jongartman

Apr 15

[video]

Mar 06

“dict.copy() always returns a turd-free dictionary” — https://mail.python.org/pipermail/python-list/2000-March/048085.html

Feb 20

“he’s about to get gang banged on the code review” — colleague

nice modern primer for the out-of-date css developer (me)

Jan 31

You Might Not Need jQuery -

Jan 28

Debugging SSL traffic with ssldump and nginx

I have recently needed to inspect some SSL traffic to a server and it took me longer than 15 minutes to figure it out. I’ve documented what worked for me here.

Versions:

nginx-1.5.8
ssldump 0.9b3
OpenSSL 1.0.1e-fips 11 Feb 2013

Using a centos VM in EC2, have nginx installed with ssl module receiving traffic on port 443. This is the relevant changes to the conf that I had to make to get it to work:

ssl_ciphers                          MD5;
ssl_protocols                       SSLv3 TLSv1;
ssl_prefer_server_ciphers   on;

Notably I had to dumb down the ciphers nginx was allowed to use and specifically use one that I knew ssldump could decrypt (you can’t use any of the elliptical curve diffie hellman ciphers with ssldump, it just aint gonna work).

I then ran the ssldump command like so:

ssldump -a -A -H -d -k /opt/nginx/ssl/server.key port 443

I was able to see decrypted traffic coming and and continue debugging my problem. Yeehaw.

Jan 27

Python on Wheels

Jan 26

Tretflix | A Usenet Appliance

Jan 24

Python Packaging: Hate, hate, hate everywhere

Dec 21

Pope Francis Declares That "All Religions Are True"€ -

How the fuck did I miss this? Bravo pope, bravo.

Dec 18

Fucking Ubuntu

I use lots of VMs with Ubuntu. Periodically apt-get will fail due to the something like the following:

Temporary failure resolving 'br.archive.ubuntu.com'
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

So for some reason I have to go edit /etc/apt/sources.list and remove the bullshit from the archive paths. I forget this and have to do it every 3 months when Ubuntu releases another minor version.

Dec 11

[video]

Oct 18

Butter coffee

Today I had paleo-friendly coffee with grass-fed butter. I regret the decision.

Oct 03

If you’re reading about lxc, you don’t need clarification about what a pid is.

Sep 11

Really nice breakdown on vmstat