neo4j offline rpm aren't signed - neo4j

We are in the process of installing a 4.x version of Neo4j community on an offline server.
We followed https://neo4j.com/docs/operations-manual/current/installation/linux/rpm/#linux-rpm-install-offline-install-download
The packages served by https://dist.neo4j.org/rpm/ doesn't seem to be signed.
Is that normal?? This seems dangerous for a product like this (I tested several versions, including lastest enterprise)
rpm -qip neo4j-enterprise-5.3.0-1.noarch.rpm
Name : neo4j-enterprise
Version : 5.3.0
Release : 1
Architecture: noarch
Install Date: (not installed)
Group : Unspecified
Size : 226422290
License : Proprietary
Signature : (none)
Source RPM : neo4j-enterprise-5.3.0-1.src.rpm
Build Date : Thu Dec 15 14:35:50 2022
Build Host : 385d2a9db634
Relocations : (not relocatable)
URL : http://neo4j.com/
Summary : Neo4j server is a database that stores data as graphs rather than tables.
Description :
Neo4j is a highly scalable, native graph database purpose-built to
leverage not only data but also its relationships.
downloaded via curl -O https://dist.neo4j.org/rpm/neo4j-enterprise-5.3.0-1.noarch.rpm then checked the package with curl -O https://dist.neo4j.org/rpm/neo4j-enterprise-5.3.0-1.noarch.rpm
expected a signed package
got an unsigned package

It depends on the provider and you if you think it is dangerous. The package does not need to be signed when you build or install it. It actually requires additional effort to sign it.
When the package is not signed, then you can be attacked using a man-in-the-middle attack.
It is the same as when you browse the web using HTTP vs. HTTPS.
I would be ok install not signed package to the developer ephemeral VM. I require signed packages for production machines.
You should ask Neo4j to sign the packages.

Related

Could not Install Craft CMS on Local Machine and on VPS

I have been trying to install Craft CMS (free version), but failed each time. At first I attempted to install it on a remote VPS with Ubuntu 20.04 server and MySQL database:
Installation via Composer failed:
In CreateProjectCommand.php line 438:
Could not find package public_html/craft with stability stable.
Then I attempted to install Craft CMS on VPS manually. I got as far as running the installer and entering my username, email and password, but that resulted in "Install failed. Please, check your logs for more info" message. Checked the logs and the problem was as follows:
2022-04-06 22:33:39 [-][-][-][error][craft\base\ApplicationTrait::getIsInstalled] There was a problem fetching the info row: SQLSTATE[42S02>
The SQL being executed was: SELECT *
FROM `info`
WHERE `id`=1
LIMIT 1
2022-04-06 22:33:39 [-][-][-][error][yii\db\Exception] PDOException: SQLSTATE[42S02]: Base table or view not found: 1146 Table 'craftdb.inf>
Then on my local machine with Ubuntu 18.04 using Composer got the same error as under VPS. When attempting the manual install I did not get past the error
HTTP 503 – Service Unavailable – craft\web\ServiceUnavailableHttpException
Perhaps it is the free version problem. Or any other ideas?

Erlang will not launch without RC4 support

We use RabbitMQ in our product that leverages Erlang. We deploy via debian images which have custom built SSL libraries (not openssl) which have had RC4 support commented out. Due to this lack of RC4 whenever RabbitMQ/Erlang attempts to start-up we see the following error and the start-up fails.
2021-01-12 15:32:00.007 [error] <0.427.0> Unable to load crypto library. Failed with error:
"load_failed, Failed to load NIF library: '/usr/lib/erlang/lib/crypto-4.4/priv/lib/crypto.so: symbol RC4 version OPENSSL_1_1_0 not defined in file libcrypto.so.1.1 with link time reference'"
OpenSSL might not be installed on this system.```
You might need to recompile Erlang against your SSL library. As of release 19.2, the crypto application checks whether OPENSSL_NO_RC4 is defined, and if so doesn't attempt to use RC4 (see this pull request). Thus if you use an Erlang package built against a different library, it might expect the feature to be present at runtime.

BI Publisher Ribbon not appearing in Office 365 64bit

I've office 365 install in my system (64 bit) and my OS is windows 10 Enterprise(64 bit). I've downloaded bi publisher desktop from this location and installed 64 bit version of it using Administrator access.
After installing I can't see any Ribbon 'Bi Publisher' in my Word application. Also, I can't see this add-in in File->Options->Add-in window. I checked all options (Active/Inactive/COM Add-in/Disable Items) but this addin is not there at all.
I searched many blogs where they are suggesting to run below file -
C:\Program Files\Oracle\BI Publisher\BI Publisher Desktop\DotNetInstallFiles\TBAddInSetup64.msi
but when I'm trying to run this, it throws an error "Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove program on the Control Panel'
Can anybody suggest me how to populate this ribbon in Office 365(64 bit)?
I had the same issue, solved by unistalling (C:\Program Files\Oracle\BI Publisher\BI Publisher Desktop\DotNetInstallFiles\TBAddInSetup.msi) in order to install (C:\Program Files\Oracle\BI Publisher\BI Publisher Desktop\DotNetInstallFiles\TBAddInSetup64.msi).
I think that the another version without the "64" it's the 32 bits version and in my case, my windows and office are 64 bits so I think that I must have the 64 bits version of that programm.
After all of this, if you don't see the pluging, check it on Windows/Archive/Options/Complements/Manage(Complements COM)/Go
And you should see BIPublisher available for choose
I ran into the same issue. I have separate accounts for development work and administration. I installed with the admin login but the add-in would not run under my developer credentials. Apparently Oracle expects you to only run Word under the same admin-enabled account that was used to install the software. My Desktop Support department had to grant admin to my dev account, install and then drop the admin permissions. So now it's installed and runs under Dev, but the Preview function throws a Java error.
If you are not an administrator on your pc, probably an admin user installed the Add-in. If so, with your user logged in, run: C:\Program Files\Oracle\BI Publisher\BI Publisher Desktop\DotNetInstallFiles\TBAddUser.exe

Error while installing SQL Server 2017 Express showing sqlncli.msi is missing in some path

I am trying to install SQL Server 2017 Express, but it is throwing this error:
sqlncli.msi is not found in the path
Screenshot illustrating the sqlncli.msi error:
I had the same issue, if you click cancel the next error should say something about a package from SQL Server 2012 Native Client is missing.
I then tried to install the sqlncli from https://www.microsoft.com/en-us/download/details.aspx?id=50402 and it said I already have a new version. I had to unistall "Microsoft SQL Server 2012 Native Client" on add or remove programs, and install the sqlncli again from the website I mention and it all worked out.
I had the same problem.
My solution, I uninstalled SQL Server 2012 Native Client and reinstall the SQL Server 2017.
The first two answers are more helpful and straight forward. Another way of installing sqlncli.msi is installing Microsoft SQL Server 2012 SP4 Feature Pack. It contains many packages including sqlncli.msi, which adds an additional value to your SQL server.
If you download only the native client as per #fpp.jesus's answer and if you want to install it using the command-line for some reason, the following command will be helpful.
msiexec /i sqlncli.msi ADDLOCAL=ALL APPGUID={0CC618CE-F36A-415E-84B4-FB1BFF6967E1}
'ADDLOCAL=All' argument will install SDK components along with the client components.

Can you install Silverlight 3 Tools on Server 2008 (64bit)

I have been able to install 'VS2008 SP1' and 'VS2008 Tools for Silverlight' on my Windows Server 2008 development machine, but I have not been able to install the MSI for 'Silverlight Toolkit July 2009'. The install fails with the following:
"The system administrator has set policies to prevent this installation"
I am a local admin on the box. I have seen something similar when try to to 32-bit MSI on a 64-bit machine. Is that the problem that I am having?
I don't think that you need to install the SL toolkit on the server. At least, we haven't had to. We're using 64-bit Windows Server 2003, and any required Silverlight DLLs, etc., just get included in our .xap file, and get downloaded by the client when it downloads that file. All the server knows is that it's got to pass the .xap file down to a client when it requests it. The only thing that any server-side process might need to know about is the System.ServiceModel.PollingDuplex.dll (if you're using duplex WCF services), but if you simply install the SL 3.0 SDK on your dev machine, and then reference that DLL from your WCF project, it'll get included with your WCF project when you roll it out to the server in question.
The only reason you'd need to install those things on the server is if you're planning to do development on the server, which I suppose you might want to, but certainly isn't normal :-).

Resources