Advanced Search
Search Results
38 total results found
Windows
Test IP and port connection Test-NetConnection <IP> -port <port>
101
ee-test/GOV/70007446/hksos/ambulanceResourcesV2/v1 keskkond/asutuse-tüüp/reg-kood/alamsüsteem/teenuse-nimi/teenuse-ver
Attachment(s) / Manused
soapi manust pole kunagi salvestatud,ainult soap body, või rest body soap manus ei ela mitte kusagil seda ei salvestata, ja pole kunagi salvestatud. See on by design nii ,et soapi manusest jääb vaid hash signatuuri sees 🙂 kui turvik saadab sõnumi, siis võib ...
Errors
Server.ClientProxy.SslAuthenticationFailedService provider did not send correct authentication certificate Klient annab teada et teenuse turvikuga ei õnnestu handshake teha sest ei tule teenusepakkuja poolt auth serti Server.ServerProxy.ServiceFailed.HttpErr...
Force restore conf backup
X-Road 7 force restore conf backup Meant to be used on uninitialized ss and not in cluster From old ss - take conf backup - get UID from(UID is for ex. ee-dev/GOV/70009770/tehik_dev) cat /etc/xroad/gpghome/openpgp-revocs.d/<-SOME-NUMBERS->.rev | gre...
Increasing open files limit
Increasing xroad-proxy open file limits w/o host restart (temporary solution) prlimit --pid <xroad-proxy-PID> --nofile=10000:30000 Increasing xroad-proxy open file limits su - xroad prlimit --pid <xroad-proxy-PID> /etc/security/limits.conf xroad so...
Links
X-tee kataloog - https://x-tee.ee/catalogue Info - https://abi.ria.ee NIIS Github - https://github.com/nordic-institute/X-Road RIA Github X-Road scripts - https://github.com/ria-ee/X-Road-scripts Päringuid testimiseks - https://abi.ria.ee/xtee/et/turvaserv...
Messagelog Database info
https://moodle.ria.ee/mod/page/view.php?id=694 psql -h 127.0.0.1 -U messagelog <password from /etc/xroad/db.properties> Kui palju kirjeid on tabelis select count( *) from logrecord; Milline on kõige vanem sõnumilogi kirje baasis select to_timestamp(min( t...
MISP2
If base package is upgraded, port 8080 conf will be defaulted Uncomment port 8080 in /var/lib/tomcat8/conf/server.xml Remote database upgrade psql -h <database-ip> -p <database-port> -U postgres -d misp2db -f insert_xslt.sql When was MISP2 upgraded to newe...
Op-mon to use one IP and daemon within a cluster
1) make sure, slave nodes -> master node can connect over port 2080 2) on master node, add to /etc/xroad/conf.d/local.ini [op-monitor] host = <master-internal-IP> 3) on master node service xroad-proxy restart 4) on slave nodes service xroad-proxy re...
REST examples
listMethods curl -X GET -H "accept: application/json" -H "X-Road-Client: ee-dev/GOV/70008799/pohak" "http://10.0.13.90/r1/ee-dev/GOV/70008799/pohak/listMethods" | json_pp HTTPS with cert and key curl --cert nextcloud.bgp.12.berylia.org_cert.crt --key nextc...
rm -rf
apt purge --remove -y xroad-addon-hwtokens xroad-addon-messagelog xroad-addon-metaservices xroad-addon-opmonitoring xroad-addon-proxymonitor xroad-addon-wsdlvalidator xroad-base xroad-confclient xroad-database-local xroad-monitor ...
Testpäring
<?xml version="1.0" encoding="utf-8"?> <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xroad="http://x-road.eu/xsd/xroad.xsd" xmlns:id="http://x-road.eu/xsd/identifiers"> <SOAP-ENV:Header> ...
Timeouts
client-httpclient-timeout default=0The maximum time (SO_TIMEOUT, in milliseconds) that connections from a service consuming security server to a service providing security server are allowed to wait for a response before the consumer end httpclient gives up. V...
Tips & Tricks
When was xroad-securityserver package last upgraded ls -t /var/log/dpkg* | xargs zgrep "upgrade xroad-securityserver" Editing keyconf On master node, stop xroad-signer process Edit keyconf On master node, start xroad-signer process Restart xr...
Upgrade procedure
https://www.x-tee.ee/docs/live/xroad/ig-xlb_x-road_external_load_balancer_installation_guide.html#72-online-rolling-upgrade Enable maintenance mode(run from security server) curl http://localhost:5566/maintenance?targetState=true Watch connections and wait ...
WSDL validator
From Security Server CLI /usr/share/xroad/wsdlvalidator/bin/wsdlvalidator_wrapper.sh tam6.wsdl /usr/share/xroad/wsdlvalidator/bin/wsdlvalidator_wrapper.sh http://10.13.24.14/adapter/tam6.wsdl Security Server uses Apache CXF wsdlvalidator https://github.com...
X-tee kataloog
Viga OpenAPI kirjelduse laadimisel või töötlemisel Kontrollida üle "content-type HTTP header". Peaks vastama openapi kirjelduse formaadile, kas siis json või yaml, nt “application/json” või “application/yaml” Kataloogi uuendatakse iga 1h tagant