Pank's Blog: February 2017 Archives

HiNet Dr.Speed Analysis

By Pank on February 18, 2017 9:14 PM Vote 0 Votes

抓封包看 HiNet Dr.Speed 測試流程, 使用版本是 0.98 Beta
測試前動作
1. 抓 Test Code 及服務契約條款 GET http://speed2.hinet.net/app/get_testid2.aspx?APP_Platform=windows&App_ver=0.98
2. 抓測試前注意事項(HTML格式) GET http://speed2.hinet.net/app/info.aspx
3. 去 whois 查詢 IP, 取得服務抓供者(ISP), 最後測試結果會顯示
組態載入中
1. 每次連會回傳一串亂數, 不清楚這個目的 GET http://speed2.hinet.net/app/get_ip.aspx
2. 回傳版本及 IP GET http://speed2.hinet.net/app/get_content2.aspx?App_ver=0.98&Isp=HINET-NET&wan_ipv4=IP&wan_ipv6=null
3. 初始化1 GET http://speed2.hinet.net/initialize.aspx
4. 初始化2 GET http://speed2.hinet.net/initialize_vspdf.aspx
下行測試
1. 用 ftp/ftp 帳密連到 ftp.speed.hinet.net 開三線 RETR test_2048m.zip, 約 10 秒後送出 QUIT and ABOR (中止命令)
2. 中間會有幾次 GET http://speed2.hinet.net/keeptrack.aspx
上行測試
1. 開二線 STOR yyyymmddhhmmssxxx.txt (e.g. 2017021822573659.txt), 約 10 秒後送出 QUIT
2. 中間會有幾次 GET http://speed2.hinet.net/keeptrack.aspx
測試後動作
1. 回傳結果 POST http://speed2.hinet.net/app/report.aspx
2. 廣告代理網頁 GET http://speed2.hinet.net/app/ad_agent2.aspx

dehydrated

By Pank on February 13, 2017 2:11 PM Vote 0 Votes

dehydrated 之前叫做 letsencrypt.sh 因為名稱違反 Let's Encrypt 的商標而改名
設定跟之前大同小異

以下範例 Document Root 在 /var/www/html, dehydrated 放在 /usr/local
cd /usr/local
git clone https://github.com/lukas2511/dehydrated
cd dehydrated
echo "yourdomain.com www.yourdomain.com" > domains.txt
mkdir -p /var/www/html/.well-known/acme-challenge # 另一個方法是設 alias (官網教的方法)
echo BASEDIR=/usr/local/dehydrated > config
echo WELLKNOWN=/var/www/html/.well-known/acme-challenge >> config
./dehydrated --register --accept-terms
./dehydrated -c

Let's Eencrypt 憑證有效期只有三個月, 到期前要再來執行 dehydrated -c
可排程每月執行, 剩餘時間要少於 30 天才會 renew, 不然只會提示 Longer than 30 days. Skipping

若機器有防火牆, 需開放以下 IP (for ACME challenge)
outbound1.letsencrypt.org 66.133.109.36
outbound2.letsencrypt.org 64.78.149.164

Apache 設定
Unmark Include conf/extra/httpd-ssl.conf in httpd.conf
conf/extra/httpd-ssl.conf 內容
SSLCertificateFile /usr/local/dehydrated/certs/yourdomain.com/cert.pem
SSLCertificateKeyFile /usr/local/dehydrated/certs/yourdomain.com/privkey.pem
SSLCertificateChainFile /usr/local/dehydrated/certs/yourdomain.com/chain.pem
SSLCACertificateFile /usr/local/dehydrated/certs/yourdomain.com/fullchain.pem