Blackdot.be

For work I was migrating an old undocumented reverse proxy configuration from 2.0 to 2.2. It contained some old perl scripts nobody understood and some strange bits here an there. Long story short I started from scratch. I ran into the usual problems like redirects and hyperlinks being broken if they use full self referencing […]

Here is a short tutorial on how to setup a multi stage authentication with an Apache HTTPd 2.4 server. The first stage will do a 2-way SSL encryption, so both server and client will need to present a certificate. The second stage will be password authentication, the username has to match the username in the […]

I previously mentioned rpmbuild. I wanted to write a little post on what it does and how useful it is. But I though it would be easier to just show you. So what is rpmbuild? It is a tool for building rpm packages based on a spec file. The resulting rpm should be close to […]

Here is a little trick to connect to a server that requires a SSL Client certificate when your client does not support it. To make it work your client must be able to use a proxy. We will use this proxy to rewrite certain servers to a reverse proxy that injects the client certificate. Lets […]

I recently came upon a IETF draft that was published a few weeks ago. 451 Unavailable For Legal Reasons This status code indicates that the server is subject to legal restrictions which prevent it servicing the request. Since such restrictions typically apply to all operators in a legal jurisdiction, the server in question may or […]

I found myself facing a strange issue while moving from my simple all-in-one VPS server to a more roomy Kimsufi 16G running ESXi 5.0. I only have one IPv4 address so I am using Sophos UTM 9’s Web Application Firewall to spread out some sites to different backend servers. This is working fine, I did […]