Daniel Law iDanielLaw

PostgreSQL is Enough

Yubikey, Smart Cards, OpenSC and GnuPG are pain in the ass to get working. Those snippets here sould help alleviate pain.

Notes written here should work on

This is not a step by step guide

For excessively paranoid client authentication.

openssl x509 -in server.crt -out server.der -outform DER
openssl x509 -in server.der -inform DER -out server.pem -outform PEM

This is an example of Envoy TCP Proxy from localhost:10000 to www.google.com:80. See also https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/listeners/tcp_proxy.

To run a proxy:

% docker run --rm getenvoy/envoy:stable --version

	CREATE SEQUENCE public.global_id_seq;
	ALTER SEQUENCE public.global_id_seq OWNER TO postgres;

	CREATE OR REPLACE FUNCTION public.id_generator()
	RETURNS bigint
	LANGUAGE 'plpgsql'
	AS $BODY$
	DECLARE
	our_epoch bigint := 1314220021721;
	seq_id bigint;

	module RedisHelper
	# decode Redis value back to Ruby object
	def self.decode(json)
	self.new(ActiveSupport::JSON.decode(json)["#{self.name.downcase}"])
	end

	# encode Ruby object for Redis
	def encoded
	self.updated_at = nil
	self.to_json

	function construct(constructor, args) {
	function F() {
	return constructor.apply(this, args);
	}
	F.prototype = constructor.prototype;
	return new F();
	}
	// Sanboxer
	function sandboxcode(string, inject) {
	"use strict";

	# Requirements: pip install tweepy fuzzywuzzy python-Levenshtein
	import tweepy
	import re
	from fuzzywuzzy import fuzz

	# Credentials go here (generate at: https://apps.twitter.com)
	auth = tweepy.OAuthHandler('consumer_key', 'consumer_secret')
	auth.set_access_token('access_token', 'access_token_secret')

	# Connect to Twitter

	<?php // Simple PHP script to lookup for blacklisted IP against multiple DNSBLs at once. ?>
	<html>
	<head>
	<title>DNSBL Lookup Tool - IP Blacklist Check Script</title>
	</head>
	<body>
	<h2>IP Blacklist Check Script</h2>
	<form action="<?php echo $_SERVER['PHP_SELF'] ?>" method="post">
	<input type="text" value="" name="ip"/>
	<input type="submit" value="LOOKUP"/>

	var amqp = require('amqplib/callback_api');

	// if the connection is closed or fails to be established at all, we will reconnect
	var amqpConn = null;
	function start() {
	amqp.connect(process.env.CLOUDAMQP_URL + "?heartbeat=60", function(err, conn) {
	if (err) {
	console.error("[AMQP]", err.message);
	return setTimeout(start, 1000);
	}