configurations in the conf/SSL. conf configuration file are as follows:Listen 443.Sslpassphrasedialog buildin# Sslpassphrasedialog Exec:/path/to/ProgramSslsessioncache DBM:/usr/local/apache2/logs/ssl_scacheSslsessioncachetimeout 300Sslmutex file:/usr/local/apache2/logs/ssl_mutex# General setup for the Virtual HostDocumentRoot "/usr/local/apache2/htdocs"Servername www.example.com: 443Serveradmin you@example.comErrorlog/usr/local/apache2/logs/error_logTransferlog/usr/local/apache2/logs/access_log
RSA keysOpenSSL genrsa-out privkey. pem 2048
Some certificates require 1024, so you must:OpenSSL genrsa-out privkey. pem 1024
② Generate a certificate requestOpenSSL req-New-key privkey. pem-out cert. CSR
Will prompt to enter the province, city, domain name information, etc., it is important that email must be your domain name suffix, such as webmaster@zou.lu and can accept the mail!
In this way, there is a
generate a Certificate Signing Request (CSR) file.The following is an introduction from the certificate assistant. After generating the CSR, click Continue on the Keychain Access to return to APNs Assistant.When you create a CSR, Keychain Access generates a private and public encryption key pair. By default, private keys are stored in your Login keychain. The pu
certificate, hardware device binding to one, in the developer Center is configured to add to Xcode, You can also directly connect to the developer center in Xcode, the real machine debugging needs to add the udid of the real machine in the PP file, is the real machine debugging and must rack necessary treasures;Usually our production process is generally based on the above sequence, first use the developer account to login to the developer Center, create a developer certificate, AppID, in the A
1. First to generate the server-side private key (key file):Command:OpenSSL genrsa-des3-out Server.key 1024The runtime prompts for a password, which is used to encrypt the key file (the parameter des3 is the encryption algorithm, and of course you can choose other algorithms that you think are safe). You need to enter a password whenever you need to read this file (via the command or API provided by OpenSSL)2. Generate CSR and key on the serverCommand
Environment: zimbra8.5.1
Install Zimbra Third party signing certificate must be generated prior to the CSR to Third-party certification applications, Third-party signature agencies can choose Vauton and Startssl, I choose here is Vauton free 1-year certificate. Before because of the wrong way not to generate their own CSR has gone a lot of detours, now recorded here.
Vauton Certificate official website: h
:
Load Average
For example 1 1 nuclear cpu,load Average
To view CPU information: grep ' model name '/proc/cpuinfo
Context Switch Rate. is the process (Thread) switch, if too many switches, the CPU will be busy switching, also can cause impact throughput. The 2nd section of this article, "High-performance server Architecture", is the problem. How much is appropriate? Google has a big circle, without a definitive explanation. The context switch is largely composed of two parts: inter
service option below to create a push certificate (server-side push certificate see below), Then in the PP file to bind all the certificate ID, add debugging real machine, etc.;The following procedures are described:1, the developer certificate production, first login to the developer center, find the Certificate configuration section, poke into the certificate, will show the following interface, click on the upper right corner of the plusThe following interface appears, the operation is repeat
This article involves many technical terms, such as key pairs, private keys, public keys, and certificates. For more information about encryption theories and concepts, see SSL and digital certificates. I will not repeat these concepts in this article.1. Apply for an SSL CertificateYou can purchase SSL certificates from many websites. I often use GeoTrust. Certificates are charged (it is said that there are free certificates, but they have not been tried), and the prices are expensive and cheap.
Publishing certificate, developing a test certificate for real machine debugging, publishing the certificate for submission to AppStore, Next, you will be prompted to create a CSR file, which is the certificate signing request file;Then save the CSR file to a place;Note: The CSR file is made as often as possible for each certificate, separating common names, bec
simple certificate we do not have to choose the appropriate app ID but directly into the following interface (note that the interface just teaches us how to generate a CSR file can be translated in English)Click Continue to enter the following interface, which requires us to upload a CSR (containing the current computer's basic information) fileNow we want to generate the corresponding
certificate (server-side push certificate see below), Then in the PP file to bind all the certificate ID, add debugging real machine, etc.;The following procedures are described:1, the developer certificate production, first login to the developer center, find the Certificate configuration section, poke into the certificate, will show the following interface, click on the upper right corner of the plusThe following interface appears, the operation is repeated two times, respectively, the develo
all the certificate ID, add debugging real machine, etc.;The following procedures are described:1, the developer certificate production, first login to the developer center, find the Certificate configuration section, poke into the certificate, will show the following interface, click on the upper right corner of the plusThe following interface appears, the operation is repeated two times, respectively, the development of test certificates and publish certificates, the development of test certi
the key to log in to this site is saved, is to log on to the site after the credentials, double-click the installation and then re-visit the official websiteClick hereEnter the domain name, submit.Next, fill in the two-level domain name, only the lower half of the image.is a way to prompt a CSR file to be generated by the OpenSSL command or by downloading the StartComTool.exe toolThe OpenSSL command used here is executed directly in Linux:OpenSSL req
Profile certificate:
The original developer certificate is about to expire. I directly Revoke the original developer certificate, so it starts with the developer certificate.
1. developer certificate creation: log on to the Developer Center, find the certificate configuration section, select Certificates, and click the plus sign in the upper right corner:
Two operations are required to publish the certificate and the developer certificate. The developer certificate is used for real-machine deb
It's actually quite simple. red Hat Chinese site also said, as long as you change/etc/krb5.conf and/etc/samba/smb. conf files, and then add them using net ads join.
At the beginning, there were always errors when addingReference:Root @ CSR-SERVER-TEST ~] # Net ads join-uadministratorAdministrator's password:Winscard_clnt.c: 320: scardestablishcontextth () cannot open public shared file:/var/run/pcscd. PubWinscard_clnt.c: 320: scardestablishcontextth (
. Free, 2. Although there is a validity period of 3 months, it can be automatically updated through scripts. 3. You do not have to register any account on the website of the other party. All the processes are done on the local machine.2. Environment
1. This article uses centos 7.2.1511 and kernel version 3.10.0;2. nginx has been installed. The version is nginx version: nginx/1.10.2;3. The nginx working directory is/opt/service/nginx/. The directory is as follows:
# Tree/opt/service/nginx/
/O
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.