Introduction on how to use shellcheck and bashate with Travis-CI

Introduction Some time ago i've written about test-driven development, or TDD, for shell scripts using shunit2 and Travis-CI. This time i want to show you how you can further enhance your shell script testing capabilities with two useful tools for static analysis and style checking. TL;DR For anyone who…

Remove Proxmox 4.2 “No Valid Subscription” message

If you're trying out Proxmox in your Homelab it is very annoying to see this "No valid Subscription" message unless you've purchased a subscription from Promox which i really recommend. You support them to keep up the development of Proxmox VE and have access to support and the enterprise repository.…

Configuring IPv6 with Sophos UTM 9 and KabelDeutschland

With almost every private customer contract from KabelDeutschland (KD) you'll get DS-Lite with a Carrier-grade IPv4 NAT and an IPv6 Prefix routed to your very own IPv6 Gateway - in most cases this is just your cable modem or router. I'am using a Sophos UTM - formerly known as Astaro…

gokeepasslib - Reading a Keepass 2 file with Go

One can certainly argue about the security of Keepass. I for one am currently using it to store my passwords, mainly because I do not necessarily trust any web service to handle my passwords. At least with Keepass I can make sure that my file only goes to places where…

The Go Challenge - a fun way to learn and improve

There are many ways to learn a language and to improve your skills in it. Some gophers came up with the Go Challenge, a coding contest in which you have to solve an exercise using Go and send in your solution. All solutions will be reviewed and the best can…

SSL/TLS: Certificate chain challenges

Update #1: I've updated the part "Get them into our webserver" by adding a link back to the first SSL/TLS Post where i describe how to correctly create the bundle files! In my last post i've described what you need to do with the new site and intermediate certificates…

SSL/TLS: FREAK vulnerability and a Nagios check for that!

TL;DR Today a new SSL/TLS vulnerability has been made public which uses the old EXPORT ciphers to drive MITM (Man-in-the-middle) Attacks. Detailed information? You can find much more detailed information about that vulnerability at Matthew D. Green's Blog and at Akamai. The check for all of you! I've…

SSL/TLS: How do i get HTTPS for my site with a valid certificate?

For me using SSL/TLS for websites or connections between servers and clients in general - think of PostgreSQL connections or OpenLDAP - is no rocket science and my daily business. But in the last months i read a lot of tweets and articles about that topic and talked to…

ActiveRecord database anonymization using views

When encountering problems in a production environment it is sometimes hard to recreate the issue locally or in a test system. Some issues are actually depending on very specific runtime conditions while others arise from the combination of entries in the database. Generating the right test data is not always…

VHost specific requests for load balanced services in Go

A couple of weeks ago I wrote about how to do VHost specific requests for load balanced services using Ethon. Our code base is written in Ruby so it was only natural to look for a solution that fits right in. To summarize the intention behind something like that: I…