A. Karl Kornel s personal blog
I work at a University that is a member of InCommon. One of the benefits of joining InCommon is getting access to an unlimited number of TLS (SSL) certificates (including EV, client, and code-signing certs). I recently decided that, instead Continue reading
Recently, I wanted to read about the NSA s Commercial National Security Algorithm (or CNSA) Suite, which is their replacement to the Suite B algorithms. The web site for the CNSA Suite is https://www.iad.gov/iad/programs/iad-initiatives/cnsa-suite.cfm, but if you go there now on a Mac, Continue reading
Hello! If you already know about the RoCA vulnerability, and you know what I did about it (or you don t care), then feel free to skip down to the good stuff! Signs of Trouble Monday morning, as I was on the Continue reading
As part of my job, I support various labs (and other users) on campus. My work includes hardware maintenance, system administration, and software development. One of the labs on campus (the Quake Lab) asked me to automate part of their DNA Continue reading
(This post is in beta) So, what all do I install, and why? The OpenSSH shipped in El Capitan is partially broken (GSSAPI Key Exchange doesn t work). So, we build our own, including GSSAPI authentication and GSSAPI Key Exchange. MacPorts Continue reading
Here s yet another thing that hit me at work today, and getting the answer involved annoying searching testing, so here it is for you! I use a Debian jessie workstation, and my SSH key lives on a Yubikey. We Continue reading
Over the last week, we ve been having a problem with spam in our shared web service: Something was sending out lots of low-quality, easily-blockable spam, and the bouncebacks were filling up the Postfix queues in our outgoing email cluster. The Continue reading
Quick note for me: How to use Net::SSH::Perl to have a remote SSH key sign something, and then verify that signature later. Maybe use this, with SSH agent forwarding, as a challenge-response method of saying Hey, end-user, are you still Continue reading
I m right now experiencing the joys of setting up a Perl development environment on Mac OS X 10.11 (El Capitan). I ve already talked about the weird linker warnings that appear when building Perl, and I ve just come across another fun Continue reading
Are you getting "object file was built for newer OSX version" warnings when building Perl on El Capitan? I talk about why it's happening, and how to fix it. Continue reading