"
target="_blank">http://mail.hamwan.org/mailman/listinfo/psdr_hamwan.org</a><br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
PSDR mailing list
<a class="moz-txt-link-abbreviated" href="mailto:PSDR@hamwan.org">PSDR@hamwan.org</a>
<a class="moz-txt-link-freetext" href="http://mail.hamwan.org/mailman/listinfo/psdr_hamwan.org">http://mail.hamwan.org/mailman/listinfo/psdr_hamwan.org</a>
</pre>
</blockquote>
<br>
</body>
</html>