IPIP tunneling in Linux (Ubuntu)
I think the increasingly low use of IPIP, i.e. IP-in-IP or IP-IP, tunneling these past few decades has resulted in very little documentation on how to set it up on Continue Reading…
Category: Linux
Blocking (multiple) user agents with nginx
Got some script kiddie bots annoying you, but they’re using long legit-looking user agents you can’t easily pattern match on without catching legit visitors? Try this:
Accessing pfSense-based CRL remotely
I have an OpenVPN instance operating on a pfSense firewall virtual machine. Within OpenVPN I’m using both radius-based two factor for authentication, and certificate-based auth in the client. Doing this Continue Reading…
Raspberry Pi Serial Controller to Pentair Pool
I recently had a power surge come through my Pentair IntelliTouch-based pool control system, destroying its control board, and unfortunately destroying the control module of my home automation system on Continue Reading…
Extracting the CA certificate from an Active Directory server
Need to get the CA certificate out of an Active Directory server for use with other systems? I had this need when trying to connect Atlassian Jira to an internal Continue Reading…
Display details of HSM-protected RSA keys
Recently had a need to demonstrate for an auditor that a given key encryption key in a Thales HSM environment was RSA and was 4096-bits. The correct command to do Continue Reading…
Replacing a failed Thales nShield Connect HSM
Recently had a Thales nShield Connect 6000 fail. Replacing them is fairly easy, but there are a large number of steps, so figured I’d write them out here in case Continue Reading…
Finding ‘unprintable’ characters in a file with vi
Recently had an issue where a series of XML files were refusing to import into a program due to invalid characters; invalid from the importing software’s perspective. I needed to Continue Reading…
How to drop all tables in a MySQL/MariaDB database via CLI
Every have a database you want to clear out in one shot so you don’t have to get into the MySQL command line interface and drop them one at a Continue Reading…
Generate strong SSH private keys
June 2019 update: altered the rounds from 96 to 192. After living with 96 for a couple years, the delay was no longer noticeable, so I moved to a higher Continue Reading…