Category: tls

  • Signed NVIDIA drivers on Google Cloud Dataproc 2.2

    Hello folks, I’ve been working this year on better integrating NVIDIA hardware with the Google Cloud Dataproc product (Hadoop on Google Cloud) running the default cluster node image. We have an open bug[1] in the initialization-actions repo regarding creation failures upon enabling secure boot. This is because with secure boot, kernel driver code has its…

  • Some statistics from the router at the cabin

    sip0 is a GRE tunnel between the router and the colo box in Seattle, the payload of which is encapsulated as ipsec traffic before being transmitted over the Ubiquity equipment to the switch that the CenturyLink DSL modem attaches to. I don’t get centurylink easter eggs in my search results when I use this interface.…

  • Trip Report: UW signing-party

    Dear Debian Users, I met last night with a friend from many years ago and a number of students of cryptography. I was disappointed to see the prevalence of black hat, anti-government hackers at the event. I was hoping that civilized humanity had come to agree that using cryptography for deception, harm to others and…

  • OpenVPN configs with inline data

    I’ve been issuing a lot of x.509 certs and OpenVPN user configurations lately, and I came across something that has reduced the complexity quite a bit. It seems that OpenVPN configuration files can now include data inline. So rather than generating and distributing the following for each user: a configuration file a chain of CA…

  • I miss you. Please come back?

    … Creating var directory ‘/usr/src/git/debian/pkg-mariadb/builddir/mysql-test/var’… Checking supported features… MariaDB Version 5.5.32-MariaDB-1 Installing system database… – SSL connections supported Collecting tests… Using server port 42388 ============================================================================== TEST RESULT TIME (ms) or COMMENT ————————————————————————– worker[1] Using MTR_BUILD_THREAD 300, with reserved ports 16000..16019 oqgraph.basic [ skipped ] No OQGraph oqgraph.binlog [ skipped ] No OQGraph sphinx.sphinx [ skipped…

  • Filing to become a licensed CA

    —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA1 All Operative Personnel employed by Collier Technologies LLC, known here as the Certification Authority or CA, must also be licensed as notaries public by the local government where they reside during any act performed on behalf of the CA. In addition to passing the Washington State Operative Personnel Exam,…

  • spamassassin tls plugin

    Anybody got a tls plugin for spamassassin? Something that will check to see whether incoming mail is signed by a certificate known to and trusted by spamd?