Convert a SSL certificate from crt to PFX (GoDaddy)

When you're creating a .pfx, you'll need a copy of the private key from your server, as well as the .crt file that you downloaded from GoDaddy.

When you download certificates from Go daddy portal you will get files something like this

 

Rename files  first Main root certificates as Certificate.crt and other gd file which is intermediate file as supporting more file.

You can use OpenSSL commands in command line to create the PFX, I'm including a sample below:

openssl pkcs12 -export -out certificate.pfx -inkey generated-private-key.txt -in certificate.crt -certfile more.crt

This will create a certificate.pfx file from your private key, as well as the .crt you downloaded.

You'll just need to make sure that you update the names in the sample code above to match your certificate/private key information.

user@server:~$ cd Certs_Apache /

user@server:~/ Certs_Apache$ openssl pkcs12 -export -out certificate.pfx -inkey generated-private-key.txt -in certificate.crt -certfile more.crt

unable to load private key

140238327080608:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:703:Expecting: ANY PRIVATE KEY

When you convert the cert by using the openssl you can get the above error sometime

For above error solution is to check the .key file encoding.

Carry out the following steps: open the .key file with Visual Studio Code or Notepad++ and verify that the .key file has UTF-8 encoding. In my case, the file had UTF-8 with BOM encoding, so I saved the file with just UTF-8, and then tried the conversion again:

In addition, make sure that .key file has a valid scheme:

-----BEGIN PRIVATE KEY----- Cipher here -----END PRIVATE KEY-----

user@server:~/Certs_Apache$ openssl pkcs12 -export -out certificate.pfx -inkey generated-private-key.txt -in certificate.crt -certfile more.crt

Enter Export Password:

Verifying - Enter Export Password:

user@server:~/ Certs_Apache $

It will prompt for password for pfx file which needs to provide for verification. Which is required while importing certificate.

 

Create Local YUM Repository with DVD in RHEL 7

Create Source

Mount the CD/DVD ROM on any directory of your wish. For testing, mount it on /cdrom.

#mkdir /cdrom

#mount /dev/cdrom /cdrom

Create Repo file

Before creating a repo file, move your existing repo files present in /etc/yum.repos.d directory, if not required.

#mv /etc/yum.repos.d/*.repo /tmp/

Create the new repo file called cdrom.repo under /etc/repos.d directory.

#vi /etc/yum.repos.d/local.repo

Add the following details.

[LocalRepo]

name=LocalRepository

baseurl=file:///cdrom

enabled=1

gpgcheck=1

gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

Where,

[LocalRepo] = Repository Name which will be displayed during package installation

name = Name of the repository

baseurl = Location of the package

Enabled = Enable repository

gpgcheck = Enable secure installation

gpgkey = Location of the key

gpgcheck is optional (If you set gpgcheck=0, there is no need to mention gpgkey)

Install Package from Local DVD YUM repository

Clear the repository cache by issuing the following command.

#yum clean all

Let’s install the vsftpd package from the local repository.

#yum install vsftpd

 

How to mount CD/DVD ROM on CentOS / RHEL Linux

System

CentOS 6/7/8, RHEL 6/7/8

How to mount CD/DVD ROM on CentOS / RHEL Linux step by step instructions

Locate CD/DVD block device: First we need to find a correct CD/DVD block device. To do this execute a command blkid as root user:

# blkid 

/dev/sda1: UUID="d9704e79-b05e-4c9d-b94a-09643ba70592" TYPE="xfs" PARTUUID="83288aa1-01"

/dev/sda2: UUID="21291424-9d73-4c7e-b039-ce311702c75f" TYPE="swap" PARTUUID="83288aa1-02"

/dev/sr0: UUID="2019-08-15-21-52-52-00" LABEL="CentOS-8-BaseOS-x86_64" TYPE="iso9660" PTUUID="3e04f576" PTTYPE="dos"

Take a note of the relevant block device eg. /dev/sr0 and optionally also take a note of the shown UUID 2019-08-15-21-52-52-00.

Create Mount Point:
Mount point will be a directory where you wish to mount your CD/DVD drive. It can be any arbitrary directory. For example in this case we will be using /media/iso as a directory mount point:

# mkdir /media/iso 

Mount CD/DVD:
We are now ready to mount CD/DVD by using the mount command:

# mount /dev/sr0 /media/iso/

mount: /media/iso: WARNING: device write-protected, mounted read-only.

At this point you should be able to access all files on your CD/DVD drive:

   $ ls /media/iso/

   AppStream  BaseOS  EFI  images  isolinux  media.repo  TRANS.TBL

Permanent CD/DVD mount:

To mount your drive permanently edit /etc/fstab by adding the following line. Change UUID and mount point to fit your environment:

UUID=2019-08-15-21-52-52-00             /media/iso                iso9660 ro,user,auto  0 0

Once ready mount the CD/DVD by:

   # mount /media/iso/

Cancelling running Tasks on Nutanix AHV

login as: nutanix

Nutanix Controller VM

nutanix@192.168.15.40's password:

Last login: Wed Oct  3 20:45:53 IST 2018 from 192.168.15.21 on ssh

Last login: Wed Oct  3 20:46:03 2018 from 192.168.14.27

nutanix@NTNX-16SM60490506-B-CVM:192.168.15.21:~$ acli

<acropolis> task.list

Task UUID                                                      Parent Task UUID                                    Component                  Sequence-id                  Type                           Status

8e1891db-8684-4a96-a82a-255bcdd46e76                                                                       Acropolis                    1654             kVmDiskUpdate             kSucceeded

fb4c9fc5-d1a4-4ee0-b85f-bffe5aa3b277                                                                           Nutanix Guest Tools   11                MountGuestTools            kSucceeded

e97eeae1-6769-4b99-8697-500ee6fc4a49  a5f5b02f-31b4-4949-a9ef-bc6306ca83c5     Acropolis                    1653             kVmSetPowerState         kSucceeded

a5f5b02f-31b4-4949-a9ef-bc6306ca83c5                                                                          Uhura                          988              VmChangePowerState     kSucceeded

d93385de-20aa-4ea3-82be-34eae61963e3  b242c17f-6bc2-456a-b48d-8a047aa9df5e    Acropolis                    1652             kVmUpdate                     kSucceeded

b5e06fb1-9bd9-4846-91d3-c92bace664de                                                                        Acropolis                    1650             kImageCreate                  kRunning

351990a6-f901-4d98-8775-97fe1f7a6148                                                                         Acropolis                    1649             kImageCreate                  kRunning

<acropolis> task.get b5e06fb1-9bd9-4846-91d3-c92bace664de

<acropolis> task.cancel task_list=b5e06fb1-9bd9-4846-91d3-c92bace664de

Task cancel for UUID: b5e06fb1-9bd9-4846-91d3-c92bace664de: complete

Configure DC to synchronize time with external NTP server

How do I configure time in my Active Directory?

Well, it's simple! Normally it should be set correctly if we don't modify it in purpose,

Otherwise, we do provide some tools for that: w32tm.exe command-line utility and GPO. we are going to look here w32tm whihc is very easy.

• Using w32tm.exe

Run the following command on the PDC emulator:  

If you have multiple domain controller and don't know which DC holds PDC role then use following command: netdom /query fsmo

w32tm /config /manualpeerlist:timeserver /syncfromflags:manual /reliable:yes /update

(where timeserver is a –space delimited– list of your time source servers)

Repairing WMI problems - WMI Service is Missing

WMI Service is missing but the wbem folder structure is present in the system.

After so much attempt able to resolve this issue..

Remember WinXP Service Pack 3 Solution ??  Permission issue  or access is denied

Same applied here

resetting the security permissions on the registry and system drive, which will also make sure that WMI is setup with the right permissions. You can do this by grabbing the SubInACL tool from Microsoft and running the following commands from the directory in which you installed it:

Restore Networking on Ubuntu 14.04

Restore Networking

 

Restores networking service in Ubuntu 14.04 with that of Ubuntu 13.10

Networking was changed in Ubuntu 14.04 without any clear reason why - further detail submitted by a user found here: http://askubuntu.com/a/449916

I've gone ahead and taken his suggestion of reverting the networking scripts back to that of 13.10 to allow for the familiar, working service networking restart command to function as expected.

apt-get update fails in Ubuntu Server

Normal Ubuntu releases are supported for 9 months, whereas LTS (Long Term Support) releases are supported for 5 years.  Once support is up for the version of Ubuntu you are using the repository is moved to another server and will no longer be available on the standard 

apt-get update error - W: Failed to fetch mirrors / Some index files failed to download. They have been ignored, or old ones used instead

DHCP Server - Backup & restore Procedures

BACKUP & RESTORE OF DHCP SERVER

Manual DHCP server backup

You can also run backups manually through the DHCP management console. This feature can be useful if you intend to make major changes to your DHCP settings. You can back up the database to a location other than the default folder. Note that this won’t change the location of the regular automatic backups. This setting can only be changed in the Windows Registry with the BackupDatabasePath parameter.

Rebuilding the Windows 7 Icon Cache.

Follow these directions:

1. Close all folder windows that are currently open.
2. Launch Task Manager using the CTRL+SHIFT+ESC key sequence, or by running taskmgr.exe
3. In the Process tab, right-click on the Explorer.exe process and select End Process

Configuring Linux Server for NTP Client to External NTP Server

NTP is used to synchronize the time on your Linux system with a centralized NTP server.

You can Install NTP Service using

$ sudo yum install ntp  
or
$ sudo apt-get install ntpd

Reverting new network interface naming schemes to original in Ubuntu 14.04 Server

Gone are the days, where all network interfaces were called eth<N> in Ubuntu. Starting with Ubuntu 14.04, BIOS-given names are used in the LTS line of the distro.

So, it is possible your NIC isn't called eth0 anymore, but p2p1, or em0. According to biosdevname(1), the scheme for cards sitting in PCI slots is p<slot>p<port> and for embedded NICs, it is em<port>

Allow ssh root login on Ubuntu 14.04 Linux server

By default the root ssh login to Ubuntu 14.04 Linux server is disable. This is a security feature and even though you change the root password the root ssh login will be denied showing message similar to the one below:

$ ssh root@1.1.1.1
root@1.1.1.1's password:
Permission denied, please try again.
root@1.1.1.1's password:
Permission denied, please try again.
root@1.1.1.1's password:
Permission denied (publickey,password).

How to send emails using blat

Blat is a handy Win32 console utility that enables you to send emails via the command line, on Windows machines. This is especially useful within batch scripts.
Given below are some how-to’s on basic uses of blat. Refer the blat syntax page for more options with blat. The commands below have been tested on Windows Server 2003 with blat v2.6.2, unless otherwise stated.
You can download this from
http://sourceforge.net/projects/blat/files/latest/download?source=typ_redirect

HOW-TO 1: Configure the SMTP Relay for blat
The blat utility can perform functions of both an MUA and an MTA. Before using blat, you may configure certain options in the Windows Registry to avoid typing them repeatedly whenever sending emails (using overrides on the command line). An example configuration is given below:

HyperTerminal in Windows 7

HyperTerminal is an application that allows terminal emulation in Windows for some types of devices. HyperTerminal communicates over serial connections (such as RS-232), via a dial up modem, or via the Transmission Control Protocol (TCP) and Internet Protocol (IP). For TCP/IP connections and modem connections, the most common target is a telnet daemon set up on a Windows or Linux system in order to give access to a text based application or console.

If you’ve recently upgraded to Windows 7 and are wondering what happened to HyperTerminal, you’re not alone! HyperTerminal was a sweet little program that let you connect to other computers, Telnet sites, host computers, BBSs, etc using your modem or Ethernet connection.

In Windows 7 and Vista, you will no longer find the Hyper Terminal program. If you need HyperTerminal to control serial devices, So here is how to get HyperTerminal on to Windows 7 (32 or 64-bit).

So here is how to get HyperTerminal on to Windows 7 (32 or 64-bit).

How to manage KVM virtual machines using virsh

virsh is a program which uses libvirt to manage KVM virtual machines (guests).

I’m going to show a summary of its main functions 

Show Hosts’ information:

• Show a host’s info: virsh nodeinfo

• Show KVM version installed: virsh version

Files displayed after ages on shared folders on win 7 desktops

File that a user adds to a remote folder is not displayed in Windows Explorer on a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/hotfix/kbhotfix?kbnum=2769790&kbln=en-US

Consider the following scenario:

• You open and then close a remote folder by using Windows Explorer on a computer that is running Windows 7 or Windows Server 2008 R2.
• A user on a different computer adds a file to the remote folder.
• You open the remote folder by using Windows Explorer again.

Brand your Spark Installation

This how-to explains how to brand your installation of Spark IM client with your company name and logo along with some other bits and bobs

Install Spark

Make sure that the latest version of Spark is installed on either a test machine or a single client machine that you will use to modify the install.

Find the file to edit

The next step is to find the file that you need to edit to brand spark. The following steps assume that you have installed Spark in the default directory...

Navigate to C:\Program Files\Spark\lib

Find the file 'spark.jar' and open it with WinRar (other archivers will work but WinRar tends to give best results)

NOTE: Open the .jar file, do NOT extract it.

How to configure Google Application Control with the Sophos UTM

Related Product: Web Protection

Related Version: Since version 9.2

What is Google Application control?

The Sophos UTM provides a feature to enforce a policy and limit access to the Google App services for specific domains only. This feature is useful for administrators who need to limit Google App access to their company domains only, and prohibit users from accessing their personal Google Apps.

What to do

Where to Configure: Webadmin on https://<IP of UTM>:4444

Related Section: Web Protection | Web Filter Profiles | Filter Actions

Note:

• This feature is configurable per proxy Filter Action
• If this feature is enabled, the HTTP proxy in the Sophos UTM adds a special header to the App login request for Google
• The 'Decrypt and scan' option is required for 'HTTPS (SSL) traffic' for this feature to work

.NET Runtime Optimization Service causing CPU High Load on Windows Server 2012

This afternoon, i get issues with my Domain Controller, on Windows Server 2012 R2, having CPU High load and after checking in the Task Manager i noticed the service “NET Runtime Optimization Service” was running and getting most of the CPU load, even after a reboot.
After some research on internet, it seems to happen on servers where you have installed the .NET Framework 4.
To solve this issue :
Open a command prompt and change folder to this one “C:\Windows\Microsoft.NET\Framework