4,332 reputation
1347
bio website
location Poland
age 28
visits member for 3 years, 11 months
seen Aug 25 at 13:23

Jul
2
awarded  Curious
May
6
awarded  Popular Question
Feb
21
awarded  Notable Question
Feb
14
comment Which operating systems ship with StartCom_Certification_Authority.pem
@Jeron: See ssllabs.com/ssltest/analyze.html?d=opencpu.org and ssllabs.com/ssltest/analyze.html?d=demo.ocpu.io for detailed report. You are sending the CA certificate, that's wrong. You should send only intermediate CA certificates. Also, you have anon and export suites enabled.
Feb
14
accepted Blocking Team Viewer
Feb
11
comment What compatibility trade-offs do we need to make in order to use a hardened SSL config for Nginx?
ECDHE suites are allowed in SSLv3 and later. Suites that use SHA2 (SHA256 or SHA384) and suites that use GCM can't be used in TLSv1.1 and earlier
Feb
11
comment Remove specified OCSP responder from certificate
first: most (if not all) browsers don't request OCSP if the site does not have an Extended Validation certificate. Second: if you want to protect user's privacy, use ocsp stapling. Third: request for ocsp is harder to eavesdrop than the http request so for stuff like www OCSP privacy problems are rather overblown
Feb
11
comment Why issue a SSL certificate that expires in 2037?
@voretaq7 it's not (only) the problem with processing libraries, the problem is that the standard, well tested format for dates before 2038 is using UNIX epoch. If you want to set dates after it you need to use different date format, and it may not be supported by other/older libraries.
Feb
5
accepted How to deploy new CA certificate to Firefox installs
Feb
2
comment Diagnose hard lockup on Linux
@kkron: As I've said in the answer below serverfault.com/a/444748/55663 It was caused by a hardware problem, most probably the CPU or north bridge.
Jan
17
awarded  Notable Question
Dec
30
awarded  Notable Question
Nov
30
awarded  Notable Question
Sep
29
awarded  Yearling
Sep
3
awarded  Popular Question
Aug
13
comment find all end subdirectories in a tree
I'm not sure about NetApp, but it works over NFS between Linux boxes so I'd guess that yes.
Aug
12
comment find all end subdirectories in a tree
It will work on any UNIX filesystem, don't know how the vfat and ntfs-3g drivers emulate inode semantics.
Jul
19
comment Windows 2008: WinSXS directory growing uncontrollably, blocking server
this removes only pre sp1 files, not files from hotfixes that came later.
Jul
5
answered Efficient server configuration for imagemagick
Jun
27
revised Available disk space on Unix/Linux OS
add reference to lsblk tool