are manually other picking.
# # If The mirrorlist= does not work for your, as a fall back you can try the # remarked out Baseurl= line instead. # [Base] name=centos-$releasever-base mirrorlist=http://mirrorlist.centos.org/?release= $releasever arch=$ Basearchrepo=os #baseurl =http://mirror.centos.org/centos/$releasever/os/$basearch/gpgcheck=1 gpgkey=file:// /etc/pki/rpm-gpg/rpm-gpg-key-centos-5 #released Updates [updates] name=centos-$releasever-upda
consider security issues, from the most basic LAN to the Web server how to allow external users to access Web pages via SSL (secure Sockets Layer, Secure Sockets Layer). Also, all aspects of security need to be taken into consideration, especially when deploying a CA or PKI (public key Infrastructure). Of course, the benefits of security are self-evident, and improving the security of the enterprise network and system protects the enterprise from var
the specified list = does not work for you, as a fall back you can try# Remarked out baseurl = line instead.##
[Base]Name = centos-$ releasever-BaseUsing list = http://mirrorlist.CentOS.org /? Release = $ releasever arch = $ basearch repo = OS# Baseurl = http://developer.centos.org/centos/?releasever/ OS /?basearch/Gpgcheck = 1Gpgkey = file: // etc/pki/rpm-GPG/RPM-GPG-KEY-CentOS-5Priority = 1
# Released updates[Updates]Name = centos-$ releasever-
the connecting IP address of the client and# Update Status of each mirror to pick mirrors that are updated to and# Geographically close to the client. You shoshould use this for centos updates# Unless you are manually picking other mirrors.## If the specified list = does not work for you, as a fall back you can try# Remarked out baseurl = line instead.##[Base]Name = centos-$ releasever-BaseUsing list = http://mirrorlist.CentOS.org /? Release = $ releasever arch = $ basearch repo = OS# Baseurl
configuration is:
# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and
# Update Status of each mirror to pick mirrors that are updated to and
# Geographically close to the client. You shoshould use this for centos updates
# Unless you are manually picking other mirrors.
#
# If the specified list = does not work for you, as a fall back you can try
# Remarked out baseurl = line instead.
#
#
[Base]
Name = centos-$ releasever-Base
Using list = ht
it is sent and accepted. The hashing algorithm used in SSL is mainlyMD5: A one-way hashing algorithm developed by RSA Data security CompanySHA1: The maximum length of the input message is not more than 264 bits, the resulting output is a 160-bit message digest, the input is processed by 512-bit packets, is irreversible, anti-collision, and has good avalanche effectSecond, encryption technology:Pgp:pretty Good Privacy, is an opportunity asymmetric encryption algorithm of RSA public key system of
Blog jobs: Using httpd-2.2 and httpd-2.4 respectively1, the establishment of HTTPD services, requirements: (1) provide two name-based virtual host WWW1, WWW2; there are separate error logs and access logs; (2) Provide status information through WWW1 's/server-status, and only allow Tom user access; (3) WWW2 does not allow access to any host in the 192.168.0.0/24 network;2, for the above 2nd virtual host to provide HTTPS services;Prerequisite Preparation:172.16.1.1 Test httpd-2.4, this is the CEN
/htpasswdRequire valid-user
After editing, save and exit. Because the password transmitted through http access is in plain text, you also need to configure ssl for encrypted transmission.
To configure ssl, follow these steps:
Step 1: Create the key and request:Openssl req-new> new. cert. csr
Step 2: delete passphrase from the key (optional ):Openssl rsa-in privkey. pem-out new. cert. key
Step 3: Conver
void Main (string [] args) {String sto = X509CertificateStore. MyStore; // open the primary certificate Storage Area X509CertificateStore store = X509CertificateStore.CurrentUserStore(sto);Store. OpenRead (); // find the certificate you want to use String certname = System.Configuration.ConfigurationSettings.AppSettings["CertificateName"]; X509CertificateCollection certcoll = store.FindCertificateBySubjectString(certname);If (certcoll. count = 0) {Console. writeLine ("Certificate not foun
Install with rpm
Httpd
Httpd-devel
Pam-devel
Subversion
Subversion-perl
After the above package is installed, cpan SVK can complete the svk installation.
Enable ssl for http
Step 1: Create the key and request:
Openssl req-new> new. cert. csr
Step 2: delete passphrase from the key (optional ):
Openssl rsa-in privkey. pem-out new. cert. key
Step 3: Convert the request to signed sert:
Openssl x509-in
To establish a private CA:Generate a self-visa book on the server that is configured as a CA, and provide the required directories and files for the CA;Steps:(1) Generate the private key;]# (umask 077; OpenSSL genrsa-out/etc/pki/ca/private/cakey.pem 4096)Note: The filename should match the file name in the configuration file;]# ll/etc/pki/ca/private/: Check the file permissions to ensure that it is 600;(2)
The default centos comes with a lot of good software, so you need to add a third source1. Install the centos Yum source priority plug-in Yum-PrioritiesYum install yum-plugin-priorities.noarch2. Set the highest priority of the centos default Yum SourceCD/etc/yum. Repos. d/# enter the yum source directoryVI CentOS-Base.repo # Add priority = 1 under the [base], [updates], [extras] group, add priority = 2 under the [centosplus], [contrib] Group######################################## ###############
the following command to create the directory where the certificate and private key will be stored:
Use the following command (replaced in the FQDN of the Elk Server) in the appropriate location (/etc/pki/tls/... ) to generate the SSL certificate and private key:
Cd/etc/pki/tls
sudo openssl req-subj '/cn=elk_server_fqdn/'-x509-days 3650-batch-nodes-newkey rsa:2048-keyout Private/logstash-forwarder.key-out
CA Digital Certificate ServicesCA Certificate Authority digital Certificate Authority CenterIndependent third-party institutions trusted by the parties to the communicationResponsible for certificate issuance, validation, revocation management, etc.PKI public Key InfrastructureA standard set of key management platformsDigital certificate technology ensures information security through public key cryptographyThe basic composition of PKI systemAuthorita
Article Title: CentOS5 install apache and svk using domain user authentication. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
Install with rpm
Httpd
Httpd-devel
Pam-devel
Subversion
Subversion-perl
After the above package is installed, cpan SVK can complete the svk installation.
Enable ssl for http
Step 1: Create the key and request:
Openssl req-new> new.
are disclaimed. In no event shall the copyright owner or
* Contributors be liable for any direct, indirect, incidental, special,
* Exemplary, or consequential damages (including, but not limited,
* Procurement of substitute goods or services; loss of use, data, or
* Profits; or business interruption) however caused and on any theory
* Liability, whether in contract, strict liability, or tort (including
* Negligence or otherwise) arising in any way out of the use of this
* Software,
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.