What happens when a CN or Alternative Name in a SAN or UCC ssl certificate no longer resolves to the server?
Are there any problems that can arise from this?
The question is general but the specific environment I'm interested in is Linux for web hosting using LetsEncrypt certificates.
Does it affect the results of OCSP requests?
Does the fact that one or more names don't resolve to the server any more affect the remaining names that do in any way? Can the certificate be renewed?
Is there a standard way to install the same programs across different linux systems in an automated way (a single script that would work on each system)? Most of my systems are Ubuntu and an Ubuntu-only solution that would install the same program across different versions of Ubuntu, where package names can vary for different versions, would work for 90% of my needs if you have one. I can think of a number of ways I can solve the problem but I thought I'd ask here first since I'm sure the problem has been dealt with before and your help could steer me away from potential pitfalls.
I need help troubleshooting a strange problem. When I ssh into a server I have and do an su rails from root user the session closes by itself:
root@ubuntu-server:/4# su rails
rails@ubuntu-server:/4$ exit
I'm not typing in exit...it just appears by itself
...it may last more than one minute but it always closes within the first 5 seconds of a new minute, as seen below...how can I troubleshoot this?
from /var/log/auth.log:
Mar 24 19:03:13 ip-10-149-16-81 su[11304]: Successful su for rails by root
Mar 24 19:03:13 ip-10-149-16-81 su[11304]: + /dev/pts/2 root:rails
Mar 24 19:03:13 ip-10-149-16-81 su[11304]: pam_unix(su:session): session opened for user rails by root(uid=0)
Mar 24 19:04:01 ip-10-149-16-81 CRON[11317]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 24 19:04:01 ip-10-149-16-81 CRON[11318]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 24 19:04:01 ip-10-149-16-81 CRON[11319]: pam_unix(cron:session): session opened for user rails by (uid=0)
Mar 24 19:04:01 ip-10-149-16-81 CRON[11320]: pam_unix(cron:session): session opened for user rails by (uid=0)
Mar 24 19:04:01 ip-10-149-16-81 CRON[11318]: pam_unix(cron:session): session closed for user root
Mar 24 19:04:02 ip-10-149-16-81 CRON[11320]: pam_unix(cron:session): session closed for user rails
Mar 24 19:04:03 ip-10-149-16-81 CRON[11319]: pam_unix(cron:session): session closed for user rails
Mar 24 19:04:03 ip-10-149-16-81 su[11304]: pam_unix(su:session): session closed for user rails
Mar 24 19:04:04 ip-10-149-16-81 CRON[11317]: pam_unix(cron:session): session closed for user root
We have an Ubuntu 14.04.1 LTS server with nginx 1.4.6 that hosts a few dozen websites and received an abuse complaint from another server of hundreds of requests like this: "POST /wp-login.php HTTP/1.0" coming from our server. How can I go about dissecting the problem so that I can find out where this traffic is coming from? I have been trying to read tcpdump output but I don't have much experience with it and and don't know what parameters to give it or how to read the output in such a way that I can find what I'm looking for in an efficient way. What tools should I be using and in what order to see if I can trace the source of the problem?
I have a server running Ubuntu 12.04 on AWS and I can no longer install anything on apt-get because I get this error:
The following packages have unmet dependencies: mysql-server-5.5 : Depends: mysql-server-core-5.5 (= 5.5.35-0ubuntu0.12.04.1) but 5.5.38-0ubuntu0.12.04.1 is to be installed E: Unmet dependencies. Try 'apt-get -f install' with no packages (or specify a solution).
I'm not sure what I did to cause this error but dpkg -l yields this:
ii mysql-client-5.5 5.5.40-0ubuntu0.12.04.1 MySQL database client binaries ii mysql-client-core-5.5 5.5.38-0ubuntu0.12.04.1 MySQL database core client binaries ii mysql-common 5.5.40-0ubuntu0.12.04.1 MySQL database common files, e.g. /etc/mysql/my.cnf iU mysql-server 5.5.35-0ubuntu0.12.04.1 MySQL database server (metapackage depending on the latest version) iF mysql-server-5.5 5.5.35-0ubuntu0.12.04.1 MySQL database server binaries and system database setup ii mysql-server-core-5.5 5.5.40-0ubuntu0.12.04.1
apt-get -f install fails with the same unmet dependencies issue
Is there a way I can clean this up - I'm hoping in such a way that I don't have to bring down the database for long if at all...?
I'm running ubuntu 12.04 and moved the datadir for my mysql server (retaining same ownerships and permissions) from /var/lib/mysql to /u/apps/mysql in /etc/mysql/my.cnf, then I updated /etc/apparmor.d/usr.sbin.mysqld to include:
/u/apps/mysql r,
/u/apps/mysql/** rwk,
but get the error:
InnoDB: Reading tablespace information from the .ibd files...
130906 13:55:31 InnoDB: Operating system error number 13 in a file operation.
InnoDB: The error means mysqld does not have the access rights to
InnoDB: the directory.
InnoDB: File name .
InnoDB: File operation call: 'opendir'.
InnoDB: Cannot continue operation.
so I disable apparmor and it starts. It looks like the directory it wants to open is '.' which I was assuming would be /u/apps/mysql but apparently is not. Since changing the apparmor config it definitely gets further along but I have no idea what it's choking on. Any ideas what's going on? Thanks...