2,015 reputation
627
bio website blog.g3rt.nl
location Delft, Netherlands
age 27
visits member for 2 years, 6 months
seen Mar 25 at 10:04

FOSS enthousiast, Computer Science student, Debian GNU/Linux (and Ubuntu) user, DevOp with Pupppet powers, Coding in C/C++/Python.

Keywords: Linux, KVM/Libvirt, Puppet, LaTeX, C++, C, Python, Debian, Ubuntu, Apache, Zarafa, Postfix, MySQL, security, KDE, SSL.

Every now and then I'll write an article on those topics my blog.


Other sites I'm active on: Launchpad, Tweakers.net, Twitter, LinkedIn, Google+


Feb
25
awarded  Revival
Feb
22
comment In OpenVPN, what's the risk of omitting the key-direction when using tls-auth?
If I understand it correctly, without having the tls-auth key, a man-in-the-middle attacker won't be able to replay it anyway, right? (and it just poses an additional layer of protection in replaying packets for a given direction.)
Feb
22
accepted In OpenVPN, what's the risk of omitting the key-direction when using tls-auth?
Feb
21
asked In OpenVPN, what's the risk of omitting the key-direction when using tls-auth?
Feb
12
awarded  Good Answer
Jan
20
awarded  Notable Question
Jan
19
comment Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
Your answer is totally valid --thanks! I missed the point of the 'secure' policy, specifically regarding the nexthop meaning. However, the tls_append_default_CA configuration option together with a smtp_tls_CAfile = /path/to/myca.crt appears not to work in Debian at all. I had to supply smtp_tls_CApath = /etc/ssl/certs for system-wide CA certificates to be included.
Jan
19
accepted Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
Jan
19
comment Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
'In other words postfix will use next-hop obtained from internal table like transport table.' Ah, that's probably a wrong assumption by me that could be the cause. Will test and report back later today.
Jan
19
awarded  Curious
Jan
18
revised Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
added 4599 characters in body
Jan
18
revised Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
added 1125 characters in body
Jan
18
revised Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
added 159 characters in body
Jan
18
asked Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
Jan
14
comment Postfix selectively enforce TLS
From the Postfix documentation on smtpd_enforce_tls: 'With Postfix 2.3 and later use smtpd_tls_security_level instead.' So I guess you can just leave it out. :-)
Dec
18
revised KVM and Libvirt - How do I hotplug a new virtio disk?
use numbered steps, rewrote for better legibility
Dec
17
awarded  Popular Question
Nov
24
awarded  Caucus
Sep
30
awarded  Explainer
Sep
19
awarded  Popular Question