junxy

source: http://www.markbrilman.nl/2011/08/howto-convert-a-pfx-to-a-seperate-key-crt-file/

openssl pkcs12 -in [yourfile.pfx] -nocerts -out [keyfile-encrypted.key]

What this command does is extract the private key from the .pfx file. Once entered you need to type in the importpassword of the .pfx file. This is the password that you used to protect your keypair when you created your .pfx file. If you cannot remember it anymore you can just throw your .pfx file away, cause you won’t be able to import it again, anywhere!. Once you entered the import password OpenSSL requests you to type in another password, twice!. This new password will protect your .key file.

Now let’s extract the certificate:

openssl pkcs12 -in [yourfile.pfx] -clcerts -nokeys -out [certificate.crt]

junxy

This article show you the ultimate way to set up a transparent proxy on Linux using clash and iptables to bypass the GFW in China.

We use:

• clash as the proxy software
• online subconverter and crontab to periodically update config file.
• ACL4SSR to provide GFW rules.

You can go to github gist to download all files mentioned in this article.

junxy

package com.demo.util;

import lombok.NonNull;
import lombok.experimental.UtilityClass;
import org.springframework.core.annotation.AnnotationUtils;
import org.springframework.lang.Nullable;

import java.lang.annotation.Annotation;
import java.lang.reflect.Method;

junxy

if type pactl > /dev/null 2>&1 || type xvinfo > /dev/null 2>&1; then                                                                
    # detect WSL host                                                                                                               
    if type systemd-detect-virt > /dev/null 2>&1 && test "$(systemd-detect-virt -c)" != wsl -a -e /etc/resolv.conf; then            
        WSL_HOST=$(awk '/nameserver / {print $2; exit}' /etc/resolv.conf 2>/dev/null)                                               
    fi                                                                                                                              
    WSL_HOST=${WSL_HOST:-localhost}                                                                                                 
                                                                                                                                    
    # set DISPLAY if there is an X11 server running                                          

junxy

package test;

import org.apache.commons.lang.StringUtils;
import org.springframework.beans.BeanUtils;
import org.springframework.beans.BeanWrapper;
import org.springframework.beans.BeanWrapperImpl;

import java.beans.PropertyDescriptor;
import java.util.HashSet;
import java.util.Set;

junxy

public static string GenerateSaltedSHA1(string plainTextString)
{
    HashAlgorithm algorithm = new SHA1Managed();
    var saltBytes = GenerateSalt(4);
    var plainTextBytes = Encoding.ASCII.GetBytes(plainTextString);

    var plainTextWithSaltBytes = AppendByteArray(plainTextBytes, saltBytes);
    var saltedSHA1Bytes = algorithm.ComputeHash(plainTextWithSaltBytes);
    var saltedSHA1WithAppendedSaltBytes = AppendByteArray(saltedSHA1Bytes, saltBytes);

junxy

package test;

import lombok.Data;
import lombok.NonNull;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.beanutils.BeanUtils;
import org.apache.http.NameValuePair;
import org.apache.http.client.utils.URLEncodedUtils;
import org.junit.Test;

junxy

<!- .... ->
<log4net>    
    <appender name="RollingLogFileAppenderLogstash" type="log4net.Appender.RollingFileAppender">
      <encoding value="utf-8" />
      <!--该目录必需有 IIS用户 写权限-->
      <file value="X:/var/log/[app_name]/logfile.log" />
      <appendToFile value="true" />
      <rollingStyle value="Date" />
      <lockingModel type="log4net.Appender.FileAppender+MinimalLock" />

junxy

#//INSTRUCTIONS FOR DOWNLOADING AND INSTALLING JAVA WITHIN LINUX SYSTEMS AND UPDATING ALTERNATIVES FILES

#// rpm Installation Oracle JDK 1.8.0_151
wget --no-check-certificate --no-cookies --header "Cookie: oraclelicense=accept-securebackup-cookie"  http://download.oracle.com/otn-pub/java/jdk/8u151-b12/e758a0de34e24606bca991d704f6dcbf/jdk-8u151-linux-x64.rpm

#// installation command
  #// -i = install
  #// -n = non-interactive
  #// -v = verbose
  #// -h = The hash table is a feature of bash that prevents it from having to search $PATH every time you type a command by caching the results in memory. 

junxy

server {
    listen 80;
    server_name updates.jenkins-ci.org;
    server_name mirrors.jenkins-ci.org;

    # https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/
    location /download/ {
        proxy_redirect off;
        proxy_pass http://mirrors.tuna.tsinghua.edu.cn/jenkins/;
        proxy_connect_timeout 60s;