hostname='mytest host'
port=443

begin
  Timeout.timeout(timeout) do
    socket = TCPSocket.new(hostname, port)
    context = OpenSSL::SSL::SSLContext.new()
    context.verify_mode = OpenSSL::SSL::VERIFY_NONE
    ssl_socket = OpenSSL::SSL::SSLSocket.new(socket, context)
    ssl_socket.sync_close = true
    ssl_socket.connect
  end

  rescue => e
    # capture and handle errors for: DNS Name resolution failure, no route to host, connection timeout...
    raise e

end

# this serves as the target for the ssl socket
class SSLHost
  attr_accessor :name, :port, :socket, :cert
  attr_reader :subject_key_identifier
  def initialize(host,port=443)
    @name = name  # name or IP of the host
    @port = port  # port on which to connect
    @cert = nil  # once connected retrieve the SSL cert
    @socket = nil  # store the SSL socket in memory for future use
  end

  def connect
    self.class.connect(self)
  end

  def socket
    connect unless @socket
    return nil unless @socket
    @socket
  end

  def cert
    @cert ||= socket.try(:peer_cert)
  end

  def self.connect(host,timeout=3)
    retries = 3
    ssl_socket = nil
    begin
      Timeout.timeout(timeout) do
        socket = TCPSocket.new(host.name, host.port)
        context = OpenSSL::SSL::SSLContext.new()
        context.verify_mode = OpenSSL::SSL::VERIFY_NONE
        ssl_socket = OpenSSL::SSL::SSLSocket.new(socket, context)
        ssl_socket.sync_close = true
        ssl_socket.connect
      end
   rescue Timeout::Error => e
      return false
      raise e
   rescue Errno::EINPROGRESS
      resp = IO.select([ssl_socket], nil, nil, timeout.to_i)
      if resp.nil?
        raise Errno::ECONNREFUSED
      end
   rescue SocketError => e
      if retries > 0
        retries -= 1
        print "Retry #{retries}\n"
        retry
      else
        print "Retried three times. Fail\n\n"
        raise e
      end
    end
    if ssl_socket
      host.socket = ssl_socket # stores the socket for future connections if needed
      host.cert # get it since we have it
      return true
    else
      return false
    end
  end

end

After writing this it dawned on me that javascript is likely a better place for this to live if there are a large number of items that need to have color applied.

def get_color_scale(number)
    number = number.to_i
    number = 100 if number > 100
    number = 0 if number < 0
    lightness = 60 - (number/4) # I wanted to darken the color as it went closer to green
    color = Sass::Script::Color.new(hue: number, saturation: 100, lightness: lightness)
    color.options = {:style => :compressed} # setting the options is required by the class before using the .to_s method
    color.to_s # return the hex representation of the color
  end

Hope this works well for you.

I am currently working on an application that I’ve really gone back and forth on the affiliate/advertising and free to use vs the pay to play models. People I have a good deal of respect for have said that the only way to go is ads. That seems attractive but at the end of the day isn’t a good service is worth paying for?

How much and how often are still key considerations, but having another perspective so clearly articulated is helpful to say the least.

Resistor Color Bands (Image)

My initial searches produced an incorrect method:

remove_index :table_name, :named_index

The correct method is:

remove_index :table_name, :name => “named_index”

Which can actually be found on the updated documentation.

1. Get rid of the localhost.localdomain in alert messages.

Settings -> Daemons -> zenactions -> zopeurl

Put in the full URL as it will be seen and appended to by alert messages. Because I anticipated using SSL my zopeurl looked something like this: https://myserver.name:2345

2. Create a http.conf file for my prxied service

vi /etc/http/conf.d/myserver.name-2345.conf

Listen 0.0.0.0:2345

NameVirtualHost myserver.name:2345
<VirtualHost <http server IP Address>:2345>

ServerName myserver.name

ProxyRequests Off
RewriteEngine on
RewriteLog /var/log/httpd/myserver.name-2345-rewrite_log
RewriteLogLevel 1

SSLEngine On
SSLCACertificateFile /etc/httpd/conf/myserver.name/ssl/ssl-cachain.pem
SSLCertificateFile /etc/httpd/conf/myserver.name/ssl/cert.pem
SSLCertificateKeyFile /etc/httpd/conf/myserver.name/ssl/key.pem
SSLProtocol TLSv1 SSLv3
SSLCipherSuite HIGH

ErrorLog logs/myserver.name-2345-error_log
CustomLog logs/myserver.name-2345-access_log common

SetEnv force-proxy-request-1.0.1
SetEnv proxy-nokeepalive 1

ProxyPass / http://127.0.0.1:8080/VirtualHostBase/https/myserver.name:2345/VirtualHostRoot/

 

Personally I like to keep the .conf file in a single location. I use /etc/http/conf/myserver.name/

In that directory I place my ssl and any related conf files then, from inside the conf.d directory I ln -s ../conf/myserver.name/myserver.name-2345.conf ./

From there I check the conf/myserver.name into a git repo. A note on this. Beware of putting sensitive data like the key file into a shared repository.

So… that’s it. Restart apache and you should be able to hit the secure site.

An easy way to create and manage certs if you are going with self signed is TinyCA2

Props go out to http://jang.blogs.ilrt.org/2009/05/28/zenoss-general-zope-behind-an-apache-proxy/ for the actual URL to redirect to.

Post back with comments and improvements.

Get the basic install packages:

On FC10 (32bit)

sudo yum install git-all ruby-gconf2 ruby-gnome2 oniguruma oniguruma-devel gtk2 gtk2-devel glib2 glib2-devel libgee libgee-devel ruby-gtksourceview2 gtksourceview2 gtksourceview2-devel xulrunner xulrunner-devel xorg-x11-server-Xvfb dbus-devel WebKit-gtk-devel WebKit-gtk WebKit-doc ruby-gtk2 ruby-gtk2-devel

On FC10 (64bit)

sudo yum install git-all ruby-gconf2 ruby-gnome2 oniguruma.i386 oniguruma.x86_64 oniguruma-devel.i386 oniguruma-devel.x86_64 gtk2 gtk2-devel glib2 glib2-devel libgee.i386 libgee.x86_64 libgee-devel.i386 libgee-devel.x86_64 ruby-gtksourceview2 gtksourceview2 gtksourceview2-devel xulrunner xulrunner-devel xorg-x11-server-Xvfb dbus-devel WebKit-gtk-devel WebKit-gtk WebKit-doc ruby-gtk2 ruby-gtk2-devel

On FC11 the process has only the exception that WebKit-gtk is now referred to as webkitgtk:

sudo yum install webkitgtk-devel webkitgtk webkitgtk-doc

Get missing development headers (not just for x64 systems):

wget redcareditor.com/stuff/missing_x64_headers/rbgdkconversions.h
wget redcareditor.com/stuff/missing_x64_headers/rbgtkconversions.h

Determine your platform if you don’t alread know

uname -p
i686 == 32 bit
x86_64 == 64 bit

32 bit do:

sudo cp rbgtkconversions.h rbgdkconversions.h /usr/lib/ruby/1.8/i386-linux/

64 bit do:

sudo cp sudo cp /usr/lib64/ruby/1.8/x86_64-linux/ rbgdkconversions.h /usr/lib64/ruby/1.8/x86_64-linux/

I use github often and so have it setup as a gem source:

sudo gem source -a http://gems.github.com

Install needed gems:

sudo gem install oniguruma activesupport rspec cucumber hoe open4 zerenity statemachine

Go to your development directory and:

git clone git://github.com/danlucraft/redcar.git

Change to the redcar directory:

cd redcar

Ensure you are using the “stable” branch:

git checkout stable

Get the redcar submodules (like textmate bundles):

git submodule init
git submodule update

Install dbus gem.

I used sdague-ruby-dbus because the plain old ruby-dbus (dbus gem) would not build for me. YMMV:

sudo gem install sdague-ruby-dbus

It turns out that I could not get dbus to run (meaning that if I have RedCar running and attempt to load a file from the command line it opens as a separate instance instead of opening the file in the currently running RedCar instance. A minor hassle)

Build redcar

rake build

Make an alias script for redcar

This allows you to launch redcar from anywhere on the system

sudo vi /usr/local/bin/redcar
#!/bin/sh
# I use –multiple-instance because ruby-dbus just isn’t working for me.
/<YOUR REDCAR DIRECTORY>/bin/redcar –multiple-instance $1

Make the script executable:

sudo chmod a+x /usr/local/bin/redcar

Start redcar

/usr/local/bin/redcar README.md

The first time you run redcar it will take some time to collect all it’s library and bundle files. That’s a one time thing.

I use –multiple-instance because ruby-dbus just isn’t working for me. If you know how to make it hum please leave a comment and I’ll update the post.

Base configuration taken from: http://github.com/danlucraft/redcar/blob/eeebf739365d8bfd0e06ed001bd6b7960d76daa3/INSTALL.md

My setup is a Maxtor Central Axis 1TB using CIFS mounted to a linux file system using a standard mount -t cifs …. command.

The initial rsync run identified my thirty one thousand RAW and JPG files and took an age to get through them all… as expected. I realized something was terribly wrong when I kicked off a test run immediately after the first completed as rsync was copying one file at a time regardless of if the file had changed or not.

I started down the path of having rsync perform a checksum on each file to determine if it should be copied or not; however, the checksum process is computationally expesive and was taking more time than just copying the file. Needless to say I didn’t even get all the way through assessing which files needed to be copied. Next I considered looking at the modification times only but for some reason opening the modify window (ex. –modify-window=10) did not have any affect. I ended up just looking at the size of each file.

rsync –size-only -trvvhP –no-whole-file /src_directory/* /cifs_mounted_remote_directory/

I suspect that there may be CIFS mounting options that would lend themselves to backups based on modification time; however, the types of files I’m concerned with are in a large binary format. Any modification of the file under normal use will produce a file of a different size (in 99% of cases). The monthly full copy will get the outliers.