Using wsftp (my favorite and recommended ftp client software) I simply right click on the file or folder I wish to chmod.  This brings up a menu.  I go down to properties…

I can then choose to chmod it… 

755

666

777

Connect to your VPS server via SSH, su to root, and run the following command:

# mkdir /usr/local/certs

# cd /usr/local/certs

# openssl genrsa -des3 -out yourdomain-name.key 2048

You will be asked to provide the information you gathered earlier. Most of the questions are self explanatory, except that common name refers to the domain name that you want to use when accessing your site using SSL (ie domain.com, www.domain.com, cname.domain.com, or *.domain.com).

When you have entered all the data, your CSR will be shown. It is a good idea to save the CSR by copying and pasting it into a file on your local computer. You will need it when you are ordering your SSL certificate from the Signing Authority’s Web site. The following is an example of a CSR. Note that the CSR includes the lines with BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST.

—–BEGIN CERTIFICATE REQUEST—–
MIIB2jCCAUMCAQAwgYExCzAJBgNVBAYTAlVTMQ0wCwYDVQQIEwRVdGFoMQ4wDAYD
VQQHEwVQcm92bzETMBEGA1UEChMKU3R1bmt3b3JrczEVMBMGA1UEAxMMTWFyayBT
cGVuY2VyMScwJQYJKoZIhvcNAQkBFhh3ZWJtYXN0ZXJAc3R1bmt3b3Jrcy5jb20w
gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKIkMHnII4uNDwgTYsBYdiiOBLTY
NOsTfXp/5sG1VXjlYhDMoLzWxBbaulx2hEufj1Sfkm65Mrd8j4nMFVIGf1sGnFCj
ClgxQ/5DJtV22jgnqQfKq7se32r9INoPWjFfjD1JC+4zry5LRiSPNImCYq2E1578
h6S6i6auD1nTDD0LAgMBAAGgGDAWBgkqhkiG9w0BCQcxCRMHZ3JvYmxpbjANBgkq
hkiG9w0BAQQFAAOBgQANwQ7wudkfkxrrZA4lXbOYeXWLngHtNdzPJ8WyzOjGof4h
jkpDPV6SJqHEszpmZljEqb6fxgeiM4cpWSFGJA1QNFz+Ra8/msrLLBMM+zPuHpER
OPFCsrIErmaBgnmymGOk/DiHvhV+LqCkAgjcS2Kpn0cOy8KRyXzUc4k+TTw0Uw==
—–END CERTIFICATE REQUEST—–

In the directory where you ran the openssl command you will also find a new file called privkey.pm. This is your private key which you will need at a later time. The following is an example of a private key. Note that the lines containing BEGIN RSA PRIVATE KEY and END RSA PRIVATE KEY are part of the key.

—–BEGIN RSA PRIVATE KEY—–
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,BCC23A5E16582F3D

hfWyPkea3gnVCHCZJ/zgQpCH9RZF7WjYXGYohdbfkJY0ETLwXaqjvnNHQlLomwIt
CvAzXhq8wnHur6SK21SO0ry3aSCvrBezH99miSJvtnT0HVlRJDNvaYQDbe01Z26D
hY2Yqha56Z8pvrTTolJfNL0sW4ewdws1wR4kxYDYkpusoe/Wed9Wg+i6xr9YmIjT
le9bbQlPK2D/3gJDhWW/aZHiMmLcYJtmWmf0wUMdmlibWYuq0UH1EefiLq3SLKK2
izvYpWDGHxVgtmzupvoc2E6CS3rQeRN3QQ9RqhzqdGqP8Xy/xl1LMuDRUbPY54Kp
3a4gqZCXdlxctK70XX5TdhiMsFEb5L1wA8CsnKE69nzs8MOLiz6mjtAhGB6KVKB4
dod3Wn6z20cus21SY5LxFkfq6JZrAsqSZFzETN9n2Fbel2pTp3IRWx7Q+WBTlrME
uIMgUSKszpvgzg0Tf2Kxfw6YWl5EpEGA8PeiGrM1NeT2TFtgiQBRQdAy7TQxgBlF
LOW2r5/1347ZgafacXLzpDBHnQrn/OtZijzleeoIwcgVwCOKz1oufEAN1ZTJbG6F
WYJuFtfopM5swyoUYK3JgT582ziAeu4jcPdrNHCxqcInkNG+ib3dHdy8yccWRehD
VnSX2hr1MDd2cpFFTl77Bc2/neNyUieqiHkrTOZIcD9oBSxFd0fP9QxLWEMCDWHt
N5UK1n29+TFgm/aXjZNjSIE5DSjTTBGTy2fPWtnefQaFk23ppV5VQypmZjxcWt2f
Eekjh1vEiQChKULQCXFAaxL61HvBRqe3iJwJ+niOBuGpYnjdC80oIA==
—–END RSA PRIVATE KEY—–

Ordering a Signed Digital Certificate
The ordering process for obtaining a signed digital certificate is different for each vendor and certificate type. There are, however, some things that will remain the same throughout all of them. The following is a list of useful tips for ordering your certificate.

At some point in the ordering process, you will be asked for a Server Type or the Server Software you are running. You will need to select Apache-SSL or Apache with OpenSSL.
Once you have obtained a signed digital certificate, you need to install it and set up SSL to use your certificate and private key instead of the default.

When you got your certificate, you most likely saved it to a file on your local computer. You will need to copy the file onto your Virtual Private Server via FTP. Be sure to copy the file using ASCII format to avoid corrupting the file. Copy the file to the /usr/local/certs/ directory with the name ssl.cert.

If your signing authority provided you with a Certificate Authority file, you should also copy it to the /usr/local/certs/ directory.

Once the certificate is on your server, get the Private Key, which you generated at the same time as you generated the CSR, and confirm it is in the /usr/local/certs/ directory with the name ssl.pk. Make sure to keep a copy of the Private Key in a different location as well so if you make a mistake you don’t lose your Private Key. You may want to create a directory on your Virtual Private Server and store a copy of both your Private Key and the Certificate until you are certain that the new certificate is working properly.

Connect to your server via SSH, su to root, and run the following:

# cd /usr/local/certs

# openssl rsa -in ssl.pk -out ssl.pk

The openssl rsa command removes the default encryption on your key, and makes it useable by the Apache Web Server. You can tell if your Private Key has been decrypted or not by looking at the file. When your key was generated, the first few lines should have looked similar to the following.

—–BEGIN RSA PRIVATE KEY—–
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,BCC23A5E16582F3D

hfWyPkea3gnVCHCZJ/zgQpCH9RZF7WjYXGYohdbfkJY0ETLwXaqjvnNHQlLomwIt

After decrypting your key, the key should have changed to look similar to the following.

—–BEGIN RSA PRIVATE KEY—–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—–END RSA PRIVATE KEY—–

You now need to create a PEM file that contains both the certificate and key. To do this, run the following commands:

# cd /usr/local/certs

# cp ssl.pk example.com.pem

# cat ssl.cert >>  example.com.pem

Edit your /www/conf/httpd.conf file to look for your certificate file by adding the following command:

SSLCertificateFile /usr/local/certs/example.com.pem

Once you have added the certificate directive to your /www/conf/httpd.conf file, you need to run restart_apache to make Apache start using the new certificate.

Check to make sure the new certificate is working by connecting to the domain your certificate is set up to use via HTTPS. For example, if your domain name were www.example.com, you would type the following into your browser’s location bar.

https://www.example.com

If the page loads without any errors, find the lock icon on your browser and click on it (depending on your browser you may need to double-click). This will bring up the certificate information or a window that lets you view certificate information. Check to see that the certificate is using the correct domain name and has the correct information.

If you intend to use your SSL certificate with E-Mail as well, you will need to make links so that the POP and IMAP will be able to find the file as well:

# ln /usr/local/certs/example.com.pem /usr/local/certs/imapd.pem

# ln /usr/local/certs/example.com.pem /usr/local/certs/ipop3d.pem

That’s about it.  Enjoy.

Downloaded the latest blackberry app to test it on this blog. It seems easy enough to use and apparently you can post to multiple blogs with it. Was able to take a photo with my blackberry bold and include it in this post. Neat! (Turkey, yum!)

If you have been around awhile, you may recall that Netscape and Microsoft (Internet Explorer) were in competition with each other years ago.  I used to own (I paid for it!) Netscape 3.0.   That was 1996.  Yeap, got the disk in the mail, loved it.  Remember that exclamation point in the browser that meant you had an email?  Well, one day, I really don’t know when, Netscape decided it was going to “give away” it’s browser just like Microsoft was doing with Internet Explorer.  (This may have been when AOL purchased Netscape)  That was the day it began to “suck”.  And suck badly!  So much so… who the heck even has this browser installed anymore??    Do you remember what the law suite Netscape/AOL filed against Microsoft was about?   Microsoft had “apparently” made Internet Explorer “part” of the OS in Win98.  See more here from a cnet article from Jan 2002:  http://news.cnet.com/2100-1001-820227.html

Isn’t Google OS a “browser/OS” ?  See a visual look at it here: http://www.pcworld.com/article/182628/google_chrome_os_visual_tour.html

Like I said… I heard it before…  seems folks want to hate Microsoft, but give a pass to Google.  Don’t get me wrong.   I like *both* companies.  If it wasn’t for Microsoft I couldn’t do half the things I have done with my business.  If it wasn’t for Google, I’d have no Gmail or Google Apps.  I find both companies to be outstanding.  But… like I said.. I’ve heard this before…   had Google gotten into this horse race back in the days of Netscape/AOL, then I’m sure Google would have been lined up in the law suite game too… how quickly we forget and move on…

I’m looking forward to what Google can do with an OS, but I don’t think it will be very competitive for years and years until it can get the drivers needed to run all the different types of hardware out there.   This is the same battle that Ubuntu has had to deal with.   Once Google OS can actually “compete” with Microsoft, we might see some real legal irony.

James

1. It’s clean

2. If you purchased the upgrade, KEEP XP installed.  Don’t format first.  Otherwise your registration code won’t work.  You will end up reinstalling xp and then reinstalling win 7, like I did.

3. windows mail is not installed by default.  (wow!)  Instead you install it by downloading it from windowslive.com

4. AVG Anti Virus FREE 9.5 works fine.

5. This VERY cool “writer program” I am using now lets me update this blog without leaving to go to the website.  =)   It’s called windows writer.

6. Faster than Vista.  Seems to run fine on this old laptop.  Dell Inspiron 710m with 2gigs of ram.

7. If you have multiple computers like me and you are going to upgrade, get the 3pack license for 149.00.  It’s a deal considering 3 individual licenses run 119.00 each.