Posts

Showing posts with the label Linux

Self-signed certificate? Why not CA-signed certificate?

Image
Very often we need certificates, mostly for using SSL/TLS in HTTP, FTP, etc. The fastest and cheapest way is the self-signed certificate. It is generated in just a few steps. However, they don't have to be "self" signed. We can also generate a CA (certification authority) and use it to issue the certificates, e.g. they will be signed by our CA. This give us the possibility to trust all our certificates by just trusting the CA. This post shows how to do it with openssl. Some configuration first It is much easier if you do some configuration for openssl, if not done so already. The configuration is placed in  /etc/ssl/openssl.cnf: Set the default algorithm to sha1: set default_md = sha1 Remove these default values: stateOrProvinceName_default = organizationName_default = In case you are planning to create multiple certificates, you can also configure the common values as defaults to spare some time later. ...

Linux - 101

Freshman in the Linux world When you start your Linux journey coming from another OS, which is mostly controlled by the GUI (Windows, OSX), you might have a lot of questions. Although the modern Linux distros provide extremely rich GUIs, the terminal remains the most powerful part of Linux. Here is some know-how, you might need. NOTE: All examples below are only tested in Debian-like distros. Aliases Edit ~/.bashrc and uncomment the line for the ll alias Or better extend it to: alias ll = 'ls -lha' Additionally, you might want to add the following function into   ~/.bash_aliases: cdl () { cd "$1" && ll; } This way, you can change dir and list content in one: nikolay@blog:/ $ cdl /var total 101M drwxr-xr-x 11 root root 4.0K Aug 20 12:47 . drwxr-xr-x 21 root root 4.0K Aug 20 12:47 .. drwxr-xr-x 2 root root 4.0K Nov 7 06:25 backups drwxr-xr-x 9 root root 4.0K Oct 25 11:08 cache drwxr-xr-x 29 root ...