• Check a Certificate Signing Request (CSR)

openssl req -text -noout -verify -in CSR.csr

• Check a private key

openssl rsa -in privateKey.key -check

• Check a certificate

openssl x509 -in certificate.crt -text -noout

• Check a PKCS#12 file (.pfx or .p12)

openssl pkcs12 -info -in keyStore.p12

Debugging Using OpenSSL

If you are receiving an error that the private doesn’t match the certificate or that a certificate that you installed to a site is not trusted, try one of these commands..

• Check an MD5 hash of the public key to ensure that it matches with what is in a CSR or private key

openssl x509 -noout -modulus -in certificate.crt | openssl md5
openssl rsa -noout -modulus -in privateKey.key | openssl md5
openssl req -noout -modulus -in CSR.csr | openssl md5

• All the certificates (including Intermediates) should be displayed

openssl s_client -connect www.paypal.com:443

]]> http://LinuxHelps.com/2012/02/verify-the-certificates-using-openssl-command/feed/ http://LinuxHelps.com/2012/02/how-to-determine-if-the-solaris-kernel-is-32-or-64-bit/ http://LinuxHelps.com/2012/02/how-to-determine-if-the-solaris-kernel-is-32-or-64-bit/#comments Mon, 06 Feb 2012 18:44:41 +0000 sibu http://LinuxHelps.com/?p=264

OS details:

root@ server:/root$ uname -a

SunOS server 5.10 Generic_137111-02 sun4v sparc SUNW,T5140

isainfo command will give you whether the solaris kernel is 32 bit or 64 bit

$ isainfo -b

64

$

The -b option prints the number of bits in the address space of the native instruction set. In this case, 64 bits.

$ isainfo -kv

64-bit sparcv9 kernel modules

$

The -k option prints the name of the instruction set used by the operating system kernel components, i.e. sparcv9; -v provides more detailed information, i.e. 64-bit sparcv9

Sed is a non-interactive editor. Instead of altering a file by moving the cursor on the screen, you use a script of editing instructions to sed, plus the name of the file to edit. You can also describe sed as a filter.
Let’s have a look at some examples:
$sed ’s/to_be_replaced/replaced/g’ /tmp/dummy

Sed replaces the string ‘to_be_replaced’ with the string ‘replaced’ and reads from the /tmp/dummy file. The result will be sent to stdout (normally the console) but you can also add ‘> capture’ to the end of the line above so that sed sends the output to the file ‘capture’.
$sed 12, 18d /tmp/dummy

Sed shows all lines except lines 12 to 18. The original file is not altered by this command.

awk (manipulation of datafiles, text retrieval and processing)

Many implementations of the AWK programming language exist. AWK scans for a pattern, and for every matching pattern a action will be performed.

I’ve created a dummy file containing the following lines:
“test123
test
tteesstt”

$awk ‘/test/ {print}’ /tmp/dummy

test123
test

The pattern AWK looks for is ‘test’ and the action it performs when it found a line in the file /tmp/dummy with the string ‘test’ is ‘print’.
$awk ‘/test/ {i=i+1} END {print i}’ /tmp/dummy

Another example

-bash-3.00# ls -al |grep boot
-rw——- 1 root root 170 Aug 7 17:14 boot.log
-rw——- 1 root root 0 May 9 2010 boot.log.1
-rw——- 1 root root 0 May 2 2010 boot.log.2

-bash-3.00# ls -al |grep boot |awk ‘{print $9 }’
boot.log
boot.log.1
boot.log.2
-bash-3.00#

(Make sure that you have tacken a db backup)

From phpmyadmin  select your WordPress database, click the sql tab, and enter the following query:

SELECT *FROM wp_comments WHERE comment_approved ="0"

That will select all the un-moderated comments. Then enter this query:

delete from wp_comments WHERE comment_approved ="0"

Run a check and repair on the WordPress database afterwards to be sure everything is working fine.

JBoss Application Server (or JBoss AS) is a free software/open-source Java EE-based application server. Because it is Java-based, the JBoss application server operates cross-platform: usable on any operating system that Java supports. JBoss AS was developed by JBoss, now a division of Red Hat.

Versions

JBoss AS 4.0, a Java EE 1.4 application server, features an embedded Apache Tomcat 5.5 servlet container. It supports any Java Virtual Machine between versions 1.4 and 1.6.

JBoss AS 4.2 also functions as a Java EE 1.4 application server, but deploys Enterprise JavaBeans 3.0 by default. It requires the Java Development Kit version 5. Tomcat 5.5 comes bundled with it.

JBoss AS 5.1, released as of 2009, operates as a Java EE 5 application server. It is a minor update of the major release JBoss AS 5.0

Boss AS 6.0,[3] the current stable release and an unofficial implementation of Java EE 6, was released on December 28, 2010.

The output of a command will redirect to another file.

Eg:          ls -l > list.txt

2.) stderr to a  file

The following command will redirect the  stderr ouput of a program to a new file.

Eg:       grep sibu * 2> grep-errors.txt

Here, a file called ‘grep-errors.txt’ will be created and it will contain what you would see the stderr portion of the output of the ‘grep sibu *’ command.

3.) Stdout to Stderr

This will cause the stderr ouput of a program to be written to the same filedescriptor than stdout.

Eg:          grep sibu * 1>&2

Here, the stdout portion of the command is sent to stderr..

4.): stderr to stdout

This will cause the stderr ouput of a program to be written to the same filedescriptor than stdout.

Eg:       grep * 2>&1

Here, the stderr portion of the command is sent to stdout.

5.) stderr and stdout 2 file

This will place every output of a program to a file. This is suitable sometimes for cron entries, if you want a command to pass in absolute silence.

Eg:       rm -f $(find / -name core) &> /dev/null

Options  can be set to None, in which case none of the extra features are enabled.

All :

All options except for MultiViews. (Default Settings).

ExecCGI :

Execution of CGI scripts using mod_cgi is permitted.

FollowSymLinks :

The server will follow symbolic links in this directory.

Includes :

Server-side includes provided by mod_include are permitted.

Indexes :

If the directory does not contain any  DirectoryIndex (e.g., index.html) in that directory, then mod_autoindex will return a formatted listing of the directory.

MultiViews :

Content negotiated “MultiViews” are allowed using mod_negotiation.

You have to be very care full while using + and - symbols with Options

For example, without any + and - symbols:

<Directory /home/sibu>
Options Indexes FollowSymLinks
</Directory>

<Directory /home/sibu/test>
Options Includes
</Directory>

then only Includes will be set for the /home/sibu/test directory.

If the second Options directive uses the + and - symbols:

<Directory /home/sibu>
Options Indexes FollowSymLinks
</Directory>

<Directory /home/sibu/test>
Options +Includes -Indexes
</Directory>

then the options FollowSymLinks and Includes are set for the /home/sibu/test directory.

SSI (Server Side Includes) are directives that are placed in HTML pages, and evaluated on the server while the pages are being served.  Its use to add dynamically generated content to an existing HTML page.

SSI configurations

We must have mod_include module installed and enabled on apache. Also need to  have the following directive either in your httpd.conf file, or in a .htaccess file:

Options +Includes

This tells Apache that you want to permit files to be parsed for SSI directives.

It always better to tell Apache that which files should be parsed. There are two ways to do this. We can configure to parse any file with a particular file extension, such as .shtml, with the following directives:

        AddType text/html .shtml

        AddHandler server-parsed .shtml

One disadvantage to this approach is that if you wanted to add SSI directives to an existing page, you would have to change the name of that page in order to give it a .shtml extension.

The other method is to use the XBitHack directive:

        XBitHack on

XBitHack tells Apache to parse files for SSI directives if they have the execute bit set. So, to add SSI directives to an existing page, rather than having to change the file name, you would just need to make the file executable using chmod.

chmod +x pagename.html

While executing the mysqldump command  you may have experienced following errors.

mysqldump: Got error: 1044: Access denied for user ‘root’@'localhost’ to database ‘information_schema’ when using LOCK TABLES

To quickly fix this problem use the following switch when running mysqldump for MySQL database backups.

mysqldump -u root -p -all-databases -single-transaction > all.sql

# vzctl create VEID –ostemplate osname
# vzctl set VEID –ipadd a.b.c.d –save
# vzctl start VEID

Here VEID is the numeric ID for the VPS;
osname is the name of the OS template for the VE,
and a.b.c.d is the IP address to be assigned to the VE.

Example:

# vzctl create 101 –ostemplate fedora-core-5-minimal
# vzctl set 101 –ipadd 10.1.2.5 –save
# vzctl start 101

VE should be up and running now; you can see its processes

# vzctl exec VEID ps ax

To provide VEID password

# vzctl exec VEID passwd ‘username’

To enter VE give the following command:

# vzctl enter VEID
entered into VPS VEID
[ve]#

Adding ip address to a VPS and creating networking

The command syntax below to add networking to the existing VPS

# vzctl set VEID –ipadd ipaddr  –nameserver nameserverIP  –hostname hostname –save

The –ipadd parameter assigns the IP address to the first venet interface in the guest OS, the –hostname assigns the VPS its hostname, and the –nameserver parameter provides the first nameserver.

How to Assign fixed amount of RAM for the created VPS?

Here is an example of setting the VPS with a guaranteed 256 MB RAM and a maximum of 1GB RAM.

vzctl set vpsid –vmguarpages 65536 –save
vzctl set vpsid –privvmpages 262144 –save

vmguarpages ->The memory that is ‘guaranteed’ to the VPS
privvmpages -> The ‘maximum’ amount of memory that will be granted to the VPS

Replace vpsid with with the VPS_ID.

Example:

vzctl set 105 –vmguarpages 65536 –save
vzctl set 105 –privvmpages 262144 –save

Start your VPS with the command

vzctl start vpsid

Example : vzctl start 105