You might have received a warning or error while connecting to our system when reaching the connection with HTTPS. We will cover a quick fix on outdated systems with a fix for this issue.

What is the reason for the SSL errors?

The error is caused due to the expired “DST Root CA X3 in your system”. This is mainly affected if you are using old versions of the (mainly Linux kernel versions, but not only limited to) without any updates for your root certificate chains.

On September 30th 2021, the issuer of this certificate LetsEncrypt has decided to expire the above certificate on the root chain. If your DevOps team haven’t followed any updates or made any changes to the system, the SSL root chains will reject the APIs accessing the service after this date.

This is affecting all the older versions of the system worldwide which hasn’t gone through any certificate update process, especially, Ubuntu 14.04 and Ubuntu 16.04.

The problem is not Let’s Encrypt having a bad or unsupported certificate chain. It’s broken software on the client end that’s applying the rules for validating certificate chains incorrectly. – a user noted on superuser

You can read more about the announcement from LetsEncrypt here.

How to fix this issue?

Ubuntu flavour

1. Run the following command to reconfigure ca-certificates. sudo dpkg-reconfigure ca-certificates
2. This will bring up a screen as below. Please press the yes button to continue to the next screen.
3. Navigate to the next screen, then using the arrow keys, scroll down to the line where it says “mozilla/DST_Root_CA_X3.crt“
4. Press the space key to deselect this, so the star icon near this will be removed. Please refer to the below image.
5. Then click ok by pressing the enter button, this will reconfigure your ca-certificate and remove the old one which is expired.

Other flavours

Please google fix for “DST_Root_CA_X3″ since this is affected on many older systems and you can easily find the fix for your OS. Some of the fixes are mentioned in these threads.

How can I prevent this in future?

Make sure that you are using the latest version of the software and follow the security patches if any suggested by your DevOps team.

The certificate expired message on postman

If you are using Postman to test our APIs, make sure that you are updated on the latest version.

They have already released a patch covering the old certificates as seen here.

The post SSL certificate expired | How to fix SSL certificate problem caused due to DST Root CA X3 Expiration appeared first on DataYuge.

Install sentry with docker

1. Swap Memory

We are considering a 1GB machine for the tutorial, however, it’s suggested to have at least 4GB machine so that memory issues won’t be popping up while installation.

SSH in to your machine.

We are adding a 4GB swap memory (since 1GB RAM can cause memory issues while installation). First, check if the system has configured any swap memory. You can skip this step if your machine has enough memory (At least 4GB)

sudo swapon –show

Then verify that there are no active swap utilized by the system by running,

free -h

Create a 4B swap using the following command.

sudo fallocate -l 4G /swapfile

Verify the allocation using the command.

ls -lh /swapfile

Now, apply the permissions to the swap file by running:

sudo chmod 600 /swapfile

Mark the file as swap by running the command:

sudo mkswap /swapfile

Now, enable the swap by running the command:

sudo swapon /swapfile

Rerun, the command to confirm that the swap is available.

free -h

2. Installing Docker

Now, let’s install docker into the machine. Set up the docker repository by running the following.

sudo apt-get update
sudo apt-get install apt-transport-https ca-certificates curl software-properties-common
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"

Once the repository has been set up, let install Docker CE

sudo apt-get update
sudo apt-get install docker-ce

Finish the docker setup by verifying the installation by running,

sudo docker run hello-world

3. Installing Sentry on-premise

Now, clone the sentry on-premise repo using the following command.

https://github.com/getsentry/onpremise.git

Then cd into the folder and create a file and copy-paste the contents in the below file. Make the necessary changes in the config section on the top of the file before you begin the installation. The system.url-prefix will be the URL where the sentry will be available after installation. (Note: You need to config domain accordingly on your webserver).

cd onpremise && sudo nano installer.sh

#!/usr/bin/env bash

echo "Applying config.yml values"

cat <<EOT > config.yml
auth.allow-registration: false #prevents public registration
beacon.anonymous: true
mail.backend: 'smtp' 
mail.from: "mail@yourdomain.com"
mail.host: "smtp.yourdomain.com"
mail.password: "password"
mail.port: 465
mail.use-tls: true
mail.username: "mail@yourdomain.com"
system.admin-email: "admin@yourdomain.com"
system.url-prefix: "https://sentry.yourdomain.com"
EOT
echo "Building Sentry onpremise"
make build

docker container stop sentry-cron sentry-worker sentry-web sentry-postgres sentry-redis
docker container rm sentry-cron sentry-worker sentry-web sentry-postgres sentry-redis

docker run \
  --detach \
  --name sentry-redis \
  redis:3.2-alpine

docker run \
  --detach \
  --name sentry-postgres \
  --env POSTGRES_PASSWORD='sentry' \
  --env POSTGRES_USER=sentry \
  -v /opt/docker/sentry/postgres:/var/lib/postgresql/data \
  postgres:latest

echo "Generating secret key"
docker run --rm sentry-onpremise config generate-secret-key > key
SENTRY_SECRET_KEY=$(cat key)

echo "Running migrations"
echo "This can take time based on memory usage"
docker run \
  --rm \
  -it \
  --link sentry-redis:redis \
  --link sentry-postgres:postgres \
  --env SENTRY_SECRET_KEY=${SENTRY_SECRET_KEY} \
  -v /opt/docker/sentry/sentry:/var/lib/sentry/files \
  sentry-onpremise \
  upgrade

echo "Installing plugins"
docker run \
  --rm \
  -it \
  --link sentry-redis:redis \
  --link sentry-postgres:postgres \
  --env SENTRY_SECRET_KEY=${SENTRY_SECRET_KEY} \
  -v /opt/docker/sentry/sentry:/var/lib/sentry/files \
  sentry-onpremise \
  pip install sentry-plugins

echo "Running service WEB"
docker run \
  --detach \
  --link sentry-redis:redis \
  --link sentry-postgres:postgres \
  --env SENTRY_SECRET_KEY=${SENTRY_SECRET_KEY} \
  --name sentry-web \
  --publish 9000:9000 \
  -v /opt/docker/sentry/sentry:/var/lib/sentry/files \
  sentry-onpremise \
  run web
sleep 15
echo "Running service WORKER"
docker run \
  --detach \
  --link sentry-redis:redis \
  --link sentry-postgres:postgres \
  --env SENTRY_SECRET_KEY=${SENTRY_SECRET_KEY} \
  --name sentry-worker \
  -v /opt/docker/sentry/sentry:/var/lib/sentry/files \
  sentry-onpremise \
  run worker
sleep 15
echo "Running service CRON"
docker run \
  --detach \
  --link sentry-redis:redis \
  --link sentry-postgres:postgres \
  --env SENTRY_SECRET_KEY=${SENTRY_SECRET_KEY} \
  --name sentry-cron \
  -v /opt/docker/sentry/sentry:/var/lib/sentry/files \
  sentry-onpremise \
  run cron

date
sleep 60
date
docker exec sentry-web sentry config set sentry:version-configured '9.1.0'

The above script is available on the internet and credit goes to the original author. The script will ask you to set up the default credentials during the process.  Please note that the whole process can take some time based on your server capacity. If the process exited, it means that your server doesn’t have the required memory to run the process, either increase the swap or consider upgrading to a better machine.

Once installed, you can navigate over to the following address and finish the final stages.

your_server_ip:9000

4. Setting up Nginx

Setting up Nginx to serve your custom domain.

Install Nginx by running the below command.

sudo apt-get update
sudo apt-get install nginx
sudo ufw allow 'Nginx HTTP'

If you now navigate to your server IP address, you will be seeing the Nginx welcome page.

Add a configuration for your site.

cd /etc/nginx/sites-available
sudo cp default sentry.yourdomain.com
sudo nano sentry.yourdomain.com

Then paste the contents. Note: This is a bare minimum installation, add the security measures if needed.

server {
   listen 80;
   server_name sentry.yourdomain.com;
   location / {
       proxy_pass         http://localhost:9000;
       proxy_redirect     off;
       proxy_set_header   Host              $host;
       proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header   X-Forwarded-Proto $scheme;
   }
}

Now, enable server blocks and restart nginx.

sudo ln -s /etc/nginx/sites-available/sentry.yourdomain.com /etc/nginx/sites-enabled/
sudo systemctl restart nginx

5. Add HTTPS using LetsEncrypt

Finally, we are adding HTTPS using Letsencrypt. Install certbot using the command.

sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install python-certbot-nginx

Once installed, generate a new HTTPS certificate using

sudo certbot –nginx -d sentry.yourdomain.com

Now, you can log in to sentry.yourdomain.com with the credentials you set up during the installation process; Now you have successfully set up sentry on-premise. If you liked our tutorial, you can read about our how-to article on Redis CSV import.

Let us know what you think about the tutorial in the comment box below.

The post Installing Sentry with Docker on Ubuntu (Self hosted) appeared first on DataYuge.

During the first quarter of 2018, India became the world’s fastest-growing market for mobile applications. Government is planning to develop 100 smart city projects, where IoT would play a vital role in the development of those cities.  The upcoming National Telecom Policy 2018 has envisaged attracting investments worth US$ 100 billion in the telecommunications sector by 2022.

Revenues are expected to grow to US$ 26.38 billion by 2020. The number of internet subscribers in the country is expected to double by 2021 to 829 million and overall IP traffic is expected to grow 4-fold at a CAGR of 30 per cent by 2021. Department of Telecommunication has launched ‘ Tarang Sanchar’ a web portal sharing information on mobile towers and EMF Emission Compliances. As of June 2018, BSNL is expected to launch its 5G services by 2020. Vodafone India and Idea Cellular have merged into ‘Vodafone Idea’ to become India’s largest telecom company, as of September 2018.

The post Growth of telecom sector in India appeared first on DataYuge.

To detect the mobile number, the free operator and circle finder API can be used. From that API, you can pass the data to the Operator Plans API with the mobile circle and operator. The data is been categorised into multiple sections which will give the latest operator plans. The Plan Finder API be integrated into website/app easily. It also supports the integration in any programming languages. This API comes handy to find the offer details for the operator wise and circle wise. You can use basic PHP knowledge to implement the API into any website. The API accepts multiple refining parameters. This can be used to refine the results and show more accurate data according to developer needs.

The API has 8+ various categories of data. This will help the developer to display the data accordingly on the website. The API once integrated fetches automatically, so no need to upgrade from your end. For more information on the recharge plans API can be found here.

The post Plan Finder API | Mobile Operator Plan Offer Finder API appeared first on DataYuge.

Operator Plans API – Supported Recharge Types

1. Top up
2. Full Talktime
3. Plan (Unlimited)
4. SMS
5. 2G Data
6. 3G Data
7. 4G Data
8. Local
9. STD
10. ISD
11. Roaming
12. Validity
13. Other

These values can be passed as ‘recharge_type’ parameter and sort the values accordingly. However, this parameter is not mandatory in the API, hence don’t pass the parameter and value to list all the possible recharge options available. The recharge plans API can be accessed here.

The post Operator Plans API appeared first on DataYuge.