Debianzone http://debianzone.posterous.com Most recent posts at Debianzone posterous.com Sun, 29 Nov 2009 08:57:59 -0800 Tools to monitor linux apache server http://debianzone.posterous.com/tools-to-monitor-linux-apache-server http://debianzone.posterous.com/tools-to-monitor-linux-apache-server The following tools are usefull to linux administration and monitoring RRDTool: RRDtool is the OpenSource industry standard, high performance data logging and graphing system for time series data. Use it to write your custom monitoring shell scripts or create whole applications using its Perl, Python, Ruby, TCL or PHP bindings.
Media_httpossoetikerc_kmfwv
AWStats: AWStats is a free powerful and featureful tool that generates advanced web, streaming, ftp or mail server statistics, graphically. This log analyzer works as a CGI or from command line and shows you all possible information your log contains, in few graphical web pages.
Media_httpawstatssour_hfcec
Analog: Analog is a program to measure the usage on your web server. It tells you which pages are most popular, which countries people are visiting from, which sites they tried to follow broken links from, and all sorts of other useful information.
Media_httpwwwchiarkgr_jdbbv
Piwik: Piwik is a downloadable, open source (GPL licensed) web analytics software program. It provides you with detailed real time reports on your website visitors: the search engines and keywords they used, the language they speak, your popular pages… Piwik aims to be an open source alternative to Google Analytics. Piwik is a PHP MySQL software program that you download and install on your own webserver. At the end of the five minute installation process you will be given a JavaScript tag. Simply copy and paste this tag on websites you wish to track (or use an existing plugin to do it automatically for you).

Permalink | Leave a comment  »

]]>
http://files.posterous.com/user_profile_pics/894020/a9105079458196173bfc8734807b32ed.jpeg http://posterous.com/users/4xlDDq0UWIA9 Sandeep Manne smanne Sandeep Manne
Sat, 28 Nov 2009 13:50:46 -0800 Debian / Ubuntu Apache SSL Configuration http://debianzone.posterous.com/debian-ubuntu-apache-ssl-configuration http://debianzone.posterous.com/debian-ubuntu-apache-ssl-configuration Hey you are planning to start a e-commerce website, then you must know about SSL without which no one will trust your website as a safe place to use their cards… What is SSL? SSL (Secure Socket Layer) is a protocol used for secure data transfer. This is done by using private keys and certificates. A private key is used to encrypt the data which you are sending and the server can only decrypt this data with the private key available with it, A certificate is used to authentic yourself before proceeding. So we need two things to make our website secure for online transactions. In this article i will explain how to generate a private key, certificate request with open-ssl and apache, get certificate from CA (Certificate Authority), configure your server to respond for ssl requests. Different types of certificates Before going to configuration I will explain about the different types of certificates available in the market and when to use which. The certificates are mainly divided into High Assurance and Low Assurance, High assurance is needed for sites dealing with financial transactions, low assurance is needed for internal corporate networks or small websites and mainly used for secure login to site and sending sensitive documents securely. Remember every byte you are sending through http protocol means non-ssl layer can be seen or accessed by anyone. Configuration: I used Apache 2, Debian Linux, Openssl for this configuration. First step is to install Apache: Go to console mode [shell]aptitude install apache2 [/shell] next install openssl to generate keys and certificates or certificate requests [shell]aptitude install openssl [/shell] next generate certificate request and key using openssl [shell]openssl req -new -nodes -keyout linuxforu.key -out linuxforu.csr[/shell] Here you want to fill up details like Country code, State, City, Company name, the most important thing is common name, it must be same as your website name (suppose you website is www.linuxforu.com then the common name must be linuxforu.com). This will generate two files in your directory one is a private key file (myserver.key) and another one is certificate request file (myserver.csr) Now you need to get a certificate from some certificate vendors like verisign or comodo or anyother of your choice. The certificate request which we already generated is used to get this the certificate vendors will ask you to paste the certificate request. Comodo is providing a free trail certificate which is valid for 3 months. (Comodo Free Trail). Remember every certificate has some validity after that if we use the same certificate browser will through security error. After getting the certificates you want to enable ssl module in apache and configure it [shell]a2enmod ssl vi /etc/apache2/sites-available/default[/shell] [shell]ServerName linuxforu DocumentRoot /var/www/ SSLEngine On SSLCertificateFile /etc/apache2/ssl/linuxforu.cert SSLCertificateKeyFile /etc/apache2/ssl/linuxforu.key[/shell] [shell]Options Indexes FollowSymLinks AllowOverride All Order deny,allow Allow from all[/shell] Then restart your server [shell]/etc/init.d/apache2 restart[/shell] We all know that a default http request will be sent to port 80, in the same way default https request will be forwarded to port 443 so we configured the server for listening 443 port. You are done now access your website with https://server.com If you face any problems you want to check this things first Whether the server is hearing port 443 or not to find this type [shell]lsof -i tcp:443[/shell] Next check whether your port 443 is forwarded or not. If you face any new problems other than this please post a comment and we will try to solve it.

Permalink | Leave a comment  »

]]>
http://files.posterous.com/user_profile_pics/894020/a9105079458196173bfc8734807b32ed.jpeg http://posterous.com/users/4xlDDq0UWIA9 Sandeep Manne smanne Sandeep Manne