Still some work to do for some of my sites:
–jeroen
[WayBack] Helft homepaginas van Nederlandse overheidswebsites gebruikt geen https – IT Pro – Nieuws – Tweakers
Archive for the ‘Communications Development’ Category
Helft homepaginas van Nederlandse overheidswebsites gebruikt geen https – IT Pro – Nieuws – Tweakers
Posted by jpluimers on 2017/12/15
Posted in Communications Development, Development, Encryption, https, Internet protocol suite, Power User, Security, TLS | Leave a Comment »
Some notes on having static-web site owners upload their content over SFTP
Posted by jpluimers on 2017/12/14
Yes, there are still static web-sites. A long time ago, they were uploaded over FTP. Now many use more secure protocols.
So here are some links and notes to allow this on a Linux based host running OpenSSH.
- [WayBack] SDB:SFTP server with Chroot – openSUSE
- [WayBack] OpenSSH/Server – Wikibooks, open books for an open world – The SFTP Server Subsystem
- [WayBack] OpenSSH/Cookbook/File Transfer with SFTP – Wikibooks, open books for an open world
- [WayBack] ssh – OpenSSH: Difference between internal-sftp and sftp-server – Server Fault
- [WayBack] How can I chroot sftp-only SSH users into their homes? – Ask Ubuntu
- “internal-sftp”
I got to the above via these two links:
- [WayBack] Allowing SFTP user to specific root directory only – Unix & Linux Stack Exchange
- [WayBack] [SOLVED] setting default folder location upon SFTP login
An alternative might be web-dave, but that would probably mean some hassle to separate uploading the site from accessing the site.
[Archive.is] How To Set Up WebDAV With Apache2 On OpenSUSE 12.2
–jeroen
Share this:
Posted in *nix, Communications Development, Development, Internet protocol suite, Linux, openSuSE, Power User, SSH, SuSE Linux, TCP | Leave a Comment »
XS4ALL has stopped providing ftp in the middle of 2017: now you can use sftp or sftp.
Posted by jpluimers on 2017/12/03
As of 20170711, the servername ftp.xs4all.nl does not support the ftp protocol any more; xs4all clients can only use the server sftp.xs4all.nl on port 22.
I missed that because I hardly use ftp except for the few rare occasions where I was in an environment without ftp.
So recently I found out: good move!
Since I still need this every now and then (but far less often than 10 years ago), I have set up a very small ftp server at home with limited storage and very limited users that I can turn on/off when needed.
Much better solution.
–jeroen
Source: [WayBack] XS4ALL gaat stoppen met ondersteuning van ftp – Security.NL
Share this:
Posted in Communications Development, Development, FTP, Internet protocol suite, Power User, TCP | Leave a Comment »
immediate “Too many authentication failures” – check your authentication methods
Posted by jpluimers on 2017/11/15
If you ever ssh into something and immediately get the immediate Too many authentication failures message, then you’ve probably mixed your authentication methods.
Follow the steps in [WayBack] ssh – Too many authentication failures for username – Super User (thanks [WayBack] John T and [WayBack] Ben West).
First check out whats wrong by slowly increasing the number of -v parameters to make output more verbose:
ssh -v
ssh -v -v
ssh -v -v -v
Then try to find out which authentication method fails: usually it’s a private key that’s wrong.
I’ve had success in various cases where I screwed up with these ssh parameters:
-o PubkeyAuthentication=no-i some_id_rsa -o IdentitiesOnly=yes
–jeroen
Share this:
Posted in *nix, Communications Development, Development, Internet protocol suite, Power User, Software Development, SSH, TCP | Leave a Comment »
TLS tests for your mail server
Posted by jpluimers on 2017/11/09
Need to do some more research on this to ensure I didn’t goof up:
- TLS Sender Test – TestSender.pl
- Part of bigger CheckTLS.com – TLS Tests and Tools
- [WayBack] What’s the best way to check if an SMTP server is SSL-enabled or not? – Server Fault
- [WayBack] security – How to inspect remote SMTP server’s TLS certificate? – Server Fault
–jeroen
Share this:
Posted in *nix, *nix-tools, Communications Development, Development, Internet protocol suite, postfix, Power User, Security, sendmail, SMTP | Leave a Comment »
(52) You Give REST a Bad Name – YouTube
Posted by jpluimers on 2017/11/02
(Usually the “state transfer” in Representational state transfer fails)
Video via +Kristian Köhntopp “Die 90er haben angerufen und wollen ihre Amiga Videos und ihre Corba Specs zurück haben.” (the 90s called wanting their Amiga Videos and Corba Specs back)
[WayBack] https://plus.google.com/+KristianK%C3%B6hntopp/posts/58D9BisX5Dj
–jeroen
Share this:
Posted in Communications Development, Development, Fun, HTTP, Internet protocol suite, REST, TCP | Leave a Comment »
IANA Service Name and Transport Protocol Port Number Registry
Posted by jpluimers on 2017/09/28
Cool! Search by port number, name, user or description straight from the source: IANA.org Service Name and Transport Protocol Port Number Registry
Share this:
Posted in Communications Development, Development, Internet protocol suite, Network-and-equipment, Power User, TCP | Leave a Comment »
Don’t Use Regular Expressions To Parse IP Addresses!
Posted by jpluimers on 2017/09/21
Interesting piece: Don’t Use Regular Expressions To Parse IP Addresses! [WayBack]
TL;DR:
- for IPv4, use inet_aton [WayBack] when available
- for IPv6, use getaddrinfo [WayBack] when available
- networking – Are IP addresses with and without leading zeroes the same? – Super User It depends! [WayBack]
When have neither then for quad-dotted decimal IPv4 addresses (ignoring for instance octals and grouped quads), this is suitable: regex – Regular expression to match DNS hostname or IP Address? – Stack Overflow [WayBack]
ValidIpAddressRegex = "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$";
Which explained looks like this:
https://regex101.com/r/Wyr2Zd/1
Regular expression:
/
^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$/ gExplanation:
^asserts position at start of the string
- 1st Capturing Group
(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}
{3}Quantifier — Matches exactly 3 times
A repeated capturing group will only capture the last iteration. Put a capturing group around the repeated group to capture all iterations or use a non-capturing group instead if you’re not interested in the data
- 2nd Capturing Group
([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])
- 1st Alternative
[0-9]
- Match a single character present in the list below
[0-9]
0-9a single character in the range between 0 (ASCII 48) and 9 (ASCII 57) (case sensitive)- 2nd Alternative
[1-9][0-9]
- Match a single character present in the list below
[1-9]
1-9a single character in the range between 1 (ASCII 49) and 9 (ASCII 57) (case sensitive)- Match a single character present in the list below
[0-9]
0-9a single character in the range between 0 (ASCII 48) and 9 (ASCII 57) (case sensitive)- 3rd Alternative
1[0-9]{2}
1matches the character 1 literally (case sensitive)- Match a single character present in the list below
[0-9]{2}
{2}Quantifier — Matches exactly 2 times
0-9a single character in the range between 0 (ASCII 48) and 9 (ASCII 57) (case sensitive)- 4th Alternative
2[0-4][0-9]
- 2 matches the character 2 literally (case sensitive)
- Match a single character present in the list below
[0-4]
0-4a single character in the range between 0 (ASCII 48) and 4 (ASCII 52) (case sensitive)- Match a single character present in the list below
[0-9]
0-9a single character in the range between 0 (ASCII 48) and 9 (ASCII 57) (case sensitive)- 5th Alternative
25[0-5]
25matches the characters 25 literally (case sensitive)- Match a single character present in the list below
[0-5]
0-5a single character in the range between 0 (ASCII 48) and 5 (ASCII 53) (case sensitive)\.matches the character . literally (case sensitive)- 3rd Capturing Group
([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])
- 1st Alternative
[0-9]
- Match a single character present in the list below
[0-9]
0-9 a single character in the range between 0 (ASCII 48) and 9 (ASCII 57) (case sensitive)- 2nd Alternative
[1-9][0-9]
- Match a single character present in the list below
[1-9]
1-9a single character in the range between 1 (ASCII 49) and 9 (ASCII 57) (case sensitive)- Match a single character present in the list below
[0-9]
0-9a single character in the range between 0 (ASCII 48) and 9 (ASCII 57) (case sensitive)- 3rd Alternative
1[0-9]{2}
1matches the character 1 literally (case sensitive)- Match a single character present in the list below
[0-9]{2}
{2}Quantifier — Matches exactly 2 times
0-9a single character in the range between 0 (ASCII 48) and 9 (ASCII 57) (case sensitive)- 4th Alternative
2[0-4][0-9]
2matches the character 2 literally (case sensitive)- Match a single character present in the list below
[0-4]
0-4a single character in the range between 0 (ASCII 48) and 4 (ASCII 52) (case sensitive)- Match a single character present in the list below
[0-9]
0-9a single character in the range between 0 (ASCII 48) and 9 (ASCII 57) (case sensitive)- 5th Alternative
25[0-5]
25matches the characters 25 literally (case sensitive)- Match a single character present in the list below
[0-5]
0-5a single character in the range between 0 (ASCII 48) and 5 (ASCII 53) (case sensitive)$asserts position at the end of the string, or before the line terminator right at the end of the string (if any)- Global pattern flags
gmodifier: global. All matches (don’t return after first match)
–jeroen
Share this:
Posted in *nix, Communications Development, Development, Internet protocol suite, Network-and-equipment, Power User, Software Development, TCP | Leave a Comment »
HTTP Prompt is an interactive command-line HTTP client featuring autocomplete…
Posted by jpluimers on 2017/07/26
HTTP Prompt is an interactive command-line HTTP client featuring autocomplete and syntax highlighting. Download url -> https://github.com/eliangcs/http-prompt – Joe C. Hecht – Google+
Source: HTTP Prompt is an interactive command-line HTTP client featuring autocomplete… [WayBack]
To me it looks remarkably similar to https://github.com/jkbrzt/httpie [WayBack] which too is a visual cURL replacement.
–jeroen
Share this:
Posted in *nix, Communications Development, cURL, Development, HTTP, Internet protocol suite, Power User, Software Development, TCP, Web Development | Leave a Comment »
Sending various HTTP request kinds using curl
Posted by jpluimers on 2017/07/25
I’ve been using cURL but always had a feeling not to its potential basically because the cURL man page [WayBack] is both massive and lacks concrete useful practical examples.
For instance, I knew about the --header and --verbose options (I always use verbose names even though shorter -H and -v exist) to pass a specific header and get verbose output, but the man page basic examples like this by Tader:
curl --header --verbose "X-MyHeader: 123" www.google.comsource: How to send a header using a HTTP request through a curl call? – Stack Overflow [WayBack]
There are some more examples at bropages.org/curl but they’re hardly organised or documented.
So I was really glad I found the below answer [WayBack] by Amith Koujalgi to web services – HTTP POST and GET using cURL in Linux – Stack Overflow.
But first note that recent versions (around 7.22 or higher) of cURL now need to combine the --silent and --show-error (or in short -sS) parameters to suppress progress but show errors: linux – How do I get cURL to not show the progress bar? – Stack Overflow [WayBack]
Back to the examples
Share this:
Posted in *nix, Communications Development, cURL, Delphi, Development, HTTP, https, Internet protocol suite, JavaScript/ECMAScript, JSON, Power User, REST, Scripting, Security, Software Development, TCP, TLS, XML, XML/XSD | 1 Comment »
The Wiert Corner - irregular stream of stuff 