Archive for January, 2009

Enable more locales in stock Debian installations

Tuesday, January 13th, 2009

If you wonder why $ php -r "setlocale(LC_TIME, 'de_DE.UTF-8'); echo strftime ('%A %e %B %Y', mktime (0, 0, 0, 12, 22, 1978));" gives you Freitag 22 Dezember 1978 on most systems like f.e. openSuSE and Ubuntu, but Friday 22 December 1978 on Debian, you need to remember that the Debian guys ...

Hint #746: How to preserve alternative names when signing certificate requests

Monday, January 12th, 2009

If you follow this guide to setup your own CA and your certificate requests contain subjectAltNames (i.e. to match multiple virtual hosts with the same certificate), don't forget to add copy_extensions = copy under the [ CA_default ] section of the default openssl.cnf file. Took me a while to realize... Happy signing!

Read encrypted emails via webmail?

Friday, January 9th, 2009

I was recently asked how to read encrypted emails securely in some untrusted environment via webmail. Imagine you're sitting on someone else' computer and absolutely need to check your inbox for this one encrypted email which contains a password without which you can't continue. Or you're in some internet cafe ...

Change svn:externals quickly

Monday, January 5th, 2009

If you've worked with external repository definitions and branches before, you probably know the problem: If you create a new branch off an existing one or merge one branch into another, subversion is not smart enough to update svn:externals definitions which point to the same repository, but rather keep them ...

SSL Verification with Qt and a custom CA certificate

Saturday, January 3rd, 2009

So I wanted to make my application updater for guitone SSL-aware the other day. The server setup was an easy job: Add the new domain (guitone.thomaskeller.biz) to cacert.org, create a new certificate request with the new SubjectAltName (and all the other, existing alternative names - a procedure where this script ...