|
1 |
openssl genrsa -out ~/domain.com.ssl/domain.com.key 2048 |
|
1 |
openssl req -new -sha256 -key ~/domain.com.ssl/domain.com.key -out ~/domain.com.ssl/domain.com.csr |
https://support.rackspace.com/how-to/generate-a-csr-with-openssl/
Try to start firewalld service via the following command
|
1 |
systemctl start firewalld |
but get the following error after few seconds no response:
|
1 2 3 |
firewalld.service: Start operation timed out. Terminating. firewalld.service: Failed with result 'timeout'. systemd: Failed to start firewalld - dynamic firewall daemon. |
Execute the following command to restart firewalld service
|
1 |
systemctl stop firewalld;pkill -f firewalld;systemctl start firewalld |
.cpt is a encrypted file format, you can use ccrypt to create and decrypt .cpt file
|
1 |
ccencrypt /tmp/demo.txt |
|
1 |
ccdecrypt /tmp/demo.txt.cpt |
|
1 |
sudo yum install ccrypt |
|
1 |
sudo apt-get install ccrypt |
Short Version
|
1 |
ssh-keygen -t rsa |
Increased Security
|
1 |
ssh-keygen -b 4096 -t rsa |
My Favorite
|
1 |
ssh-keygen -b 4096 -t rsa -f <EMAIL ADDRESS> -C <EMAIL ADDRESS> |
Assume you have a CER is an DER encoded X.509 certificate in binary form, and you want to have a PEM-encoded X.509 Certificate file for Apache.
The following command may help:
|
1 |
openssl x509 -inform DER -in certfile.cer -out certfile.crt |
Apache/mod_ssl request PEM-encoded X.509 Certificate file
Reference: http://www.modssl.org/docs/2.8/ssl_reference.html#ToC10
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
SSLCertificateFile Name: SSLCertificateFile Description: Server PEM-encoded X.509 Certificate file Syntax: SSLCertificateFile filename Default: None Context: server config, virtual host Override: Not applicable Status: Extension Module: mod_ssl Compatibility: mod_ssl 2.0 This directive points to the PEM-encoded Certificate file for the server and optionally also to the corresponding RSA or DSA Private Key file for it (contained in the same file). If the contained Private Key is encrypted the Pass Phrase dialog is forced at startup time. This directive can be used up to two times (referencing different filenames) when both a RSA and a DSA based server certificate is used in parallel. Example: SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt |