VirtualTam's bookmarks

1. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
2. The Sunlight Certificate Transparency Log 2024-03-16

   tags: cryptography/certificate, cryptography/certificate-authority, data-structure/tree, data-structure/tree/merkle-tree, letsencrypt, programming/go

   [ permalink ]

   • Introducing Sunlight, a CT implementation built for scalability, ease of operation, and reduced cost
   • Transparent Logs for Skeptical Clients
   • C2SP/C2SP - Community Cryptography Specification Project
   • FiloSottile/sunlight
   • transparency-dev/serverless-log
3. Have I Been Pwned - Pwned Passwords 2024-02-28

   tags: programming/go, programming/python, programming/ruby, programming/rust, security/credentials, security/password

   [ permalink ]

   • HaveIBeenPwned/PwnedPasswordsDownloader
   • API Clients:
     • mattevans/pwned-passwords - Go API Client
     • lionheart/pwnedpasswords - Python API Client
     • philnash/pwned - Ruby API Client
     • wisespace-io/pwned-rs - Rust API Client
4. HAProxy - TLS Termination Setup 2023-07-24

   tags: cryptography/encryption, network/http, network/http-server/haproxy, network/reverse-proxy, network/transport-layer-security, security

   [ permalink ]

   • Traffic Routing - Rewrite Requests
   • Client IP Preservation - X-Forwarded-For
   • HAProxy & HTTP Strict Transport Security (HSTS)
   • Secure Cookies Using HAProxy Enterprise
5. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

   tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

   [ permalink ]

   • https://github.com/chromium/badssl.com
6. Postfix, iPhone, Apple Mail and the reject_unknown_helo_hostname parameter 2023-01-28

   tags: email/postfix, mobile/ios, network/dns

   [ permalink ]

   I'd get a better behaved mail client. — Hu on Gentoo Forums

   • http://www.postfix.org/postconf.5.html#reject_invalid_helo_hostname
   • https://serverfault.com/questions/575539/postfix-helo-command-rejected-host-not-found
   • https://serverfault.com/questions/527541/postfix-whitelist-host-for-specific-sender
   • https://serverfault.com/questions/922935/why-does-postfix-say-helo-command-rejected-host-not-found-when-dig-finds-the
   • https://discussions.apple.com/thread/3120175
   • https://forums.gentoo.org/viewtopic-p-8604630.html?sid=a666f84af3d663d43b4c72a5b82115c4
7. Server queries - Valve Developer Community 2022-01-16

   tags: game/steam, network/udp, programming/api

   [ permalink ]

   Client libraries:

   • https://github.com/rumblefrog/go-a2s
   • https://github.com/rumblefrog/a2s-rs/

   Example usage:

   • https://github.com/armsnyder/a2s-exporter
   • https://github.com/mbround18/valheim-docker/blob/main/src/odin/server/status/mod.rs
8. Dropbear SSH - a relatively small SSH server and client 2021-08-08

   tags: network/ssh, programming/c, security/authentication

   [ permalink ]

   • https://github.com/mkj/dropbear
   • https://www.cyberciti.biz/security/how-to-unlock-luks-using-dropbear-ssh-keys-remotely-in-linux/
   • Dropbear SSH closing connection when attempting to connect as non root user
9. vault-plugin-secrets-wireguard: Vault's plugin for managing server and dynamic client configurations 2021-01-31

   tags: network/vpn/wireguard, programming/go, vault

   [ permalink ]

   • https://www.youtube.com/watch?v=LcAquk-mMxY
10. IoT logging with MQTT, Fluentd / Fluent Bit and Loki 2020-08-15

    tags: embedded, fluentd, internet-of-things, network/mqtt, observability/grafana, observability/logging, observability/logging/grafana-loki

    [ permalink ]

    Open questions, potential solutions or workarounds:

    • Loki does not support out-of-order message ingestion
      • https://github.com/grafana/loki/issues/1544
      • https://github.com/project-hatohol/fluent-plugin-sort
    • There is not Java client for Loki
      • https://github.com/grafana/loki/issues/1158
      • https://grafana.com/docs/loki/latest/api/
      • https://github.com/grafana/loki/tree/master/cmd/fluent-bit
    • The Wiced MQTT queue might be limited depending on the volume of logs
      • https://iotexpert.com/2017/03/08/embedded-world-2017-wiced-wifi-mqtt-and-the-amazon-iot-cloud/
11. Building a BitTorrent client from the ground up in Go | Jesse Li 2020-01-08

    tags: distributed, programming/go, torrent

    [ permalink ]

    • https://github.com/veggiedefender/torrent-client/
12. prometheus-cpp: Prometheus Client Library for Modern C++ 2019-10-21

    tags: bazel, cmake, observability, observability/time-series/prometheus, programming/c, programming/c++

    [ permalink ]

    • https://jupp0r.github.io/prometheus-cpp/annotated.html
    • https://stackoverflow.com/questions/52883657/usage-guidelines-for-prometheus-c
    • https://slides.com/juppmuller/deck-17#/
13. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
14. FreeIPA Installation du serveur et de son réplica | Worteks 2019-07-25

    tags: kerberos, network/ldap, samba, security/authentication, security/authorization, user

    [ permalink ]

    • https://www.worteks.com/fr/2018/03/29/freeipa-part1/
    • https://www.worteks.com/fr/2018/04/16/freeipa-partie-2-clients-hbac-sudo-mots-de-passe/
    • https://www.worteks.com/fr/2018/05/07/freeipa-partie-3-haute-disponibilite-automount/
    • https://www.worteks.com/fr/2019/05/23/freeipa-partie-4-seconds-facteurs-dauthentification/
15. LanguageTool - Spell and Grammar Checker 2019-06-05

    tags: editor/vim, english, french, grammar, language, text, text/spellcheck, writing

    [ permalink ]

    • https://www.languagetool.org/dev
    • http://wiki.languagetool.org/http-server
    • https://github.com/languagetool-org/languagetool
    • https://github.com/dpelle/vim-LanguageTool
    • https://tblein.eu/~tblein/client/2012/languagetool-for-vim/
16. Insomnia REST Client 2019-04-01

    tags: network/http, postman, programming/api, programming/api/rest, programming/testing, request

    [ permalink ]

    • https://github.com/getinsomnia/insomnia
17. FreeRDP - a free implementation of the Remote Desktop Protocol (RDP) 2019-03-07

    tags: client, desktop, remote

    [ permalink ]

    • https://gitlab.com/Remmina/Remmina
18. Kurento - a WebRTC media server and a set of client APIs 2018-12-20

    tags: media, streaming, video

    [ permalink ]

    • https://github.com/Kurento/kurento-media-server
    • https://github.com/Kurento
19. DBCLI - Commandline Database Clients with Autocompletion and Syntax Highlighting 2018-12-05

    tags: command-line, database, database/mariadb, database/mysql, database/postgresql, database/sqlite, programming/python, terminal

    [ permalink ]

    • https://github.com/dbcli/litecli
    • https://www.mycli.net/
    • https://www.pgcli.com/
    • https://web-techno.net/mysql-command-line-tool-mycli/
20. OpenAPI Initiative 2018-11-21

    tags: client, documentation, network/http, programming/api, server, web

    [ permalink ]

    • https://github.com/OAI/OpenAPI-Specification
    • https://github.com/pyopenapi