랩퍼우니

1. 인증서 만들기.

[root@localhost ssl]# cat www.ucert.co.kr.key www.ucert.co.kr.crt >www.ucert.co.kr.pem

// 설명 : 발급 받은 인증서/개인키 파일을 한 파일로 저장 합니다.

(저장 방법 : cat [개인키파일] [인증서파일] > [개인키+인증서 파일]

먼저 특정 폴더에 인증서를 복사 합니다. (예) /etc/lighttpd/ssl/

-----------------------------------------------------------------------------------
 2.  SSL 환경설정

 [root@localhost lighttpd]# vi lighttpd.conf

// 설명 : lighttpd 환경 파일 수정

$HTTP["host"]=~"www.ucert.co.kr" {

server.document-root = "/srv/www/htdocs"

index-file.names += ( "index.html", "index.xhtml", "index.htm", "default.htm", "index.php" )

}

#### CGI module

#cgi.assign = ( ".pl" => "/usr/bin/perl",

# ".cgi" => "/usr/bin/perl" )



#### SSL engine ####

$SERVER["socket"] == ":443" {

// 설명 : SSL 서비스 포트 설정

 
ssl.engine = "enable"

// 설명 : SSL 서비스 활성화 설정

 
ssl.pemfile = "/usr/local/lighttpd/conf/ssl/www.ucert.co.kr.pem"

// 설명 : 인증서+개인키 경로 설정

 
ssl.ca-file = "/usr/local/lighttpd/conf/ssl/www.ucert.co.kr.ca-bundle"

// 설명 : CA 인증서 경로 설정

 
server.name = “www.ucert.co.kr”

// 설명 : 도메인 명

 
server.document-root = "/srv/www/vhosts/ucert/"

index-file.names += ( "index.html", "index.xhtml", "index.htm", "default.htm", "index.php" )

// 설명 : 홈 디렉토리

} 

----------------------------------------------------------------------------------------

 3. lighttpd 재기동

 [root@localhost conf]# /etc/rc.d/init.d/lighttpd restart

lighttpd 를 정지 중:                                                 [ OK ]

lighttpd (을)를 시작 중: Enter PEM pass phrase: [개인키 패스워드 입력]

                                                                    [ OK ]
----------------------------------------------------------------------------------------
 4.  인증서 만료일 확인.


 [root@localhost ~]# netstat -nap | grep httpd

tcp 0 0 :::80 :::* LISTEN 19301/lighttpd

tcp 0 0 :::443 :::* LISTEN 19301/lighttpd

// 설명:443포트 Listen 된 상태에서 아래의 명령어를 사용하여 로컬에서 인증서를 확인 합니다.

 

인증서 만료일 확인 방법

[root@mail ~]# openssl s_client -connect localhost:443 < /dev/null 2>&1 | openssl x509 -noout -enddate

notAfter=DEC 31 23:59:59 2016 GMT


// 설명 : 로컬에서 인증서 출력이 정상적이고 외부에서 https://[도메인]으로 브라우저 접속 시 통신이 되지 않을 경우 

내부 방화벽(예. iptables), 외부 방화벽 등에 SSL포트가 Allow (또는 웹방화벽에 인증서가 설치가) 되어 있는지 확인 합니다.

 ----------------------------------------------------------------------------------------

5.  인증서 확인.

[root@localhost ~]# openssl s_client -connect 127.0.0.1:443 | openssl x509

 

depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA

verify error:num=20:unable to get local issuer certificate

-----BEGIN CERTIFICATE-----

MIIE2jCCA8KgAwIBAgICD/cwDQYJKoZIhvcNAQEFBQAwPDELMAkGA1UEBhMCVVMx

FzAVBgNVBAoTDkdlb1RydXN0LCBJbmMuMRQwEgYDVQQDEwtSYXBpZFNTTCBDQTAe

Fw0xMDEyMTQxMDQ4NTlaFw0xMjAyMTUyMTM4MjBaMIHlMSkwJwYDVQQFEyBrdW9u

SXgyYmI0a0lxZGpvWWE1bklYQWRxNVl6dG9RUDELMAkGA1UEBhMCS1IxGDAWBgNV

BAoTD3d3dy51Y2VydC5jby5rcjETMBEGA1UECxMKR1Q1NDc2OTQxMDExMC8GA1UE

CxMoU2VlIHd3dy5yYXBpZHNzbC5jb20vcmVzb3VyY2VzL2NwcyAoYykxMDEvMC0G

A1UECxMmRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkIC0gUmFwaWRTU0woUikxGDAW

AQoCggEBAMl6qA1dEc/FKw2qSjlh0iZDVGp+zqjBXW/iwkcnEZCzy/wxauh85OwM

G4TZ2FhJQabssuyVocWJGE/Fq3sO6U6lYZwycUKWN45sZTLGhdCbC0ZSb0OUq7tx

A8pDSqH/2/kG8a/Yfn8zGmXgsWi5swgfPKIa7dcmnmglA1x4YDquo0npWMizgt2z

mqQcuY5S/QKCDZo5Ee1BXaS4D7ZHiXzw5W9sDtsqo1nO37gLHTpNhIQrYnzN4ay7

l0FHLxiwEi2O/gndd4Z4/Rr0loFTdemStSPQlIRTag/+8/tMo+BoxHmPFTuWyNAb

MShN1eti+c0qWGsHigjvXMWtyg0NT4UCAwEAAaOCATowggE2MB8GA1UdIwQYMBaA

FGtpPWoYQkrdjwJlOf01JIZ4kRYwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU

BggrBgEFBQcDAQYIKwYBBQUHAwIwJwYDVR0RBCAwHoIPd3d3LnVjZXJ0LmNvLmty

ggt1Y2VydC5jby5rcjBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vcmFwaWRzc2wt

Y3JsLmdlb3RydXN0LmNvbS9jcmxzL3JhcGlkc3NsLmNybDAdBgNVHQ4EFgQUkHru

EM3YsHLS8SjMWr7kBkyKu/YwDAYDVR0TAQH/BAIwADBJBggrBgEFBQcBAQQ9MDsw

OQYIKwYBBQUHMAKGLWh0dHA6Ly9yYXBpZHNzbC1haWEuZ2VvdHJ1c3QuY29tL3Jh

cGlkc3NsLmNydDANBgkqhkiG9w0BAQUFAAOCAQEAcjR0KR5MnA8gJFhZ4GRHSfvD

N2WX88pZPtE0BlEOU18HLLg8xL5Bb8exvX5+sExHS9zasRHUIPAYpwALSf4/WP7M

96ZMAEAggR9Dt8pCyFO7QXgkB3QQ7EsEK+s01wSWxMN5/ZcSV7O0k/DF83DH118x

/DFVeGNJsbwC0BEzVe/HnmBo77dxCdG+M16R59s2BjEr9Lq9sNnnE3drqs51qrs+

T0CyUWSpZ9KhlwjcLCMKe/SY8WIXIYaAx+IqJ7XJQU+GV1AJP3zHldhngL7eMMFo

ROpAHbjfkI0XboRtTAVs0K46omCAA4JViVF1DDKaXPZ+swif4GlzY/ijwPLDkA==

-----END CERTIFICATE-----

프린터 Officejet pro 8100 헤드 청소 방법

엑셀 -> 데이터 메뉴 -> 텍스트/CSV 선택 -> 해당 파일 선택 -> 상단위 파일원본 : 65001:유니코드 (UTF-8) 선택  -> 

로드


다른이름으로 저장 -> xlsx 파일로 저장

[root@i-SAM-WD .ssh]# pwd
/root/.ssh

[root@i-SAM-WD .ssh]# vi known_hosts


해쉬값 내용 삭제

설치 방법
PSU 펌웨어 업데이트 지침: 주의! 전원 공급 장치 펌웨어 업데이트 중에 AC 전원을 껐다가 키거나 콜드부팅을 수행하면 전원 공급 장치가 
복구 불가능한 상태로 전환되고 관리 시스템이 부팅되지 않습니다. 

중요: 전원 공급 장치 펌웨어 다운로드 후 3~20분 간 관리 시스템이 
꺼지고 펌웨어 업데이트가 계속 진행됩니다. 시스템을 수동으로 중단/재시작하지 마십시오. PSU FW 업데이트가 종료될 때까지 기다리십시오. 
방해하지 않는 것이 중요합니다. (업데이트 시간은 업데이트할 PSU 수에 따라 달라질 수 있으며, 약 10~20분 달라질 수 있습니다. 
Dell Update Package(DUP)가 중단되지 않도록 여유 시간을 추가해야 합니다. 펌웨어 업데이트가 완료되면 관리 시스템이 자동으로 부팅됩니다. 


".BIN" 파일 지침: 다운로드 1. 지금 다운로드 링크를 클릭하여 파일을 다운로드합니다. 2. "파일 다운로드" 창이 나타나면 "저장"을 클릭하여 
하드 드라이브에 파일을 저장합니다. 설치 1. 셸에서 "--version" 명령과 함께 ".BIN" 파일을 실행하여 제시된 릴리스 정보를 읽으십시오. 

2. 계속 진행하기 전에 위의 단계에서 식별된 필수 구성요소를 다운로드하고 설치합니다. 

3. 셸에서 ".BIN" 파일을 실행하여 업데이트를 실행합니다.

4. 나머지 지시에 따라 드라이버를 업데이트합니다. 

5. 성공적으로 완료되면 DUP에 시스템을 재부팅할 것인지 묻는 메시지가 표시됩니다.

6. 시스템을 다시 시작합니다. 시스템을 재시작한 후 DUP가 USC를 입력하여 PSU 펌웨어의 업데이트를 완료합니다.
 
7. 실제 업데이트는 DUP가 USC를 종료한 후 시작됩니다. 시스템 전원을 끄거나 또는 시스템 전원을 껐다 켜면 전원 공급 장치가 작동하지
 않을 수 있으므로 주의하십시오. 

8. 업데이트 프로세스가 완료된 후에 시스템 전원이 다시 켜지고 OS로 부팅됩니다. 


중요 정보
중요: 전원 공급 장치 펌웨어 다운로드 후 3~20분 간 관리 시스템이 꺼지고 PSU 펌웨어 업데이트가 계속 진행됩니다. 
펌웨어 업데이트가 완료되면 관리 시스템이 자동으로 부팅됩니다. 주의! 전원 공급 장치 펌웨어 업데이트 중에 AC 전원을 껐다가 
키거나 콜드부팅을 수행하면 전원 공급 장치가 복구 불가능한 상태로 전환되고 관리 시스템이 부팅되지 않습니다.

Firmware update Manual 동영상

1. OS에 맞는 실행파일을 다운로드하여 실행하시면됩니다.

2. iDRAC 통해서 진행 (링크 참조) 
 링크 : https://www.youtube.com/watch?v=LnnX-Vj8TRk

3. L/C 통해서 진행 (링크 참조)
링크 : https://www.youtube.com/watch?v=wVt9mAdXf7s

3가지 방법 중에 선택하셔서 진행하시면 됩니다

--------------------------------------------------------------------------------------------------------------
PowerEdge R320

- 현재는 Rebuild이 완료되면, iDRAC -> BIOS -> Raid Controller H310 Firmware update를 진행을 권장드립니다.
- 다운로드 링크 : https://www.dell.com/support/home/kr/ko/krdhs1/product-support/servicetag/6xm4052/drivers


- Firmware 3가지 진행해야합니다
- 아래의 이름으로 검색되는 목록을 받으시면 됩니다.

BIOS : “Dell Server BIOS PowerEdge R320 버전 2.6.0”

iDRAC : “iDRAC with Lifecycle Controller v. 2.61.60.60”

Raid Controller : “Dell PERC H310 미니 모놀리식 펌웨어 20.13.3-0001”

OM-SrvAdmin-Dell-Web-LX-8.5.0-2372.RHEL6.x86_64_A00.tar root으로 파일 업로드


압축해제

# tar zxvf OM-SrvAdmin-Dell-Web-LX-8.5.0-2372.RHEL6.x86_64_A00.tar.gz



□ RPM 패키지 설치

cd /root/linux/RPMS/supportRPMS/metaRPMS/RHEL6/x86_64

rpm -Uvh --nodeps *.rpm


cd /root/linux/RPMS/supportRPMS/srvadmin/RHEL6/x86_64


rpm -Uvh --nodeps *.rpm



※ 설치 안될시 확인 ※

[root@SAMTrap x86_64]# rpm -Uvh --nodeps *.rpm
warning: libcmpiCppImpl0-2.0.0Dell-2372.10488.el6.x86_64.rpm: Header V4 DSA/SHA1 Signature, key ID 23b66a9d: NOKEY
Preparing...                ########################################### [100%]
package sblim-sfcb-1.3.11-5.el6.x86_64 (which is newer than sblim-sfcb-1.3.7-2372.10488.el6.x86_64) is already installed

[root@SAMTrap x86_64]# rpm -e sblim-sfcb-1.3.11-5.el6.x86_64



□ 옴사 실행

cd /opt/dell/srvadmin/sbin

./srvadmin-services.sh start


□포트 확인 (1311)

[root@SAMTrap sbin]# netstat -an | grep LISTEN
tcp        0      0 127.0.0.1:199               0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:54154               0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN      
tcp        0      0 :::5989                     :::*                        LISTEN      
tcp        0      0 :::111                      :::*                        LISTEN      
tcp        0      0 :::22                       :::*                        LISTEN      
tcp        0      0 ::1:631                     :::*                        LISTEN      
tcp        0      0 ::1:25                      :::*                        LISTEN      
tcp        0      0 :::51742                    :::*                        LISTEN      
tcp        0      0 :::1311                     :::*                        LISTEN   

델 (Dell) 홈페이지에서 서비스 무상기간 확인, RMA 확인