For educational reasons I've decided to create my own CA. Here is what I learned.
Lets get some context first.
| // ==UserScript== | |
| // @name RaumZeitDeponifier | |
| // @namespace http://gist.github.com/040c9009cfcb443d1d92 | |
| // @description Removes images from RZL blogposts which are likely to contain ponies | |
| // @include http://raumzeitlabor.de/ | |
| // @include http://raumzeitlabor.de/blog/* | |
| // @include https://raumzeitlabor.de/ | |
| // @include https://raumzeitlabor.de/blog/* | |
| // @version 2 | |
| // @grant none |
| #include "stdio.h" | |
| #include "stdlib.h" | |
| unsigned int max(unsigned int a, unsigned int b) { | |
| return a > b ? a : b; | |
| } | |
| unsigned int bucket(unsigned int val) { | |
| return val & 0xF0000000 >> 28; | |
| } |
| ##TCP FLAGS## | |
| Unskilled Attackers Pester Real Security Folks | |
| ============================================== | |
| TCPDUMP FLAGS | |
| Unskilled = URG = (Not Displayed in Flag Field, Displayed elsewhere) | |
| Attackers = ACK = (Not Displayed in Flag Field, Displayed elsewhere) | |
| Pester = PSH = [P] (Push Data) | |
| Real = RST = [R] (Reset Connection) | |
| Security = SYN = [S] (Start Connection) |
| #!/usr/bin/python2 | |
| # setup: pip install requests beautifulsoup4 | |
| from decimal import Decimal | |
| import requests | |
| from bs4 import BeautifulSoup | |
| import sys | |
| # Session setup |
| #!/bin/bash | |
| set -e | |
| # Deploy built site to this branch | |
| TARGET_BRANCH=master | |
| # Sync the contents of this directory where the site should have been built | |
| SOURCE_DIR=_site | |
| if [ ! -d "$SOURCE_DIR" ]; then | |
| echo "SOURCE_DIR ($SOURCE_DIR) does not exist, build the source directory before deploying" |
| --- | |
| ### | |
| # Elasticsearch Rolling restart using Ansible | |
| ### | |
| ## | |
| ## Why is this needed? | |
| ## | |
| # | |
| # Even if you use a serial setting to limit the number of nodes processed at one |
| I1217 19:23:11.844920 2201 state.cpp:33] Recovering state from '/tmp/mesos/meta' | |
| Incompatible slave info detected. | |
| ------------------------------------------------------------ | |
| Old slave info: | |
| hostname: "ip-10-46-210-228.ec2.internal" | |
| webui_hostname: "ip-10-46-210-228.ec2.internal" | |
| resources { | |
| name: "cpus" | |
| type: SCALAR | |
| scalar { |
| # to generate your dhparam.pem file, run in the terminal | |
| openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048 |