Marcos V Bohrer megamvb

How to Setting Up a Comodo SSL Cert

I advice you to buy SSL Certs from officially Comodo only , or some SSL reseller whose you trust.

These are the steps I went through to set up an SSL cert. Purchase the cert

Prior to purchasing a cert, you need to generate a private key, and a CSR file (Certificate Signing Request). You’ll be asked for the content of the CSR file when ordering the certificate:

openssl req -new -newkey rsa:2048 -nodes -keyout example_com.key -out example_com.csr

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

	# copied from https://www.e-rave.nl/create-a-self-signed-ssl-key-for-postfix

	openssl genrsa -des3 -out mail.domain.tld.key 2048
	chmod 600 mail.domain.tld.key
	openssl req -new -key mail.domain.tld.key -out mail.domain.tld.csr
	openssl x509 -req -days 365 -in mail.domain.tld.csr -signkey mail.domain.tld.key -out mail.domain.tld.crt
	openssl rsa -in mail.domain.tld.key -out mail.domain.tld.key.nopass
	mv mail.domain.tld.key.nopass mail.domain.tld.key
	openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
	chmod 600 mail.domain.tld.key

	require 'ap'
	require 'mail'

	# String monkeypatch
	# This is one of many possible "encoding problem" solutions. It's actually an intractable problem
	# but you'd have to read "Gödel, Escher, Bach" to understand why...
	class String
	def clean_utf8
	# self.force_encoding("UTF-8").encode("UTF-16BE", :invalid=>:replace, :replace=>"?").encode("UTF-8")
	unpack('C').pack('U') if !valid_encoding?

	server {
	listen 80 default;

	server_name ~^(www\.)?(?<domain>.+)$;

	root /srv/httpd/$domain/public_html/;
	access_log /srv/httpd/$domain/logs/access.log;

	location / {
	index index.html index.htm index.php;

	#!/bin/sh
	#
	# Pre-requisites:
	# FreeBSD
	# Passenger installed as a gem
	# Optional:
	# Ruby Enterprise Edition instead of lang/ruby18
	#

	make -C /usr/ports/www/nginx clean patch apply-slist install-rc-script

	# PF
	device pf
	device pflog
	device pfsync
	options ALTQ
	options ALTQ_CBQ
	options ALTQ_RED
	options ALTQ_RIO
	options ALTQ_HFSC
	options ALTQ_CDNR

	require 'rubygems'
	require 'mechanize'

	if ARGV.size < 3
	puts %q{Usage: ruby xcode.rb USERNAME PASSWORD "DOWNLOAD_URL" [WGET_PARAMS]}
	puts %q{Example: ruby xcode.rb [email protected] 123456 "https://developer.apple.com/devcenter/download.action?path=/Developer_Tools/xcode_4_and_ios_sdk_4.3__final/xcode_4_and_ios_sdk_4.3__final.dmg" }
	exit
	end

	a = Mechanize.new { \|agent\|

	gem 'rest-client'
	gem 'json'