Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - rcschaff

Pages: 1 ... 25 26 [27] 28 29 ... 55
391
CentOS 7 Problems / Re: CWP Problem
« on: May 25, 2020, 05:27:51 PM »
You will have to reset the server.  CWP cannot be uninstalled once it's even partially installed.

392
Information / Re: How to redirect webmail to https only
« on: May 25, 2020, 05:26:41 PM »
did you try changing your webservers default configs to force-https

CWP ADMIN -> Webserver Settings -> Webserver Main Conf

Set to force-https (or https2)

rebuild all configs

393
DNS / Re: All Subdomain Stopped working
« on: May 25, 2020, 05:17:09 PM »
looking up yoru glue records, there is a problem
IPv4 Glue records for ns1.activetech.co.za
ns0.is.co.za.   86400   IN   A   196.4.160.17

You need to log into your registart and add glue/host records for ns1 and ns2 to point to your servers ip

394
Aplications / Re: Information general Configuation Package
« on: May 25, 2020, 05:11:58 PM »

- cgroups https://www.youtube.com/watch?v=g0MK061KFNI
- nproc:  Number of Processes allowed per user.  (At least 10, as each instance of nginx/apache/fpm is launced as a seperate process)
- apache_nproc  See nproc, but secificall for apache
- nofiles: number of files allwed to be read/executed at the same time
- inode:
What is inode?

Inode is a data structure that stores the information about all files created on your hosting account. The number of inodes indicates number of files, folders, email or anything you store on your web hosting account. Each file on your web hosting account is identified by an inode number in the file system. Inodes store the important data about files such as user, group ownership, access mode and file type.

395
DNS / Re: All Subdomain Stopped working
« on: May 25, 2020, 04:27:55 PM »
Kindly provide your nameservers.  Did you recently renew or transfer the domain the ns are on?

397
Nano /etc/hostname

398
ensure cwpsrv service is running.


rcschaff @ Read this response.

Cwpsrv won't run of there is no hostname certificate.  Seen the problem before.  Hostnames too long and can't make the cert.

399
Quote
routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:158:maxsize=64

Hostname is too long.  Hostname needs to be less than 64 characters

400
SSL / Re: Wlidcard SSL really how to?
« on: May 24, 2020, 08:46:00 PM »
1)  post your acme file

2) get rid of the brackets around the key. Might want to regenerate it now as it's been exposed.

401
SSL / Re: Wlidcard SSL really how to?
« on: May 24, 2020, 08:29:05 PM »
Quote
dns_master_load: /var/named/acme.doslar.ru.db:13: extra input text
/var/named/acme.doslar.ru.db: file does not end with newline
zone acme.doslar.ru/IN: loading from master file /var/named/acme.doslar.ru.db failed: extra input text
zone acme.doslar.ru/IN: not loaded due to errors.
Open acme.doslar.ru.db

go to the last line and hit enter, then save


Quote
Check /root/.acme.sh/ folder.
int there you will find several files including .key .bundle and .crt
There is not .crt file, but there is .csr files(?!)

Probably because the zone was never loaded for the dns to succeed

[quote ]I guess I will make a script to do wildcard certificates to make things easier.[/quote]This is a great idea, will the script be compatible with CentOS7?
[/quote]

Of course it will be.  Just have to work on it :)

402
SSL / Re: Wlidcard SSL really how to?
« on: May 24, 2020, 07:34:07 PM »
Check /root/.acme.sh/ folder.


You should see a folder named (domain)
int there you will find several files including .key .bundle and .crt

You will need to copy those file to /etc/pki/tls
.key goes in /private folder
.bundle and .crt go it /certs folder

I guess I will make a script to do wildcard certificates to make things easier.

403
SSL / Re: Wlidcard SSL really how to?
« on: May 24, 2020, 12:06:15 PM »
go figure, and update screwed up the tutorial. I also forgot a step in part 2(My Bad)


Step 2 is now )
cd /etc/named
dnssec-keygen -a HMAC-SHA512 -b 512 -n HOST acme
cat K*.private
(Copy the line after KEY:)
nano /etc/named.conf
add at the top under the comments
Code: [Select]
key "acme" {
          algorithm hmac-md5;
          secret "(KEY GOES HERE)";
};


Quote
/var/named/acme.schaffner.org.db
Code: [Select]
$ORIGIN .
$TTL 86400      ; 1 day
acme.schaffner.org      IN SOA  ns1.schaffner.org. rcschaff82.gmail.com. (
                                2020021035 ; serial
                                86400      ; refresh (1 day)
                                7200       ; retry (2 hours)
                                3600000    ; expire (5 weeks 6 days 16 hours)
                                86400      ; minimum (1 day)
                                )
$TTL 14400      ; 4 hours
                        NS      ns1.schaffner.org.  ;   THIS IS IMPORTANT.  DO NOT USE BOTH NAMESERVERS FOR LE
$ORIGIN acme.schaffner.org.
$TTL 60 ; 1 minute
Done, but it's displayed corrupted in DNS Functions > List DNS Zones >Edit Records
I don't care what CWP says.  What's the ouput of
Code: [Select]
named-checkzone acme.schaffner.org /var/named/acme.schaffner.org.db
Quote
Code: [Select]
NSUPDATE_SERVER=localhost NSUPDATE_KEY=/etc/named/acme.key ./.acme.sh/acme.sh --issue --test -d *.domain.com --challenge-alias acme.schaffner.org --dns dns_nsupdate --debug 2
Return: -bash: ./.acme.sh/acme.sh: No such file or directory

run /scripts/install_acme






404
RAM is a factor.  I shut down apache while doing the upgrade and it worked for me.

Very Good point.  Could also shut down Mysql while upgrading.

Also adding swap memory to the server is beneficial.

405
Installation / Re: LXC php-fpm
« on: May 24, 2020, 11:33:25 AM »
1)  Does  /opt/alt/php-fpm56/ even exist.

If Yes: system start php-fpm56

if No:  Rebuild PHP 5.6 with fpm in CWP

Pages: 1 ... 25 26 [27] 28 29 ... 55