Skip to content

Instantly share code, notes, and snippets.

@makeitcloudy
makeitcloudy / gist:4d82bf5ec24cb15488f659d246304336
Last active May 8, 2024 20:40
supermicro_ipmi_x9scl-f_java_jnlp_certificate_error_fixed
# 2024.02.18
# windows 10 22H2
java -version
# java version "1.8.0_401"
# Java(TM) SE Runtime Environment (build 1.8.0_401-b10)
# Java HotSpot(TM) Client VM (build 25.401-b10, mixed mode, sharing)
# supermicro x9scl-f, supermicro x9dri-ln4f
The issue is caused by JARs signed with SHA-1 algorithms that are restricted by default and treated as if they were unsigned, starting from the Oracle Java Version 8 Update 351.
#Does anybody know a way to add an Inbound Firewall Rule to a GPO using PowerShell?
#Below is example for WinRM inbound rule
$domain = "abc.com\"
$GpoName = "Global-WinRM"
$PolicyStoreName = $domain + $GpoName
$GpoSessionName = Open-NetGPO –PolicyStore $PolicyStoreName
New-NetFirewallRule -Name "Windows Management I" `
-DisplayName "Windows Management Instrumentation (ASync-In)" `
-Group "@FirewallAPI.dll,-34251" `
# px2-300d firmware version: 4.1.414.34909
# 2022.08.30
#Background:
#0. the whole process can be done in Windows, provided you have the openSSL library installed on your machine
#in my case it is: OpenSSL 1.1.1o 3 May 2022
#In case due to some reason
#1. read this thread
#https://twitter.com/awakecoding/status/1537801562461982726?cn=ZmxleGlibGVfcmVjcw%3D%3D
#Activate Windows
#Go to settings to activate Windows
#If you're tired of seeing the Windows activation watermark come up in temporary lab environments, maybe you've found this registry trick that #works for some time, but didn't figure out that the registry key timestamp matters 👇
Set-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Activation' -Name 'Manual' -Value '1' -Type DWORD
$TaskAction = New-ScheduledTaskAction -Execute 'powershell.exe' `
-Argument "-Command { Set-ItemProperty -Path 'HKLM:\SOFTWARE'Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ACtivation' -Name 'Manual' -Value '1' -Type DWORD }"
@makeitcloudy
makeitcloudy / CreativeZenMicro
Last active February 12, 2022 21:44
zenMicro
# 2022.02 - tested, proffed it works
# 1. Old version of firmware 1.01 can be updated to 1.11 on windows XP
# * on XP SP2 in 2022 I was not able to install Windows Media Player 11 - it was throwing error that the operating system
# is not activated
# * Direct X 9 is needed to install jukebox, or another software which Creative needs to talk over MTP with the Zen Micro
# 2. if you manage installing XP on one of your devices (I have not tested with VM) and update the software up to version 1.11
# * then Creative Zen Micro is recognized on windows 7
# * never the less it can not get synchronized, and files stored on the device won't be available
# * creative zen explorer throws an error at the very end of the installation and is not able to find the executable
# 2022 - after update from 5.6 to 5.8.1 pihole stops resolving local DNS records
# dnsmasq throws a warning - Ignoring query from non-local network
# 1. make sure that your DNS has only one IP address
more /etc/dhcpcd.conf
more /etc/network/interfaces
# 2. your network interface may be statically configured or you may use dhcp,
# it does not matter, unless it's IP address is constant
@makeitcloudy
makeitcloudy / sslCertIpmiSupermicro.ps1
Created January 20, 2022 20:19
IPMI Self Signed Certificate Supermicro - old and newer firmware
#region IPMI 3.19
#pem certs and keys are accepted by older ipmi like 3.19 in x9srl-f
openssl req -x509 -newkey rsa:1024 -sha1 -days 1095 -nodes -keyout ipmiKey.pem -out ipmiCert.pem -subj "/CN=[FQDNipmi]" -addext "subjectAltName=DNS:[FQDNipmiAlternative],DNS:https://[FQDNipmi],IP:[ipmiIP]"
#this cert may be used for your java certificate
#ipmi in this version does not like passphrase within the certificates
openssl pkcs12 -export -nodes -out ipmi.p12 -inkey ipmiKey.pem -in ipmiCert.pem -passout pass:
#endregion
#region IPMI 3.48
openssl req -x509 -newkey rsa:2048 -sha256 -days 1095 -nodes -keyout ipmiKey.key -out ipmiCert.crt -subj "/CN=[FQDNipmi]" -addext "subjectAltName=DNS:[FQDNipmiAlternative],DNS:https://[FQDNipmi],IP:[ipmiIP]"