July 19, 2005
HOWTO enable apache2 with ssl on Solaris 10
1) Apache2 SSL certificate creation
NOTE: This is for internal testing only! Production systems should go through the correct procedures to obtain a CA authorized certificate.
a) openssl req -new -text -out server.req
- Fill in options appropriate for your use
- NOTE: Common Name is name of your server
b) openssl rsa -in privkey.pem -out server.key
- PassPhrase is phrase entered above
c) rm privkey.pem
d) openssl req -x509 -in server.req -text -key server.key -out server.crt
e) modify /etc/apache2/ssl.conf
- comment SSLRandomSeed startup builtin
- comment SSLRandomSeed connect builtin
- uncomment SSLRandomSeed startup file:/dev/random 512
- uncomment SSLRandomSeed connect file:/dev/random 512
- change <VirtualHost _default_:443> to <VirtualHost *:443>
create directory /etc/apache2/ssl.crt
create directory /etc/apache2/ssl.key
copy server.key /etc/apache2/ssl.key/
copy server.crt /etc/apache2/ssl.crt/
2) SMF Service Modification
a) svccfg -s apache2 setprop httpd/ssl = boolean: 'true'
b) check the status
- svcs apache2
STATE STIME FMRI
disabled 13:35:04 svc:/network/http:apache2
c) start the service
- svcadm enable apache2
d) check the status
- svcs apache2
STATE STIME FMRI
online 13:42:30 svc:/network/http:apache2
3) Test your site with Mozilla or Firefox.
Thanks to Mike Dotson's help.
My iPod doesn't work with my old PC's USB card
I bought an iPod last week.
I want to get it work with my old PC, a P3 733MHz box without USB 2.0 port.
iPod's manual said it won't work with USB 1.1 port, but actually it works without a problem.
It popups a dialog say this equipment may run faster with USB 2.0 port, blah blah blah.
I tried it with a NEC chipset USB 2.0 card.
The result is fantastic,
1) with a black USB extension cable -> unrecognized device
2) with a transparent USB extension cable (it is shorter than the black one) -> iPod is mounted as a blank disc (it scares me)
3) without extend line -> iPod is mounted correctly, but both iTunes and iPod updater can't recognize it.
I think maybe the problem is iPod need high power USB port.
Finally I gave up and returned to my Powerbook.
At that time I got a -36 error while syncing my photos with iPhoto, and iPhoto crashed once.
I deleted my photos and tried again, error disappeared.
Bad lucky day.
July 14, 2005
I have to use Safari on Mac OS X
Although Firefox has a lot of advantages, and I miss Googlebar, ADBlock, Switchproxy very much, I have to use Safari on Mac OS X, because it's the only browser that browser simplified Chinese sites without problems.
Missing characters and bad fonts limit Firefox spreading in Chinese Mac OS X community.
Let's take google.com in simplified Chinese as an example.
Here's the screenshot of Safari.
Here's the screenshot of Firefox, you can see the fonts are not identical, some characters are using Song, some are using Hei.
Things are even worth in "Advanced Search" page, lots of characters are missing in widgets.
Here's the screenshot.
Compare to Safari.
The problem is Firefox is using QuickDraw for font rendering on Mac OS X, it's behind the times and deprecated. e.g. QuickDraw doesn't support Unicode directly.
What about OmniWeb or Opera? OmniWeb is rendering with very good font, even better than Safari, but it missed some characters in "Google Preference" page. Opera didn't miss any characters, but the font is worst.
Anyway, the situation is not worst with simplified Chinese. Google in Nepal is not readable with Firefox and Opera.
Here's the screenshot matrix.
|URL \ Browser||Safari||Firefox||OmniWeb||Opera|