avatar

> /dev/null 2>&1

ramblings of a sysadmin

OCSP Stapling on Apache

Excerpt from Remy van Elsts tutorial: OCSP stapling is an enhancement to the standard OCSP protocol that delivers OCSP responses from the server with the certificate, eliminating the need for relying parties (web users) to check OCSP responses with the issuing CA. This has the effect of reducing bandwidth, improving perceived site performance, and increasing security for everyone involved in establishing the secure session.

Auto generate Pelican blog from Dropbox

This is my notes for how to update my Pelican blog automaticlly when I write new posts. See Creating a blog based on Pelican for getting started with Pelican blog engine. A way to be able to blog from anywhere is to use Dropbox as repository for the your blog. Then let Pelican auto regenerate the blog on changes in the Dropbox folder.

How to get A+ on SSL Labs

This will show how to get A+ on SSL Server Test from Qualys SSL Labs.

reStructuredText cheat sheet

My cheat sheet for reStructuredText syntax with examples how it will look after parsing. reStructuredText is an alternative for Markedown.

Configuring OpenVPN server on RTN66U

The router firmware Tomato, see previous post RT-N66u with Tomato by Shibby firmware, can act as an OpenVPN server. Using open Wi-Fi access points can be very useful and necessary, but it is inherently insecure. Using the router as an OpenVPN server can increase your privacy and security when you are on the go.

Better entropy with haveged

Entropy is important for generating good encryption keys. Do you have a busy server relying on crypto, generating keys, you need lot of good entropy. Or if you have a disk less system you don’t get as much entropy from the kernel that you may wish. One way to get a lot of good entropy is to use haveged.

RT-N66u with Tomato by Shibby firmware

This is a part of my personal notes. Use this information at your own risk. If you are uncertain or don’t know what you are doing. Do not proceed. Asus RT-N66U is a Linux based wireless router. The stock firmware can be a bit limiting for the more advanced user. If you want better QoS, OpenVPN or just more control over the network I recommend installing Tomato by Shibby firmware.

Find duplicate files

Find all duplicate files in current and sub-directories with bash.

Remove unused kernels

Removes all but current kernel and headers. This is a note for personal use. Use at your own risk :)

Bash getopts example

This is a small example how to use getopts in bash. I wrote it down for my own sake, as my own cheatsheet :)