CSR Generation & Configuration

CSR Generation (Bleckmann)

CSR – Certificate Signing Request

Browse https://returns.bleckmann.com/index.php/frontend

click on padlock

click on certificate

Click on Details tab, under this click on subject

Copy all information under subject to notepad

Login to phobos.apoyar

Go to below path

• cd /home/neal/certs

Generate key using below command with proper key name

• openssl genrsa -out b2b.bleckmann.com.key 2048

Generate CSR with below command with appropriate information, which we have copied in notepad

• openssl req -new -key b2b.bleckmann.com.key -sha256 -nodes -subj '/C=BE/ST= Overijssel /L= Oldenzaal/O= Bleckmann Nederland B.V. STREET = Eekboerstraat 25 /OU=IT/CN= b2b.bleckmann.com /emailAddress=support2@apoyar.eu/subjectAltName=DNS.1= b2b.bleckmann.com, DNS.2= labelapp.bleckmann.com, DNS.3= carrierstatus.bleckmann.com ' > b2b.bleckmann.com.csr

After generating check CSR information using below command

• openssl req -in b2b.bleckmann.com.csr -noout –text

Configuring Certificate for Renewal

Login to nagios.apoyar

Copy b2b.bleckmann.com.key file to nagios from phobos.apoyar

• scp neal@phobos:/home/neal/b2b.bleckmann.com.key ./

Note:- If getting error while copying, need to change permission of that file on phobos.apoyar

• chmod 444 b2b.bleckmann.com.key

then copy same key file to returns server (bleckmann live)

• scp b2b.bleckmann.com.key returns@10.208.192.174:/home/returns/

After this move crt file from returns server to nagios and then to phobos using below commands

• scp returns@10.208.192.174:/home/returns/b2b.bleckmann.com.crt ./

• scp b2b.bleckmann.com.crt neal@phobos:/home/neal/

Login to phobos.apoyar

Now, we have crt, csr and key at /home/neal/certs/ on phobos.apoyar

Now go to

• cd /home/neal/certs/generated/bleckmann

move all three files here

• mv /home/neal/certs/b2b.blecmann.com* ./

and then remove key file from nagios

Now, login to returns server

Compare crt and key file with below command

• openssl x509 -noout -modulus -in b2b.blecmann.com.crt | openssl md5 && openssl rsa -noout -modulus -in b2b.blecmann.com.key

Now, move crt & key to below path

• mv b2b.blecmann.com.crt /etc/ssl/certs/

• mv b2b.blecmann.com.key /etc/ssl/private/

Note:- If getting error while moving either crt or key, check for owner and permission and change if needed with below commands

• chown root:root filename

• chmod 400 filename

Then go to

• Cd /etc/nginx/sites-available

Here, search for website configuration file with below command

• grep –rmv ‘/etc/nginx/sites-available/’ –e ‘b2b.bleckmann.com’

then edit that conf file

• vi b2b.conf

change crt and key file path in conf file

save and exit file

• :wq!

Note:- Repeat above steps of editing .conf file, if we have multiple domains

Then check for any errors with below command

• nginx –t

and then reload nginx (DON’T RESTART)

• systemctl reload nginx

At last, browse websites and verify those padlocks and certificate information

Email Sending from Magento

- We use SMTP with nagios account

- Office 365 use TLS not SSL

Login to server having issue in sending email and run below command

• cd /home/neal/sendemail/

• apt-get install libnet-ssleay-perl libio-socket-ssl-perl libnet-smtp-ssl-perl

Note:- sendemail folder is not available on server by default.. it will be at github (https://github.com/mogaal/sendemail)

Login to nagios.apoyar

• Cd /usr/local/etc/objects

• Vi commands.cfg

Check for to test at command line in commands.cfg file

Copy that command and run on server having issue in sending email, change email id in below command, mention the one which having issue

We can get that email id from magento, at below path

Store/configuration/general/store email

• ./sendEmail -o tls=yes -s smtp.office365.com:587 -xu nagios@apoyar.eu -xp Ap0yar4321 -t karolp@apoyar.eu -f nagios@apoyar.eu -u "** Subject **" -m "***** Nagios ***"

And at last, check with test mail.

Killing Processes on ZEB & PCR servers

Login to server

Check for service called magento with below command

• ps –aux | grep magento

Check for any java services with below command

• ps –aux | grep java

Once we run above commands, will get running services with Some ID’s

So, using that ID’s we can kill that processes, as below

• Kill ID e.g. kill 9423

After confirming that all db agent and machine agent are stopped, we need to manually start them, for that run below commands PCR:

• cd /opt/appdynamics/db-agent/ nohup java -Ddbagent.name=live-pcr -jar db-agent.jar &

• cd /opt/appdynamics/machine_agent nohup java -Dappdynamics.agent.maxMetrics=5000 -jar machineagent.jar &

Zeb:

• cd /opt/appdynamics/db-agent/ nohup java -jar db-agent.jar &

• cd /opt/appdynamics/machine_agent nohup java -Dappdynamics.agent.maxMetrics=5000 -jar machineagent.jar &

• cd /usr/local/bin/ nohup webm_encode.sh "/var/www/html/migration/pub/media/product_videos/live" & ... additional instances to be started if other paths need to be watched.