https://old.andunix.net/ 2026-06-03T21:27:40+00:00 https://old.andunix.net/ https://old.andunix.net/_media/favicon.ico text/html 2014-04-28T08:07:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/debug_server_certificate_from_client Debug Server Certificate from Client Credit for this example goes to “ Checking A Remote Certificate Chain With OpenSSL” from langui.sh. openssl s_client -showcerts -connect www.andunix.net:443 Informations about the used arguments from the OpenSSL man page: * s_client: SSL/TLS client program * -showcerts: display the whole server certificate chain: normally only the server certificate itself is displayed. text/html 2015-02-11T14:42:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/download_server_certificate Download a Server Certificate First, load the certificate chain from the server: openssl s_client -showcerts -connect www.example.org:443 </dev/null This will output the whole server certificate chain. Every chertificate ist wrapped between ----- text/html 2014-11-20T08:13:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/generate_key Generate a Test Key openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout testkey.key -out testkey.crt Informations about the used arguments from the OpenSSL man page: * req: PKCS#10 certificate request and certificate generating utility. * -x509: this option outputs a self signed certificate instead of a certificate request. This is typically used to generate a test certificate or a self signed root CA. The extensions added to the certificate (if any) are specified in the configurati… text/html 2017-01-04T09:33:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/sysadmin/tomcat_upload_limit Increase the Tomcat Upload Limit The “manager”-App of the Tomcats has a limit of 50MiB. This limit is defined in the file WEB-INF/web.xml within the “manager”-App: <multipart-config> <!-- 50MB max --> <max-file-size>52428800</max-file-size> <max-request-size>52428800</max-request-size> <file-size-threshold>0</file-size-threshold> </multipart-config> text/html 2013-02-18T14:27:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/print_all_certificates_in_a_file Print all certificates in a file This command is especially helpful if you want to use Tomcat-/Java-Keystore-Certificates with the Apache webserver. Use the -print_certs to print all the certificates and then cut the file and store each certificate in a single file. text/html 2015-01-29T09:15:22+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/print_key Print Information about a Key openssl x509 -inform DER -in testkey.cer -noout -text Informations about the used arguments from the OpenSSL man page: * x509: Certificate display and signing utility. * -inform DER: This specifies the input format normally the command will expect an X509 certificate but this can change if other options such as -req are present. The DER format is the DER encoding of the certificate and PEM is the base64 encoding of the DER encoding with header and footer lines … text/html 2013-02-19T14:05:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/java/jps jps - Java Virtual Machine Process Status Tool The Java Virtual Machine has a jps tool wich is a bit like the ps command. jps lists all java Processes of a user. You can find the man page at <http://java.sun.com/j2se/1.5.0/docs/tooldocs/share/jps.html>. I'm using it with the parameters -l (long listing) and -m text/html 2015-12-09T07:36:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/print_certificate Print Information about a Certificate openssl x509 -in testkey.crt -noout -text Informations about the used arguments from the OpenSSL man page: * x509: Certificate display and signing utility. * -in testkey.crt: This specifies the input filename to read a certificate from or standard input if this option is not specified. text/html 2019-01-17T19:19:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/convert_key Convert a Key Convert P12 to Java Keystore keytool -importkeystore -srckeystore testkey.p12 -srcstoretype pkcs12 -srcalias 1 -destkeystore testkey.jks -deststoretype jks -destalias testkey You can add -deststorepass PASSWORD to set the password on the command line. If you don't, keytool will ask you for a password. text/html 2013-02-18T14:26:27+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/compare_key_with_certificate Compare a Key with its Certificate Credit for this example goes to “Verifying that a Private Key Matches a Certificate” from the University of Wisconsin Knowledgebase. To see if a key server.key belongs to the certificate server.crt, they need to have the same “modulus” and “exponent”. openssl x509 -noout -text -in server.crt openssl rsa -noout -text -in server.key text/html 2013-02-04T22:17:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/script/dyndns_updates_without_client DynDNS Updates without a Client My new hosting provide Strato offers DynDNS. I was searching for a DynDNS client for my OpenSolaris Home Server, but a small bash script does the job as good as any other client. #! /bin/bash . ${HOME}/.dyndns.cfg DOMAINS=$(cat ${HOME}/.dyndns.domains) echo "$(date '+%Y-%m-%d %H:%M') $(basename $0)" for domain in ${DOMAINS}; do echo -n " ${domain} - " curl --silent --show-error --insecure --user ${LOGIN} "${UPDATE_URL}?hostname=${domain}" d… text/html 2015-11-30T12:09:18+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/sysadmin/ssh SSH SSH with Public Key Authentication only /etc/ssh/sshd_config Make sure that your SSH config file (sshd_config) contains these settings: PubkeyAuthentication yes PasswordAuthentication no If you changed the config, make sure to restart sshd to activate ist: text/html 2013-02-04T22:17:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/solaris/exam_notes Notes for the Solaris 10 System Administration Exam (CX-310-200 & -202) I'm preparing myself for the two exams to achieve the Sun Certified System Administrator (SCSA) certification. This are my notes taken while studying the preparation books. Managing File Systems List Devices To list the system's devices, you can use the following commands: text/html 2013-03-08T10:45:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/linux/debian/timezone Setting the Timezone The timezone is stored in the file /etc/timezone. Check the Timezone cat /etc/timezone Example: # cat /etc/timezone Europe/London Set the Timezone You can use vi: vi /etc/timezone Or set it directy: echo "Europe/Berlin" > /etc/timezone text/html 2014-12-18T15:34:24+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/openssl/convert_certificate Convert a Certificate Convert DER to PEM openssl x509 -inform der -in testkey.der -out testkey.pem Convert PEM to DER openssl x509 -outform der -in testkey.pem -out testkey.der openssl security cryptography certificate howto text/html 2013-02-04T22:17:37+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/solaris/pkg_repositories Package Repositories There's a list of multi-OS repositories at <http://wikis.sun.com/display/IpsBestPractices/Directory+of+Package+Repositories>. More on IPS, the Image Package System can be found at: * <http://www.opensolaris.org/os/project/pkg/>. * <http://wikis.sun.com/display/IpsBestPractices/> Repository Description <http://pkg.opensolaris.org/release/> OpenSolaris Distribution, Releases <http://pkg.opensolaris.org/dev/> OpenSolaris Distribution, Development Quality text/html 2015-11-25T08:59:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/mac/macports MacPorts List Ports list requested ports: port echo requested | cut -d ' ' -f 1 | uniq list installed ports: port -qv installed Housekeeping When ports are updated, the old port is only deactivated, not uninstalled: ... autoconf @2.69_2 autoconf @2.69_3 autoconf @2.69_5 ... text/html 2013-02-04T22:17:37+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/solaris/fstyp fstyp fstyp reports the type of file system. With the -v (verbose) option reports even more informations. * man page: fstyp(1M) Example UFS: ''fstyp'' fstyp /dev/rdsk/c1t0d0s0 ufs UFS: ''fstyp -v'' fstyp -v /dev/rdsk/c1t0d0s0 ufs magic 11954 format dynamic time Wed Dec 23 17:26:29 2009 sblkno 16 cblkno 24 iblkno 32 dblkno 760 sbsize 2048 cgsize 8192 cgoffset 64 cgmask 0xffffffc0 ncg 427 size 20972160 blocks 20654449 bsize 819… text/html 2013-02-27T12:34:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/javascript/reload_page Reload Page location.reload(true); javascript text/html 2013-08-02T19:34:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/prog/firefox/index Firefox Start another Firefox To start another instance of firefox, use this command: firefox -P "My Profile" -no-remote For more information visit Opening a new instance of your Mozilla application with another profile in the mozillaZine Knowledge Base. mozilla firefox cli howto text/html 2013-03-01T20:36:05+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/oracle/spfile_and_pfiles Oracle: SPFile and PFiles Oracle reads its parameters from a file called “SPFile”. You can't change it directly as it's a binary file. Additionally, Oracle can read the parameters from “PFiles”, which are regular text files. Create PFile To export the SPFiles to a PFile, just enter the following in SQLplus: text/html 2015-11-25T09:43:44+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/mac/rmdir rmdir for OSX The Finder on OSX creates .DS_Store files in the directories to store its settings. This makes removing directories from the command line quite complicated: $ rmdir test rmdir: test: Directory not empty $ rm test/.DS_Store $ /bin/rmdir test text/html 2013-03-01T20:58:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/solaris/localeadm localeadm The localeadm utility queries and configures Solaris locales through a command line interface. * man page: localeadm(1M) Preparation Check your Solaris Release with cat /etc/release and get a matching DVD or ISO image. If you're using an ISO image, you have to mount it (insert your path in the first line. text/html 2013-02-04T22:17:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://old.andunix.net/info/cryptography/plaintext Plaintext The plaintext is unencrypted and unsigned text. It's the payload which then get's signed and/or encrypted. Wikipedia defines plaintext as: " In cryptography, plaintext is information a sender wishes to transmit to a receiver. Cleartext is often used as a synonym. Before the computer era, plaintext most commonly meant message text in the language of the communicating parties. Plaintext has reference to the operation of cryptographic algorithms, usually encryption algorithms, and is …