主页 / user-92904

ThomasReggi's questions

Martin Hope
ThomasReggi
Asked: 2016-04-23 12:52:24 +0800 CST
  • 5

负载均衡器 url 和弹性 beantalk 似乎都指向同一个 IP 地址。

thomasreggi$ nslookup aws-load-balancer-url.us-east-1.elb.amazonaws.com
Server:        8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
Name:    aws-load-balancer-url.us-east-1.elb.amazonaws.com
Address: 100.00.000.0
Name:    aws-load-balancer-url.us-east-1.elb.amazonaws.com
Address: 100.000.000.000

thomasreggi$ nslookup elastic-beanstalk-url.us-east-1.elasticbeanstalk.com
Server:        8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
Name:    elastic-beanstalk-url.us-east-1.elasticbeanstalk.com
Address: 100.00.000.0
Name:    elastic-beanstalk-url.us-east-1.elasticbeanstalk.com
Address: 100.000.000.000

我想知道使用一个网址是否有任何特定优势。

amazon-web-services elastic-beanstalk
Martin Hope
ThomasReggi
Asked: 2016-04-16 07:27:51 +0800 CST
  • 6

如果您使用 ElasticBeanstalk 设置 RDS，您如何进入该框（通过 eb ssh）并查看将 RDS 应用于您的 EB 实例时设置的环境变量？

Amazon 会自动设置这些环境变量。

  • RDS_DB_NAME
  • RDS_USERNAME
  • RDS_PASSWORD
  • RDS_HOSTNAME
  • RDS_PORT

您似乎只能在运行您的应用程序的进程中查看。

我想以某种方式通过终端查看这些，该eb printenv命令不显示它们。

environment-variables amazon-ebs amazon-rds
Martin Hope
ThomasReggi
Asked: 2012-11-15 11:48:28 +0800 CST
  • 1

我有一个.is域名是从一家名不见经传的零售商处购买的。设置为 dreamhost.com 的名称服务器域可能会利用 dreamhost 的某些功能，如 gmail 集成和 mysql。该站点的核心托管在 linode.com vps 上。我只想将空白A记录发送到 linode，以便只有根域与 linode 连接。

我想将我的名称服务器保留在 dreamhost 上，而不必在 linode 上设置整个域。

如果我将空白A记录设置为我的 linode 的 IP 地址，它会起作用吗？我必须在 linode 方面做些什么才能完成这项工作吗？

domain-name-system
Martin Hope
ThomasReggi
Asked: 2012-08-18 11:51:51 +0800 CST
  • 2

我一直在使用 SSH。我发现自己在出现故障时创建新密钥，例如 for git，然后我就失去了与其他服务器的通信。我知道今后应该只有一组本地生成的密钥，但现在，我需要合并/.ssh我所做的许多备份，以便它们可以同时使用。我怎样才能做到这一点？

linux
Martin Hope
ThomasReggi
Asked: 2012-08-03 10:39:48 +0800 CST
  • 9

我有一个使用 https 将 javascript 文件传输到客户端的网站。该网站是getsimpleapps.com。

事实证明，使用 https（20.08 秒 - 29.08 秒）时，此文件的加载速度比使用 http（380 毫秒）慢 52 倍。

该站点的主页与 javacript 文件共享相同的缓慢。

我最近从 dreamhost 切换到 linode，并破解了让 SSL 在新服务器上工作的方法，直到它成功为止。我没有做任何疯狂的配置。

linode 正在运行 Ubuntu 12.04，该站点位于 (LAMP) 堆栈之上。

我对堆栈溢出社区的问题是：如何在我的服务器上修复 SSL 和 HTTPS？我知道堆栈溢出充满了关于HTTPS 缓慢的问题，但没有给出真正的解决方案。一个 ubuntu 教程或配置指南将是理想的。

文件：/etc/apache2/sites-enabled/getsimpleapps.com

<VirtualHost *:80>
     ServerAdmin [email protected]
     ServerName getsimpleapps.com
     ServerAlias www.getsimpleapps.com
     DocumentRoot /srv/sites/getsimpleapps.com/public/
     ErrorLog /srv/sites/getsimpleapps.com/logs/error.log
     CustomLog /srv/sites/getsimpleapps.com/logs/access.log combined
</VirtualHost>

<VirtualHost 50.116.58.18:443>
     SSLEngine On
     #SSLCertificateFile /etc/apache2/ssl/www.getsimpleapps.com.crt
     #SSLCertificateKeyFile /etc/apache2/ssl/www.getsimpleapps.com.key
     #SSLCACertificateFile /etc/apache2/ssl/comodo.crt
     SSLCertificateFile /etc/apache2/ssl/dreamhost/dh.crt
     SSLCertificateKeyFile /etc/apache2/ssl/dreamhost/dh.key
     SSLCACertificateFile /etc/apache2/ssl/dreamhost/dh.cer

     ServerAdmin [email protected]
     ServerName getsimpleapps.com
     ServerAlias www.getsimpleapps.com
     DocumentRoot /srv/sites/getsimpleapps.com/public/
     ErrorLog /srv/sites/getsimpleapps.com/logs/error.log
     CustomLog /srv/sites/getsimpleapps.com/logs/access.log combined
</VirtualHost>

从本地工作站卷曲

thomas@workstation:~$ time curl -Iv https://getsimpleapps.com/
* About to connect() to getsimpleapps.com port 443 (#0)
*   Trying 50.116.58.18... connected
* Connected to getsimpleapps.com (50.116.58.18) port 443 (#0)
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using DHE-RSA-AES256-SHA
* Server certificate:
*    subject: OU=Domain Control Validated; OU=Provided by New Dream Network, LLC; OU=DreamHost Basic SSL; CN=getsimpleapps.com
*    start date: 2012-02-23 00:00:00 GMT
*    expire date: 2013-02-22 23:59:59 GMT
*    subjectAltName: getsimpleapps.com matched
*    issuer: C=GB; ST=Greater Manchester; L=Salford; O=Comodo CA Limited; CN=PositiveSSL CA
*    SSL certificate verify ok.
> HEAD / HTTP/1.1
> User-Agent: curl/7.21.4 (universal-apple-darwin11.0) libcurl/7.21.4 OpenSSL/0.9.8r zlib/1.2.5
> Host: getsimpleapps.com
> Accept: */*
> 
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Date: Thu, 02 Aug 2012 20:31:39 GMT
Date: Thu, 02 Aug 2012 20:31:39 GMT
< Server: Apache/2.2.22 (Ubuntu)
Server: Apache/2.2.22 (Ubuntu)
< X-Powered-By: PHP/5.3.10-1ubuntu3.2
X-Powered-By: PHP/5.3.10-1ubuntu3.2
< Set-Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%2298c7e45da25e4aaf80f7a1e36ed4a006%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2250.75.209.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A81%3A%22curl%2F7.21.4+%28universal-apple-darwin11.0%29+libcurl%2F7.21.4+OpenSSL%2F0.9.8r+zlib%2F1.2.5%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1343939499%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7D80bf8ae5040fc47780ccd59f1fb8b267; expires=Thu, 02-Aug-2012 22:31:39 GMT; path=/
Set-Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%2298c7e45da25e4aaf80f7a1e36ed4a006%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2250.75.209.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A81%3A%22curl%2F7.21.4+%28universal-apple-darwin11.0%29+libcurl%2F7.21.4+OpenSSL%2F0.9.8r+zlib%2F1.2.5%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1343939499%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7D80bf8ae5040fc47780ccd59f1fb8b267; expires=Thu, 02-Aug-2012 22:31:39 GMT; path=/
< Vary: Accept-Encoding
Vary: Accept-Encoding
< Content-Type: text/html
Content-Type: text/html

< 
* Connection #0 to host getsimpleapps.com left intact
* Closing connection #0
* SSLv3, TLS alert, Client hello (1):

real    0m29.078s
user    0m0.018s
sys 0m0.005s

从 linode 服务器卷曲（通过 ssh）

thomas@vannevar:~$ time curl -Iv https://getsimpleapps.com/happy-ending/api/script.js?shop=holstee.myshopify.com
* About to connect() to getsimpleapps.com port 443 (#0)
*   Trying 50.116.58.18... connected
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using DHE-RSA-AES256-SHA
* Server certificate:
*    subject: OU=Domain Control Validated; OU=Provided by New Dream Network, LLC; OU=DreamHost Basic SSL; CN=getsimpleapps.com
*    start date: 2012-02-23 00:00:00 GMT
*    expire date: 2013-02-22 23:59:59 GMT
*    subjectAltName: getsimpleapps.com matched
*    issuer: C=GB; ST=Greater Manchester; L=Salford; O=Comodo CA Limited; CN=PositiveSSL CA
*    SSL certificate verify ok.
> HEAD /happy-ending/api/script.js?shop=holstee.myshopify.com HTTP/1.1
> User-Agent: curl/7.22.0 (i686-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4 libidn/1.23 librtmp/2.3
> Host: getsimpleapps.com
> Accept: */*
> 
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Date: Thu, 02 Aug 2012 20:43:30 GMT
Date: Thu, 02 Aug 2012 20:43:30 GMT
< Server: Apache/2.2.22 (Ubuntu)
Server: Apache/2.2.22 (Ubuntu)
< X-Powered-By: PHP/5.3.10-1ubuntu3.2
X-Powered-By: PHP/5.3.10-1ubuntu3.2
< Set-Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%2204a54136cab08f9fdc5f082ebb8e739a%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2250.116.58.18%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A97%3A%22curl%2F7.22.0+%28i686-pc-linux-gnu%29+libcurl%2F7.22.0+OpenSSL%2F1.0.1+zlib%2F1.2.3.4+libidn%2F1.23+librtmp%2F2.3%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1343940210%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7De7d7b8e2ca69b34c531ba7472b4b21b7; expires=Thu, 02-Aug-2012 22:43:30 GMT; path=/
Set-Cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%2204a54136cab08f9fdc5f082ebb8e739a%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2250.116.58.18%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A97%3A%22curl%2F7.22.0+%28i686-pc-linux-gnu%29+libcurl%2F7.22.0+OpenSSL%2F1.0.1+zlib%2F1.2.3.4+libidn%2F1.23+librtmp%2F2.3%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1343940210%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7De7d7b8e2ca69b34c531ba7472b4b21b7; expires=Thu, 02-Aug-2012 22:43:30 GMT; path=/
< Content-Type: text/javascript
Content-Type: text/javascript
* no chunk, no close, no size. Assume close to signal end

< 
* Closing connection #0
* SSLv3, TLS alert, Client hello (1):

real    0m25.991s
user    0m0.015s
sys 0m0.022s
apache-2.2
Martin Hope
ThomasReggi
Asked: 2012-06-29 12:09:02 +0800 CST
  • 2

我正在尝试让 SSL 在我的 apache 网络服务器上运行。

我还没有域设置的 DNS，这是个问题吗？

如何在我的网络服务器上设置 SSL？

当我启动 apache 时，它​​失败了。

root@vannevar:/etc/apache2/ssl# service apache2 start
 * Starting web server apache2                                                                                                                         Action 'start' failed.
The Apache error log may have more information.

无法读取证书的日志统计信息。

[Thu Jun 28 15:01:02 2012] [error] Init: Unable to read server certificate from file /etc/apache2/ssl/www.example.com.csr
[Thu Jun 28 15:01:02 2012] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Thu Jun 28 15:01:02 2012] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

的内容/etc/apache2/httpd.conf

ServerName [SERVERIP]

的内容/etc/apache2/ports.conf

# If you just change the port or add more ports here, you will likely also
# have to change the VirtualHost statement in
# /etc/apache2/sites-enabled/000-default
# This is also true if you have upgraded from before 2.2.9-3 (i.e. from
# Debian etch). See /usr/share/doc/apache2.2-common/NEWS.Debian.gz and
# README.Debian.gz

NameVirtualHost [SERVERIP]:443
NameVirtualHost *:80
Listen 80

<IfModule mod_ssl.c>
    # If you add NameVirtualHost *:443 here, you will also have to change
    # the VirtualHost statement in /etc/apache2/sites-available/default-ssl
    # to <VirtualHost *:443>
    # Server Name Indication for SSL named virtual hosts is currently not
    # supported by MSIE on Windows XP.
    Listen 443
</IfModule>

<IfModule mod_gnutls.c>
    Listen 443
</IfModule>

的内容/etc/apache2/sites-available/www.example.com

<VirtualHost *:80>
     ServerAdmin [email protected]
     ServerName example.com
     ServerAlias www.example.com
     DocumentRoot /srv/sites/example.com/public/
     ErrorLog /srv/sites/example.com/logs/error.log
     CustomLog /srv/sites/example.com/logs/access.log combined
</VirtualHost>

<VirtualHost [SERVERIP]:443>
     SSLEngine On
     SSLCertificateFile /etc/apache2/ssl/www.example.com.csr
     SSLCertificateKeyFile /etc/apache2/ssl/www.example.com.key
     SSLCACertificateFile /etc/apache2/ssl/comodo.crt

     ServerAdmin [email protected]
     ServerName example.com
     ServerAlias www.example.com
     DocumentRoot /srv/sites/example.com/public/
     ErrorLog /srv/sites/example.com/logs/error.log
     CustomLog /srv/sites/example.com/logs/access.log combined
</VirtualHost>

更新：

在 dreamhost（我正试图离开）中，我已经有一个带有 ssl / https 的域，我可以在 dreamhost 管理员证书、私钥和中间证书中看到三个密钥。我可以用这些做什么吗？我可以看到 dreamhost 正在使用 comodo 并且我的网站说它的 PositiveSSL 所以...在 comodo 的网站上有根证书和中间证书。这五个证书和openssl req -new -days 365 -nodes -keyout www.mydomain.com.key -out www.mydomain.com.csr命令创建的两个有什么关系呢？这两个要求实际证书？

我意识到 apache 的错误是指/etc/apache2/sites-available/www.example/com我弄乱了文件类型的文件，因为SSLCertificateFile /etc/apache2/ssl/www.example.com.csr它应该是.crt根据linode 文档

更新 2

所以我进入 dreamhost 并将密钥复制到以下文件并映射以下内容

certificate => dh.crt
private key => dh.key
intermediate certificate => dh.cer

更改了连接/sites-available/example.com并且它工作了（apache 工作）。这是否意味着当我连接我的域时 ssl 将起作用？

linux ubuntu apache-2.2 ssl ssl-certificate
Martin Hope
ThomasReggi
Asked: 2012-06-28 15:32:18 +0800 CST
  • 0

我只是想打开 mysql 以便可以从任何服务器 ip 访问。

我已经注释掉了bind-addressin /etc/mysql/my.conf。

我已经在 mysql 中设置了用户帐户。

我不知道是什么阻止了我连接。

我看到这越具有挑战性，我就越意识到它有多大的安全风险，我明白了，我只是想能够暂时做到这一点。

我认为 iptables 防火墙是阻止我实现这一目标的最后一件事，但sudo iptables -A INPUT -p tcp -m tcp --dport 3306 -j ACCEPT似乎什么也没做。

thomas@vannevar:~$ netstat -tl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 *:mysql                 *:*                     LISTEN     
tcp        0      0 *:git                   *:*                     LISTEN     
tcp        0      0 *:ssh                   *:*                     LISTEN     
tcp6       0      0 [::]:git                [::]:*                  LISTEN     
tcp6       0      0 [::]:http               [::]:*                  LISTEN     
tcp6       0      0 [::]:ssh                [::]:*                  LISTEN     
tcp6       0      0 [::]:https              [::]:*                  LISTEN

和

root@vannevar:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
fail2ban-ssh  tcp  --  anywhere             anywhere             multiport dports ssh
ACCEPT     all  --  anywhere             anywhere            
REJECT     all  --  anywhere             127.0.0.0/8          reject-with icmp-port-unreachable
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ssh
ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
LOG        all  --  anywhere             anywhere             limit: avg 5/min burst 5 LOG level debug prefix "iptables denied: "
REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            

Chain fail2ban-ssh (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere
firewall linux ubuntu mysql iptables
Martin Hope
ThomasReggi
Asked: 2012-06-23 13:04:24 +0800 CST
  • 0

以这篇文章为食。

我有一个 Dreamhost 域，我已经为它购买了 SSL 证书。

我正在将服务器文件移至 Linode，但将 dreamhost 中的 DNS 设置为指向。

Linode 提供了一个 ip，但它不是专用的。

当我将 DNS 切换到 linode 时，该 dreamhost IP 上的 SSL 会发生什么情况？

我有一个虚拟主机，我可以托管多个域，同时为一个域使用 SSL 吗？

domain-name-system ssl linode dreamhost
Martin Hope
ThomasReggi
Asked: 2012-06-22 07:24:33 +0800 CST
  • 1

我登录 (ssh) 我的 ubuntu 服务器到一个非 root 用户帐户。我不能以 root 身份直接通过 ssh 进入服务器，因为我禁用了它。我有根密码。我需要从这个用户中更改我当前登录的没有密码的用户密码。

我忘记了命令，但有一种方法可以从这个帐户中充当脚，我可以从那里更改密码吗？

我有点迷路，所以任何帮助都会有所帮助。

ubuntu password root linode
Martin Hope
ThomasReggi
Asked: 2012-05-18 10:07:58 +0800 CST
  • 0

我有一个 ubuntu 服务器。我使用创建了一个简单的index.html文件touch。并尝试使用nano，结果权限被拒绝。为什么是这样？如果我只是在服务器上创建文件，为什么我一开始就没有写权限？我的第二个问题是，如果我想更改数字格式的权限644（服务器上的 html 文件应该设置成什么？） 我如何查看当前的内容 如何转换-rw-rw-r--为数字格式？我想-ls -l用数字权限格式而不是-rw-rw-r--. 该index.html文件在服务器上运行正常。

thomas@vannevar:~/public/example.org/public$ touch index.html
thomas@vannevar:~/public/example.org/public$ ls
index.html
thomas@vannevar:~/public/example.org/public$ nano index.html

Error reading /home/thomas/.nano_history: Permission denied

Press Enter to continue starting nano.

thomas@vannevar:~/public/example.org/public$ ls -l
total 0
-rw-rw-r-- 1 thomas thomas 0 May 17 13:57 index.html
thomas@vannevar:~/public/example.org/public$

这行得通

http://pricklytech.wordpress.com/2010/12/12/ubuntu-nano-error-reading-home-nano_history-permission-denied/

ubuntu permissions