FirstServed Homepage FirstServed Web Hosting | Housing | Domain Names Order Hosting and Domain names FirstServed Help | Support FirstServed Company Information
FirstServed Technical Blog
  • 27th Jun, 2008

    So, you are searching for these real old Centos RPMs?
    For example for an old kernel module for a machine you can’t reboot.
    (Kernel update still means a reboot…)
    You can find it here:

    vault.centos.org

    No Comments
  • 22nd May, 2008

    Hi,

    A quick guide on how to create selfsigned certificates using openssl:

    Setup Ca environment:

    vi /etc/pki/tls/openssl.cnf
    dir             = /usr/local/lib/CA     # Where everything is kept
    
    cd /usr/local/lib
    mkdir CA
    mkdir newcerts private
    echo '01' > serial
    touch index.txt
    
    cd /usr/local/lib/CA
    

    Generate key:

    openssl genrsa -des3 -out server.key 1024
    Generating RSA private key, 1024 bit long modulus
    ......................................++++++
    ................................................++++++
    e is 65537 (0x10001)
    Enter pass phrase for server.key:
    Verifying - Enter pass phrase for server.key:

    Generate self signed root certificate:

    openssl req -new -x509 -days 3560 -key server.key -out server.crt
    Enter pass phrase for server.key:
    You are about to be asked to enter information that will be incorporated
    into your certificate request.
    What you are about to enter is what is called a Distinguished Name or a DN.
    There are quite a few fields but you can leave some blank
    For some fields there will be a default value,
    If you enter '.', the field will be left blank.
    -----
    Country Name (2 letter code) [GB]:BE
    State or Province Name (full name) [Berkshire]:Antwerpen
    Locality Name (eg, city) [Newbury]:Berchem
    Organization Name (eg, company) [My Company Ltd]:FirstServed NV/SA
    Organizational Unit Name (eg, section) []:
    Common Name (eg, your name or your server's hostname) []:ca.firstserved.net
    Email Address []:nospam@firstserved.net

    Create client key:

    openssl genrsa -out quorumd.key 1024
    Generating RSA private key, 1024 bit long modulus
    ............++++++
    .........................................................++++++
    e is 65537 (0x10001)

    Create the certificate request for the client:

    openssl req -new -days 3560 -key quorumd.key -out quorumd.csr
    You are about to be asked to enter information that will be incorporated
    into your certificate request.
    What you are about to enter is what is called a Distinguished Name or a DN.
    There are quite a few fields but you can leave some blank
    For some fields there will be a default value,
    If you enter '.', the field will be left blank.
    -----
    Country Name (2 letter code) [GB]:BE
    State or Province Name (full name) [Berkshire]:Antwerpen
    Locality Name (eg, city) [Newbury]:Berchem
    Organization Name (eg, company) [My Company Ltd]:FirstServed NV/SA
    Organizational Unit Name (eg, section) []:
    Common Name (eg, your name or your server's hostname) []:bemobile
    Email Address []:nospam@firstserved.net
    
    Please enter the following 'extra' attributes
    to be sent with your certificate request
    A challenge password []:
    An optional company name []:

    Sign the request using your self-signed certificate:

    openssl ca -days 3560 -in quorumd.csr -cert server.crt -keyfile server.key -out quorumd.crt
    Using configuration from /etc/pki/tls/openssl.cnf
    Enter pass phrase for server.key:
    Check that the request matches the signature
    Signature ok
    Certificate Details:
            Serial Number: 1 (0x1)
            Validity
                Not Before: May 22 10:44:49 2008 GMT
                Not After : Feb 19 10:44:49 2018 GMT
            Subject:
                countryName               = BE
                stateOrProvinceName       = Antwerpen
                organizationName          = FirstServed NV/SA
                commonName                = bemobile
                emailAddress              = nospam@firstserved.net
            X509v3 extensions:
                X509v3 Basic Constraints:
                    CA:FALSE
                Netscape Comment:
                    OpenSSL Generated Certificate
                X509v3 Subject Key Identifier:
                    29:A5:E4:6A:F4:4E:89:35:5D:7D:C6:9A:CE:B9:D0:1B:75:0A:7F:8C
                X509v3 Authority Key Identifier:
                    keyid:4B:B2:BA:F6:65:66:60:EB:CC:45:F5:57:34:FB:E9:AB:40:CF:B4:E8
    
    Certificate is to be certified until Feb 19 10:44:49 2018 GMT (3560 days)
    Sign the certificate? [y/n]:y
     
    1 out of 1 certificate requests certified, commit? [y/n]y
    Write out database with 1 new entries
    Data Base Updated

    That should do it.

    Koen

     
    Comments Off
  • 4th Jan, 2008

    Our Mailservers use a separate disk to store the mailboxes.
    These are mounted on a folder, but most commonly used via a symbolic link that points to this folder.

    This is where bacula gets stuck.
    It creates the symbolic link, which is invalid due to the temporaty restore location and then crashes because it cannot create the files and directories.

    To solve this, manually create the symbolic link location, but do not create it as a link, create it as a folder.
    This is probably a miss-configuration on our side, but it might be a problem nontheless.

    Example:
    Mail location: /var/spool/mail
    Link: /var/mail
    Bacula backs up: /var/mail
    Manually create /tmp/bacula-restores/var/mail/ to have a successfull restore.

    No Comments
  • 27th Sep, 2007

    Cisco VPN Client (5.0.01.0600) does work on Vista x86.
    It only seems to have problems on localized versions of the OS.

    I know this because I installed it on a native english version of Vista and had no problems.
    However, my localized (Dutch) version of Viste does throw out some errors during the installation process.

    The problem comes from the translations of the user groups in Windows. The installer searches for the "Users" and "INTERACTIVE" usergroups, but is unable to find them because they exist under a different (localized) name. So the solution is to manually make these groups in Vista.
    Not a single problem, but Vista Home Premium (the localized version I’m testing on) doesn’t have the GUI components to manage usergroups.
    Luckily, we still have the good old "net" command which can do lots of things.
    Right before the installation, enter these commands in the command prompt:
        net localgroup Users /add
        net localgroup INTERACTIVE /add
    This will create the needed usergroups for the installer.
    Now install you VPN client and after installation enter the following commands to remove the groups again. (The client itself works perfectly without these groups.)
        net localgroup Users /delete
        net localgroup INTERACTIVE /delete

    The VPN client shouldn’t have any problems running on Vista x86 (tested on Business and Home Premium).

    On to the next hurdle! x86_64
    (But I’ve heared some rumors on the internet saying I’ll need AnyConnect for that…)

    No Comments