timelordx

Gracefully Deprecating TLS 1.0

TL;DR: I explain how to detect TLS 1.0 connections and, by way of custom headers, warn the user about the coming change to more modern TLS versions.

Background
How you can prepare

Nginx
Apache
f5
HAProxy
IIS / .NET

These are my notes for connecting to a meraki client vpn from ubuntu 16.04. This configuration assumes you are using a psk for the ipsec auth.

Install the following packages:

apt-get install -y strongswan xl2tpd

Configure strong swan

How to configure Bash Completion on Mac for Docker and Docker-Compose

Copied from the official Docker-for-mac documentation (thanks Brett for the updated doc pointer):

Install shell completion

Docker Desktop for Mac comes with scripts to enable completion for the docker, docker-machine, and docker-compose commands. The completion scripts may be found inside Docker.app, in the Contents/Resources/etc/ directory and can be installed both in Bash and Zsh.

Bash

Bash has built-in support for completion To activate completion for Docker commands, these files need to be copied or symlinked to your bash_completion.d/ directory. For example, if you installed bash via Homebrew:

1. Copy m3u8 link

2. Run command

echo "Enter m3u8 link:";read link;echo "Enter output filename:";read filename;ffmpeg -i "$link" -bsf:a aac_adtstoasc -vcodec copy -c copy -crf 50 $filename.mp4

	## Configure bro to write JSON logs
	mkdir -p /opt/bro/share/bro/site/scripts
	sudo tee /opt/bro/share/bro/site/scripts/json-logs.bro << EOF
	@load tuning/json-logs

	redef LogAscii::json_timestamps = JSON::TS_ISO8601;
	redef LogAscii::use_json = T;
	EOF

	sudo tee -a /opt/bro/share/bro/site/local.bro << EOF

	//Now with less jquery
	//1) go to your my-list page, and scroll to the bottom to make sure it's all loaded:
	//http://www.netflix.com/browse/my-list

	//2) Next, paste this in your developer tools console and hit enter:
	[...document.querySelectorAll('.slider [aria-label]')].map(ele => ele.getAttribute('aria-label'))
	//or use this to copy the list to your clipboard:
	copy([...document.querySelectorAll('.slider [aria-label]')].map(ele => ele.getAttribute('aria-label')))

	# Encrypt STDIN and provide a password(prompt)
	echo "message" \| openssl enc -aes-256-cbc -a

	# Decrypt STDIN and provide a password(prompt)
	echo "encrypted" \| openssl enc -aes-256-cbc -a -d

	# https://goldmann.pl/blog/2014/07/30/running-docker-containers-as-systemd-services/

	[Unit]
	Description=MariaDB container
	Requires=docker.service
	After=docker.service

	[Service]
	User=php
	Restart=always

	#!/bin/bash
	#
	# description: Apache Tomcat init script
	# processname: tomcat
	# chkconfig: 234 20 80
	#
	#
	# Copyright (C) 2014 Miglen Evlogiev
	#
	# This program is free software: you can redistribute it and/or modify it under