Currently Viewing Posts Tagged issues

Some issues when I use SSL on web server Apache

I purchased SSL certificate from Gogetssl.com. The Comodo Essential SSL is a good deal on the list. I paid it $37.45 for FIVE years.

OK back to the title.

1) The CSR generator online is default sha1. Use my own openssl command to generate sha256 CSR, KEY files.

There are so many articles related sha1 vs sha256 ssl

If you can, use SHA-256 instead of SHA-1.

SHA1 is going to retired.

The command I use to generate private key and CSR file.

openssl req -new -newkey rsa:2048 -nodes <b>-sha256</b> -out www.mydomain.com.sha256.csr -keyout www.mydomain.key -subj "/C=FR/ST=Calvados/L=CAEN/O=TBS INTERNET/CN=www.moydomain.com"

Please make your own command with this tool.  Then add -sha256 in it . The above is for reference only.

2) Chain CA order

The certificate I received from gogetssl is a zip file. Unzip it and I got four certificate files.

  • AddTrustExternalCARoot.crt
  • COMODORSAAddTrustCA.crt
  • COMODORSADomainValidationSecureServerCA.crt
  • yourdomain.crt

To make a ca-bundle file, combine the three crt files into one.

When combine them, be carefully the order of files.

Put the content of COMODORSADomainValidationSecureServerCA.crt in the beginning of the ca-bundle file. Then paste the content of COMODORSAAddTrustCA.crt below, and paste the content of AddTrustExternalCARoot.crt.

3) Chain issues – Contains anchor

This is a issue when I check the ssl on ssllabs.com

AddTrustExternalCARoot.crt is the root CA. Self issued. Some people said the issue is because of this self issued root CA.

There are some post about it. They said it is safe when not include it in the ca-bundle

Comodo support article Qualys forum thread

ssl-labs

Continue reading “Some issues when I use SSL on web server Apache”

Google AdSense has payment issues from September

Yes, it is November now. Google AdSense payment issue from September is still not solved.
The email I received today from Google said:

We’re writing you to let you know about an issue that affects your AdSense payments.
In your AdSense account you’ll notice that your September earnings are displayed as $0 on the homepage and don’t appear at all on the Payments page. While your earnings were correctly calculated and are securely stored, system issues have prevented us from displaying your correct earnings total and issuing your October payment, even if your account exceeded the payment threshold.
No action is required from you at the moment. We know that regular payments are important to you and sincerely apologize for the inconvenience.

As a publisher, I can do nothing but wait. See when Google will solve this 2 month longer issue.

adsense-payment-issues

Privacy issues on Facebook

It is a big issue to keep you safe on Internet. I do use Facebook, Twitter, Myspace etc. The first step after signing up in these website is take a look at Settings, or Privacy settings.
Remove every unnecessary sharing, make sure use the different password or user name.
For myself, I am not worry about the trustfulness on Facebook. But the third party, or apps providers are not 100% trustful. When I connect the app, I will look at it closely.
There is no secret on Internet. Anything you post on the web site like Facebook, may have chance to spread to everyone. If one person can see it, it is a lot of possibility that more and more people will see it.
When you post a video on the web site, any one can download it, or save it. Even you delete it from the original place. Any one has the copy of your video can re-post it. No way to stop it.
So not just on Facebook, any website, we have to very caution when we want to say something.

Continue reading “Privacy issues on Facebook”

Upgrade to MovableType 5.01

Now, I upgrade this blog to MovableType 5.01.
I have to say, something is not good enough.
I think MT5 add the site which I don’t need is not good idea.
Why sixapart add the site without ask the blog owner?
I just want MT keep my blog.
OK. I have to say two good points.
1) Rebuild is so fast.
It took about 10 minutes to republish all files. And not get 500 error.
2) Comments pagination is good.

Continue reading “Upgrade to MovableType 5.01”

SAAS ten issues

I read the article about 10 thinkgs you should know now about SAAS. I think it is ten issues about SAAS. Let me make a digest.
1. SAAS standings
SAAS is not the top technology.
2. What price outages?
It is not bullet proof.
3. Development Target
More and more developer want to use SAAS model.
4. Cost-Effectiveness
It is not clear for long term.
5. Portability & Security
These two points is most important.
6. Law enforcement
The data protect from law?

Continue reading “SAAS ten issues”

  • Archives