Donny odg0318

Moved to git repository: https://github.com/denji/golang-tls

Generate private key (.key)

# Key considerations for algorithm "RSA" ≥ 2048-bit
openssl genrsa -out server.key 2048

# Key considerations for algorithm "ECDSA" ≥ secp384r1
# List ECDSA the supported curves (openssl ecparam -list_curves)

Working with ansible-vault

I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.

What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.

Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

	#!/bin/bash

	if [ $# -ne 3 ]; then
	echo "usage: $0 <unix socket file> <host> <listen port>"
	exit
	fi

	SOCK=$1
	HOST=$2
	PORT=$3

	package main

	import (
	"bytes"
	"compress/gzip"
	"crypto/tls"
	"crypto/x509"
	"encoding/pem"
	"io/ioutil"
	"log"

	#!/bin/bash
	#
	BASE=/tmp
	PID=$BASE/app.pid
	LOG=$BASE/app.log
	ERROR=$BASE/app-error.log

	PORT=11211
	LISTEN_IP='0.0.0.0'
	MEM_SIZE=4