ERROR: Cannot open directory /etc/openssl/certs.

A little google found this blog entry on the matter: http://andrzejl.no-ip.org:10101/wordpress/2011/11/11/solved-wget-https-error-cannot-open-directory-etcopensslcerts/
I didn't even have the folder /etc/openssl. So in stead I just did this:

cat ~/.wgetrc
ca-directory=/etc/ssl/certs/

Creating that wget rc file and putting in that variable solved it for my local user. Of course doesn't solve it for all users. I could perhaps create /etc/wgetrc but this is a single user machine anyway.

The fail2ban.conf file is the main file and doesn't need to be edited much normally. Setting the log level up higher here helps debugging.
The jail.conf file is where you do all your work. Here you definte a rule with brackets like so [apache]. Then we have key words. the one I had issue with was the filter setting. I thought the title, in the brackets is the name that linked to the regex file but it is in fact the filter option. So setting the filter to equal a name means you want to call that file (plus a .conf) from the filter.d/ dir. For example, "filer = apache" would mean this rule calls the filter.d/apache.conf file. The action setting sets what happens on a match. You can have many actions with each action on its own line. For example:

action   = hostsdeny[file=/etc/hosts.deny]
           iptables[name=sasl, port=smtp, protocol=tcp]
	   sendmail[name=Postfix, dest=me@email.com]

#!/bin/sh

### BEGIN INIT INFO
# Provides:             apcupsd
# Required-Start:       $syslog
# Required-Stop:        $syslog
# Should-Start:         $local_fs
# Should-Stop:          $local_fs
# Default-Start:        2 3 4 5
# Default-Stop:         0 1 6
# Short-Description:    Starts apcupsd daemon
# Description:          apcupsd provides UPS power management for APC products.
### END INIT INFO

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
DAEMON=/sbin/apcupsd
CONFIG=/etc/default/apcupsd
NAME=apcupsd
DESC="UPS power management"
PID=/var/run/apcupsd.pid
test -x $DAEMON || exit 0
test -e $CONFIG || exit 0

set -e

. $CONFIG

if [ $ISCONFIGURED = no ]
then
        echo "Please check your configuration ISCONFIGURED in /etc/default/apcupsd"
        exit 0
fi


case "$1" in
        start)
                echo -n "Starting $DESC: "

                rm -f /etc/apcupsd/powerfail

                if [ "$(pidof apcupsd)" == "" ]
                then
                        start-stop-daemon --start --quiet --make-pidfile --pidfile $PID --exec $DAEMON -- -f /etc/apcupsd/apcupsd.conf
                        echo "$NAME."
                else
                        echo ""
                        echo "A copy of the daemon is still running.  If you just stopped it,"
                        echo "please wait about 5 seconds for it to shut down."
                        exit 0
                fi
                ;;

        stop)
                echo -n "Stopping $DESC: "
                start-stop-daemon --stop --oknodo --pidfile $PID|| echo "Not Running."
                rm -f $PID
                echo "$NAME."
                ;;

        restart|force-reload)
                $0 stop
                sleep 10
                $0 start
                ;;

        status)
                $APCACCESS status
                ;;

        *)
                echo "Usage: $0 {start|stop|restart|force-reload}" >&2
                exit 1
                ;;
esac

exit 0

1. We setup passwordless ssh to the server. Do a search online with your favourite search engine as there is losts of tutorials already published for this.
2. On client side we run every 10mins

   FILE="DOMAIN-ip"
   curl  ifconfig.me/ip -o  "$FILE"  &>/dev/null
   scp  -q "$FILE" dward.name:
   exit 0
   

3. Setup the zone to accept updates by adding the following to your named.conf for bind9:

   allow-update { localhost;};

   Restart bind9
4. On the server side run hourly cronjob or anything to your hearts content:

   PHY="$(cat DOMAIN-ip)"
   TEMP="$(/bin/mktemp)"
   CMDS="$(/bin/mktemp)"
   CUR="$(host -t A DOMAIN localhost |grep DOMAIN|cut -d' ' -f4)"
   if [ ! "$CUR" == "$PHY" ]
   then
           TIME="$(date +%s)"
   	cat > $CMDS <<EOF
   	update delete DOMAIN A
   	update add DOMAIN 1800 A $PHY
   	send
   	EOF
   /usr/bin/nsupdate $CMDS
   rm -f $CMDS
   rm -f $TEMP
   fi
   

Edit anything there to your needs of course.
References: https://www.debian-administration.org/users/JulienV/weblog/4
http://www.shakabuku.org/writing/dyndns.html

I have to add this for people who have this issue but are unable to boot because of it (like I couldn't after a motherboard upgrade)
Its almost like a Windows issue with a motherboard swap causing the system to fail to boot.
To add to old-polack comments. I found that inspecting the initrd script inside the initrd there is reference to a UUID of the root partition. I found this odd ad my root partition resides on an LV.
So to resolve this (after many hours of online searching and reading and re-reading this thread)

1. Boot into a live environment similar to your PCLinuxOS. I used PClinuxOS minime 2010.
2. mkdir /mnt/root
3. mount /dev/mapper/main-slash (or /dev/sda2 or where ever your root partition is) /mnt/root.
4. mount -o bind /proc /mnt/root/proc
5. mount -o bind /sys /mnt/root/sys
6. mount -o bind /dev /mnt/root/dev
7. chroot /mnt/root
8. bootloader-config --action rebuild-initrds
9. Reboot

My idea was simple. Grab the default home page, store it, then at the next time interval grab it again and do an ms5sum comparison before the new page and the previous. Then I found wget has a Timestamp switch [-N Turn on time-stamping.] So using that, I came up with the below cron job command to check if a page has changed using the timestamp of modification.

01      *       *       *       *       cd /home/david/website_diffs/wsp && wget -N http://wspirates.com/ 2>&1 |grep -q "o newer" || printf "Wspirates web page appears to have updated.\n\nSuggest you check it out.\n\n"|mail -s "Pirates page updated." david@email.com

To break this down

We have a this run every hour. We have first created the folder /home/david/website_diffs/ and then create a folder in there for each web page. wsp in this example.

• We change to this folder.
• We grab the current page with wget with the -N switch on. This will check if a file of the same name in the working directory has the same or newer timestamp. If it does, it does not download it and prints a message saying "Server file no newer than local file `index.html' -- not retrieving." and a 0 exit status. The command here sends all of wget's output, both errors and standard output to the standard output stream so it can be piped over to grep.
• We grep silently for "o newer" which is a way to search for the message above. If we find this, meaning, the page it not newer, we end there.
• If we do not find this message and grep exits with a non-zero status, then the 'or' (||) control operator kicks in and we run the ensuing command.
• The final command simply emails someone about our discovery.

So quiet simple really. It doesn't work as well as Specto, as Specto allows for a percentage change option which is good for sites with advertising. This could possibly we done with using diff to compare the previously downloaded page and the new one [every hour or so] and work out a percentage of lines that have changed compared to the whole page. But this I did not need as all I want to know if it a page has been updated. I hope this is useful for someone.

]]>