In my line of work I get to work with a lot of security devices which run self-signed certificates. Those certificates are most of the time generated when the device / appliance is installed, or configured for the very first time. When you connect to one of those devices with a web browser, you tend to see the warnings displayed by the browser that the connection is not to be trusted.
In Firefox, you can add an exception in the browser. When you've done that, the next time you go to the website, the browsers treats the website as trusted.
When you install a Perfect Server based on Centos and ISPConfig v3.x, the system / 'installer' creates for the components self-signed certificates. All these certificates will generate different warnings in your browser, mail clients etc. So time to eliminate those warnings.
First I needed to find out where all those certificates are located, and what there formats are. In my case, there are three services that use SSL/TLS in some form;
- Postfix SMTP service
- Courier IMAP service
- http / Apache2 webservice
Checking the configuration files will reveal their locations.
Just a small post with the instructions on upgrading Splunk on Ubuntu Linux.
First download the Splunk update. The Splunk website also gives you the wget command, which you can use directly on the Linux commandline.
Syslog-ng is a replacement for the default syslog daemons you get with most Linux distributions. The advantage of syslog-ng is that the configuration is easier to understand, and it gives the sys-admin numerous advantages. Especially in complex environments.
Let's say we have a RADIUS environment which is able to send authentication and accounting information through syslog to external devices. And let's assume that a relevant part of this syslog information is needed by a department within a large cooperation.
Installing syslog-ng (on Ubuntu) is done by the following command:
# sudo apt-get install syslog-ng
Through the use of syslog-ng we can store, and/or forward syslog information based on the following (but not limited to):
- source IP address
- destination IP address
- syslog level
- content in the original syslog message by using regular expressions.
All this can be configured in the /etc/syslog-ng/syslog-ng.conf file.
The moment you download OS X Lion, you'd better have a copy of OS X Snow Leopard, because by default the new Apple OS can only be installed on a previous installed Operating System (upgrade). So if you need to reinstall your Mac in the future, you need to install OS X Snow Leopard first, and then upgrade to OS X Lion. Also, there's no way of ordering an OS X Lion copy on DVD..... Well, that sucks.
Fortunately, there's a way of creating the installation DVD by extracting the actual disk image from the downloaded OS X Lion installation package.
;)
