Brutkey

Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net
Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

Bio Milch in Flaschen. Macht sich gut im Kühlschrank und vermeidet Müll, auch wenn die Ökobilanz nicht besser ist als für Tetrapaks. Dennoch. Ich bevorzuge Glas, wann immer möglich.

Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

So what I understand from the (x509) certificate ecosystem is that CRLs (Certificate Revocation Lists) are kinda still there but practically out, OCSP (Online Certificate Status Protocol) could have privacy and performance problems and never really "made" it, so "Passive Revocation" is the thing to do. It sounds technologically advanced, but in reality it simply means that certificates expire very fast (hours, maybe a day of validity), hoping that that will be enough to contain abuse.

1/n

Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

In Germany a lower court has decided that a hospital that is managed by the Catholic Church is allowed to mandate that their surgeons are not allowed to perform legal abortions and that also extends to abortions performed in their private practice far away and I think that's a clear case of religious overreach. The doctor that went to court will take it to the German Supreme Court. He has my full support.

Weirdly enough I had to turn to a Finnish news outlet for context: https://www.dailyfinland.fi/europe/44574/German-court-upholds-ban-on-abortions-in-Catholic-run-hospital

Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

OK. I'm giving up. It seems to be impossible to convince step-ca to include givenName and surname in the subject of an x509 certificate. I tried templates, --set in all variants but it seems it always ignores them. Maybe it'll work when I try the hardcore way with OIDs, but that'll have to wait.

step-ca template file { "subject": { "Organization": {{ toJson .Organization }}, "organizationalUnit": {{ toJson .OrganizationalUnit }}, "country": "DE", "givenName": {{ toJson .Insecure.User.givenName }}, "surname": {{ toJson .Insecure.User.surname }}, "commonName": {{ toJson .Subject.CommonName }} }, "basicConstraints": { "isCA": false }, "extensions": [ {"id": "2.5.29.32", "value": {{ asn1Seq (asn1Seq (asn1Enc "oid:2.23.140.1.5.2.2")) | toJson }}} ], "sans": {{ toJson .SANs }}, "extKeyUsage": ["emailProtection", "clientAuth"], "keyUsage": ["keyEncipherment", "digitalSignature", "contentCommitment"] } Creating teh certificate with step ca certificate "nsmith@wildeboer.net" nsmith.crt nsmith.key --san "nsmith@wildeboer.net" --san "natsmith@wildeboer.net" --san "therealnat@wildeboer.net" --set=givenName=Nathaniel --set=surname=Smith --provisioner smime Checking the generated certificate: No surname, no GivenName in the subject. Subject: C=DE,O=JHW,OU=S/MIME,CN=nsmith@wildeboer.net
Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

Dear Mr. Trump. #NoLandForPeace. It's not your decision to make. This is between Ukraine and Russia. #SlavaUkraini

Same goes for Israel and Palestine, obviously.

Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

Wenigstens einer in der CxU der noch denken kann und will und damit auch seinen "Chef" Jens Spahn indirekt angreift:

"Nach dem Rückzug der Richterkandidatin Frauke Brosius-Gersdorf hält Unionsfraktionsvize Mathias Middelberg eine Entschuldigung gegenüber der SPD und auch gegenüber der Jura-Professorin für angebracht."

(possibly paywalled) https://www.sueddeutsche.de/politik/bundesregierung-liveblog-news-brosius-gersdorf-union-spd-entschuldigung-li.3294142

Unionsfraktionsvize: Entschuldigung bei SPD und Brosius-Gersdorf ist angebracht Nach dem Rückzug der Richterkandidatin Frauke Brosius-Gersdorf hält Unionsfraktionsvize Mathias Middelberg eine Entschuldigung gegenüber der SPD und auch gegenüber der Jura-Professorin für angebracht. Die Fraktionsführung der Union hätte die gewichtigen Bedenken gegen Brosius-Gersdorf früher erkennen müssen, CDU und CSU hätten sich gegenüber der SPD "nicht sauber und korrekt verhalten", gestand der CDU-Politiker im NDR ein. "Das haben wir versäumt, und das ist sicherlich ein Fehler gewesen", sagte Middelberg. "Und dafür kann man sich bei den Sozialdemokraten entschuldigen. Und das kann man auch gegenüber Frau Brosius-Gersdorf so tun." Denn sie sei dadurch unnötig lange in der Diskussion gehalten worden und Angriffen von außen ausgesetzt gewesen.
Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

Netanyahu: “Instead of supporting Israel’s just war against Hamas, which carried out the most horrific attack against the Jewish people since the Holocaust, Germany is rewarding Hamas terrorism by embargoing arms to Israel”

Seems Germany got under his skin with their rather vague announcement on halting exports of weapons that could be used by Israel in Gaza.

https://www.timesofisrael.com/liveblog_entry/netanyahu-tells-merz-germany-rewarding-hamas-by-placing-arms-embargo-on-israel/

The Times of Israel: „Netanyahu tells Merz Germany ‘rewarding Hamas’ by placing arms embargo on Israel“
Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

It's Friday. So all 5 RHEL (Red Hat Enterprise Linux) servers get their dnf update, a reboot and are checked for running smoothly. On 3 servers I also updated the forgejo runner to the current version 9.0.3. Weekend can start!

(Yes, I update my private servers on a Friday so I have the weekend to fix stuff in case something goes wrong, thanks for asking ;)

UPDATE: All updates installed, all servers back online, no problems found.

#SelfHost #SysAdmin #RHEL10

Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

Ein schönes Zitat, meiner Meinung nach.

"Mir haben immer Leute geholfen. Sie haben mich im Leben selten enttäuscht. Oder ich erinnere mich nicht mehr daran." — Marie-Luise Marjan, Schauspielerin

Quelle (possibly paywalled): https://www.sueddeutsche.de/wirtschaft/mutter-beimer-lindenstrasse-marjan-alter-fernsehen-li.3268532

Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

This means to me that I hold no grudges nor do I feel hate against citizens of the USA or Israel. I have friends in both countries, who continue to be friends. My friends are people, not countries. But for me it will take a long time and a lot of reliable and sustainable action by the USA and Israel to rebuild trust in them..

2/3

Jan Wildeboer 😷😷:krulorange:
@jwildeboer@social.wildeboer.net

When I was young, there was a third axiom that was also destroyed:

- The USSR is evil.

The USSR dissolved itself, the satellite states became independent countries and a lot of them are now members of the EU.

So having axioms destroyed isn't always a bad thing. That's what keeps me motivated that we will progress. I am a stoic optimist. Always will be.

3/3