Authordsezen

How CloudFlare helps to painless migrate your WordPress website to HTTPS?

facebooktwittergoogle_pluslinkedinmailby feather

cloudflare

Google recently announced that, Chrome will alert “NOT SECURE” for the websites not running under HTTPS:
Starting October 2017, Chrome (version 62) will show a “NOT SECURE” warning when users enter text in a form on an HTTP page, and for all HTTP pages in Incognito mode.
In case you have a WordPress site, there are 2 main ways to do that:
1- Converting WordPress to HTTPS mode:
1-a: Change the site URL: The siteurl can only be changed by command line. Find the wp-config.php and update it.
1-b: Change the existing http links: Go to DB and update the links. Beside in case there are plugins which inject their code seperately, you need find all. This is very painful!
1-c: Create a SSL certificate and verify it on a certificate authority.
2- Keeping WordPress a usual and use CloudFlare:
2-a Force HTTPS
cloudflare_alwayshttps
2-b Enable HTTPS Rewrite: This is the crucial point. By that, you do not need to edit WordPress http links, as CloudFlare will be replacing them on the fly! (In case you are not under HSTS, it will not replace image links)
cloudflare_hsts01

cloudflare_hsts02

2-c Now you should see that links except images are not converted on the fly. Go to https://hstspreload.org and register your domain for HSTS.

**** Be careful! All subdomains and subsubdomains from now on should work under https! ****

So check all your DNS records. With Coudflare, you are lucky, if traffic passes via CloudFlare, it will a common SSL certificate
hstspreload01

hstspreload02

hstspreload03

Rancher on Google Cloud with Cloud SQL as DB

facebooktwittergoogle_pluslinkedinmailby feather

Here is my latest kloia blog post: 

 

https://blog.kloia.com/rancher-on-google-cloud-with-cloud-sql-as-db-4775326f7bab

Kubernetes on Rancher with Weave

facebooktwittergoogle_pluslinkedinmailby feather

Here is my post on kloia blog:

 

https://blog.kloia.com/kubernetes-on-rancher-with-weave-db5319361b78

DevOps Turkey DockerCon16 Recap

facebooktwittergoogle_pluslinkedinmailby feather

The DockerCon16 Recap presentation i performed during DevOps Turkey Meetup link is here.

DevOpsDays Istanbul 2016 Ignite

facebooktwittergoogle_pluslinkedinmailby feather

My ignite link during the conference is here.

AWS SSL Certificate Uploading

facebooktwittergoogle_pluslinkedinmailby feather

Whenever you need to enable the HTTPS secure communication for your website, if your are using AWS, ELB is a cool service on which you can define your SSL certificate and termination and scale the nodes without considering the certificate. ELB is able to perform SSL termination and communicate with the nodes with HTTP.

First of all you need to create a CSR (Certificate Signing Request), assuming you need Wildcard SSL, CN is *.domain.com :

openssl req -new -newkey rsa:2048 -nodes -out star_domain_com.csr -keyout star_domain_com_private.key -subj "/C=TR/ST=Istanbul/L=Istanbul/O=domain/OU=IT/CN=*.domain.com"

There will be 2 output files:

1. star_domain_com_private.key : This will be your private key

2. star_domain_com.csr : This will be used to request the certificate from a Certificate Authority

Next step is, by the help of CSR, to initiate the SSL certificate request from a certificate authority of your choice.

You will be provided from Certificate Authority, a Public Key:

SSL Public Key 

AWS is expecting from you a PEM format. In order to achieve that, you need to convert your certificate from CRT to PEM using openssl:

openssl x509 -in d06409309fccd3b.crt -out domain_public.pem -outform PEM

For the private key you already created, which is RSA, you also need to convert it to PEM:

openssl rsa -in star_domain_com_private.key -text > domain_private.pem

The next phase is uploading the public and private key to AWS in PEM format:

AWS –> EC2 –> Load Balancers

Create or open a current Load Balancer –> Listeners –> Add –> HTTPS –> Change –> Upload a new SSL Certificate

Copy and paste the public and private keys into the fields and Save

That's all!

USB Keyboard stopped working on my Macbook Pro Retina

facebooktwittergoogle_pluslinkedinmailby feather

 

This is the most weird incident i ever experienced concerning with OS/HW !

After my Macbook comes back from the sleep mode, the USB keyboard stopped reacting, seems the USB port even stopped providing 5V electricity.

What i did:

1- Plugged the keyboard to another USB port, it works!! So no problem with the keyboard

2- Plugged other USB devices to the problematic USB port, it works!! So no problem with the USB port

I also reset PRAM and SMC, but still this did not bring any difference.

After, i found out the following thead under Apple discussions:

Apple Community Thread

Seems i am not the one who is having that experience, that's good at least!:)

The solution is:

– Connect any USB extension cable between the keyboard and the USB port, and it works:

IMAG0786 IMAG0787

This is the most weird situation EVER!!

The question is: How long will i need to keep on using the USB extension, forever? 

 

 

Connecting to AWS EC2 instances without a private key

facebooktwittergoogle_pluslinkedinmailby feather

Sometimes this may be required, here is the practical way to do that:

 

useradd -s /bin/bash -m -d /home/YOURUSER -g root YOURUSER

passwd YOURUSER

visudo

USERNAME  ALL=(ALL:ALL) ALL

vi /etc/ssh/sshd_config

PasswordAuthentication yes

/etc/init.d/ssh restart

 

© 2017 Derya Sezen

Theme by Anders NorenUp ↑


visited 27 states (12%)
Create your own visited map of The World