For excessively paranoid client authentication.
Organization & Common Name: Some human identifier for this server CA.
openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt
#!/bin/python | |
# | |
# Copyright 2016 Flavio Garcia | |
# | |
# Licensed under the Apache License, Version 2.0 (the "License"); | |
# you may not use this file except in compliance with the License. | |
# You may obtain a copy of the License at | |
# | |
# http://www.apache.org/licenses/LICENSE-2.0 | |
# |
function getSignature() { | |
//pretty basic function for testing | |
if ( startupChecks()) { return; } | |
var email = SpreadsheetApp.getActiveSpreadsheet().getActiveCell().getValue().toString(); | |
if ( email === "" ) { | |
Browser.msgBox("No email selected", "Please select a cell containing a user's email" , Browser.Buttons.OK); | |
return; | |
} | |
var result = authorisedUrlFetch(email, {}); | |
Browser.msgBox(result.getContentText()); |
# python 2.7 | |
""" Read data from a spreadsheet to construct an HTML signature, and update users. | |
This is enough code to get you going. | |
You have a service account via a project setup on the Google Developer console. | |
Download the key in json format. | |
Next you need to go to the domain's Google admin to enable the correct google API. | |
The scope is API_scopes =['https://apps-apis.google.com/a/feeds/emailsettings/2.0/'] | |
In more detail: | |
1. Follow the oauth2 notes to make a service account and download a JSON private key as usual. You do that on the developer console. The service account is not linked to any domain, it is just a credential. |
For excessively paranoid client authentication.
Organization & Common Name: Some human identifier for this server CA.
openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt
{ | |
"_meta": { | |
"hostvars": { | |
"reddit-app": { | |
"ansible_ssh_host": "104.155.51.167", | |
"gce_description": null, | |
"gce_id": "6094057286689219920", | |
"gce_image": "reddit-app-base-20180709-095917", | |
"gce_machine_type": "g1-small", | |
"gce_metadata": { |
from __future__ import print_function | |
from googleapiclient.discovery import build | |
from httplib2 import Http | |
from oauth2client import file, client, tools | |
from oauth2client.service_account import ServiceAccountCredentials | |
from googleapiclient.discovery import build | |
import os | |
# If modifying these scopes, delete the file token.json. | |
SCOPES = 'https://www.googleapis.com/auth/drive.metadata.readonly' |
server { | |
ssl_session_timeout 10m; | |
ssl_certificate {{ path_to_crt }}; | |
ssl_session_cache shared:SSL:10m; | |
server_name {{ hostname }}; | |
ssl_certificate_key {{ path_to_key }}; | |
client_max_body_size 1024m; | |
ssl on; | |
listen 443; |