This guide shows how to issue and automatically renew a Let’s Encrypt SSL certificate for an Apache website running directly on an EC2 instance with Amazon Linux 2023, without a load balancer. Example domain used in this walkthrough: example.com Prerequisites Before starting, confirm the following: The EC2 security group allows inbound traffic on ports 80 and 443. The domain’s DNS…
Read More »
Every homelabber and small-ops admin knows the moment: you browse to one of your own services and get slapped with a full-screen certificate warning. The cert expired three days ago. Nothing told you. Now you’re renewing it under pressure instead of on a schedule. I got tired of that moment, so I built TrustView — a lightweight, self-hosted dashboard that…
Read More »
In this exercise, Tomcat 9 will be installed with OpenJDK 8 using a self-signed certificate using the http2.Http2Protocol protocol. I’ve updated and simplified the script since my last attempt at a similar Tomcat 9 installation. I have also added SELinux context, log rotation, and speed! ######################################################################################## # Apache Tomcat 9 ######################################################################################## yum install wget firewalld java-1.8.0-openjdk-devel policycoreutils-python epel-release -y yum…
Read More »
In this exercise, Tomcat 9 will be installed with OpenJDK 8 using a self-signed certificate in a PKS12 keystore on a clean CentOS 7 Linux server using the Http11NioProtocol protocol. These are the steps. ######################################################################################## # Apache Tomcat 9 ######################################################################################## yum install wget vim net-tools firewalld unzip -y yum install java-1.8.0-openjdk-devel -y cd /opt/app wget http://us.mirrors.quenda.co/apache/tomcat/tomcat-9/v9.0.16/bin/apache-tomcat-9.0.16.tar.gz tar xzvf apache-tomcat-9.0.16.tar.gz ln…
Read More »
I don’t remember the specific dates or versions of the applications, but what I can state is that somewhere in recent years, Internet browsers and search engines, specifically Google, Google Chrome, and Firefox started to enforce the use of SSL certificates on websites. Websites will have higher page rankings with an SSL against those who do not. Chrome and Firefox…
Read More »
There is a MySQL 5.6.x install that works wonderfully. However, a cert was purchased and applied to everything else, so why not apply to the MySQL install too. I ran into a pitfall or two while attempting this, so I am going to write this up in the effort to avoid those pitfalls. The Key file Determine the version of…
Read More » Adding a root authority certificate to a server that does not already have the cert may be added to the server manually. CentOS 6 Install the ca-certificates package: yum install ca-certificates Enable the dynamic CA configuration feature: update-ca-trust force-enable Add it as a new file to /etc/pki/ca-trust/source/anchors/: cp foo.crt /etc/pki/ca-trust/source/anchors/ Use command: update-ca-trust extract CentOS 7 CentOS 7.0 and later…
Read More »All subversion checkouts, commits and other basic operations work as expected, but when attempting to copy, move or tag (copy) a (502 Bad Gateway) error presents itself. The error may be similar to the one presented below. greg@codemine:~/code/Foo (git-svn)-[trunk] %>; git svn tag foo-2.1.1 Copying https://svn/projects/Foo/trunk at r18311 to https://svn/projects/Foo/tags/foo-2.1.1… RA layer request failed: Server sent unexpected return value (502…
Read More »It was discovered days later that one of my websites was offline displaying only 500 error messages. As it turned out, it was as a result of the .htaccess files. The .htaccess files did not include <IfModule XXXXX> </IfModule> around the directives. Tracking down the offending lines, it was determined that the lines were all part of the mod_headers.c module….
Read More »