161 reputation
4
bio website calrion.net
location Brisbane, Australia
age
visits member for 2 years, 8 months
seen Jun 2 at 4:16

Apr
29
awarded  Caucus
Oct
26
comment What are the best proxy servers for Mikrotik router?
The masquerade action is a MikroTik-specific option designed for convenience (it automatically selects the public IP); you can use the src-nat action to do the same thing, but you'll need to manually specify the public IP.
Oct
24
answered What are the best proxy servers for Mikrotik router?
Oct
17
comment how to simulate a file under linux?
Perhaps this StackOverflow question might help?
Oct
17
answered Achieving fast boot, encryption, and battery health on a Mac portable
Oct
17
answered How can i embed my openssl certificate in firefox?
Oct
17
comment Digital ID for internal communication
Despite my answer, I'd really suggest looking into establishing your own internal CA—even for only three or four users. Firstly, you'll only need to install one certificate on all machines, instead of three or four; secondly, three or four easily becomes eight or ten in six month's time and a solution like this can easily get out of hand. Having a CA also lets you revoke certificates when people leave, lose their key, etc.
Oct
17
answered Digital ID for internal communication
Oct
16
comment How to properly setup openssl CA to generate ssl client certificates
I've taken my best stab at an answer below, but if you can include a copy of the output from openssl x509 -text -nameopt multiline -certopt no_sigdump -certopt no_pubkey -noout -in one_of_your_client_certificates.pem and the extensions section from your openssl.cnf file, I'll see if I can provide more specific advice.
Oct
16
answered How to properly setup openssl CA to generate ssl client certificates
Oct
14
awarded  Teacher
Oct
14
awarded  Editor
Oct
14
revised Signature Verification using OpenSSL
Updated to show how to convert an ssh-style public key to a PEM-encoded public key.
Oct
14
answered Certificates signed by multiple CAs
Oct
14
comment Can self-signed SSL certificate be renewed? How?
@FriendFX Yes, that tutorial will only work for self-signed CA certificates. If you use the same key pair and subject, you can create multiple CA certificates that will each satisfy as a valid issuer for issued certificates; these certificates can even be issued by different parent CAs, which is called "cross-chaining".
Oct
14
answered Signature Verification using OpenSSL
Oct
14
answered How to use arrow keys when typing into openssl terminal on OS X?
Oct
14
answered What's a good database-backed X.509 certificate authority on Linux
Nov
1
awarded  Supporter