template example can be used to generate reverse proxy configurations for docker containers. This template uses golang. The groupby template function is used to group running containers. groups are based on VIRTUAL_HOST environment variables. This method simplifies the traversal of containers to generate the server load balancer backend and supports deployment with zero downtime.
{Range
Containers: = groupBy "Env. VIRTUAL_HOST "}}Upstream {{
Host }}{
{Range
Value: = containers }}{
Address:
, region, organization, and email in sequence. # The most important thing is to have a common name, which can be your name or domain name. If you apply for https (do not use your own certificate, apply to CA), this must match the domain name; otherwise, a browser alarm will be triggered. After the generated csr file is signed by the CA, the server certificate sudo openssl req-new-key testcert is formed. key-out testcert. csr # generate keysudo openssl rsa-in testcert without a password. key-out
"Disableuploadtimeout= "true"enablelookups= "true"KeepAliveTimeout= "30000"Keystorefile= "D:\https\apache-tomcat-7.0.78\conf\ssl\tomcat.jks"Keystorepass= "Cert_test"MaxIdleTime= "60000"maxsparethreads= "+"MaxThreads= " the"minsparethreads= "+"Port= "8443"Scheme= "https"Secure= "true"Sslprotocol= "TLS"Truststorefile= "D:\https\apache-tomcat-7.0.78\conf\ssl\truststore.jks"Truststorepass= "Cert_test"/>The path in this article is as follows, fill in the actual path: Tomcat.jks path: D:\https\apache-
CentOS under Configuration Php,phpmyadmin
Original articles, reproduced please specify the source: http://www.aj2ee.com
It took some time today to configure the PHP environment on your VPS and configure the phpMyAdmin to manage the MySQL database.Previously wrote several Linux under the Apache,jdk,tomcat,svn,vsftpd,yum configuration. Apache has integrated well with TOMCAT,SVN.To use phpMyAdmin to manage the MySQL database, you have to configure the PHP environment, I still use yum to install PH
MySQL: SSL remote login bitsCN.com
MySQL: SSL remote loginEnvironment: linux mint 15Install openssl:1Sudo apt-get install opensslCheck whether mysql ssl is enabled (in the mysql command line ):1Show variables like '% ssl % ';If not, the values of the 'have _ openssl 'and 'Have _ ssl' options are DISABLED.Generate a certificate (under the mysql server host ):We recommend that you create the certs directory in/etc/mysql:1# Cd/etc/mysql/2# Mkdir certs3#
Experimental environment:
Virtual machine: Vmware®workstation ProHost A:ip to 10.1.255.55/16, create CA and provide CA service to other hostsHost B: For httpd server, IP for 10.1.249.115/161, view the OpenSSL profile/etc/pki/tls/openssl.cnf
[Root@localhost ~]# cat/etc/pki/tls/openssl.cnf (View the contents of the CA portion of the configuration file)
......
[CA]Default_ca = ca_default # The default CA section
####################################################################[Ca_default]
/secret-t 127.0.0.1:6082 # Login Admin command lineVcl.list # List all the configurationsVcl.load TEST1/ETC/VARNISH/DEFAULT.VCL # Load compiled new configuration, test1 is the configuration name, TEST.VCL is the configuration fileVcl.use Test1 # Use configuration, specify the configuration name, the current configuration to use the last vcl.use to prevailVcl.show test1 # Show configuration content, specify configuration name##############################4. Configure Nginx SSL AccessConfiguring C
PHP, C #, and JAVARSA signatures and signatures are found on the Internet. To make a contribution, we must repost and express our gratitude to Zhuo Ermei for her selfless dedication. 1) the signature algorithm uses SHA1withRSA. 2) the signed data bit base64 encoded ciphertext string. 3) the formats of private keys signed in the three environments are different. openssl is required for conversion. ----------------------------------- PHP, C # and JAVARSA signatures and signatures
This feature h
= Server
cd/etc/pki/ca
# Generate key
OpenSSL genrsa-out Private/myca.key 1024
# generating a self-signed certificate
OpenSSL Req-new-x509-key private/myca.key-out certs/myca.crt
By importing this CRT into the client browser, the certificate warning will not be displayed. 2 server Certificate
Cd/etc/pki/tls
OpenSSL genrsa-out private/sv.key
# Build request
OpenSSL Req-new-key private/sv.key-out Priva TE/SV.CSR
# Use root certificate to sign
OpenS
Classic IT Website Cisco Blue network technical college http://www.bluestudy.netComputer World website-e HNA logo Co., http://www.ccw.com.cn.Router area http://www.ccidnet.com/tech/func/router/index.html of competitionBeijing Cisco Learning Group Co., http://www.bjcisco.com.Cisco and Network Technology Co., http://www.net130.com. Http://www.cisco.com/go/ccnaHttp://www.examnotes.comHttp://www.boson.comHttp://www.certificationzone.comHttp://www.onlin
Mail and email service (III): POP3 authentication mechanism and relay rules
We use Mago's "Create an existing Mail System based on the virtual user's mail system architecture" to implement the POP3 authentication mechanism.
If you do not have an email service system that can be used, you can follow the instructions provided by magio and proceed step by step. I believe you can do this.
Enter the subject:
POP3 authentication mechanism:
1. Create a CA Service to prepare for certificate issuance
# C
{Code ...} I wrote a Python version using pyopenssl, as follows: {code ...} the problem mainly lies in x509data. How can I get the data in x509data? In Python, this is an object.
function getCertId($cert_path) { $pkcs12certdata = file_get_contents ( $cert_path ); openssl_pkcs12_read ( $pkcs12certdata, $certs, SDK_SIGN_CERT_PWD ); $x509data = $certs ['cert']; openssl_x509_read ( $x509data ); $
typeName (192.168.10.10: root): user1230 Login successful. by remote host.You can see that you can log on.Ftps ConfigurationNote: first, clear the configuration in tcp_wrapper to avoid affecting access.[Root @ localhost Server] # rpm-ivh libsmi-0.4.5-2.el5.i386.rpm[Root @ localhost Server] # rpm-ivh wireshark-1.0.8-1.el5_3.1.i386.rpm[Root @ localhost Server] # tshark-ni eth0-R "tcp. dstport eq 21"You can use the packet capture tool to view the user name and password.CAThe private key is cakey.
/download/nginx-1.13.5.tar.gz3. Decompressionmkdir NGINXFILESTAR-ZXVF nginx-1.13.5.tar.gz-c Nginxfiles4. Switch directoriesCD NGINXFILES/CD nginx-1.13.5/Such as:5. Compile and installExecute the following command# Configuration: Additional modules need to be installed here./configure--prefix=/usr/local/nginx--with-http_ssl_module--with-stream--with-mail=dynamic# compilationMake# installationMake installThe following are the results of the installation6. Create a soft linkAs described above, you
In the process of developing or using SSL, a lot of software needs us to provide Java KeyStore, especially some Java-based middleware products.Our usual practice is that the JDK comes with a tool command (Keytool) to do, for example, the following exampleKeytool-import-v-alias entrust2048-file D:\certs\EnTrust2048.cer-keystore D:\certs\test.jksKeytool-import-v-alias Entrustcertificationauthorityl1c-file D:\
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.