Skip to main content

Posts

Installing Purchased SSL

After purchasing a certificate credit, you will need to generate the certificate. A csr file and key will be required. These can be generated at  https://csrgenerator.com/ Fill in the information and generate CSR + Key Copy and paste the CSR in the SSL Provider's site and get the cert Paste the cert date and key data in respective boxes of SSL configuration in the domain hosting or load balancer.
Post a Comment
Read more

CRON Jobs

In Sentora Environment, CRON Jobs can be run using Root Level Crons or Sentora Crons. If it is a system level command like restarting services or backup outside the root, then system level cron should be used. For running php scripts like sending daily summary, mailing database backup, etc then Sentora cron should be used.
Post a Comment
Read more

Hardening & Crash Protecting CentOS + Sentora Server

It often happens that database or dns of a server fails and the sites hosted in it stop working. A server reboot or a start of the service brings things to normal. This can be stopped by server hardening as attacks are a prime reason for overloading and crashing of services. Hardening is delat in this article. However, services may stop for internal reasons too. So we will add a cron job that will check for service status and start it if it is crashed due to any reason. List all services and their status systemctl list-unit-files (exit by ctrl+c) Common services APACHE - httpd DATABASE - mariadb or mariadb.service DNS - named or named.service service named status Auto Recovery 1. Create a file named.bash #!/bin/bash service=mariadb if (( $(ps -ef | grep -v grep | grep $service | wc -l) != 2 )) then echo $(ps -ef | grep -v grep | grep $service | wc -l) echo "$service is running!!!" #else #systemctl start named.service fi
Post a Comment
Read more

Installing SSL in a Site in Sentora / Cent OS

In Console yum install certbot python2-certbot-apache mod_ssl openssl (If it shows any error, then  yum install epel-release and run above command again) THIS WAS NOT REQUIRED WHEN I WORKED ON CSMCL.IN. So this step can be dropped. Comment listen 443 to #listen 443 in  /etc/httpd/conf.d/ssl.conf using NANO (Still to figure out if above line is mandatory or not. Will check when installing it in third server) THERE ARE 2 DASHES BEFORE APACHE BELOW. certbot –apache for enabling ssl in all sites on the server certbot –apache –d domain1 –d domain 2 for enabling ssl on selected domains if it fails, use certbot -d domain1 -d domain2  (using -apache causes issue in some systems) Rest is fully automatic Later Check certs certbot certificates One click renew all expiring certs certbot renew /// In case you have to delete a cert certbot revoke -- cert - path / etc / letsencrypt / live / CERTNAME / cert . pem certbot delete --...
Post a Comment
Read more

Handling the CSS Caching Issue

We web developers often come across a scenario where we make a major change in the CSS values and the site is totally damaged for the viewer due to a broken / cached css. This becomes very crucial when the change involves update of both the css file contents and a change in the structure of the front end. To handle such a scenario, specially when you are expecting to update the css too often, the trick below helps a lot. Instead of calling the css using <link href="/theme/public.css" rel="stylesheet" type="text/css"> write the call in a php file called css.php (You can use any other name and extension) Paste the css call in the php file and modify the name of called css to something unique. I prefer adding a yymmdd or v1,v2 etc <link href="/theme/public-190104.css" rel="stylesheet" type="text/css"> Now include the css.php in the page at the place where you would have called the css. Done. Now whenever you make a c...
Post a Comment
Read more