Daniel Durante durango

How to set up stress-free SSL on an OS X development machine

One of the best ways to reduce complexity (read: stress) in web development is to minimize the differences between your development and production environments. After being frustrated by attempts to unify the approach to SSL on my local machine and in production, I searched for a workflow that would make the protocol invisible to me between all environments.

Most workflows make the following compromises:

Use HTTPS in production but HTTP locally. This is annoying because it makes the environments inconsistent, and the protocol choices leak up into the stack. For example, your web application needs to understand the underlying protocol when using the secure flag for cookies. If you don't get this right, your HTTP development server won't be able to read the cookies it writes, or worse, your HTTPS production server could pass sensitive cookies over an insecure connection.
Use production SSL certificates locally. This is annoying

In a perfect world, where things are done well, not just quickly, I would expect to find the following when joining the company:

Documentation

Accurate / up-to-date systems architecture diagram
Accurate / up-to-date network diagram
Out-of-hours support plan
Incident management plan

A quick "how to" on what you need to do to both setup AND recover a single-server PostgreSQL database using WAL-E

WAL-E: https://github.com/wal-e/wal-e
Assuming Ubuntu 12.04 LTS ("Precise")
We'll be using S3. Make sure you have an IAM user with

Setup:

These packages:

In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:

http://techcrunch.com/2007/08/11/facebook-source-code-leaked/

It became a big deal:

http://www.techmeme.com/070812/p1#a070812p1

The two files are index.php (the homepage) and search.php (the search page)

sequelize/sequelize#895

	package main

	import (
	"net/http"
	"database/sql"
	"fmt"
	"log"
	"os"
	)

	#!/usr/bin/env ruby -w

	# brew-services(1) - Easily start and stop formulas via launchctl
	# ===============================================================
	#
	# ## SYNOPSIS
	#
	# [<sudo>] `brew services` `list`<br>
	# [<sudo>] `brew services` `restart` <formula><br>
	# [<sudo>] `brew services` `start` <formula> [<plist>]<br>

	## From a post on the ML, apropos this:
	## http://lowlatencyweb.wordpress.com/2012/03/20/500000-requestssec-modern-http-servers-are-fast.
	## For sysctl.conf

	net.ipv4.tcp_slow_start_after_idle = 0


	echo "2048 64512" > /proc/sys/net/ipv4/ip_local_port_range
	echo "1" > /proc/sys/net/ipv4/tcp_tw_recycle
	echo "1" > /proc/sys/net/ipv4/tcp_tw_reuse

	r := gin.Default()
	files, _ := filepath.Glob(fmt.Sprintf("%s/*.tmpl", TemplatePath))
	r.LoadHTMLFiles(files...)

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048