Immagine
 Italian Betacrew... di Admin
\\ Home Page
Benvenuto su Betacrew.org
Forum, tutorial e download dedicati al sistema operativo del pinguino (e non).

Links
 
28/05/2008 - Forum - Forum
26/05/2008 - Lifestyleweb.it - Idee e strumenti per il Web Design
26/05/2008 - Vacanze sulla neve - Ospitaletto Emiliano
26/05/2008 - Dmoz.org - Cerca nel più grande contenitore del web
26/05/2008 - Betacrew.org - La vecchia versione del sito

Tutorials, Guide e Howto
 
Di Admin (del 08/07/2008 @ 20:09:59, in Howto, linkato 967 volte)

1/ Install openssl and libssl-dev packages
# aptitude install openssl libssl-dev

2/ Donwload squid sources on http://www.squid-cache.org/

3/ Configure it with the openssl option, compile it and install it
# ./configure –enable-ssl –with-openssl=/usr/include/openssl/
# make
# make install

4/ Create necessary certificates (source)
– Creating a private CA –

Go to the OpenSSL bin directory (/usr/local/ssl/misc by default).
There should be a script called CA.sh (and a CA.pl that does the same stuff). This hides all the gruesome details of how this works. Without the script this is a very annoying process.
su to root
Make sure that the OpenSSL bin directory is in your path.

# ./CA.sh -newca

When prompted for CA filename hit return.
Answer the rest of the questions intelligently. The common name would be how this certificate might be referred to. For example, the Equifax Secure CA uses the common name of Equifax Secure Certificate Authority.

– Creating certificates –

# ./CA.sh -newreq

This creates an unsigned certificate request.
The procedure is the same as creating a private CA except you’ll want to use the name of the host that will use the certificate as the common name (host.domain.com). If they don’t match, the client will not like it.
You probably don’t want to use the same passphrase for this as you did with the CA.

# ./CA.sh -sign

It will ask for a PEM pass phrase, that’s the passphrase you set for the private CA you created.
This signs the certificate that you just created with the CA you created just moments before. You can generate multiple certificates. You’ll probably need to. For example, mail.foo.com and www.foo.com each need their own certificate.
The signed certificate is now in the current directory as newcert.pem. If you are going to create more, you should rename this or it will be overwritten be subsequent signatures.

4/ Removing password from key.pem
# mv key.pem key.pem.withpass
# openssl rsa -in key.pem.withpass -out key.pem

5/ Edit /usr/local/squid/etc/squid.conf
http_port 3128 vhost defaultsite=yoursite.com

https_port 443 vhost cert=/path_to/cert.pem key=/path_to/key.pem cafile=/path_to/cacert.pem defaultsite=yoursite.com versi
on=2

cache_peer yoursite.com parent 80 0 no-query originserver

6/ Create squid cache directories and launch squid
# /usr/local/squid/sbin/squid -z
# /usr/local/squid/sbin/squid

 

Fonte http://www.brichet.be/how-to-setup-a-reverse-proxy-server-over-ssl-squid-debian/

 
Di Admin (del 08/07/2008 @ 20:09:39, in Howto, linkato 939 volte)

This was written using OpenSSL 0.9.5 as a reference.

To start with, you'll need OpenSSL. Compilation and installation follow the usual methods. It's worth while to note that the default installs everything in /usr/local/ssl. No need to change this (unless you want to).

After you have this installed, you may want to edit the OpenSSL configuration file with the information for your site so you have pleasant defaults when creating and signing certificates. You'll find this in /usr/local/ssl/openssl.cnf in the section req_distinguished_name Here you can set the defaults (denoted by the _default appended to the variable name). Any settings that do not have a default, such as localityName can have one set by appending _default. In this case you'd set localityName_default.

Now, we move on to creating a private Certificate Authority (CA). First, some explanation. The CA is used in SSL to verify the authenticity of a given certificate. The CA acts as a trusted third party who has authenticated the user of the signed certificate as being who they say. The certificate is signed by the CA, and if the client trusts the CA, it will trust your certificate. For use within your organization, a private CA will probably serve your needs. However, if you intend use your certificates for a public service, you should probably obtain a certificate from a known CA.

In addition to identification, your certificate is also used for encryption. If you're thinking a certificate sounds similar to a PGP key, you're right. They use many of the same methods. Something else PGP and SSL have in common is the RSA encryption algorithm, which is patented. This patent expires in September of 2000, so after that you'll be free to use tools with the RSA algorithm (like OpenSSL). Until that time, to legally use RSA you need a license. RSA Data Security usually allows non-commercial use of the RSA algorithm for academic purposes.

Creating a private CA

  • Go to the OpenSSL bin directory (/usr/local/ssl/misc by default).
  • There should be a script called CA.sh (and a CA.pl that does the same stuff). This hides all the gruesome details of how this works. Without the script this is a very annoying process.
  • su to root
    • Make sure that the OpenSSL bin directory is in your path.
  • ./CA.sh -newca
    • When prompted for CA filename hit return.
    • Answer the rest of the questions intelligently. The common name would be how this certificate might be referred to. For example, the Equifax Secure CA uses the common name of Equifax Secure Certificate Authority.

Creating certificates

  • ./CA.sh -newreq
    • This creates an unsigned certificate request.
    • The procedure is the same as creating a private CA except you'll want to use the name of the host that will use the certificate as the common name (host.domain.com). If they don't match, the client will not like it.
    • You probably don't want to use the same passphrase for this as you did with the CA.
  • ./CA.sh -sign
    • It will ask for a PEM pass phrase, that's the passphrase you set for the private CA you created.
    • This signs the certificate that you just created with the CA you created just moments before. You can generate multiple certificates. You'll probably need to. For example, mail.foo.com and www.foo.com each need their own certificate.
  • The signed certificate is now in the current directory as newcert.pem. If you are going to create more, you should rename this or it will be overwritten be subsequent signatures.

Creating client-side certificates

  • openssl pkcs12 -export -in certs.pem -inkey certs.key -out file.p12 -name "Client Certificate"
 
Di Admin (del 06/07/2008 @ 00:56:26, in Howto, linkato 1129 volte)
##################################################################################
## INGALEX UBUNTU HARDY HERON 8.04 REPOSITORY SOURCES.LIST ## TOTAL:55 REPOSITORY#
##################################################################################

##HARDY SUPPORTED
deb http://it.archive.ubuntu.com/ubuntu/ hardy main restricted
deb-src http://it.archive.ubuntu.com/ubuntu/ hardy main restricted

##HARDY SUPPORTED - UPDATES
deb http://it.archive.ubuntu.com/ubuntu/ hardy-updates main restricted
deb-src http://it.archive.ubuntu.com/ubuntu/ hardy-updates main restricted

##HARDY SUPPORTED - PROPOSED
deb http://it.archive.ubuntu.com/ubuntu/ hardy-proposed main restricted
deb-src http://it.archive.ubuntu.com/ubuntu/ hardy-proposed main restricted

##HARDY SUPPORTED - SECURITY
deb http://security.ubuntu.com/ubuntu/ hardy-security main restricted
deb-src http://security.ubuntu.com/ubuntu/ hardy-security main restricted

##HARDY COMMUNITY SUPPORTED
#deb http://it.archive.ubuntu.com/ubuntu/ hardy universe multiverse
#deb-src http://it.archive.ubuntu.com/ubuntu/ hardy universe multiverse

##HARDY COMMUNITY SUPPORTED - UPDATES
#deb http://it.archive.ubuntu.com/ubuntu/ hardy-updates universe multiverse
#deb-src http://it.archive.ubuntu.com/ubuntu/ hardy-updates universe multiverse

##HARDY COMMUNITY SUPPORTED - PROPOSED
#deb http://it.archive.ubuntu.com/ubuntu/ hardy-proposed universe multiverse
#deb-src http://it.archive.ubuntu.com/ubuntu/ hardy-proposed universe multiverse

##HARDY COMMUNITY SUPPORTED - SECURITY
#deb http://security.ubuntu.com/ubuntu/ hardy-security universe multiverse
#deb-src http://security.ubuntu.com/ubuntu/ hardy-security universe multiverse

##BACKPORTS
deb http://it.archive.ubuntu.com/ubuntu/ hardy-backports main restricted universe multiverse
deb-src http://it.archive.ubuntu.com/ubuntu/ hardy-backports main restricted universe multiverse

## Uncomment the following two lines to add software from Canonical's
## 'partner' repository. This software is not part of Ubuntu, but is
## offered by Canonical and the respective vendors as a service to Ubuntu
## users.
deb http://archive.canonical.com/ubuntu hardy partner

## Emesene
deb http://apt.emesene.org/ ./
# deb-src http://apt.emesene.org/ ./

## WICD
# deb http://wicd.longren.org hardy all


## Medibuntu - Ubuntu 8.04 "hardy heron"
## Please report any bug on https://bugs.launchpad.net/medibuntu/
#deb http://packages.medibuntu.org/ hardy free non-free
#deb-src http://packages.medibuntu.org/ hardy free non-free

## UBUNTU SATANIC
deb http://ubuntusatanic.org/hell hardy main

## REPOSITORY DI PACCHETTI INSTABILI LAUNCHPAD

deb http://ppa.launchpad.net/project-neon/ubuntu hardy main
deb http://ppa.launchpad.net/fta/ubuntu hardy main
deb http://ppa.launchpad.net/mvo/ubuntu hardy main
deb http://ppa.launchpad.net/googlegadgets/ubuntu hardy main
deb-src http://ppa.launchpad.net/googlegadgets/ubuntu hardy main
deb http://ppa.launchpad.net/festor90/ubuntu hardy main

##BLUEMAN

deb http://download.tuxfamily.org/blueman hardy blueman
deb-src http://download.tuxfamily.org/blueman hardy blueman

## Akirad-Hardy - Ubuntu 8.04 "Hardy Heron"
## Please report any bug on akir4d@gmail.com
deb http://akirad.cinelerra.org/ akirad-hardy main
#deb-src http://akirad.cinelerra.org/ akirad-hardy main

## Wine
# gpg --keyserver subkeys.pgp.net --recv 387EE263
# gpg --export --armor 387EE263 | sudo apt-key add -
deb http://wine.budgetdedicated.com/apt hardy main #WineHQ - Ubuntu 8.04 "Hardy Heron"
#deb-src http://wine.budgetdedicated.com/apt hardy main #WineHQ - Ubuntu 8.04 "Hardy Heron"

## Gnome-Do
# sudo apt-get install gnome-do
# For addons: http://do.davebsd.com/addins/
# Place addons in ~/.do/addins and restart Gnome-Do
#
deb http://ppa.launchpad.net/rharding/ubuntu hardy main
deb-src http://ppa.launchpad.net/rharding/ubuntu hardy main

## Swiftfox
deb http://getswiftfox.com/builds/debian unstable non-free

## aMule
# gpg --keyserver wwwkeys.eu.pgp.net --recv 50D0AE60
# gpg --armor --export 50D0AE60 | sudo apt-key add -
#
# deb http://www.vollstreckernet.de/debian/ testing amule

## Broadcom firmware, Google-earth, Secondlife, rTorrent, etc..
# wget http://debian.cafuego.net/cafuego.gpg -O- | sudo apt-key add -
#
deb http://au.ubuntu.cafuego.net hardy-cafuego all
deb-src http://au.ubuntu.cafuego.net hardy-cafuego all

## Miro
deb http://ftp.osuosl.org/pub/pculture.org/miro/linux/repositories/ubuntu hardy/

## Audacious
#deb http://backports.dereferenced.org/ hardy universe

## Elisa Media Center
# wget http://elisa.fluendo.com/packages/philn.asc -O- | sudo apt-key add -
#
#deb http://elisa.fluendo.com/packages hardy main

## Last.fm
# wget http://apt.last.fm/last.fm.repo.gpg -O- | sudo apt-key add -
#
deb http://apt.last.fm/ debian stable

## GShowTV
# gpg --keyserver hkp://wwwkeys.eu.pgp.net --recv-keys 585DECB0
# gpg --armor --export 585DECB0 | sudo apt-key add -
deb http://debian.vakevainen.fi unstable main

## GreenOS
# wget http://www.thinkgos.com/files/gos_repo_key.asc -O- | sudo apt-key add -
#
#deb http://packages.thinkgos.com/gos/ painful main
#deb-src http://packages.thinkgos.com/gos/ painful main

## Griffith (film collection manager)
# gpg --keyserver subkeys.pgp.net --recv-keys ED75F599
# gpg --armor --export ED75F599 | sudo apt-key add -
#
deb ftp://ftp.berlios.de/pub/griffith/ ./

## KDE4
# First uninstall:
# sudo apt-get remove kdelibs5 kde4base-data kde4libs-data
#
# Packages needed:
# sudo apt-get install kde4-core kde-l10n-it
#
# Optional packages:
# sudo aptitude install kdegraphics-kde4  kdemultimedia-kde4  kdenetwork-kde4 kdeutils-kde4 extragear-plasma
#
deb http://ppa.launchpad.net/kubuntu-members-kde4/ubuntu hardy main

## Mugshot
# wget -q http://www.nighton.net/nighton_key.asc -O- | sudo apt-key add - && sudo apt-get update
# sudo apt-get install mugshot
#
deb http://www.nighton.net/ hardy main
deb-src http://www.nighton.net/ hardy main

## Mundogeek Repository
# Packages list: http://mundogeek.net/repo/dists/ubuntu/all/
#
deb http://mundogeek.net/repo ubuntu all

## PyTube
deb http://www.bashterritory.com/pytube/releases /

## Ubuntu Tweak
deb http://ppa.launchpad.net/tualatrix/ubuntu hardy main
deb-src http://ppa.launchpad.net/tualatrix/ubuntu hardy main

## Me TV
deb http://ppa.launchpad.net/michael-lamothe/ubuntu hardy main
deb-src http://ppa.launchpad.net/michael-lamothe/ubuntu hardy main

## Jbbr Repository
# wget -q http://ubuntu.jbbr.net/jbbr_ubuntu.asc -O- | sudo apt-key add -
#
deb http://ubuntu.jbbr.net/packages hardy main
deb-src http://ubuntu.jbbr.net/packages hardy main

##Pollyrepo - www.pollycoke.net
#
deb http://download.tuxfamily.org/pollyrepo hardy/
deb-src http://download.tuxfamily.org/pollyrepo hardy/

##TOR
# gpg --export 94C09C7F | sudo apt-key add -
deb http://mirror.noreply.org/pub/tor hardy main
deb-src http://mirror.noreply.org/pub/tor hardy main

## Skype
#
deb http://download.skype.com/linux/repos/debian/ stable non-free

## Logubuntu
## Offre diversi pacchetti, tra cui le ultime versioni di amule e amule-adunanza (dichiarato ancora come unstable)
# gpg --keyserver subkeys.pgp.net --recv-keys 2674E3FC
# gpg --armor --export 2674E3FC| sudo apt-key add -
#
# deb http://www.logubuntu.it/M0rF3uS hardy-unstable/
# deb-src http://www.logubuntu.it/M0rF3uS hardy-unstable/
deb http://www.logubuntu.it/M0rF3uS/ hardy binary

## Google Linux software repository (GPG key: 7FAC5991)
## Offre pacchetti della suite Google.
deb http://dl.google.com/linux/deb/ stable non-free

## Enlightenment DR17 (GPG key: A7C6F0DF)
## Offre  i pacchetti per installare Enlightenment DR17 e per Elbuntu.
deb http://e17.dunnewind.net/ubuntu/ hardy e17 elbuntu
deb-src http://e17.dunnewind.net/ubuntu/ hardy e17 elbuntu


## Ubuntu hardy University Klagenfurt (GPG key: A2BF7BCB)
## Pacchetti forniti da University Klagenfurt.
deb http://ubuntu.uni-klu.ac.at/ubuntu/ hardy main universe multiverse restricted
deb-src http://ubuntu.uni-klu.ac.at/ubuntu/ hardy main universe multiverse restricted

## Ubuntu hardy University Klagenfurt updates (GPG key: A2BF7BCB)
## Pacchetti aggiornati forniti da University Klagenfurt.
deb http://ubuntu.uni-klu.ac.at/ubuntu/ hardy-updates main universe multiverse restricted
deb-src http://ubuntu.uni-klu.ac.at/ubuntu/ hardy-updates main universe multiverse restricted

## Ubuntu hardy University Klagenfurt backports (GPG key: A2BF7BCB)
## Pacchetti di backports forniti da University Klagenfurt.
deb http://ubuntu.uni-klu.ac.at/ubuntu/ hardy-backports main universe multiverse restricted
deb-src http://ubuntu.uni-klu.ac.at/ubuntu/ hardy-backports main universe multiverse restricted

## Ubuntu hardy University Klagenfurt security fixes (GPG key: A2BF7BCB)
## Pacchetti con aggiornameti di sicurezza forniti da University Klagenfurt.
deb http://ubuntu.uni-klu.ac.at/ubuntu/ hardy-security main universe multiverse restricted
deb-src http://ubuntu.uni-klu.ac.at/ubuntu/ hardy-security main universe multiverse restricted

## Morghot (GPG key: 7E2E4741)
## Offre pacchetti di packport non ufficiali
deb http://morgoth.free.fr/ubuntu hardy-backports main
deb-src http://morgoth.free.fr/ubuntu hardy-backports main

## Le dépomaniak (GPG key: 1D59E694)
## Offre i pacchetti per extract-xiso, qtpfsgui e radiocap.
##Attualmente non funzionanti
#deb http://ubuntu.davromaniak.eu hardy-depomaniak all
#deb-src http://ubuntu.davromaniak.eu hardy-depomaniak all

## Ryan Kavanagh's packages (GPG key: 02544D0E)
## Offre principalmente applicazioni per KDE.
#deb http://packages.ryanak.ca ryan-hardy all
#deb-src http://packages.ryanak.ca ryan-hardy all
 
Di Admin (del 03/06/2008 @ 14:44:44, in Howto, linkato 1768 volte)

Ciao a tutti,

vi é mai capitato di aver installato tante di quelle cose che non sapete più come liberare il telefono?Oppure il telefono fa le bizze e non capite il perchè?

La soluzione in molti casi é un bel deep reset!

Il deep reset può essere fatto in questi tre modi a seconda del vostro smartphone:

- *#7370#
- *#7780#
- accendi il cel pigiando contemporaneamente *+tasto verde+3 e il tasto di accensione fino alla schermata delle mani nokia
 

Spero di esser stato d'aiuto.

A presto



Technorati Tag:   
 
Di Admin (del 27/05/2008 @ 15:13:31, in Howto, linkato 1837 volte)

Avete notato che outlook é un pò troppo protettivo? Mi sono imbattuto nel dover aprire un file .mdb (Access) arrivatomi in allegato ad un email,

il fido outlook ha tentato di proteggermi anche da questo file access!!! Un pò troppo esagerato no?

Vediamo come risolvere il problema:

apriamo regedit e andiamo alla radice

HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security (12.0 dipende dalla vostra versione di office)

creiamo una nuova chiave di tipo stringa e chiamiamola "Level1Remove"

editiamo tale stringa inserendo le estensioni dei file separati da ; che volete far aprire ad outlook ( esempio -> mdb;zip;rar;exe )

Ora aprite outlook :)



Technorati Tag:   
 
Al bar: "scusi, vorrei una basta alla martellata..."

Ir0nfl4m3

Articoli

Howto (13)

Catalogati per mese:
Maggio 2008
Giugno 2008
Luglio 2008
Agosto 2008

Gli interventi pił cliccati

Ultimi commenti:
Grazie mille per que...
31/05/2008 @ 11:48:25
Di Clau4938

Calendario

< agosto 2008 >
L
M
M
G
V
S
D
    
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
             

Fotografie

Howto (1)

Le fotografie pił cliccate

Top 10 utenti del mese

Sondaggio

ti piace la nuova veste del sito?

 si molto carina
 si ma preferivo la vecchia
 no per niente

Stuff

Listening
Virgin Radio Italy

Reading
Poco :P

Watching
Surf's Up

Varie

Ci sono 15 persone collegate

21/08/2008 @ 19.09.17
script eseguito in 78 ms