web development and system administration of Linux
To import SSL certificate into pkcs12 format you can use command: You will be prompted to input password. Now, you can use /home/taras/ssl/shkodenko.com.jks certificates storage in your Apache Tomcat SSL virtual host configuration.
To set up NFS on CentOS and/or RedHat enterprise Linux the following package should be installed: If you see error while trying to start nfs service: check if portmapper service is working: If not, add portmap service to auto start: Start the portmap serice: When portmap service is started it should show some output like: … Continue reading Set up NFS on CentOS and RedHat enterprise remote server folder sharing
If you need to use modern version of PHP and you have Plesk control panel version 12+ you can use php_handler utility. To view list of currently installed PHP versions use command: id: display name: full version: version: type: cgi-bin: php-cli: php.ini: custom: module 5.3.3 5.3.3 5.3 module /usr/bin/php-cgi /etc/php.ini false fastcgi 5.3.3 5.3.3 5.3 … Continue reading Install and configure custom PHP FastCGI version with Plesk 12
Mtop utility can be downloaded from http://sourceforge.net/projects/mtop/?source=typ_redirect. Current version at this moment is: 0.6.6. To install it the following system packages should be installed as dependencies: libncurses5-dev Because of error during installation of depended Curses Perl library: fatal error: ncurses.h: No such file or directory The following Perl libraries required by mtop should be installed: … Continue reading Mtop utility installation on Debian 7
To discover what package a file belongs to use command: dash: /bin/dash We find several packages related to what we’re looking for, together with brief descriptions. To get more information about a specific package, I can then use: Read more at https://www.debian.org/doc/manuals/apt-howto/ch-search.en.html
There is several ways to block / unblock IPs on linux servers. It can be done using IPTables firewall rules, server configuration files /etc/hosts.deny, using route. I have written simple shell scripts to block / unlbock IPv4 which can be used on any Linux distribution if you have root administrator access. You can get them … Continue reading Block / unblock IPs on Linux servers
If you need to add existing user to existing group use usermod command. 1. Check current user groups using id command: uid=10001(serveradmin) gid=10001(serveradmin) groups=10001(serveradmin) 2. Add existing user to group using usermod command: 3. Check if user has been added to group using id command: uid=10001(serveradmin) gid=10001(serveradmin) groups=10001(serveradmin),11(wheel)
To set up SSH login without passwords using keys: 1. Generate key using ssh-keygen utility. Keys will be saved in this example in ~/.ssh/ folder. File ~/.ssh/id_rsa is your private key. File ~/.ssh/id_rsa.pub is your public key. 2. Add public key to ~/.ssh/authorized_keys on server where you want to login without password using command: 3. … Continue reading SSH login without password using keys
To verify if OpenSSL protocol version 3 is disabled you can run command: If you will see answer like below: CONNECTED144:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1257:SSL alert number 40 139824221411144:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:596: When SSL3 is disabled.
To hide real bind 9 version add directive to /etc/named.conf configuration file. Inside options { }; block add version directive: version “BIND custom version”; To check bind version using dig utility: where NS_Server_IP your name server IP or host name
