Quantcast
Channel: Karl's Notes
Browsing latest articles
Browse All 16 View Live

Weird object file warnings building Perl on OS X 10.11 El Capitan

I just recently got a Mac laptop with Mac OS X 10.11 (El Capitan) installed, and one of the things I do in a new system is install a local Perl environment using perlbrew.  It allows me to install and...

View Article


Developing on El Capitan? Need OpenSSL? Install MacPorts!

I’m right now experiencing the joys of setting up a Perl development environment on Mac OS X 10.11 (El Capitan).  I’ve already talked about the weird linker warnings that appear when building Perl, and...

View Article

Using Net::SSH::Perl to sign stuff in SSH agents

Quick note for me: How to use Net::SSH::Perl to have a remote SSH key sign something, and then verify that signature later. use Net::SSH::Perl::Key use Net::SSH::Perl::Agent $a =...

View Article

Identifying spammers in your shared web service (featuring Postfix, auditd,...

Over the last week, we’ve been having a problem with spam in our shared web service: Something was sending out lots of low-quality, easily-blockable spam, and the bouncebacks were filling up the...

View Article

Using an OpenPGP card/Yubikey with SSH authentication? Don’t forget about...

Here’s yet another thing that hit me at work today, and getting the answer involved annoying searching & testing, so here it is for you! I use a Debian jessie workstation, and my SSH key lives on a...

View Article


Karl’s Work Mac Setup

(This post is in beta) So, what all do I install, and why? The OpenSSH shipped in El Capitan is partially broken (GSSAPI Key Exchange doesn’t work).  So, we build our own, including GSSAPI...

View Article

Converting an Illumina workflow to a Singularity container

As part of my job, I support various labs (and other users) on campus.  My work includes hardware maintenance, system administration, and software development.  One of the labs on campus (the Quake...

View Article

Welp, there go my Git signatures

Hello!  If you already know about the RoCA vulnerability, and you know what I did about it (or you don’t care), then feel free to skip down to the good stuff! Signs of Trouble Monday morning, as I was...

View Article


Image may be NSFW.
Clik here to view.

Finding (and Trusting) the DoD Root CAs in macOS

Recently, I wanted to read about the NSA’s Commercial National Security Algorithm (or CNSA) Suite, which is their replacement to the Suite B algorithms.  The web site for the CNSA Suite is...

View Article


Getting an ECC Certificate from InCommon

I work at a University that is a member of InCommon.  One of the benefits of joining InCommon is getting access to an unlimited number of TLS (SSL) certificates (including EV, client, and code-signing...

View Article
Browsing latest articles
Browse All 16 View Live