https://wiki.apoyar.eu/index.php?action=history&feed=atom&title=CSR_Generation_%26_Configuration 2026-07-21T03:57:04Z Revision history for this page on the wiki MediaWiki 1.41.0 https://wiki.apoyar.eu/index.php?title=CSR_Generation_%26_Configuration&diff=180&oldid=prev 2021-06-30T02:26:30Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en-GB"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 02:26, 30 June 2021</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l98">Line 98:</td> <td colspan="2" class="diff-lineno">Line 98:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Compare crt and key file with below command</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Compare crt and key file with below command</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>• openssl x509 -noout -modulus -in b2b.<del style="font-weight: bold; text-decoration: none;">blecmann</del>.com.crt | openssl md5 &amp;&amp; openssl rsa -noout -modulus -in b2b.<del style="font-weight: bold; text-decoration: none;">blecmann</del>.com.key</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>• openssl x509 -noout -modulus -in b2b.<ins style="font-weight: bold; text-decoration: none;">bleckmann</ins>.com.crt | openssl md5 &amp;&amp; openssl rsa -noout -modulus -in b2b.<ins style="font-weight: bold; text-decoration: none;">bleckmann</ins>.com.key <ins style="font-weight: bold; text-decoration: none;">| openssl md5</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> </table>

Admin https://wiki.apoyar.eu/index.php?title=CSR_Generation_%26_Configuration&diff=179&oldid=prev 2021-06-29T13:06:39Z

<p>Created page with &quot;CSR Generation (Bleckmann) --------------------------- CSR – Certificate Signing Request Browse https://returns.bleckmann.com/index.php/frontend click on padlock click...&quot;</p> <p><b>New page</b></p><div>CSR Generation (Bleckmann)<br /> ---------------------------<br /> <br /> CSR – Certificate Signing Request<br /> <br /> Browse https://returns.bleckmann.com/index.php/frontend <br /> <br /> click on padlock<br /> <br /> click on certificate<br /> <br /> Click on Details tab, under this click on subject<br /> <br /> Copy all information under subject to notepad<br /> <br /> <br /> <br /> <br /> Login to phobos.apoyar<br /> <br /> Go to below path<br /> <br /> • cd /home/neal/certs<br /> <br /> <br /> Generate key using below command with proper key name<br /> <br /> • openssl genrsa -out b2b.bleckmann.com.key 2048<br /> <br /> <br /> <br /> Generate CSR with below command with appropriate information, which we have copied in notepad<br /> <br /> <br /> • openssl req -new -key b2b.bleckmann.com.key -sha256 -nodes -subj &#039;/C=BE/ST= Overijssel /L= Oldenzaal/O= Bleckmann Nederland B.V. STREET = Eekboerstraat 25 /OU=IT/CN= b2b.bleckmann.com /emailAddress=support2@apoyar.eu/subjectAltName=DNS.1= b2b.bleckmann.com, DNS.2= labelapp.bleckmann.com, DNS.3= carrierstatus.bleckmann.com &#039; &gt; b2b.bleckmann.com.csr<br /> <br /> <br /> After generating check CSR information using below command<br /> <br /> • openssl req -in b2b.bleckmann.com.csr -noout –text<br /> <br /> <br /> <br /> Configuring Certificate for Renewal<br /> ----------------------------------------<br /> <br /> <br /> Login to nagios.apoyar<br /> <br /> <br /> Copy b2b.bleckmann.com.key file to nagios from phobos.apoyar<br /> <br /> <br /> • scp neal@phobos:/home/neal/b2b.bleckmann.com.key ./<br /> <br /> <br /> Note:- If getting error while copying, need to change permission of that file on phobos.apoyar<br /> <br /> <br /> <br /> • chmod 444 b2b.bleckmann.com.key<br /> <br /> <br /> then copy same key file to returns server (bleckmann live)<br /> <br /> <br /> • scp b2b.bleckmann.com.key returns@10.208.192.174:/home/returns/<br /> <br /> <br /> After this move crt file from returns server to nagios and then to phobos using below commands<br /> <br /> <br /> • scp returns@10.208.192.174:/home/returns/b2b.bleckmann.com.crt ./<br /> <br /> <br /> • scp b2b.bleckmann.com.crt neal@phobos:/home/neal/<br /> <br /> <br /> <br /> <br /> Login to phobos.apoyar<br /> <br /> <br /> Now, we have crt, csr and key at /home/neal/certs/ on phobos.apoyar<br /> <br /> Now go to <br /> <br /> • cd /home/neal/certs/generated/bleckmann<br /> <br /> move all three files here<br /> <br /> • mv /home/neal/certs/b2b.blecmann.com* ./<br /> <br /> and then remove key file from nagios<br /> <br /> Now, login to returns server<br /> <br /> Compare crt and key file with below command<br /> <br /> • openssl x509 -noout -modulus -in b2b.blecmann.com.crt | openssl md5 &amp;&amp; openssl rsa -noout -modulus -in b2b.blecmann.com.key<br /> <br /> <br /> Now, move crt &amp; key to below path<br /> <br /> • mv b2b.blecmann.com.crt /etc/ssl/certs/<br /> <br /> • mv b2b.blecmann.com.key /etc/ssl/private/<br /> <br /> <br /> Note:- If getting error while moving either crt or key, check for owner and permission and change if needed with below commands<br /> <br /> <br /> • chown root:root filename<br /> <br /> • chmod 400 filename<br /> <br /> <br /> Then go to <br /> <br /> • Cd /etc/nginx/sites-available <br /> <br /> Here, search for website configuration file with below command<br /> <br /> • grep –rmv ‘/etc/nginx/sites-available/’ –e ‘b2b.bleckmann.com’<br /> <br /> then edit that conf file<br /> <br /> • vi b2b.conf<br /> <br /> change crt and key file path in conf file<br /> <br /> save and exit file<br /> <br /> • :wq!<br /> <br /> Note:- Repeat above steps of editing .conf file, if we have multiple domains<br /> <br /> Then check for any errors with below command<br /> <br /> • nginx –t<br /> <br /> and then reload nginx (DON’T RESTART)<br /> <br /> • systemctl reload nginx<br /> <br /> At last, browse websites and verify those padlocks and certificate information<br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> Email Sending from Magento<br /> ----------------------------<br /> <br /> - We use SMTP with nagios account<br /> <br /> - Office 365 use TLS not SSL<br /> <br /> <br /> Login to server having issue in sending email and run below command<br /> <br /> • cd /home/neal/sendemail/<br /> <br /> • apt-get install libnet-ssleay-perl libio-socket-ssl-perl libnet-smtp-ssl-perl<br /> <br /> Note:- sendemail folder is not available on server by default.. it will be at github (https://github.com/mogaal/sendemail) <br /> <br /> <br /> Login to nagios.apoyar<br /> <br /> • Cd /usr/local/etc/objects<br /> <br /> • Vi commands.cfg<br /> <br /> Check for to test at command line in commands.cfg file<br /> <br /> Copy that command and run on server having issue in sending email, change email id in below command, mention the one which having issue<br /> <br /> We can get that email id from magento, at below path<br /> <br /> Store/configuration/general/store email<br /> <br /> • ./sendEmail -o tls=yes -s smtp.office365.com:587 -xu nagios@apoyar.eu -xp Ap0yar4321 -t karolp@apoyar.eu -f nagios@apoyar.eu -u &quot;** Subject **&quot; -m &quot;***** Nagios ***&quot;<br /> <br /> And at last, check with test mail.<br /> <br /> <br /> <br /> Killing Processes on ZEB &amp; PCR servers <br /> ---------------------------------------<br /> <br /> Login to server<br /> <br /> Check for service called magento with below command<br /> <br /> • ps –aux | grep magento<br /> <br /> Check for any java services with below command<br /> <br /> • ps –aux | grep java<br /> <br /> Once we run above commands, will get running services with Some ID’s<br /> <br /> So, using that ID’s we can kill that processes, as below<br /> <br /> • Kill ID e.g. kill 9423<br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> After confirming that all db agent and machine agent are stopped, we need to manually start them, for that run below commands<br /> PCR:<br /> <br /> • cd /opt/appdynamics/db-agent/<br /> nohup java -Ddbagent.name=live-pcr -jar db-agent.jar &amp;<br /> <br /> • cd /opt/appdynamics/machine_agent<br /> nohup java -Dappdynamics.agent.maxMetrics=5000 -jar machineagent.jar &amp;<br /> <br /> Zeb:<br /> <br /> • cd /opt/appdynamics/db-agent/<br /> nohup java -jar db-agent.jar &amp;<br /> <br /> • cd /opt/appdynamics/machine_agent<br /> nohup java -Dappdynamics.agent.maxMetrics=5000 -jar machineagent.jar &amp;<br /> <br /> • cd /usr/local/bin/<br /> nohup webm_encode.sh &quot;/var/www/html/migration/pub/media/product_videos/live&quot; &amp;<br /> ...<br /> additional instances to be started if other paths need to be watched.</div>

Admin