83 reputation
27
bio website
location
age
visits member for 3 years, 3 months
seen Mar 19 at 23:53

Mar
7
comment ssh-agent forwarding and sudo to another user
I disagree with the statement that "This must NEVER EVER be done!" There are many cases where this risk is acceptable. For example, a small team where everyone has the same permissions and you trust all the other users. It should never be done without understanding the risks it involves. But once those risks are understood, there are times that risk is acceptable.
Dec
18
comment How useful is mounting /tmp noexec?
Installing nVidia CUDA 5.0 on Ubuntu 12.04 failed when /tmp was mounted with noexec.
Oct
1
awarded  Necromancer
Nov
28
awarded  Popular Question
Oct
26
awarded  Notable Question
Jun
23
comment curl can't verify cert using capath, but can with cacert option
@Sellers First, I no longer have access to the certs in the original question so I can't easily reproduce this. However, if I remember correctly the issue was not that curl couldn't use any intermediate cert. The issue was that curl couldn't use an intermediate cert that contained a copy of the root cert. That said, as I clarified in my later comment, it is possible that openssl was using my system-installed certs while curl was using only the specified certs. In short, I can't draw any firm conclusions about curl's ability to work with intermediate certs.
Apr
15
awarded  Teacher
Mar
21
answered ssh-agent forwarding and sudo to another user
Feb
23
awarded  Popular Question
Feb
15
awarded  Supporter
Jun
9
comment How to prevent GNU screen from expanding tabs into spaces?
I also get the same behavior in tmux. I wonder if this is a difficult problem to solve.
Jun
9
accepted How to prevent GNU screen from expanding tabs into spaces?
Jun
9
comment How to prevent GNU screen from expanding tabs into spaces?
It could be something to do with both gnome-terminal (I tried versions 2.30.2 and 3.0.1) and screen together, it can't be just gnome-terminal because it "works" when I don't use screen. Also when I use screen's copy mode (CRTL+A ESC), highlight the output (arrow keys, then SPACE, then arrow keys), and write out the output to the screen's temp file buffer, it sees it as spaces.
Jun
7
awarded  Student
Jun
7
asked How to prevent GNU screen from expanding tabs into spaces?
May
2
awarded  Commentator
May
2
comment curl can't verify cert using capath, but can with cacert option
I found a different root cert (one that was preinstalled on my system) and that seems to have addressed the issue. I wonder if openssl was using my system-installed certs in addition to the cert directory that I specified on the command line, while curl was using only the specified cert directory.
May
2
comment curl can't verify cert using capath, but can with cacert option
I don't know what was going on for this to work before, but now (even with a properly installed cert on the server and a proper intermediate cert) I'm still getting this exact same problem.
Apr
21
comment curl can't verify cert using capath, but can with cacert option
To further clarify, it seems that the server also did not have the intermediate certificate properly installed. Because it was a Verisign cert, I was able to use this tool to confirm that: knowledge.verisign.com/support/ssl-certificates-support/…
Apr
20
comment curl can't verify cert using capath, but can with cacert option
I found the answer. The intermediate certificate file also included a root certificate. (It had two -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- bits.) It seems that openssl, when used directly on the command line, can handle this. But curl (and some other programs which use openssl, I tried Ruby 1.9.2) can't. I removed this extra root certificate and curl works now too.