Forward SSH logs from AWS EC2 instance to AWS CloudWatch Logs for external party to access

Scenario: A third party security agency hired by your boss or client wishes to monitor the SSH logs on the bastion host of your application. The bastion host is setup on an AWS EC2 instance. Instead of giving direct access to the bastion host for pulling the SSH logs in /var/log/auth.log, we can forward the …

Renewing SSL certificate on Apache Solr server

References: Enabling SSL for Solr Taking Solr to Production Steps: SSH into the server. Upload the private key for the renewed SSL certificate as well as the updated certificate chain (just the primary certificate for the domain will not do), e.g. STAR_example_com.key and STAR_example_com_fullchain.pem. If you are unsure, check out my earlier article on Things …

Fixing Sectigo/Comodo SSL certificate expiry error on Ubuntu servers and Docker containers

Was alerted this morning to server applications failing due to an expired SSL certificate, with logs showing cURL errors. The weird thing was there was still half a month to go before the expiry date. Also, this problem does not affect browsers as the major browsers have already been updated. Importing the renewed SSL certificate …