Linux¶

29. decembra 2014
v Linux, Security
1 min čítanie

OpenSSL - verify OpenSSL certificate using your own CA

For more details see man x509

Print issuer hash of your OpenSSL certificate

echo '' | \
    openssl s_client  -connect ldap.hostname.sk:ldaps -status 2>/dev/null | \
    openssl x509 -noout -issuer_hash

13. septembra 2014
v Linux, Perl
1 min čítanie

sendxmpp release v1.24

New config file format is supported since sendxmpp version 1.24. Issue #9 - passwords with spaces not supported in .sendxmpprc. has been fixed. Example for Google Talk servers:

$ cat ~/.sendxmpprc
username: lubomir.host
jserver: talk.google.com
password: my-"secure-pass _word with sp@ce!
component: gmail.com

Please, don’t try the password above, I have changed them. :-)

12. mája 2014
v Debian, Linux, Security
1 min čítanie

Make cryptsetup ask the same password only once at boot

I bought a new hard drive. Because I protect all my harddisk with encryption, I setup LUKS for new harddrive too. But init scripts ask password for every encrypted partition and I want to enter my harddisk password only once. I have started with googling but I wasn’t succesfull. I have found this thread about the same problem. But the author didn’t provide a patch, and the uploaded *.tar.gz archive is no longer available.

30. apríla 2014
v Linux, MySQL
2 min čítanie

Howto develop SQL procedures faster

Developer at work

If you are working on some SQL project, making SQL dump more readable is very useful. You need to optimize edit-import-try-fix-export loop, because you want develop your SQL procedures fast. Here are some tips how to accomplish this.

26. marca 2014
v Linux, Security
5 min čítanie

Shorewall - filtering IMAP/SMTP access to gmail.com domain

gmail-firewall-IMAP
Do you need to discover what IP netblocks are owned and operated by Google to perhaps add to your firewall ACLs? With dynamic zones available in Shorewall, you are able to define firewall rules and to filter network traffic based on the domain name. For example, you can permit IMAPS connection only to gmail.com domain. Problem is that Google cluster is very big and you are always connecting to different IP address. So you can’t define static rules for traffic filtering. Here is little HOWTO do this.