Shiny Hou kuops

People

`:bowtie:`	😄 `:smile:`	😆 `:laughing:`
😊 `:blush:`	😃 `:smiley:`	☺️ `:relaxed:`
😏 `:smirk:`	😍 `:heart_eyes:`	😘 `:kissing_heart:`
😚 `:kissing_closed_eyes:`	😳 `:flushed:`	😌 `:relieved:`
😆 `:satisfied:`	😁 `:grin:`	😉 `:wink:`
😜 `:stuck_out_tongue_winking_eye:`	😝 `:stuck_out_tongue_closed_eyes:`	😀 `:grinning:`
😗 `:kissing:`	😙 `:kissing_smiling_eyes:`	😛 `:stuck_out_tongue:`

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

Resize a Hard Disk for a Virtual Machine

Our Virtual Machines are provisioned using Vagrant from a Linux base box to run using VirutalBox. If the Hard Disk space runs out and you cannot remove files to free-up space, you can resize the Hard Disk using some VirtualBox and Linux commands.

Some assumptions

The following steps assume you've got a set-up like mine, where:

	## Place this file in "/etc/sysctl.d/network-tuning.conf" and
	## run "sysctl -p" to have the kernel pick the new settings up

	# Avoid a smurf attack
	net.ipv4.icmp_echo_ignore_broadcasts = 1

	# Turn on protection for bad icmp error messages
	net.ipv4.icmp_ignore_bogus_error_responses = 1

	# Turn on syncookies for SYN flood attack protection

	#
	# Acts as a nginx HTTPS proxy server
	# enabling CORS only to domains matched by regex
	# /https?://.*\.mckinsey\.com(:[0-9]+)?)/
	#
	# Based on:
	# * http://blog.themillhousegroup.com/2013/05/nginx-as-cors-enabled-https-proxy.html
	# * http://enable-cors.org/server_nginx.html
	#
	server {

	import (
	"crypto/md5"
	"encoding/hex"
	)

	func GetMD5Hash(text string) string {
	hasher := md5.New()
	hasher.Write([]byte(text))
	return hex.EncodeToString(hasher.Sum(nil))
	}

	MIT License

	Copyright (c) 2014 Piotr Kuczynski

	Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

	The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

	THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWAR

	### Last tested February 7 2014 on a Galaxy S3 (d2att) running Cyanogenmod 11 nightly, with Google Authenticator 2.49.

	### Device with Google Authenticator must have root.
	### Computer requires Android Developer Tools and SQLite 3.

	### Connect your device in USB debugging mode.

	$ cd /tmp
	$ adb root
	$ adb pull /data/data/com.google.android.apps.authenticator2/databases/databases

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

	<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define">
	<html>
	<head>
	<title>${project.name}</title>
	<style>
	body table, td, th, p, h1, h2 {
	margin:0;
	font:normal normal
	100% Georgia, Serif;
	background-color: #ffffff;