삽질은 내친구

$ sudo crontab -e

----- 생 략 ----

# For more information see the manual pages of crontab(5) and cron(8)

# m h  dom mon dow   command

10 5 * * 1 /usr/bin/letsencrypt renew >> /var/log/le-renew.log

15 5 * * 1 /usr/sbin/apache2ctl restart

DELETE FROM WORK_QUEUE;

DELETE FROM WC_LOCK;

# openssl genrsa -des3 -out private.key 2048

Generating RSA private key, 2048 bit long modulus

..................+++

................+++

e is 65537 (0x10001)

Enter pass phrase for private.key: (개인키 패스워드 입력)

Verifying - Enter pass phrase for private.key: (개인키 패스워드 입력)

# openssl req -new -key private.key -out out.csr

Enter pass phrase for pri.kery: (개인키 패스워드 입력)

Loading 'screen' into random state - done 

You are about to be asked to enter information that will be incorporated 

into your certificate request. 

What you are about to enter is what is called a Distinguished Name or a DN. 

There are quite a few fields but you can leave some blank 

For some fields there will be a default value, 

If you enter '.', the field will be left blank. 

----- 

Country Name (2 letter code) [AU]:KR (국가코드 C)

State or Province Name (full name) [Some-State]:Seoul (시,도 ST)

Locality Name (eg, city) []:Gu-ro (구,군 L)

Organization Name (eg, company) [Internet Widgits Pty Ltd]:Finkle (기관명 O)

Organizational Unit Name (eg, section) []:RnD (조직명 OU)

Common Name (eg, YOUR name) []:mydomain.co.kr (도메인명 CN)

Email Address []:my@email.com (이메일)

Please enter the following 'extra' attributes 

to be sent with your certificate request 

A challenge password []: enter

An optional company name []: enter

mydomain.co.kr_sha256_en.zip

1_root_bundle.crt

2_mydomain.co.kr.crt

<VirtualHost *:443>

    SSLEngine on

    SSLCertificateKeyFile  /my/path/ssl/private.key

    SSLCertificateFile       /my/path/ssl/2_mydomain.co.kr.crt

    SSLCACertificateFile   /my/path/ssl/1_root_bundle.crt

</VirtualHost>

1. Tomcat 설치 폴더 : 

/home/finkle/tomcat8

2. 인스탄스 1번 폴더 : 

/home/finkle/instance/svc01

3. 인스탄스 2번 폴더 : 

/home/finkle/instance/svc02

$ cd /home/finkle/instance/svc01

$ cp -R /home/finkle/tomcat8/* .

$ rm -rf bin lib LICENSE NOTICE RELEASE-NOTES RUNNING.txt

$ ls

conf logs temp webapps work

1번 instance의 server.xml

<Server port="8005" shutdown="SHUTDOWN">

....

    <Connector port="80" protocol="HTTP/1.1" Server="WAS-NAME"

               connectionTimeout="20000"

               redirectPort="443" URIEncoding="utf-8" />

....

2번 instance의 server.xml

<Server port="8015" shutdown="SHUTDOWN">

....

    <Connector port="8010" protocol="HTTP/1.1" Server="WAS-NAME"

               connectionTimeout="20000"

               redirectPort="8443" URIEncoding="utf-8" />

....

$ cd /home/finkle/instance/svc01

$ mkdir bin

$ cd bin

$ touch startup.sh

$ touch shutdown.sh

$ chmod +x *.sh

startup.sh

#!/bin/sh

CATALINA_BASE=/home/finkle/instance/svc01

CATALINA_OPTS="-Denv.servername=svc01"

CATALINA_PID=/home/finkle/instance/svc01/svc01.pid

JAVA_OPTS="-Djava.awt.headless=true -Djava.net.preferIPv4Stack=true -server -Xms512m -Xmx512m"

export CATALINA_BASE CATALINA_OPTS CATALINA_PID JAVA_OPTS

/bin/su -p -s /bin/sh finkle $CATALINA_HOME/bin/startup.sh

shutdown.sh

#!/bin/sh

CATALINA_BASE=/home/finkle/instance/svc01

CATALINA_PID=/home/finkle/instance/svc01/svc01.pid

export CATALINA_BASE CATALINA_PID

/bin/su -p -s /bin/sh finkle $CATALINA_HOME/bin/shutdown.sh

# keytool -genkey -keyalg RSA -sigalg SHA1withRSA -alias mySSL -keysize 2048 -keystore mySSL.jks

키 저장소 비밀번호 입력:  

새 비밀번호 다시 입력: 

이름과 성을 입력하십시오.

  [Unknown]:  Finkle

조직 단위 이름을 입력하십시오.

  [Unknown]:  Finkle

조직 이름을 입력하십시오.

  [Unknown]:  RND

구/군/시 이름을 입력하십시오?

  [Unknown]:  Seoul

시/도 이름을 입력하십시오.

  [Unknown]:  Seoul

이 조직의 두 자리 국가 코드를 입력하십시오.

  [Unknown]:  KR

CN=Finkle, OU=Finkle, O=RND, L=Seoul, ST=Seoul, C=KR이(가) 맞습니까?

  [아니오]:  y

<mySSL>에 대한 키 비밀번호를 입력하십시오.

(키 저장소 비밀번호와 동일한 경우 Enter 키를 누름):  

새 비밀번호 다시 입력:

# keytool -list -keystore mySSL.jks 

# keytool -certreq -alias mySSL -keyalg RSA -sigalg SHA1withRSA -file mySSL.csr -keystore mySSL.jks

키 저장소 비밀번호 입력: 

mydomain.co.kr_sha256_en.zip

root.crt

1_cross_Intermediate.crt

2_issuer_Intermediate.crt

3_user_mydomain.co.kr.crt

# keytool -import -trustcacerts -alias WoSignROOT -file root.crt -keystore mySSL.jks

# keytool -import -trustcacerts -alias CrossINTER -file 1_cross_Intermediate.crt -keystore mySSL.jks

# keytool -import -trustcacerts -alias IssuerINTER -file 2_issuer_Intermediate.crt -keystore mySSL.jks

# keytool -import -alias mySSL-file 3_user_mydomain.co.kr.crt -keystore mySSL.jks

# keytool -list -v -keystore mySSL.jks

$ vi server.xml

<Connector port="443" protocol="HTTP/1.1"

       maxThreads="150" SSLEnabled="true" scheme="https" secure="true"

       clientAuth="false" sslProtocol="TLS" 

       keystoreFile="/home/path/tools/ssl/mySSL.jks" keystorePass="xxxx" />

div#header

<div id="header"></div>

<target name="run" depends="compile">       

    <java classname="com.some.package.path.BootStrap" 

          classpathref="classpath" 

          fork="true" 

          failonerror="true">

        <jvmarg value="-Dcom.sun.management.jmxremote=true"/>

        <jvmarg value="-Dcom.sun.management.jmxremote.port=9999"/>

        <jvmarg value="-Dcom.sun.management.jmxremote.authenticate=false"/>

        <jvmarg value="-Dcom.sun.management.jmxremote.ssl=false"/>

        <classpath>

            <pathelement path="${dist.dir}/classes"/>

        </classpath>

    </java>

</target>

<target name="jar" depends="compile">

    <delete>

        <fileset dir="${dist.dir}" includes="output-jar-name.jar"/>

    </delete>

    <jar jarfile="${dist.dir}/output-jar-name.jar">

        <fileset dir="${classes.dir}">

            <include name="com/some/package/path/**/*.class" />

            <include name="com/some/package/path/**/*.xml" />

            <include name="resources/**/*.*" />

        </fileset>

        <manifest>

            <attribute name="Built-By" value="owner"/>

            <attribute name="Main-Class" value="com.some.package.path.BootStrap"/>

            <attribute name="Class-Path" value="

                ../lib/aopalliance-1.0.jar

                ../lib/commons-beanutils-1.6.jar

                ../lib/commons-collections-3.2.jar

                ../lib/commons-configuration-1.8.jar

                ../lib/commons-dbcp-1.2.2.jar

                ../lib/commons-lang-2.6.jar

                ../lib/commons-logging-1.1.1.jar

                ../lib/commons-pool-1.3.jar

                ../lib/ibatis-sqlmap-2.3.4.726.jar

                ../lib/java-gearman-service-0.6.3.jar

                ../lib/log4j-1.2.16.jar

                ../lib/mysql-connector-java-5.1.19.jar

                ../lib/org.springframework.aop-3.1.1.RELEASE.jar

                ../lib/org.springframework.asm-3.1.1.RELEASE.jar

                ../lib/org.springframework.beans-3.1.1.RELEASE.jar

                ../lib/org.springframework.context.support-3.1.1.RELEASE.jar

                ../lib/org.springframework.context-3.1.1.RELEASE.jar

                ../lib/org.springframework.core-3.1.1.RELEASE.jar

                ../lib/org.springframework.expression-3.1.1.RELEASE.jar

                ../lib/org.springframework.jdbc-3.1.1.RELEASE.jar

                ../lib/org.springframework.orm-3.1.1.RELEASE.jar

                ../lib/org.springframework.transaction-3.1.1.RELEASE.jar

                ../lib/slf4j-api-1.6.4.jar

                ../lib/slf4j-log4j12-1.6.5.jar"/>

        </manifest>

    </jar>

</target>