TLS/PKIWTF is a CA?!?!

Posted on Sun 17 February 2019 in Encryption • Tagged with TLS, SSL, encryption, networking, pki, cryptography • 5 min read

For Ilya! Recently a conversation came up on a Slack I participate in about PKI, Certificate Authorities, mTLS, etc. and how they all fit together. Ilya had been poking around at some Kubernetes stuff and was seeking more information about how the PKI system was setup. Where the CA came from, how that applied elsewhere, etc. Some others jumped in and they all began to spew information around. And, while the vast majority of it was correct there were some miscommunications that led to bad (and wrong) statements. Not to mention there was such a flurry of typing going on that some wires got crossed. Seeking to clear it all up I wrote a long form response for him which I’ve cleaned up a bit for this post.

Continue reading

What the Grok!? - A Python script to convert grok epxressions to regex

Posted on Wed 17 August 2016 in Regex • Tagged with regex, grok, python, haproxy • 3 min read

I found myself needing to parse an HAProxy log file but was too lazy to write a proper regular expression by hand. I knew that Grok had HAProxy expressions so I wrote a tool to pull out the raw regular expression.

Continue reading

Serial Over LAN (SOL) - Java’s dead!

Posted on Wed 03 February 2016 in Linux • Tagged with ipmi, linux, java, sol, remote console, serial over lan • 2 min read

I’ve been a sysadmin and worked with sysadmins for years but we’ve always used the cruddy Java applet interfaces to the remote consoles. I started a new job recently and was fed up with it. So, I went about learning how to do Serial Ove LAN (SOL) using IPMI. Turns out, its super easy!

Continue reading

Capturing and filtering SIP/RTP data with tshark

Posted on Tue 04 August 2015 in Linux • Tagged with wireshark, tshark, SIP, VoIP, networking • 2 min read

Create a ring buffer of packet captures on a VoIP/SIP server.

Continue reading

Getting to the root of your Git

Posted on Sun 17 May 2015 in Dev Tools • Tagged with git, bash, util • 1 min read

How to quickly cd to the root of your git repository.

Continue reading

IP address associated with the default route

Posted on Sun 17 May 2015 in Linux • Tagged with hack, osx, linux, networking, ifconfig • 1 min read

Find the IP associated with the default route on Linux and Mac OSX.

Continue reading

When OSX shebang won’t use Bash 4 from brew

Posted on Sun 17 May 2015 in OSX • Tagged with osx, bash, ugly hack • 1 min read

What do you do when OSX decides to replace Bash4 with Bash3? Get creative!

Continue reading

Docker commands - the git way

Posted on Sat 16 May 2015 in Dev Tools • Tagged with docker, git • 1 min read

Wouldn’t it be nice if you could run docker compose instead of docker-compose? What about Docker Machine? You can!

Continue reading