Marcelo Gornstein marcelog

Client-side SSL

For excessively paranoid client authentication.

Updated Apr 5 2019:

because this is a gist from 2011 that people stumble into and maybe you should AES instead of 3DES in the year of our lord 2019.

some other notes:

If you prefer to watch video tutorials with live-coding, then check out this series I recorded with the same contents as in this article: Egghead.io - Introduction to Reactive Programming.

	Wess-MacBook-Pro:bin wfreeman$ cat test.cypher
	create (m {name:"m"});
	create (n {name:"n"});

	Wess-MacBook-Pro:bin wfreeman$ ./neo4j-shell -c < test.cypher
	Welcome to the Neo4j Shell! Enter 'help' for a list of commands
	NOTE: Remote Neo4j graph database service 'shell' at port 1337

	neo4j-sh (?)$ create (m {name:"m"});
	+-------------------+

	##################################################################
	# /etc/elasticsearch/elasticsearch.yml
	#
	# Base configuration for a write heavy cluster
	#

	# Cluster / Node Basics
	cluster.name: logng

	# Node can have abritrary attributes we can use for routing

	echo "clean index"
	curl -XDELETE 'http://localhost:9200/twitter?pretty' ; echo

	echo "PUT Tweet"
	curl -XPUT 'http://localhost:9200/twitter/tweet/1?ttl=1h&pretty' -d '
	{
	"created_at": "Mon May 13 19:59:27 +0000 2013"
	}
	' ; echo

	# install java
	apt-get install -y software-properties-common
	apt-add-repository -y ppa:webupd8team/java
	apt-get update
	apt-get install -y oracle-java8-installer

	# download latest android sdk
	# http://developer.android.com/sdk/index.html#Other
	cd /opt
	wget http://dl.google.com/android/android-sdk_r24.4.1-linux.tgz

	dash_id=xxxx
	api_key=xxx
	app_key=xxx

	# 1. export
	curl -X GET "https://app.datadoghq.com/api/v1/dash/${dash_id}?api_key=${api_key}&application_key=${app_key}" > dash.json

	# 2. edit dash.json
	move "graphs", "title", "description" up one level in the json hierarchy, from being beneath "dash" to being at the same level

	Originally from: http://erlang.org/pipermail/erlang-questions/2017-August/093170.html

	For a safe and fast Erlang SSL server, there's a few
	configuration values you might want by default:

	[{ciphers, CipherList}, % see below
	{honor_cipher_order, true}, % pick the server-defined order of ciphers
	{secure_renegotiate, true}, % prevent renegotiation hijacks
	{client_renegotiation, false}, % prevent clients DoSing w/ renegs
	{versions, ['tlsv1.2', 'tlsv1.1']}, % add tlsv1 if you must