芋圓手稿

中招了….wpad.dat 自己跑進 proxy setting…..(中間人)

11 月 11

joechen未分類 No Comments

http://www.2-spyware.com/remove-unstops-net-virus.html

AAAR export PDF with no data – PKIX path building failed

11 月 08

joechenAlfresco, 未分類 AAAR, alfresco No Comments

2016/11/08 14:23:45 - HTTP - Start of HTTP job entry.
2016/11/08 14:23:45 - HTTP - Connecting to URL: https://imkm.udngroup.com:443/alfresco/service/api/audit/query/alfresco-access?verbose=true&fromId=0&limit=50000
2016/11/08 14:23:46 - HTTP - ERROR (version 6.1.0.1-196, build 1 from 2016-04-07 12.08.49 by buildguy) : I was unable to save the HTTP result to file because of a I/O error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2016/11/08 14:23:46 - HTTP - ERROR (version 6.1.0.1-196, build 1 from 2016-04-07 12.08.49 by buildguy) : javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1509)
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
2016/11/08 14:23:46 - HTTP - at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)

AAAR設定為 https 連線時, 會無法正確產出報表, 部分網站認為是 tomat 7 不支援SSL 1024bit以上的加密, 只能暫以走 http (port 80)

httpd on CentOS7 box using VirtualHost

11 月 03

joechen未分類 No Comments

VirtualHost setting
http://www.ahlinux.com/server/proxy/8732.html

CentOS got httpd 503 error using ProxyPass
http://stackoverflow.com/questions/25644487/httpd-returning-503-service-unavailable-with-mod-proxy-for-tomcat-8

If this is the problem, it can be solved by running:

/usr/sbin/setsebool -P httpd_can_network_connect 1

[Graylog] 升級 OVA 版本的 graylog2

10 月 12

joechenELK, 未分類 graylog No Comments

REF: http://docs.graylog.org/en/2.1/pages/configuration/graylog_ctl.html

Upgrade Graylog

Always perform a full backup or snapshot of the appliance before proceeding. Only upgrade if the release notes say the next version is a drop-in replacement. Choose the Graylog version you want to install from the list of Omnibus packages . graylog_latest.deb always links to the newest version:

$ wget https://packages.graylog2.org/releases/graylog-omnibus/ubuntu/graylog_latest.deb
$ sudo graylog-ctl stop
$ sudo dpkg -G -i graylog_latest.deb
$ sudo graylog-ctl reconfigure
$ sudo reboot

如果遇到 reconfigure 失敗或不成功的狀況, 可參考

[Alfresco] 利用bigIP做SSL加密及內部apache2反向代理後, 看不到外部IP的問題

9 月 13

joechenAlfresco, 未分類 alfresco No Comments

https://loadbalancer.org/blog/apache-and-x-forwarded-for-headers

——–
Alvaro R • 3 years ago
This works on all versions

SetEnvIf X-Forwarded-For “^(d{1,3}+.d{1,3}+.d{1,3}+.d{1,3}+).*” XFF1STIP=$1
LogFormat “%{XFF1STIP}e %l %u %t “%r” %>s %b “%{Referer}i” “%{User-Agent}i”” combined

————-

[Alfresco] 由外部代理做SSL加密通道, 造成與本機內部自簽SSL衝突, 發生各種資料傳遞問題

9 月 12

joechenAlfresco, 未分類 alfresco No Comments

編輯3個檔案
1. alfresco-global.properties
編輯為

solr.secureComms=none

2. solr4/workspace-SpacesStore/conf/solrcore.properties
編輯為

alfresco.secureComms=none

3. solr4/archive-SpacesStore/conf/solrcore.properties
編輯為

alfresco.secureComms=none

[Java][Keystore] 參考文件

9 月 08

joechen未分類 No Comments

http://my.oschina.net/xinxingegeya/blog/287641