48 reputation
5
bio website rocksolidsolutions.org
location
age
visits member for 1 year, 1 month
seen 14 hours ago

Nov
17
comment Apache 2.4 reload succeeds but restart fails when using SSL
I am seeing log messages from Apache, but as best I can tell there are no helpful errors or warnings in /var/log/syslog, /var/log/apache2/errors.log, or /var/log/apache2/secure.example.com/errors.log.
Nov
17
comment Apache 2.4 reload succeeds but restart fails when using SSL
Results are identical whether testing with one or several SSL listeners.
Nov
17
comment Apache 2.4 reload succeeds but restart fails when using SSL
The directives that trigger the restart failure are SSLCertificateChainFile , SSLCertificateFile, SSLCertificateKeyFile, SSLEngine.
Nov
17
asked Apache 2.4 reload succeeds but restart fails when using SSL
Oct
17
awarded  Editor
Oct
17
revised On Debian, how to audit installed packages against packages in a particular repository?
Updated `aptitude` command to use exact-match regular expressions.
Oct
5
revised Verify that an SSH command has not been embedded in a certificate?
edited tags
Oct
5
comment Verify that an SSH command has not been embedded in a certificate?
openssl x509 -in file -text -noout is for certificates and not for RSA keys.
Oct
5
comment Verify that an SSH command has not been embedded in a certificate?
openssl rsa -in file -text -noout shows modulus and exponents but not embedded commands.
Oct
5
comment Verify that an SSH command has not been embedded in a certificate?
ssh-keygen -lf shows a fingerprint but not embedded commands.
Oct
5
comment Verify that an SSH command has not been embedded in a certificate?
And if I understand properly, ssh-keygen -L is for certificates but not for RSA keys.
Oct
5
awarded  Commentator
Oct
5
comment Verify that an SSH command has not been embedded in a certificate?
OpenSSH_5.9p1 Debian-5ubuntu1.1, OpenSSL 1.0.1 14 Mar 2012 and OpenSSH_6.2p2 Debian-6~bpo70+1, OpenSSL 1.0.1e 11 Feb 2013
Oct
5
asked Verify that an SSH command has not been embedded in a certificate?
Oct
5
answered Setting Up Xen and Network Bridge on Debian 7
Oct
5
comment How to use `rsync` to securely push to a mirror?
Thanks, yes, absolutely, I'll be doing positive validation, in my case using Python argparse and os.path.commonprefix. I won't be using SSH_ORIGINAL_COMMAND to pass any sort of command, only the parameters for the command.
Oct
5
comment How to use `rsync` to securely push to a mirror?
On both counts, purpose is to increase security and to minimize potential for accidents.
Oct
5
comment How to use `rsync` to securely push to a mirror?
A recipe like the above would work in my particular situation but 84104's solution allows for destination-side validation and additional flexibility; no reason I can see not to choose that instead.
Oct
5
awarded  Teacher
Oct
5
accepted How to use `rsync` to securely push to a mirror?