Differences

This shows you the differences between two versions of the page.

--- notes:solaris_tips [2015/04/04 18:39]
admin [Howto merge pdf documents]
+++ notes:solaris_tips [2021/05/01 09:48]
admin [Let's encrypt]
@@ Line 1: / Line 1: @@
 ====== Solaris tips ======
+===== HTTPS Apache web server =====
+The goal is to run HTTPS Apache web server using [[https://letsencrypt.org/|Let's Encrypt]] certificate.
+==== Let's encrypt ====
+In order to get a certificate from Let’s Encrypt, it is necessary to demonstrate control over the domain. With Let’s Encrypt, it is done by using software that uses the [[https://tools.ietf.org/html/rfc8555|ACME]] protocol which typically runs on a web host. For Solaris (and other OSes), there is an [[https://github.com/acmesh-official/acme.sh|ACME client]] available.
+=== Deployment of ACME client in Solaris zone running Apache ===
+  * install
+<code>
+$ ssh carmon
+# pkg install -v gnu-tar
+$ mkdir ~/scripts
+$ cd ~/scripts
+$ wget -O acme.sh https://get.acme.sh
+$ ./acme.sh install
+$ crontab -l
+0 * * * "/home/dambi/.acme.sh"/acme.sh --cron --home "/home/dambi/.acme.sh" > /dev/null
+</code>
+  * issue a certificate
+<code>
+# chmod a+w /var/apache2/2.4/htdocs/
+$ cd ~/.acme.sh
+$ ./acme.sh --issue -d tio.ddns.net -w /var/apache2/2.4/htdocs/
+</code>
+  * install the certificate to Apache
+<code>
+$ ./acme.sh --install-cert -d tio.ddns.net --cert-file /etc/apache2/2.4/letsencrypt/tio.ddns.net/cert.pem --key-file /etc/apache2/2.4/letsencrypt/tio.ddns.net/key.pem --fullchain-file /etc/apache2/2.4/letsencrypt/tio.ddns.net/fullchain.pem --reloadcmd "svcadm refresh apache24"
+$ chmod a+r /etc/apache2/2.4/letsencrypt/tio.ddns.net/key.pem
+</code>
+=== Configure Apache to use Let's Encrypt certificates ===
+  * enable SSL in Apache
+  * [[https://cwiki.apache.org/confluence/display/httpd/RedirectSSL|redirect HTTP to HTTPS ]]
+<code>
+# vim /etc/apache2/2.4/httpd.conf
+...
+Listen 80
+Listen 443
+...
+LoadModule ssl_module libexec/mod_ssl.so
+...
+<VirtualHost *:80>
+        ServerName tio.ddns.net
+        Redirect / https://tio.ddns.net/
+</VirtualHost>
+<VirtualHost *:443>
+        ServerName tio.ddns.net
+        Protocols h2 http/1.1
+        SSLEngine on
+        SSLCertificateFile /etc/apache2/2.4/letsencrypt/tio.ddns.net/fullchain.pem
+        SSLCertificateKeyFile /etc/apache2/2.4/letsencrypt/tio.ddns.net/key.pem
+</VirtualHost>
+...
+# svcadm restart apache24
+</code>
+Jako alternativa viz článek [[https://www.root.cz/clanky/apache-pridava-podporu-let-s-encrypt-pro-https-staci-jeden-radek-konfigurace/|Apache & Let's Encrypt]] na Rootu.
 ===== Howto merge pdf documents =====
 <code>
 $ gs -sDEVICE=pdfwrite -dNOPAUSE -dQUIET -dBATCH -sOutputFile=out.pdf *.pdf
 </code>
-===== Convert plain text files to pdf =====
+===== Howto convert plain text file to pdf =====
 <code>
 $ pr -f <file> | a2ps -1 -m -B --borders=no -o - | ps2pdf - - > /tmp/pr.pdf
@@ Line 16: / Line 72: @@
 </code>
  More info in **console-kit-daemon(1m)** man page.
+===== Create new Mercurial repository =====
+<code>
+$ cd /data/hg
+$ mkdir elektro
+$ cd elektro
+$ hg init
+</code>