zwf zwf

Let's Encrypt on Ubuntu 14.04, nginx with webroot auth

This document details how I setup LE on my server. Firstly, install the client as described on http://letsencrypt.readthedocs.org/en/latest/using.html and make sure you can execute it. I put it in /root/letsencrypt.

As it is not possible to change the ports used for the standalone authenticator and I already have a nginx running on port 80/443, I opted to use the webroot method for each of my domains (note that LE does not issue wildcard certificates by design, so you probably want to get a cert for www.example.com and example.com).

Configuration

For this, I placed config files into etc/letsencrypt/configs, named after <domain>.conf. The files are simple:

浅谈《【原创】深度分析Twitter Heron》

有幸拜读了《【原创】深度分析Twitter Heron》 ( http://www.longda.us/?p=529 )一文，十分感动国内社区对Heron的关注。但此文中有诸多重要问题值得商榷，我谨在此行文指出，还望能够帮助大家更好的理解Heron。转载烦请注明出处：https://gist.github.com/maosongfu/c3aeb1bb5eb7b39fcdc5

我是符茂松，目前在Twitter工作，是Heron的作者之一。这个领域水深，我也是初窥门径，希望能够与大家多多交流。

微博：符茂松

Twitter: Louis_Fumaosong

OBSOLETE

This entire guide is based on an old version of Homebrew/Node and no longer applies. It was only ever intended to fix a specific error message which has since been fixed. I've kept it here for historical purposes, but it should no longer be used. Homebrew maintainers have fixed things and the options mentioned don't exist and won't work.

I still believe it is better to manually install npm separately since having a generic package manager maintain another package manager is a bad idea, but the instructions below don't explain how to do that.

Fixing npm On Mac OS X for Homebrew Users

Installing node through Homebrew can cause problems with npm for globally installed packages. To fix it quickly, use the solution below. An explanation is also included at the end of this document.

	/* Pre-requisite
	==================
	1) Create an Environment (if you don't already have on) and enable it for your request
	2) Add a new Header with key as "Authorization" and value as "{{hmacAuthHeader}}"
	3) Add the following Pre-request Script that computes the hmacAuthHeader variable and adds it to the environment
	4) Fill your CLIENT_KEY and SECRET_KEY with valid values
	*/

	function getPath(url) {
	var pathRegex = /.+?\:\/\/.+?(\/.+?)(?:#\|\?\|$)/;

	public class SyncDictionary : Dictionary<object, object>
	{
	private volatile int version;
	private volatile bool isWriterInProgress;
	public new object this[object key]
	{
	get
	{
	object value;
	int currentversion;

	# How to use "acme.sh" to set up Lets Encrypt without root permissions
	# See https://github.com/Neilpang/acme.sh for more

	# This assumes that your website has a webroot at "/var/www/<domain>"
	# I'll use the domain "EXAMPLE.com" as an example

	# When this is done, there will be an "acme" user that handles issuing,
	# updating, and installing certificates. This account will have the following
	# (fairly minimal) permissions:
	# - Host files at http://EXAMPLE.com/.well-known/acme-challenge

	function computeHttpSignature(config, headerHash) {
	var template = 'keyId="${keyId}",algorithm="${algorithm}",headers="${headers}",signature="${signature}"',
	sig = template;

	// compute sig here
	var signingBase = '';
	config.headers.forEach(function(h){
	if (signingBase !== '') { signingBase += '\n'; }
	signingBase += h.toLowerCase() + ": " + headerHash[h];
	});

	###############################################################################################################
	# these are instructions for automating the suspend and shutdown of esxi vm's and host in case of a
	# power failure.
	# works with apc smartups 750xl and esxi 5.5u1
	###############################################################################################################

	0# make a new VM and install Ubuntu-Server on it

	1# install apcupsd
	apt-get install apcupsd

	http://devstreaming.apple.com/videos/wwdc/2014/403xxksrj0qs8c0/403/403_hd_intermediate_swift.mov?dl=1
	http://devstreaming.apple.com/videos/wwdc/2014/403xxksrj0qs8c0/403/403_sd_intermediate_swift.mov?dl=1
	http://devstreaming.apple.com/videos/wwdc/2014/403xxksrj0qs8c0/403/403_intermediate_swift.pdf?dl=1
	http://devstreaming.apple.com/videos/wwdc/2014/419xxli6f60a6bs/419/419_hd_advanced_graphics_and_animation_performance.mov?dl=1
	http://devstreaming.apple.com/videos/wwdc/2014/419xxli6f60a6bs/419/419_sd_advanced_graphics_and_animation_performance.mov?dl=1
	http://devstreaming.apple.com/videos/wwdc/2014/419xxli6f60a6bs/419/419_advanced_graphics_and_animation_performance.pdf?dl=1
	http://devstreaming.apple.com/videos/wwdc/2014/101xx36lr6smzjo/101/101_hd.mov?dl=1
	http://devstreaming.apple.com/videos/wwdc/2014/101xx36lr6smzjo/101/101_sd.mov?dl=1
	http://devstreaming.apple.com/videos/wwdc/2014/236xxwk3fv82sx2/236/236_hd_building_interruptible_and_responsive_interactions.mov?dl=1
	http://devstreaming.apple.com/videos/wwdc/2

	var CryptoJS = require("crypto-js");//replace thie with script tag in browser env

	//encrypt
	var rawStr = "hello world!";
	var wordArray = CryptoJS.enc.Utf8.parse(rawStr);
	var base64 = CryptoJS.enc.Base64.stringify(wordArray);
	console.log('encrypted:', base64);

	//decrypt
	var parsedWordArray = CryptoJS.enc.Base64.parse(base64);