Editing CSR Generation & Configuration

CSR Generation (Bleckmann)
---------------------------

CSR – Certificate Signing Request

Browse https://returns.bleckmann.com/index.php/frontend 

click on padlock

click on certificate

Click on Details tab, under this click on subject

Copy all information under subject to notepad




Login to phobos.apoyar

Go to below path

•	cd /home/neal/certs


Generate key using below command with proper key name

•	openssl genrsa -out b2b.bleckmann.com.key 2048



Generate CSR with below command with appropriate information, which we have copied in notepad


•	openssl req -new -key b2b.bleckmann.com.key -sha256 -nodes -subj '/C=BE/ST= Overijssel /L= Oldenzaal/O= Bleckmann Nederland B.V. STREET = Eekboerstraat 25 /OU=IT/CN= b2b.bleckmann.com /emailAddress=support2@apoyar.eu/subjectAltName=DNS.1= b2b.bleckmann.com, DNS.2= labelapp.bleckmann.com, DNS.3= carrierstatus.bleckmann.com ' > b2b.bleckmann.com.csr


After generating check CSR information using below command

•	openssl req -in b2b.bleckmann.com.csr -noout –text



Configuring Certificate for Renewal
----------------------------------------


Login to nagios.apoyar


Copy b2b.bleckmann.com.key file to nagios from phobos.apoyar


•	scp neal@phobos:/home/neal/b2b.bleckmann.com.key   ./


Note:- If getting error while copying, need to change permission of that file on phobos.apoyar



•	chmod 444 b2b.bleckmann.com.key


then copy same key file to returns server (bleckmann live)


•	scp b2b.bleckmann.com.key returns@10.208.192.174:/home/returns/


After this move crt file from returns server to nagios and then to phobos using below commands


•	scp returns@10.208.192.174:/home/returns/b2b.bleckmann.com.crt  ./


•	scp b2b.bleckmann.com.crt  neal@phobos:/home/neal/




Login to phobos.apoyar


Now, we have crt, csr and key at /home/neal/certs/  on phobos.apoyar

Now go to 

•	cd /home/neal/certs/generated/bleckmann

move all three files here

•	mv /home/neal/certs/b2b.blecmann.com*  ./

and then remove  key file from nagios

Now, login to returns server

Compare crt and key file with below command

•	openssl x509 -noout -modulus -in b2b.bleckmann.com.crt | openssl md5 && openssl rsa -noout -modulus -in b2b.bleckmann.com.key | openssl md5


Now, move crt & key to below path

•	mv b2b.blecmann.com.crt /etc/ssl/certs/

•	mv b2b.blecmann.com.key /etc/ssl/private/


Note:- If getting error while moving either crt or key, check for owner and permission and change if needed with below commands


•	chown root:root filename

•	chmod 400 filename


Then go to 

•	Cd /etc/nginx/sites-available 

Here, search for website configuration file with below command

•	grep –rmv ‘/etc/nginx/sites-available/’ –e ‘b2b.bleckmann.com’

then edit that conf file

•	vi b2b.conf

change crt and key file path in conf file

save and exit file

•	:wq!
 
Note:- Repeat above steps of editing .conf file, if we have multiple domains

Then check for any errors with below command

•	nginx –t

and then reload nginx (DON’T RESTART)

•	systemctl  reload nginx

At last, browse websites and verify those padlocks and certificate information













Email Sending from Magento
----------------------------

- We use SMTP with nagios account

- Office 365 use TLS not SSL


Login to server having issue in sending email and run below command

•	cd /home/neal/sendemail/

•	apt-get install libnet-ssleay-perl libio-socket-ssl-perl libnet-smtp-ssl-perl

Note:- sendemail folder is not available on server by default.. it will be at github (https://github.com/mogaal/sendemail) 


Login to nagios.apoyar

•	Cd /usr/local/etc/objects

•	Vi commands.cfg

Check for to test at command line in commands.cfg file

Copy that command and run on server having issue in sending email, change email id in below command, mention the one which having issue

We can get that email id from magento, at below path

Store/configuration/general/store email

•	./sendEmail -o tls=yes -s smtp.office365.com:587 -xu nagios@apoyar.eu -xp Ap0yar4321 -t karolp@apoyar.eu -f nagios@apoyar.eu -u "** Subject **" -m "***** Nagios ***"

And at last, check with test mail.



Killing Processes on ZEB & PCR servers 
---------------------------------------

Login to server

Check for service called magento with below command

•	ps –aux | grep magento

Check for any java services with below command

•	ps –aux | grep java

Once we run above commands, will get running services with Some ID’s

So, using that ID’s we can kill that processes, as below

•	Kill ID e.g. kill 9423








After confirming that all db agent and machine agent are stopped, we need to manually start them, for that run below commands
PCR:

•	cd /opt/appdynamics/db-agent/
nohup java -Ddbagent.name=live-pcr -jar db-agent.jar &

•	cd /opt/appdynamics/machine_agent
nohup java -Dappdynamics.agent.maxMetrics=5000 -jar machineagent.jar &

Zeb:

•	cd /opt/appdynamics/db-agent/
nohup java -jar db-agent.jar &

•	cd /opt/appdynamics/machine_agent
nohup java -Dappdynamics.agent.maxMetrics=5000 -jar machineagent.jar &

•	cd /usr/local/bin/
nohup webm_encode.sh "/var/www/html/migration/pub/media/product_videos/live" &
...
additional instances to be started if other paths need to be watched.