« Gentoo sur Frozenkiwi » : différence entre les versions

De FrozenWiki
Aller à la navigation Aller à la recherche
Aucun résumé des modifications
Ligne 1 : Ligne 1 :
== FAQ ==
Comment faire tourner plusieurs sites virtuels sécurisés en SSL sur un seul serveur: http://lists.debian.org/debian-security/2002/11/msg00017.html
Comment convertir des boites mail du format mbox ver le formail Maildir: http://batleth.sapienti-sat.org/projects/mb2md/
== Apache 2 slow (re)start ==
== Apache 2 slow (re)start ==



Version du 5 janvier 2006 à 23:02

FAQ

Comment faire tourner plusieurs sites virtuels sécurisés en SSL sur un seul serveur: http://lists.debian.org/debian-security/2002/11/msg00017.html

Comment convertir des boites mail du format mbox ver le formail Maildir: http://batleth.sapienti-sat.org/projects/mb2md/

Apache 2 slow (re)start

On my Gentoo virtual server, apache was taking up to 3 minutes to startup. The problem is caused by the system having too little entropy to generate random numbers needed for the PID. You can check the value on your machine using

cat /proc/sys/kernel/random/entropy_avail

A value below 20 is quite low. Emerging rng-tools can increase entropy and allow apache to start up more quickly.

emerge rng-tools /etc/init.d/rngd start /etc/init.d/apache2 start

Apache should now start in seconds.

Installer RavenCore

  • Télécharger le package RPM sur SourceForge.net
  • Make sure your Gentoo installation has the rpm2targz package
# emerge -vp rpm2targz

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild   R   ] app-arch/rpm2targz-9.0-r3  0 kB

Total size of downloads: 0 kB
  • replace uw-imap by dovecot (TBD...)
  • replace proftpf by vsftpd (TBD...)

Gestion des certificats serveur et clients

openssl req -new -x509 -nodes -out /tmp/public.pem -keyout /tmp/private.pem -days 3650 cp /tmp/public.pem /usr/share/ssl/certs/dovecot.pem cp /tmp/private.pem /usr/share/ssl/private/dovecot.pem

cd /etc/ssl/certs openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/certs/vsftpd.pem -out /etc/ssl/certs/vsftpd.pem