Bài đăng

Đang hiển thị bài đăng từ Tháng 7, 2016

APACHE web server and SSL authentication

Hình ảnh
This article describes configuration techniques of module mod_ssl, which extends a functionality of Apache HTTPD to support SSL protocol. The article will deal with authentication of server (One-way SSL authentication), as well as it will also include authentication of clients by using certificates (Two-way SSL authentication). 1. Introduction If you have decided to enable a SSL ( Secure Sockets Layer ) protocol on your web server it may be because you would like to extend its functionality to achieve an integrity and confidentiality for a data transferred on unsecured networks. However, this protocol with the combination of PKI ( Public Key Infrastructure ) principles can also along the side of integrity and confidentiality provide authentication between both sides involved in the client-server communication. One-way SSL authentication  allows a SSL client to confirm an identity of SSL server. However, SSL server cannot confirm an identity of SSL client. This kind of SSL authen

Graylog Collector Sidecar

Hình ảnh
Required Graylog version: 2.0 and later + installed graylog-plugin-collector (this plugin available in install package - folder plugins) The Graylog Collector Sidecar is a supervisor process for 3rd party log collectors like NXLog. The Sidecar program is able to fetch configurations from a Graylog server and render them as a valid configuration file for various log collectors. You can think of it like a centralized configuration management system for your log collectors. Download Graylog Collector Sidecar at https://github.com/Graylog2/collector-sidecar/releases Installation Download a package and install it on the target system. Ubuntu Install the NXLog package from the offical download page   $ sudo /etc/init.d/nxlog stop   $ sudo update-rc.d -f nxlog remove   $ sudo gpasswd -a nxlog adm   $ sudo dpkg -i collector-sidecar_0.0.8-1_amd64.deb Edit /etc/graylog/collector-sidecar/collector_sidecar.yml, you should set at least the correct URL to your Graylog server and pro

Install Graylog Collector from source

Hình ảnh
Manual Setup 1. Install Java with version above 1.7 2. Download the latest collector release. (find download links in the collector repository README) 3. Unzip collector tgz file to target location and rename     /opt/graylog-collector 4. cp config/collector.conf.example to config/collector.conf     /opt/graylog-collector/config 5. Update server-url in collector.conf to correct Graylog server address (required for registration) 6. Update file input configuration with the correct log files 7. Update outputs->gelf-tcp with the correct Graylog server address (required for sending GELF messages) 8. Start command cd /op/graylog-collector bin/graylog-collector run -f config/collector.conf 9. Login web interface and create new input gelf-tcp port 12201 Sample configure #  vi /opt/graylog-collector/config/collector.conf server-url = "http://10.10.10.10:12900" collector-id = "file:config/collector-id" host-name = "srv-web-06" inputs {   a