content linked to Misc
Working OCSP Stapling setup with free Wosign Certificate on Nginx
Chinese CA WoSign issues free multi-domain SSL certificates valid for 3 years. You can read some informations on how to get theses free certificates on https://www.ohling.org/blog/2015/02/wosign-free-2y-ssl-certificate.html.
FYI, I received my certificate around 1hour after submission :)
Awesome Weekly Newsletters !
Like the well known awesome-awesomeness repository on Github, below, you’ll find a list of Weekly (some are not so weekly ^^) newsletters.
How to change Cassandra compaction strategy on a production cluster
I’ll talk about changing Cassandra CompactionStrategy on a live production Cluster.
First of all, an extract of the Cassandra documentation :
HTTP alternative services and opportunistic encryption
HTTP Alternative services allow an origin’s resources to be authoritatively available at a separate network location, possibly accessed with a different protocol configuration.
Opportunistic Encryption (OE) provides unauthenticated encryption over TLS for data that would otherwise be carried via clear text. It allows a http:// connection to use secure resources.
Nginx - create a cache based on upstream response time
The problem : be able to cache a backend response if it took more than 5 seconds. If not, don’t cache it!
A good challenge from @florentsolt. He solves the problem with a nodejs reverse proxy behind nginx, but I prefer a pure nginx implementation ;)
Remote code execution through bash CVE-2014-6271
A new vulnerability has been discovered in bash, related to how environment variables are processed. You can read more on redhat security blog. This vulnerability can be used to execute remote code, even via ssh, if the remote shell is bash.
Mise en place de DKIM avec Postfix
Cette documentation décrit la mise en place de DKIM (DomainKeys Identified Mail), une norme d’authentification du nom de domaine de l’expéditeur d’un mail.
Use KDEConnect with android and Xfce
Update 14/06/2014 : kdeconnect is in community + typo
KdeConnect allow you to share notifications (sms, phone calls), files, clipboard and more things between your Android and your Linux desktop.
Playing with the new ownCloud share API
I use OwnCloud since v2, and really enjoy it, mainly since desktop clients are available. I can easily sync a file if I copy it in my ~/ownCloud/ directory (dropbox style) !
Mise en place d'un serveur mail - Postfix, Dspam et Dovecot
Update 14/01/14 : ajout de la liste complète des paquets nécessaires et correction de quelques typos. Thx @Puckel_ !
Share on Wallabag from Netvibes
Update 2014/30/01 : Poche is now Wallabag ! (see the blog for more informations). A WAAS (Wallabag As A Service) is available on Framabag :)
Setup de Mozilla Sync Server
Firefox sync est disponible depuis Firefox 4, et il est possible de l’installer en auto hébergement. Je m’en sers pour synchroniser firefox desktop avec celui de mon android. L’installation est relativement simple, surtout sur une Debian, il suffit de suivre la documentation de mozilla.
Setup de KVM/Libvirt sur une dedibox
Cet article explique le setup de KVM/Libvirt sur une dedibox de chez online.net, sur un serveur hôte en Debian Wheezy. Évidement, une bonne partie des infos sont valides pour n’importe quel hébergeur.
Use Irc Server-Time capabilities with znc and hexchat/weechat
Server time is a “new” capabilities for IRC protocol (based on work by ircv3 working group, see http://ircv3.atheme.org/ and http://ircv3.atheme.org/extensions/server-time-3.2 ).