fabiolagana.net » Linux

Update Expired SSL Certs

Fabio Laganà — Wed, 29 Oct 2008 11:17:06 +0000

- Farsi una copia del vecchio certificato
cd /etc/ssl/certs
cp -ap pop3ss.pem pop3s.pem.scaduto
 
- Ricreazione nuovo certificato
cd /etc/ssl
openssl req -new -x509 -nodes -days 3650 -newkey rsa:1024 -keyout private/pop3s.key -out pop3s.cert
touch certs/pop3s-new.pem
chmod 600 certs/pop3s-new.pem
cat private/pop3s.key pop3s.cert > certs/pop3s-new.pem
dd if=/dev/urandom count=2 | openssl dhparam -rand - 512
pico certs/pop3s-new.pem
chown vpopmail certs/pop3s-new.pem
cd certs
mv pop3s-new.pem pop3s.pem
 
-- rollback in caso qualcosa andasse storto --
mv pop3s.pem.scaduto pop3s.pem

Bash script for checking mysql problem by reading daemon.log

Fabio Laganà — Wed, 06 Aug 2008 21:27:34 +0000

#!/bin/bash
 
### Checking del daemon.log per eventuali problemi sul DB MySQL
# rel. 0.3 - 01 Agosto 2008
 
# time_to_check_min=`date +"%b %d %k:%M" -d "-1 min"`
# time_to_check_hour=`date +"%b %d %k:%M" -d "-1 hour"`
file_to_check=/var/log/daemon.log
tmp_file=/tmp/info.tmp.01.$$
tmp_file1=/tmp/info.tmp.02.$$
host=`cat /etc/hostname`
semaphore=/tmp/.flag_checking_daemon_log
 
daemon=mysql
 
if [[ -e $semaphore ]];
  then
    echo "checking for mysqld....Nothing to do ....another cron is still working"
  else
    touch $semaphore
if [[ `date +"%d"` &lt; '10' ]]; then
    time_to_check_min=`date +"%b %d %k:%M" -d "-1 min"| sed -r 's/[[:space:]](0)([1-9])[[:space:]]/  2 /'`
    time_to_check_hour=`date +"%b %d %k:%M" -d "-1 hour"| sed -r 's/[[:space:]](0)([1-9])[[:space:]]/  2 /'`
else
    time_to_check_min=`date +"%b %d %k:%M" -d "-1 min"`
    time_to_check_hour=`date +"%b %d %k:%M" -d "-1 hour"`
fi
#echo "checking for ""$file_to_check  $time_to_check_min"
grep "$time_to_check_min" "$file_to_check" &gt; $tmp_file
grep "$daemon" "$tmp_file" &gt; $tmp_file1
if [[ -e $tmp_file1 ]];
    then
        if [[ -s $tmp_file1 ]]; then
            mail -s "Something happening on [ $daemon ] for ""$host" tech-c@bakeca.it &lt; $tmp_file1
        fi
        #remove the tmp_file
        rm -f $tmp_file
        rm -f $tmp_file1
    fi
   #removing the semaphore
   rm -f $semaphore
fi

Linux Variables

Fabio Laganà — Thu, 10 Apr 2008 12:32:27 +0000

When variables are used they are referred to with the $ symbol in front of them. There are several useful variables available in the shell program. Here are a few:

$$ = The PID number of the process executing the shell.
$? = Exit status variable.
$0 = The name of the command you used to call a program.
$1 = The first argument on the command line.
$2 = The second argument on the command line.
$n = The nth argument on the command line.
$* = All the arguments on the command line.
$# The number of command line arguments.

The “shift” command can be used to shift command line arguments to the left, ie $1 becomes the value of $2, $3 shifts into $2, etc. The command, “shift 2″ will shift 2 places meaning the new value of $1 will be the old value of $3 and so forth.

SSH dynamic port forwarding with SOCKS

Fabio Laganà — Thu, 26 Oct 2006 14:38:09 +0000

SSH has numerous uses beyond just logging into a remote system. In
particular, SSH allows you to forward ports from one machine to another,
tunnelling traffic through the secure SSH connection. This provides a
convenient means of accessing a service hosted behind a firewall, or one
blocked by an outgoing firewall.

However, forwarding an individual port still requires you to change
where your program connects, telling it to use a non-standard port on
|localhost| rather than the standard port on the remote machine, and it
requires a separate port forward for each machine you want to access.
Dynamic port forwarding via SOCKS
provides a more convenient alternative.

The examples in this article assume that you reside behind a restrictive
firewall which does not allow outgoing SMTP connections except to a
designated mail server. You want to connect to a different mail server,
|mail.example.net|, on port 25. You have an SSH account on a machine
|shell.example.org|, which does not reside within the restrictive
firewall and can thus access port 25 on |mail.example.net|.

With standard SSH port forwarding, you could enter the command:

ssh -L 2525:mail.example.net:25 shell.example.org

This will forward port 2525 on your machine to port 25 on
|mail.example.net|, by way of |shell.example.org|. You will then need to
configure your mailer to send mail to |localhost|, port 2525, and use
the authentication information for your mail account on
|mail.example.net|. For example, in Thunderbird^WIcedove, you could add
an additional outgoing mail server via Edit->Preferences, “Outgoing Mail
Server (SMTP)”, “Add…”, and either set it as the default or explicitly
set your mail account to use that server. You can then send your mail,
which will potentially (if you use secure authentication with
|mail.example.net|) give you a security warning about |localhost|
presenting a certificate for |mail.example.net|, and then prompt you for
your account password. After you have finished sending all the mails you
want to send, you can then change your outgoing mail server back to the
previous setting, and exit SSH.

To avoid all this hassle, SSH also supports dynamic port forwarding via
SOCKS. SOCKS defines a standard mechanism for a client to connect to a
server by way of a proxy. SSH can serve as the proxy, allowing you to
connect to |shell.example.org| and make connections from there to an
arbitrary server such as |mail.example.net|. Simply run:

ssh -D 1080 shell.example.org

to make the connection to |shell.example.org| and start a SOCKS proxy on
|localhost| port 1080.

In order to make use of the SOCKS proxy, you can either use applications
which can speak SOCKS natively, or you can use a socksifier program like
tsocks. tsocks provides a library used with |LD_PRELOAD|, which replaces
the standard sockets functions like |socket|, |connect|, and |sendto|
with functions that make use of a designated SOCKS proxy. The tsocks
script runs a program with this library loaded. The library will read
|/etc/tsocks.conf| to find out what SOCKS proxy to use. To configure
tsocks to work with an SSH SOCKS proxy on localhost, edit the default
|/etc/tsocks.conf|, change the server variable to 127.0.0.1, and comment
out the path example.

Now that you have tsocks configured, you can run the following whenever
you want to send mail via |mail.example.net|:

ssh -D 1080 shell.example.org
tsocks thunderbird

This will open the SSH-tunnelled SOCKS proxy to |shell.example.org| and
run thunderbird. You can then send mail normally, without changing the
outgoing server configuration, and without seeing any authentication
mismatch warnings.