Nginx Openssl 설정

인증서 만들기 

#openssl req -new -newkey rsa:2048 -nodes -keyout open_ssl.key -out open_ssl.csr

Generating a 2048 bit RSA private key
...
...
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []: <----------------------- Nginx 서버 시작 시 입력하는 패스워드
An optional company name []:


#ls -al
-rw-r--r-- 1 root root 1110 Jun 18 11:21 open_ssl.csr
-rw-r--r-- 1 root root 1704 Jun 18 11:21 open_ssl.key
테스트를 위한 SSL 인증서 생성 

#openssl x509 -req -days 365 -in open_ssl.csr -signkey open_ssl.key -out open_ssl.crt


#ls -al
-rw-r--r-- 1 root root 1306 Jun 18 11:27 open_ssl.crt
-rw-r--r-- 1 root root 1110 Jun 18 11:21 open_ssl.csr
-rw-r--r-- 1 root root 1704 Jun 18 11:21 open_ssl.key
Nginx 의 SSL 모듈 탑재 확인 

#/usr/local/nginx/sbin/nginx -V

nginx version: nginx/1.5.8
built by gcc 4.4.6 20120305 (Red Hat 4.4.6-4) (GCC)
TLS SNI support enabled
configure arguments: --prefix=/daum/program/nginx --with-http_ssl_module
"--with-http_ssl_module" 부분 없다면 아래 방식으로 Nginx 재설치 

# ./configure --prefix=/usr/local/nginx --with-http_ssl_module
...
# make && make install
Nginx 서버 config 설정 

    # HTTPS server
    #
    server {
        listen       443 ssl;
        server_name  localhost;

        ssl_certificate      /usr/local/nginx/ssl/open_ssl.crt;
        ssl_certificate_key  /usr/local/nginx/ssl/open_ssl.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
     proxy_pass   http://127.0.0.1:8080;
        }
    }

댓글

댓글 쓰기

이 블로그의 인기 게시물

Using the MinIO API via curl

Using the MinIO API via curl is straightforward, as MinIO is compatible with Amazon S3 API, so most commands follow a similar syntax. Here’s a guide on how to use curl with the MinIO API for some common operations like uploading, downloading, and managing objects. Prerequisites Access Key and Secret Key : Obtain your MinIO Access Key and Secret Key. MinIO Endpoint : Know your MinIO server endpoint, e.g., http://localhost:9000 . Bucket : You may need an existing bucket name, or create a new one using the commands below. Authentication Header For requests to work with MinIO, you need to include authentication in the headers. MinIO uses AWS Signature Version 4 for signing requests. Common Examples 1. List Buckets To list all buckets in your MinIO account, use: curl -X GET \ - -url "http://localhost:9000/" \ - H "Authorization: AWS <AccessKey>:<Signature>" 2. Create a Bucket To create a new bucket, use: curl -X PUT \ - -url "htt...
자세한 내용 보기

JAXB @XmlTransient 예제

public abstract class Base { private int id; public int getId() { return id; } public void setId(int id) { this.id = id; } } // parent 클래스에 설정 @XmlTransient public class Person extends Base { private String name; public String getName() { return name; } public void setName(String name) { this.name = name; } } @XmlRootElement @XmlType(propOrder = {"name", "phoneNumbers", "password"}) public class Customer extends Person { private String password; private List phoneNumbers; @XmlElement(name = "password") public String getPassword() { return password; } public void setPassword(String password) { this.password = password; } @XmlElement(name = "phone-number") public List getPhoneNumbers() { return phoneNumbers; } public void setPhoneNumbers(List phoneNumbers) { ...
자세한 내용 보기

Using venv in Python

Using venv in Python allows you to create a virtual environment, which is an isolated environment to manage dependencies for a specific project. Here's how you can use it step by step: 1. Create a Virtual Environment Open your terminal or command prompt. Navigate to the folder where you want to create the virtual environment. Run the following command: python -m venv myenv Replace myenv with the name you want for your virtual environment. This will create a directory named myenv containing the virtual environment. 2. Activate the Virtual Environment Activation depends on your operating system: On Windows : myenv \S cripts \a ctivate On macOS/Linux : source myenv /bin/ activate After activation, your terminal prompt will change, showing the name of the virtual environment (e.g., (myenv) ). 3. Install Dependencies With the virtual environment activated, you can now install packages using pip : pip install package _n ame For example: pip install req...
자세한 내용 보기

vsftpd default directory

The default directory for FTP users in vsftpd depends on how the FTP server is configured and the user’s home directory setup. Below are different configurations and their impact on the default directory that users are placed in when they connect to the server. 1. Default Directory Behavior with vsftpd When a user logs in via FTP, they are typically placed in their home directory . By default, the home directory is located at /home/<username> , where <username> is the name of the FTP user. For example: If the FTP user is ftpuser , the default login directory will be /home/ftpuser/ . 2. Changing the Default Directory for Users A. Using local_root Configuration You can specify a custom directory (other than the user’s home directory) for FTP users by setting the local_root parameter in the vsftpd configuration file. Open the vsftpd configuration file: sudo nano /etc/ vsftpd.conf Add the following line to specify a new directory for all FTP users: lo...
자세한 내용 보기

패션 하의, Pants, Skirts, Shorts, Skorts

하의의 종류는 다양한 디자인, 용도, 계절 등에 따라 나뉩니다. 대표적인 하의 종류를 설명하자면 다음과 같습니다. 1. 바지 (Pants) 청바지 (Jeans) : 데님 소재로 만들어진 바지로, 캐주얼한 스타일의 기본 아이템입니다. 청바지는 다양한 워싱, 핏으로 제공되며 일상적인 스타일에 많이 사용됩니다. 슬랙스 (Slacks) : 정장이나 격식 있는 자리에 입는 바지로, 주로 직물로 만들어집니다. 깔끔한 실루엣을 제공하며 포멀한 상황에 적합합니다. 조거 팬츠 (Jogger Pants) : 발목 부분이 밴드로 조여지는 캐주얼한 스타일의 바지로, 편안한 착용감을 제공합니다. 운동복으로도 자주 사용됩니다. 레깅스 (Leggings) : 몸에 딱 맞는 신축성 있는 재질로 만들어진 바지로, 주로 운동복이나 일상적인 편안한 룩에 사용됩니다. 2. 스커트 (Skirts) 미니 스커트 (Mini Skirt) : 무릎 위의 길이로 짧은 스타일의 스커트로, 캐주얼하거나 세련된 느낌을 줍니다. 미디 스커트 (Midi Skirt) : 무릎 아래에서 종아리 중간까지 오는 길이의 스커트로, 적당히 단정하면서도 여성스러운 느낌을 줍니다. 맥시 스커트 (Maxi Skirt) : 발목까지 내려오는 긴 스커트로, 여유롭고 편안한 스타일입니다. 플리츠 스커트 (Pleated Skirt) : 여러 개의 주름이 있는 스커트로, 클래식한 스타일과 현대적인 스타일 모두에서 사용됩니다. 3. 반바지 (Shorts) 데님 반바지 (Denim Shorts) : 청바지 재질로 만들어진 짧은 바지로, 주로 여름철에 입습니다. 치노 반바지 (Chino Shorts) : 면 소재로 만들어진 반바지로, 캐주얼하면서도 깔끔한 느낌을 줍니다. 버뮤다 반바지 (Bermuda Shorts) : 무릎 길이 정도의 반바지로, 편안하면서도 단정한 느낌을 줄 수 있습니다. 4. 치마바지 (Skorts) 치마처럼 보이지만 속에 반바지가 내장된 형태의 하의로, 활동성이 높고 캐주얼하게 입을...
자세한 내용 보기

Python program to convert an .xlsx file to JSON using the openpyxl library

Here’s a Python program to convert an .xlsx file to JSON using the openpyxl library. Make sure you have the openpyxl library installed. If you don't have it yet, install it using: pip install openpyxl Program to Convert XLSX to JSON import openpyxl import json def xlsx_to_json (file_path, sheet_name=None) : try : # Load the workbook and select a sheet workbook = openpyxl.load_workbook(file_path) sheet = workbook[sheet_name] if sheet_name else workbook.active # Extract data from the sheet data = [] headers = [cell.value for cell in next(sheet.iter_rows(min_row= 1 , max_row= 1 ))] for row in sheet.iter_rows(min_row= 2 , values_only= True ): entry = {headers[i]: row[i] for i in range(len(headers))} data.append(entry) # Convert the data to JSON format json_data = json.dumps(data, indent= 4 ) # Save the JSON to a file json_file = file_path.repla...
자세한 내용 보기

Offset out of range error in Kafka, 카프카 트러블슈팅

The "Offset out of range" error in Kafka typically occurs when a consumer tries to read an offset that no longer exists on the broker. This can happen for several reasons, such as: The offset is smaller than the earliest offset available for the topic partition (i.e., the messages have been deleted due to log retention policies). The offset is larger than the latest offset available for the topic partition (i.e., the consumer is trying to read beyond the latest message). Steps to Resolve "Offset Out of Range" Error 1. Check Current Offsets Before making changes, it's useful to understand the current offsets and the offset range available for the topic partitions. Use the kafka-consumer-groups.sh script to describe the consumer group: bin/kafka-consumer-groups.sh --bootstrap- server localhost: 9092 --describe -- group <consumer- group -id> This command will show the current offsets, log end offsets, and the lag for each partition. 2. Reset the...
자세한 내용 보기

Sparse encoder

A Sparse Encoder refers to a variant of neural network architectures where sparsity is introduced in the encoding process. This can mean either: Sparse Input Representations : The input features to the encoder are sparse (many values are zero). Sparse Output Representations : The encoder is designed to produce sparse outputs where most of the encoded feature values are zero. Sparse encoders are often used to improve model interpretability, efficiency, and generalization. They can be applied in various contexts, including traditional neural networks, autoencoders, and even transformer-based models. Key Characteristics of Sparse Encoders Sparsity in Representations : The model learns a feature representation where only a subset of neurons is active for a given input. This mimics how biological neurons operate, promoting interpretability and reducing noise in representations. Reduced Computational Cost : Sparse operations often result in lower computational overhead since...
자세한 내용 보기