Find unmaintained packages with apt-forktracer
Andreas Vöst
1 year
Why Apple Silicon MacBooks Can Only Use One External Display Through A Dock
Florian Heinle
9 months
Intel Microcode Versions and Updates
Florian Heinle
9 months
Security considerations in MIME-Type configuration
Kim Klotz
10 months
manual haproxy backend failover
Claus-Theodor Riegg
8 years
HowTo: Easier selecting and copying of text in tmux
Florian Heinle
10 months
Testing AWS SNS Subscription Filter Policies
Matthias Bruhse
11 months
SSH add/remove port forwarding to active session
Marc Dierig
11 months
HowTo: List packages in an apt repository
Florian Heinle
1 year
Don't use flock with GlusterFS
Kim Klotz
1 year
HowTo: Curl applications that are usually behind reverse proxies with TLS termination without the application redirecting to https schema
Florian Heinle
1 year
Parameter naming and checking in shell script
Moritz Kraus
1 year
netfilter's Connection Tracking system (nf_conntrack)
Andreas Vöst
2 years
restart puppetmaster after changing custom functions
Kim Klotz
8 years
Get information about current running passenger processes
Claus-Theodor Riegg
6 years
Use Terraform grouping mode like Golang's Ellipsis expression
Claus-Theodor Riegg
1 year
Playbook: fetch container logs from journald
Moritz Kraus
1 year
Get a more colorful output for man pages
Claus-Theodor Riegg
1 year
Nginx Proxy buffer tuning
Moritz Kraus
1 year
Fix Imagemagick CVE-2022-44268 in Ubuntu packages
Kim Klotz
1 year
Check JVM settings of running java process
Claus-Theodor Riegg
1 year
Parsing multiline container logs with fluent-bit
Claus-Theodor Riegg
1 year
Delete specific Redis-DBs
Stefan Xenopol
1 year
Desktop notification for failed systemd user services
Andreas Vöst
1 year

Change / Update SSL certificate for Amazon Elastic Load Balancer with AWS Command Line Interface

Updated . Posted . Visible to the public.

  1. Install and configure the AWS Command Line Interface Show archive.org snapshot

  2. Show existing certificates to test if the AWS Cli is working:

    $ aws iam list-server-certificates
{
  "ServerCertificateMetadataList": [
      {
          "Path": "/", 
          "Arn": "arn:aws:iam::5xxxxxxxxxxx:server-certificate/www.example.com-201307-201407", 
          "ServerCertificateId": "AXXXXXXXXXXXXXXXXXXXX", 
          "ServerCertificateName": "www.example.com-201210-201310", 
          "UploadDate": "2012-10-10T11:25:35Z"
      }
  ]
}

  3. Upload your certificate:

    $ aws iam upload-server-certificate --server-certificate-name www.example.com-2013010-2014010 --certificate-body file://www.example.com.crt --private-key file://www.example.com.key --certificate-chain file://www.example.com.ca-bundle 
{
    "ServerCertificateMetadata": {
        "Path": "/", 
        "Arn": "arn:aws:iam::5xxxxxxxxxxx:server-certificate/www.example.com-2013010-2014010", 
        "ServerCertificateId": "AXXXXXXXXXXXXXXXXXXXX", 
        "ServerCertificateName": "www.example.com-2013010-2014010", 
        "UploadDate": "2013-10-22T16:57:36.704Z"
    }
}

    If you got the error message A client error (MalformedCertificate) occurred: Invalid Private Key. please look at this card to see how to fix it.

  4. Get the name of your loadbalancer:

    $aws elb describe-load-balancers | grep LoadBalancerName
            "LoadBalancerName": "example-com",

  5. Update certificate on your loadbalancer:

    aws elb set-load-balancer-listener-ssl-certificate --load-balancer-name example-com --ssl-certificate-id arn:aws:iam::5xxxxxxxxxxx:server-certificate/www.example.com-2013010-2014010 --load-balancer-port 443

Related cards:

Fix "A client error (MalformedCertificate) occurred: Invalid Private Key." at AWS SSL Certificate upload

I'm creating certificate requests with this command:

openssl req -new -out www.example.com.csr -keyout www.example.com.key -newkey rsa:2048 -nodes

When I try to upload the certificate to AWS IAM I get this error:

$ aws iam upload-se...

Useful PostgreSQL commands

on the bash (issued as postgres user)

Start/Stop/Restart PostgreSQL

pg_ctl -D $configdir start|stop|restart

Start/Stop/Restart the corresponding PostgreSQL using the given configuration directory. The configuration directory sh...

HowTo: verify SSL private key matches SSL certificate

When receiving a new SSL-Certificate for an existing SSL-key it should be checked that they match cryptographically.
Maybe the customer accidentally created a new key and certificate and sent us just the certificate.

It's also possible that the c...

HowTo: Curl applications that are usually behind reverse proxies with TLS termination without the application redirecting to https schema

A lot of web applications require being called over https, which is a good thing. It's possible to configure this requirement at the web- or proxy server level, where nginx or apache will just redirect every request on http to https. Som...

Lenovo Laptop BIOS Update with Linux

You will need to look here and find your own device. Look for the "bootable CD" download, which will give you an ISO file.

Then you need a Perl script from the interne...

SSH add/remove port forwarding to active session

It is possible to manipulate the forwarded ports of an established interactive SSH session.
This is done by opening the command line with the escape character ~C. This will open a ssh> prompt. If it doesn't, make sure it's the first character...

FAQ for When PostgreSQL Indexes Are Corrupted After Locale Changes

When changing glibc versions, it's possible to end up with corrupt indexes in PostgreSQL.

Are My Indexes Affected?

If your database has...

Terraform: Deploying code for lambda functions

If you're deploying code for your lambda function via terraform, this code is usually zipped and uploaded to Amazon S3 by terraform. The ZIP file's hash is then stored to terraform's state. However we have observed that zipping files can create ZI...

XCA: Easy SSL certificate management

If you're about to handle X509 certificates and don't want to remember/google a handful of openssl commands you can use the graphical tool XCA.

Setup

  1. Install XCA sudo apt install xca
  2. Create a new database...

Find unmaintained packages with apt-forktracer

If you use third party APT sources you might end up with unmaintained packages after removing the external source or performing a dist-upgrade. The reason for this is how external sources overwrite official package versions.

[apt-forktracer](ht...

Kim Klotz
makandra.com
Say thanks1
Last edit
Deleted user #5298
Keywords
ops
License
Source code in this card is licensed under the MIT License.
Privacy policy Terms of service Imprint
This website uses short-lived cookies to improve usability.
or learn more