[ ca ]
default_ca = garexCA # The default ca section

####################################################################
[ CA_default ]

dir = /opt/garexCA/CA # Where everything is kept
certs = $dir/certs # Where the issued certs are kept
crl_dir = $dir/crl # Where the issued crl are kept
database = $dir/index.txt # database index file.
#unique_subject = no # Set to 'no' to allow creation of
# several ctificates with same subject.
#new_certs_dir = /opt/garexCA/cert #$dir/newcerts <= dòng này lúc đầu là $dir/newcert. Sau khi chay bị sai mình đã sửa lại như trên
# default place for new certs.

certificate = $dir/cacert.pem # The CA certificate
serial = $dir/serial # The current serial number
crlnumber = $dir/crlnumber # the current crl number
# must be commented out to leave a V1 CRL
crl = $dir/crl.pem # The current CRL
private_key = $dir/private/cakey.pem# The private key
RANDFILE = $dir/private/.rand # private random number file

x509_extensions = usr_cert # The extentions to add to the cert

# Comment out the following two lines for the "traditional"
# (and highly broken) format.
name_opt = ca_default # Subject Name options
cert_opt = ca_default # Certificate field options

 

[phuong@servertest ~]$ cd /opt/garexCA/CA/
[phuong@servertest CA]$ ls
garexCA.CRT garexCA.CSR garexCA.KEY
 

# openssl ca -in /opt/garexCA/server/requests/garexWEB.CSR -cert /opt/garexCA/CA/garexCA.CRT -keyfile /opt/garexCA/CA/garexCA.KEY -out /opt/garexCA/server/certificates/garexWEB.CRT

Using configuration from /etc/pki/tls/openssl.cnf
there needs to be defined a directory for new certificate to be placed in
20565:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=garexCA name=new_certs_dir
 

new_certs_dir = $dir/server/certificates # default place for new certs. 

openssl-devel-0.9.8b-10.el5
openssl-0.9.8b-10.el5
openssl097a-0.9.7a-9

Loading "installonlyn" plugin
Loading "rhnplugin" plugin
This system is not registered with RHN.
RHN support will be disabled.
Setting up Update Process
Setting up repositories
No Repositories Available to Set Up
Reading repository metadata in from local files
Could not find update match for httpd
No Packages marked for Update/Obsoletion
 

# hwclock --utc --systohc  

# vi /etc/crondtab
* * * * * root run-parts /etc/cron.minute
#mkdir /etc/cron.minute
#nano /etc/cron.minute/updateclock

#!/bin/sh
rdate layer1.cpanel.net > /var/log/updateclock.log
rdate layer1.cpanel.net -s
/sbin/hwclock --systohc

#chmod 655 /etc/cron.minute/updateclock
#service crond restart
 

Swap không bắt buộc (must) phải có nhưng nên có. Vì nếu không có swap space, khi system bị run out of physical memory thì nó sẽ crash hoặc treo ==> ai muốn điều này xảy ra nhỉ
 

apt-get à? Hay modprobe?  

# sudo lvdisplay
--- Logical volume ---
LV Name /dev/VolGroup00/LogVol00
VG Name VolGroup00
LV UUID ZjAO1w-pZkp-8rc2-uI4Q-uooM-ufhg-a0MeJj
LV Write Access read/write
LV Status available
# open 0
LV Size 18.84 GB
Current LE 603
Segments 1
Allocation inherit
Read ahead sectors 0
Block device 253:0

--- Logical volume ---
LV Name /dev/VolGroup00/LogVol01
VG Name VolGroup00
LV UUID g75sV0-750P-MKDV-AJ5x-3X33-gJ6a-M00gPe
LV Write Access read/write
LV Status available
# open 0
LV Size 1.00 GB
Current LE 32
Segments 1
Allocation inherit
Read ahead sectors 0
Block device 253:1

# mount /dev/VolGroup00/LogVol00 /mnt/data
# cd /mnt/data
# ls
aquota.group aquota.user bin boot dev etc home initrd lib lost+found media misc mnt opt proc root sbin selinux srv sys tmp usr var

 

Disk /dev/hda: 21.4 GB, 21474836480 bytes
255 heads, 63 sectors/track, 2610 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Device Boot Start End Blocks Id System
/dev/hda1 * 1 13 104391 83 Linux
/dev/hda2 14 2610 20860402+ 8e Linux LVM

Disk /dev/sda: 21.4 GB, 21474836480 bytes
255 heads, 63 sectors/track, 2610 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Device Boot Start End Blocks Id System
/dev/sda1 * 1 2478 19904503+ 83 Linux
/dev/sda2 2479 2609 1052257+ 82 Linux swap