Nigel Sheridan-Smith wtfiwtz

Why?

There is a long standing issue in Ruby where the net/http library by default does not check the validity of an SSL certificate during a TLS handshake. Rather than deal with the underlying problem (a missing certificate authority, a self-signed certificate, etc.) one tends to see bad hacks everywhere. This can lead to problems down the road.

From what I can see the OpenSSL library that Rails Installer delivers has no certificate authorities defined. So, let's go fetch some from the curl website. And since this is for ruby, why don't we download and install the file with a ruby script?

Installation

The Ruby Way! (Fun)

Using strace and lsof to debug blocked processes

You can use strace on a specific pid to figure out what a specific process is doing, e.g.:

strace -fp <pid>

You might see something like:

select(9, [3 5 8], [], [], {0, 999999}) = 0 (Timeout)

its isn't core to RSpec. One the of the focuses of RSpec is on the documentation aspects of tests. Unfortunately, its often leads to documentation output that is essentially lies. Consider this spec:

User = Struct.new(:name, :email)

describe User do
  subject { User.new("bob") }
  its(:name) { should == "bob" }
end

Gemfile:

group :development do
  gem 'rspec-rails'
  gem 'guard'
  gem 'guard-rspec'
end

group :test do

gem 'rspec'

	# blog post: http://blog.slashpoundbang.com/post/2613268281/changing-from-tz-database-identifiers-to-rails-friendly
	{
	"Australia/Adelaide" => "Adelaide",
	"Australia/Broken_Hill" => "Adelaide",
	"America/Anchorage" => "Alaska",
	"America/Juneau" => "Alaska",
	"America/Nome" => "Alaska",
	"America/Yakutat" => "Alaska",
	"Pacific/Gambier" => "Alaska",
	"Asia/Almaty" => "Almaty",

	#!/usr/bin/env python

	# with help and inspiration from
	# * ASN1_generate_nconf(3) (specifically the SubjectPublicKeyInfo structure)
	# * http://www.sysmic.org/dotclear/index.php?post/2010/03/24/Convert-keys-betweens-GnuPG%2C-OpenSsh-and-OpenSSL
	# * http://blog.oddbit.com/2011/05/converting-openssh-public-keys.html

	import sys
	import base64
	import struct

	-- show running queries (pre 9.2)
	SELECT procpid, age(clock_timestamp(), query_start), usename, current_query
	FROM pg_stat_activity
	WHERE current_query != '<IDLE>' AND current_query NOT ILIKE '%pg_stat_activity%'
	ORDER BY query_start desc;

	-- show running queries (9.2)
	SELECT pid, age(clock_timestamp(), query_start), usename, query
	FROM pg_stat_activity
	WHERE query != '<IDLE>' AND query NOT ILIKE '%pg_stat_activity%'

	import javax.net.ssl.SSLParameters;
	import javax.net.ssl.SSLSocket;
	import javax.net.ssl.SSLSocketFactory;
	import java.io.*;

	/** Establish a SSL connection to a host and port, writes a byte and
	* prints the response. See
	* http://confluence.atlassian.com/display/JIRA/Connecting+to+SSL+services
	*/
	public class SSLPoke {

	=begin
	This script requires a Ruby intepeter to run:
	http://rubyinstaller.org/

	This script also requires Microsoft Windows and Microsoft Word to be installed.

	A few libraries, used by this script:

	HTML Sanitizer:
	https://github.com/rgrove/sanitize/

	require "active_record"

	namespace :db do

	db_config = YAML::load(File.open('config/database.yml'))
	db_config_admin = db_config.merge({'database' => 'postgres', 'schema_search_path' => 'public'})

	desc "Create the database"
	task :create do
	ActiveRecord::Base.establish_connection(db_config_admin)