JP Mens @jpmens@mastodon.social

Internet of Doom https://hackaday.io/project/180182-hacking-an-ikea-trdfri-lamp-to-run-doom/details

ISC's post detailing what has been / is going on with BIND https://www.isc.org/blogs/bind-update-summer2021/ #dns

How to handle secrets on the command line https://smallstep.com/blog/command-line-secrets/

For the record, my indicating that Knot was not correctly using the SmartCard-HSM in https://jpmens.net/2021/06/04/using-a-smartcard-hsm-for-dnssec-with-bind/ was wrong. I got confused and mixed up drivers. I’ve amended the blogticle as well as the issue I opened at @KnotDNS #apologies

What happens when you register a domain name? https://www.afnic.fr/en/observatory-and-resources/expert-papers/what-happens-when-you-register-a-domain-name/ Nice writeup by Stéphane Bortzmeyer of AFNIC

A diagram to depict the DNSSEC chain of trust https://jpmens.net/2021/06/09/visualizing-the-dnssec-chain-of-trust/

Join @cstrotm on June 16 for ISC's next Practical BIND 9 Management webinar: Dynamic zones covering TSIG, updating ACLs with "grant," and catalog zones with a hands-on demo.

https://www.isc.org/blogs/bind-management-webinar-series-2021/

Mucking about with openssl.cnf on OpenBSD (6.9) and can't for the life of me get engine support configured in.

Until I notice (and then remember) it's not OpenSSL but LibreSSL.

# halt

Althttpd is a simple webserver that has run the https://sqlite.org/ website since 2004. Althttpd strives for simplicity, security, and low resource usage. https://sqlite.org/althttpd/doc/trunk/althttpd.md (src code: https://sqlite.org/althttpd/file?name=althttpd.c)

Minisign, by @jedisct1, is a dead simple tool to sign files and verify signatures; it is portable, lightweight, and uses Ed25519 public key signatures https://jedisct1.github.io/minisign/

OK, this amuses me: RFC 69

https://datatracker.ietf.org/doc/html/rfc69

Using a SmartCard HSM for DNSSEC with BIND, Knot DNS, and LDNS/NSD https://jpmens.net/2021/06/04/using-a-smartcard-hsm-for-dnssec-with-bind/

To the day nine years ago I wrote the first of several-to-come blogticles on the then radically new configuration management system called Ansible.
https://jpmens.net/2012/06/06/configuration-management-with-ansible/

Deep sigh.

Thank you, @mwlucas, for “TLS Mastery” which just arrived in time for the weekend. It’s been en-route for a while, and while several customs agents have may read it, there are no visible coffee stains on the book. https://www.tiltedwindmillpress.com/product/tls/

https://www.tiltedwindmillpress.com/product/tls/

with the blue colour being the ... wait for it! ... link ... to the DNSKEY in the child?

(no need for applause; just throw money)