to throw it? There are two ideas, one is to modify php.ini, and the other to change the Web. config.Modify PHP.ini:
Modify the php.ini file as follows
Log_errors = Off
In addition, PHP closed warning error, modify the php.ini file error_reporting, by default should be:
Display_errors = Offerror_reporting = E_all ~e_notice
If modified to this or appear warning error warning also removed:
error_reporting = e_all ~e_notice | E_warning
Finally restart IIS
Res
The first part of the site to build the two main elements: domain name and server, this time to say is the domain name resolution, that is, the domain name and server binding process.When we visit the network, the URL is sent to DNSServer, which is then returned by DNSServer to the ServerIP address that we are going to ask for an interview. As stated in the previous article, there may be multiple sites or subwebs on the same IP address of a server, at which point the data we request is received
International Domain name Registration agency ICANN has on October 15 in the global increase in international domain name wholesale prices, the wholesale price of COM domain name rose from 6 U.S. dollars to 6.42 U.S. dollars, net domain name wholesale prices from 3.5 U.S. dollars to 3.85 U.S. dollars. This is the first increase in the price of a registry since 1999 when ICANN established a price system for the two top-level domain domains.
Today, login to each domain name registration site, fou
certificate signing request file, otherwise# Occurs when a certificate is generated# error at 0 depth lookup:self signed certificate errorOpenSSL req-new-x509-days 365-key ca.key-out ca.crtecho "CA root certificate creation completed. "echo "starts generating server certificate signing file and private key ..."## Generate server Private keyOpenSSL genrsa-des3-out Server.key 1024# Generate server certificate signing request file, Common name is best to fill in the full domain name using the cert
ca-key.pem-set_serial 01-out client-cert.pem # sign client certificateSignature OKSubject =/C = CN/ST = Shanghai/L = Shanghai/O = CH/CN = mysqlclientGetting CA Private Key# Verify after generationShell> openssl verify-CAfile ca-cert.pem server-cert.pem client-cert.pemServer-cert.pem: OKClient-cert.pem: OK
After the above steps, the following file is generated:
The ca-cert.pem both on the server side and on the client side uses-ssl-ca = ca-cert.pemServer-cert.pem, server-key.pem server end speci
--disable-reconnect. This option is enabled by default. -s, --silent Be more silent. Print results with a tab as separator, each row on new line. -S, --socket=name The socket file to use for connection. --ssl Enable SSL for connection (automatically enabled with other flags).Disable with --skip-ssl. --ssl-ca=name CA file in PEM format (check OpenSSL docs, implies --ssl). --ssl-c
CA directory (check OpenSSL docs, implies -- ssl ).
-- Ssl-cert = name X509 cert in PEM format (implies -- ssl ).
-- Ssl-cipher = name SSL cipher to use (implies -- ssl ).
-- Ssl-key = name X509 key in PEM format (implies -- ssl ).
-- Ssl-verify-server-cert
Verify server's "Common Name" in its cert against
Hostname us
free SSL certificates such as let's encrypt, or create self-signed SSL certificates by yourself. Here I use OpenSSL to create my self-signed SSL certificate.
Create a new directory for the SSL file:
mkdir -p /etc/nginx/cert/
Use openssl to generate a new SSL certificate.
The code is as follows:
openssl req -new -x509 -days 365 -nodes -out /etc/nginx/cert/nextcloud.crt -keyout /etc/nginx/
@localhost identified by ' nextclouduser@ '; flush privileges;
nextcloud_db Database and nextclouduser database user creation complete
Step 4-Generate a self-signed SSL certificate for Nextcloud
In the tutorial, I'll have the client run Nextcloud with an HTTPS connection. You can use a free SSL certificate such as Let's encrypt, or create your own self-signed signed SSL certificate. Here I use OpenSSL to create my own self-signed SSL certificate.
To create a new directory for the SSL file:
Mk
+ environment + oaO4 + b7dtdq2/environment + w5rG + environment + temperature = "http://www.2cto.com/uploadfile/Collfiles/20131211/2013121109360487.jpg" alt = "\">
5. make PEM files for SSL and private keys (required by the php server)
A. Make the SSL (cert file) and key (private key) p12 format files respectively, obtained through export. (Note)
B. run the shell command on the terminal to obtain two PEM files of SSL and key, and combine them into o
/environment + w5rG + environment + temperature = "http://www.Bkjia.com/uploadfile/Collfiles/20131211/2013121109360487.jpg" alt = "\">
5. make PEM files for SSL and private keys (required by the php server)
A. Make the SSL (cert file) and key (private key) p12 format files respectively, obtained through export. (Note)
B. run the shell command on the terminal to obtain two PEM files of SSL and key, and combine them into one.
The command paramet
Apns (Apple push notication service) is supported after IOS 3.0. The following describes how to configure the apns service. Apns consists of two parts: client and server: Client: 1. Create an app ID. If you are already a registered Apple user (at least a developer ). Log on to Apple Developer Program portal 2 and create an app ID. Click Configure. Select support apns and select your development certificate (CSR) according to the steps ). Download the CER file and double-click Install (Apple deve
cert for each website, delete the account user group, and add Cert to the guest user group. The password cannot be changed, and the password will never expire.
2. Set folder Permissions
1. Set non-site-related Directory Permissions
After windows is installed, many directories and files can be viewed, viewed, run, or even modified by default by everyone. This poses a great risk to server security. Here
because the attempt to import the private key has not been successful, and it does not matter for the time being. The replacement scheme for verifying the successful interaction will be discussed later.
2. Let's take a look at the RSA implementation scheme of OpenSSL. OpenSSL provides many padding methods,
Because CryptoAPI only provides PKCS1 and OAEP filling methods. PKCS1 is used by default, so PKCS1 is used for verification.
1) first, you need to import the certificate and private key for
Show table type column. -S, --socket=name The socket file to use for connection. --ssl Enable SSL for connection (automatically enabled with other flags).Disable with --skip-ssl. --ssl-ca=name CA file in PEM format (check OpenSSL docs, implies --ssl). --ssl-capath=name CA directory (check OpenSSL docs, implies --ssl). --ssl-cert=name X509
command is as follows:
Pvk2pfx-PVK mykey. PVK-SPC mykey. SPC-pfx mykey. pfx-Pi password-F
This article from csdn blog: http://blog.csdn.net/kevingao/archive/2009/04/06/4052082.aspx
Common digital certificate formats and file extensions
PKCS stands for public-key cryptography standards. It is a series of standards developed by the RSA lab and other security system developers to Promote the Development of public key cryptography. PKCS has published 15 standards. Commonly used:PKC
To explain how to output and enter the certificate, I will use my own https server. This server is discussed in the first part. Then, start with the following content:
1. Run the https server, as discussed in the first section.
2. Run readhttpsurl1: Java readhttpsurl1 localhost. You will also get the exception described above.
3. Use the following keytool command to export the server certificate:
O export a certificate named Qusay from the serverkeys File
O save the exported certificate to the s
During custom menu production, the following error is reported. The original post address must change HTTPS to HTTP. Broken eggs, as shown below
Http://api.weixin.qq.com/cgi-bin/menu/create? Access_token =
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: basic constraints check failed: pathLenConstraint violated - this cert must be the last
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.