Pablo Castellano PabloCastellano

Client-side SSL

For excessively paranoid client authentication.

Updated Apr 5 2019:

because this is a gist from 2011 that people stumble into and maybe you should AES instead of 3DES in the year of our lord 2019.

some other notes:

Thumbnail sketch: Two-factor (Yubikey or Google Authenticator) protected wallets

Hardware:

Computer. Shared-secret authenticator (Yubikey/Google Authenticator/etc). Server (possibly shared with millions of other users).

Motivating use case setup:

User creates a split (2-of-2 multisig) wallet on the computer and server. Keys must be securely backed up to protect against loss. GUI to be determined, but there will be some type of "Use Authenticator" checkbox specified at setup.

Conventions:

Defining Eloquent model (will assume that DB table named is set as plural of class name and primary key named "id"):

class Shop extends Eloquent {}

Using custom table name

protected $table = 'my_shops';

Notes on my Raspberry Pi server config

This describes how I installed and configured my Raspberry Pi model B (512MB).

The Pi is mainly used as SSH jump host, IRC client, Git server, backup fileserver, etc. It doesn't need stellar performance, it just has to be cheap, low in power usage, and secure.

Raspbian on encrypted root

Modifying an Existing Docker Image

To install a custom package or modify an existing docker image we need to

run a docker a container from the image we wish to modify
modify the docker container
commit the changes to the container as a docker image
test changes made to image

1.) Running a docker container from an image

Install Go
Download Dgraph repo using go get
```
go get -u github.com/dgraph-io/dgraph
```
Go the tok package directory inside Dgraph's source.

	# create an index with some state (in this case, a mapping)
	curl -X POST localhost:9200/test-original -d '{"mappings":{"wine":{"properties":{"designation":{"type":"string"},"full_name":{"type":"string"},"winery":{"type":"string"},"style":{"index":"no","type":"string"},"vintage":{"index":"no","type":"string"},"restaurant_ids":{"index":"no","type":"string"},"appellation":{"type":"string"},"vineyard_name":{"type":"string"},"variety_id":{"index":"no","type":"string"},"country":{"type":"string"}}}}}'
	# => {"ok":true,"acknowledged":true}

	# verify the mapping
	curl localhost:9200/test-original/_mapping
	# => {"test-original":{"wine":{"properties":{"appellation":{"type":"string"},"country":{"type":"string"},"designation":{"type":"string"},"full_name":{"type":"string"},"restaurant_ids":{"type":"string","index":"no"},"style":{"type":"string","index":"no"},"variety_id":{"type":"string","index":"no"},"vineyard_name":{"type":"string"},"vintage":{"type":"string","index":"no"},"winery":{"type":"string"}}}}}

	# copy the inde

	# Initialize the scroll
	page = es.search(
	index = 'yourIndex',
	doc_type = 'yourType',
	scroll = '2m',
	search_type = 'scan',
	size = 1000,
	body = {
	# Your query's body
	})

	# Elasticsearch Cheatsheet - an overview of commonly used Elasticsearch API commands

	# cat paths
	/_cat/allocation
	/_cat/shards
	/_cat/shards/{index}
	/_cat/master
	/_cat/nodes
	/_cat/indices
	/_cat/indices/{index}