<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Dear Mister Jones &#187; Technical Tom</title>
	<atom:link href="http://www.dearmisterjones.com/wordpress/category/technical-tom/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.dearmisterjones.com/wordpress</link>
	<description>Just another WordPress weblog</description>
	<pubDate>Mon, 01 Mar 2010 14:47:03 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
	<language>en</language>
			<item>
		<title>How To Move An svn Repository</title>
		<link>http://www.dearmisterjones.com/wordpress/2009/09/17/how-to-move-an-svn-repository/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2009/09/17/how-to-move-an-svn-repository/#comments</comments>
		<pubDate>Thu, 17 Sep 2009 14:35:05 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[command line]]></category>

		<category><![CDATA[linux]]></category>

		<category><![CDATA[scripting]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/wordpress/?p=161</guid>
		<description><![CDATA[On the source system, run:
svnadmin dump /path/to/repository &#62; repository-name.dmp
Copy the dump file to the new server.  There, create a new repository to house the dumped information:
cd /path/to/new/repository
svnadmin create repository-name
svnadmin load repository-name &#60; repository-name.dmp
Now, if you have a project that you checked out from the old location, that you want to point to the new location, [...]]]></description>
			<content:encoded><![CDATA[<p>On the source system, run:</p>
<p><strong>svnadmin dump /path/to/repository &gt; repository-name.dmp</strong></p>
<p>Copy the dump file to the new server.  There, create a new repository to house the dumped information:</p>
<p><strong>cd /path/to/new/repository</strong></p>
<p><strong>svnadmin create repository-name</strong></p>
<p><strong>svnadmin load repository-name &lt; repository-name.dmp</strong></p>
<p>Now, if you have a project that you checked out from the old location, that you want to point to the new location, run the following command (assumes you&#8217;re located in the root of the directory housing the checkout you want to switch:</p>
<p><strong>svn switch &#8211;relocate svn+ssh://old/path  svn+ssh://new/path .</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2009/09/17/how-to-move-an-svn-repository/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Microsoft has removed the 10 half-open TCP connections limit</title>
		<link>http://www.dearmisterjones.com/wordpress/2009/06/10/157/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2009/06/10/157/#comments</comments>
		<pubDate>Wed, 10 Jun 2009 14:24:08 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[security]]></category>

		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/wordpress/?p=157</guid>
		<description><![CDATA[I received the following from my friend, &#8216;Andrew from Vancouver&#8217;.  Pretty interesting&#8230;
*****

I just  noted that in the Windows Server 2008 and Vista SP2 &#8220;What&#8217;s significant&#8221;  document, that Microsoft has removed the 10 half-open TCP connections limit that  they introduced to impede worms and bots on Windows XP SP2.
 
http://technet.microsoft.com/en-us/library/dd335036.aspx
 
&#8220;SP2  removes [...]]]></description>
			<content:encoded><![CDATA[<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;">I received the following from my friend, &#8216;Andrew from Vancouver&#8217;.  Pretty interesting&#8230;</span></span></span></div>
<div><span style="color: #000000;">*****<br />
</span></div>
<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;">I just  noted that in the Windows Server 2008 and Vista SP2 &#8220;What&#8217;s significant&#8221;  document, that Microsoft has removed the 10 half-open TCP connections limit that  they introduced to impede worms and bots on Windows XP SP2.</span></span></span></div>
<div><span style="color: #000000;"> </span></div>
<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;"><a href="http://technet.microsoft.com/en-us/library/dd335036.aspx" target="_blank" onclick="javascript:pageTracker._trackPageview ('/outbound/technet.microsoft.com');">http://technet.microsoft.com/en-us/library/dd335036.aspx</a></span></span></span></div>
<div><span style="color: #000000;"> </span></div>
<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;">&#8220;SP2  removes the limit of 10 half open outbound TCP connections. By default, SP2 has  no limit on the number of half open outbound TCP connections.  &#8220;</span></span></span></div>
<div><span style="color: #000000;"> </span></div>
<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;">And of  course, some may want to turn it back on:</span></span></span></div>
<div><span style="color: #000000;"> </span></div>
<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;"><a href="http://support.microsoft.com/kb/969710" target="_blank" onclick="javascript:pageTracker._trackPageview ('/outbound/support.microsoft.com');">http://support.microsoft.com/kb/969710</a></span></span></span></div>
<div><span style="color: #000000;"> </span></div>
<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;">I  assume that they&#8217;ve decided their SDL is working and Vista is much less abused  by botnets than XP was:</span></span></span></div>
<div><span style="color: #000000;"> </span></div>
<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;"><a href="http://blogs.technet.com/mmpc/archive/2009/04/21/malware-distribution-across-operating-systems.aspx" target="_blank" onclick="javascript:pageTracker._trackPageview ('/outbound/blogs.technet.com');">http://blogs.technet.com/mmpc/archive/2009/04/21/malware-distribution-across-operating-systems.aspx</a></span></span></span></div>
<div><span style="color: #000000;"> </span></div>
<div><span style="color: #000000;"><span><span style="font-size: x-small; font-family: Arial;">&#8230;  and so they&#8217;ve decided to stop getting beaten up by bloggers and tech forum  posers over this artificial limit&#8230; which probably suckers  people into downloading dubious &#8220;patches&#8221; to increase their P2P download  speeds, which, since they&#8217;re installed deliberately by the sucker could be any  kind of malware instead.</span></span></span></div>
<div>*****</div>
<div>Thanks for sharing, Andrew!</div>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2009/06/10/157/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Search and Replace on Multiple Files</title>
		<link>http://www.dearmisterjones.com/wordpress/2009/03/13/search-and-replace-on-multiple-files/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2009/03/13/search-and-replace-on-multiple-files/#comments</comments>
		<pubDate>Fri, 13 Mar 2009 16:42:34 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[linux]]></category>

		<category><![CDATA[scripts]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/wordpress/?p=148</guid>
		<description><![CDATA[Recently one of my hosting providers went and changed the path to my home directory without telling me.  So, I had to go through a gajillion files and modify a path to reflect the changes.  I thought I&#8217;d go ahead and share how I did that for anyone out there that has a similar need.
There [...]]]></description>
			<content:encoded><![CDATA[<p>Recently one of my hosting providers went and changed the path to my home directory without telling me.  So, I had to go through a <em>gajillion </em>files and modify a path to reflect the changes.  I thought I&#8217;d go ahead and share how I did that for anyone out there that has a similar need.</p>
<p>There are several ways to accomplish this - but this is how I like to do it (this is from a linux command shell):</p>
<p><strong>find . -name somefile -exec perl -pi.bliki -e &#8217;s/textToFind/replacement/g&#8217; {} \;</strong></p>
<p>The above command uses the find command, starting from the current location (.), looking for files named &#8217;somefile&#8217; (-name somefile), and every time it finds one, it runs the command following the -exec parameter.  The command following the -exec parameter is a perl one-liner that backs up the file it&#8217;s about to modify (with a .bliki extension, I just try to pick something I&#8217;m sure will not result in overwriting a legitimate file), and then does a global search and replace of textToFind with replacement.  In the above command, the {} is where find inserts the current file it has found.  You must backslash the semi-colon at the end so that the shell doesn&#8217;t interpret it and leaves it for use by the find -exec command.</p>
<p>Once you&#8217;ve completed the search and replace, you use the following command to go through and remove all of the backup files created with the .bliki extension.</p>
<p><strong>find . -name somefile.bliki -exec rm {} \;</strong></p>
<p>Hope this makes sense?</p>
<p>Post questions if you need clarification on anything.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2009/03/13/search-and-replace-on-multiple-files/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Unix Utilities on Windows</title>
		<link>http://www.dearmisterjones.com/wordpress/2009/01/08/unix-utilities-on-windows/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2009/01/08/unix-utilities-on-windows/#comments</comments>
		<pubDate>Thu, 08 Jan 2009 15:18:38 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[batch]]></category>

		<category><![CDATA[scripting]]></category>

		<category><![CDATA[unix]]></category>

		<category><![CDATA[win32]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/wordpress/?p=140</guid>
		<description><![CDATA[Feeling crippled on Windows by not having access to such commands as grep, awk, tail, less &#8230; ?  Go here to get a copy of these utilities ported to the Win32 platform.  They&#8217;ve made my life much easier when I&#8217;m trying to do some quick command-line trickery on a Windows box.
]]></description>
			<content:encoded><![CDATA[<p>Feeling crippled on Windows by not having access to such commands as grep, awk, tail, less &#8230; ?  Go <a href="http://sourceforge.net/projects/unxutils" target="_blank" onclick="javascript:pageTracker._trackPageview ('/outbound/sourceforge.net');">here </a>to get a copy of these utilities ported to the Win32 platform.  They&#8217;ve made my life <em>much</em> easier when I&#8217;m trying to do some quick command-line trickery on a Windows box.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2009/01/08/unix-utilities-on-windows/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Adobe AIR - applicationStorageDirectory - where is it?</title>
		<link>http://www.dearmisterjones.com/wordpress/2009/01/07/adobe-air-applicationstoragedirectory-where-is-it/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2009/01/07/adobe-air-applicationstoragedirectory-where-is-it/#comments</comments>
		<pubDate>Wed, 07 Jan 2009 17:01:42 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[actionscript]]></category>

		<category><![CDATA[air]]></category>

		<category><![CDATA[flex]]></category>

		<category><![CDATA[scripting]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/wordpress/?p=133</guid>
		<description><![CDATA[When progamming an AIR application, you may want to make use of the applicationStorageDirectory available via the flash.filesystem package to store temporary files/folders.  You can find where your system is storing these files by doing something like the following:
var f:File = File.applicationStorageDirectory.resolvePath(&#8221;Test.txt&#8221;);
trace(f.nativePath + &#8216; is where my file is stored&#8217;);
]]></description>
			<content:encoded><![CDATA[<p>When progamming an AIR application, you may want to make use of the applicationStorageDirectory available via the flash.filesystem package to store temporary files/folders.  You can find where your system is storing these files by doing something like the following:</p>
<p>var f:File = File.applicationStorageDirectory.resolvePath(&#8221;Test.txt&#8221;);<br />
trace(f.nativePath + &#8216; is where my file is stored&#8217;);</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2009/01/07/adobe-air-applicationstoragedirectory-where-is-it/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Converting an x509 SSL certificate from a Linux node into one usable for IIS on Windows</title>
		<link>http://www.dearmisterjones.com/wordpress/2008/08/06/converting-an-x509-ssl-certificate-from-a-linux-node-into-one-usable-for-iis-on-windows/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2008/08/06/converting-an-x509-ssl-certificate-from-a-linux-node-into-one-usable-for-iis-on-windows/#comments</comments>
		<pubDate>Thu, 07 Aug 2008 05:52:40 +0000</pubDate>
		<dc:creator>mister jones</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[security]]></category>

		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/?p=78</guid>
		<description><![CDATA[I don&#8217;t know how many other people out there might ever need to do something like this.  Say you have a Linux web server using an SSL certificate, and you need to put that same certificate onto a Windows server for use with IIS.  Here is how you would accomplish it.
You&#8217;ll need the [...]]]></description>
			<content:encoded><![CDATA[<p>I don&#8217;t know how many other people out there might ever need to do something like this.  Say you have a Linux web server using an SSL certificate, and you need to put that same certificate onto a Windows server for use with IIS.  Here is how you would accomplish it.</p>
<p>You&#8217;ll need the openssl tool on your Linux node to do this.</p>
<ul>
<li>Put the contents of the public SSL cert and the private key into one file.  Easiest way to do this would be to cat the public cert and append to a new file.  Then cat the private key and append to that same file.  For the purposes of the next steps, we&#8217;ll call this new file &#8216;newcert.crt&#8217;.</li>
<li>Now, run: openssl pkcs12 -export -in newcert.crt -out iiscert.p12 -name &#8220;My Certificate&#8221;
<ul>
<li>Where &#8216;newcert.crt&#8217; is the file that we created in the first step, and &#8216;iiscert.p12&#8242; is the file that will be imported into IIS</li>
</ul>
</li>
<li><em>Securely</em> (i.e. scp or something that won&#8217;t send the file in clear text - it contains your private key!) copy the iiscert.p12 file to the IIS server you&#8217;ll be using it on.</li>
<li>Use the certificates MMC to import the iiscert.p12 file into the Personal certificate store for the computer object.</li>
<li>Now use IIS to configure the default web page and replace the current certificate with the new one that was just imported.</li>
</ul>
<p>Voila! Now you have a cross-platform SSL cert you can use.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2008/08/06/converting-an-x509-ssl-certificate-from-a-linux-node-into-one-usable-for-iis-on-windows/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Can Your Computer Run This Video Game?</title>
		<link>http://www.dearmisterjones.com/wordpress/2008/06/19/can-your-computer-run-this-video-game/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2008/06/19/can-your-computer-run-this-video-game/#comments</comments>
		<pubDate>Fri, 20 Jun 2008 05:37:48 +0000</pubDate>
		<dc:creator>mister jones</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[fun]]></category>

		<category><![CDATA[video games]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/?p=87</guid>
		<description><![CDATA[About a year ago I bought a video game, Supreme Commander, to play on my PC.  I don&#8217;t buy new video games very often, which probably explains why I still think Pong totally rocks.  So needless to say, I was excited to play my new game.   My computer was relatively new and the game had [...]]]></description>
			<content:encoded><![CDATA[<p>About a year ago I bought a video game, <a href="http://en.wikipedia.org/wiki/Supreme_Commander" target="_blank" onclick="javascript:pageTracker._trackPageview ('/outbound/en.wikipedia.org');">Supreme Commander</a>, to play on my PC.  I don&#8217;t buy new video games very often, which probably explains why I still think Pong totally rocks.  So needless to say, I was excited to play my new game.   My computer was relatively new and the game had been out for a while so I only glanced at the system requirements and made my purchase.  Of course, when I got home and installed it and tried to play, it didn&#8217;t work.  Upon closer inspection I realized that my video card didn&#8217;t have a &#8216;Vertex Shader / Pixel Shader&#8217;.  It was too late to return it at that point, of course, as I had already removed the shrink-wrap.  I considered selling it on ebay, but just depressed myself further when I searched and found that I could have purchased it myself there for about $20 less than I&#8217;d paid for it.  So &#8230; it sits on my shelf, and when I next upgrade my PC then I&#8217;ll finally have a chance to take it for a spin.  I&#8217;m sure the wait will be worth it - after all Gamespy said that it was &#8220;A game so immense that &#8217;supreme&#8217; might be too delicate a word&#8221;.</p>
<p>Since my impulse purchase of a year ago - I have learned that there is a web site you can go to which will scan your computer hardware and tell you whether it&#8217;ll be able to play that new video game you&#8217;re contemplating.  It is found here: <a href="http://www.systemrequirementslab.com/referrer/srtest" target="_blank" onclick="javascript:pageTracker._trackPageview ('/outbound/www.systemrequirementslab.com');">http://www.systemrequirementslab.com/referrer/srtest</a>.  Happy hunting.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2008/06/19/can-your-computer-run-this-video-game/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Getting a Substring Out of Batch</title>
		<link>http://www.dearmisterjones.com/wordpress/2008/05/12/getting-a-substring-out-of-batch/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2008/05/12/getting-a-substring-out-of-batch/#comments</comments>
		<pubDate>Mon, 12 May 2008 21:59:12 +0000</pubDate>
		<dc:creator>mister jones</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[scripting]]></category>

		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/?p=84</guid>
		<description><![CDATA[One of my friends, Andrew from Vancouver, sent me this extremely useful tip about how to grab a sub-string via BATCH.
&#60;snip&#62;

 here's a CMD shell tip that works in W2K, WXP, and W2K3.

There is a BASIC MIDSTR function equivalent in batch files... use this syntax as a modifer:

~:start,end

e.g.

set foo=\\servername
@echo unretouched [%foo%]
@echo modified [%foo:~2,99%]

will output:

unretouched [\\servername]
modified [...]]]></description>
			<content:encoded><![CDATA[<div dir="ltr">One of my friends, Andrew from Vancouver, sent me this extremely useful tip about how to grab a sub-string via BATCH.</div>
<div dir="ltr">&lt;snip&gt;</div>
<pre>
 here's a CMD shell tip that works in W2K, WXP, and W2K3.

There is a BASIC MIDSTR function equivalent in batch files... use this syntax as a modifer:

~:start,end

e.g.

set foo=\\servername
@echo unretouched [%foo%]
@echo modified [%foo:~2,99%]

will output:

unretouched [\\servername]
modified [servername]
 </pre>
<p>In a corporate network, this is a handy thing to have, for example, if you want to ping the server indicated in the LOGONSERVER variable, which is a UNC instead of just a host name:</p>
<pre>
ping %logonserver:~2,99%

Or let's say that you want the day of the week. This:

@echo unretouched [%date%]
@echo modified [%date:~0,3%]

will output:

unretouched [Tue 05/06/2008]
modified [Tue]

Nifty.
 </pre>
<p>See the help at the end of &#8220;FOR /?&#8221; for other expansions to variables in file paths, some or all of which are repeated below.</p>
<p>See the Windows Help (no, seriously) and search for &#8220;using batch parameters&#8221; for lots of interesting expansions, e.g.</p>
<p>%~1 Expands %1 and removes any surrounding quotation marks (&#8221;").<br />
%~f1 Expands %1 to a fully qualified path name.<br />
%~d1 Expands %1 to a drive letter.<br />
%~p1 Expands %1 to a path.<br />
%~n1 Expands %1 to a file name.<br />
%~x1 Expands %1 to a file extension.<br />
%~s1 Expanded path contains short names only.<br />
%~a1 Expands %1 to file attributes.<br />
%~t1 Expands %1 to date and time of file.<br />
%~z1 Expands %1 to size of file.<br />
%~$PATH:1 Searches the directories listed in the PATH environment variable and expands %1 to the fully qualified name of the first one found. If the environment variable name is not defined or the file is not found, this modifier expands to the empty string.<br />
Andrew.</p>
<div dir="ltr">&lt;/snip&gt;</div>
<div dir="ltr">Thanks Andrew!</div>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2008/05/12/getting-a-substring-out-of-batch/feed/</wfw:commentRss>
		</item>
		<item>
		<title>ssl certificate creation HowTo</title>
		<link>http://www.dearmisterjones.com/wordpress/2008/03/10/ssl-certificate-creation-howto/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2008/03/10/ssl-certificate-creation-howto/#comments</comments>
		<pubDate>Mon, 10 Mar 2008 19:54:04 +0000</pubDate>
		<dc:creator>mister jones</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[security]]></category>

		<category><![CDATA[web]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/index.php/2008/03/10/ssl-certificate-creation-howto/</guid>
		<description><![CDATA[Securing your web site or your MTA with SSL encryption (i.e. HTTPS traffic) can be a daunting task if you&#8217;ve never worked with it before.  The following steps assume that you&#8217;ll be working from a Linux server running Apache web server and/or postfix.
To understand how the whole SSL encryption process works, check out this [...]]]></description>
			<content:encoded><![CDATA[<p>Securing your web site or your MTA with SSL encryption (i.e. HTTPS traffic) can be a daunting task if you&#8217;ve never worked with it before.  The following steps assume that you&#8217;ll be working from a Linux server running Apache web server and/or postfix.</p>
<p>To understand how the whole SSL encryption process works, check out this article <a href="http://www.securityfocus.com/infocus/1818" target="_blank" onclick="javascript:pageTracker._trackPageview ('/outbound/www.securityfocus.com');">here</a>.</p>
<p>From the server you&#8217;re going to install the ssl certificate onto, do the following:</p>
<p><span id="more-61"></span></p>
<ul>
<li> Create the SSL Certificate request
<ul>
<li>openssl req -new -nodes -keyout newkey.pem -out newreq.pem
<ul>
<li>this generates a new ssl certificate request, newreq.pem, and a new private key (unencrypted),newkey.pem.  Default bits to create new private key is 1024</li>
<li>You&#8217;ll be prompted for several different bits of information, the most important one is the &#8216;common name&#8217;.  You&#8217;ll want to make sure that it is the same as what you want clients to use when connecting to you over the Internet (i.e. www.myhost.com).</li>
<li>Don&#8217;t forget this part! make your private key file readable only by root, to keep it secure</li>
</ul>
</li>
</ul>
</li>
<li>You now need to take the cert request file (newreq.pem) and give it to a Certificate Authority (CA) and obtain a signed certificate from the CA in return.  Depending on whether you administer the CA or your ISP does it, the end result should be that you&#8217;re left with a resulting certificate that is in PEM format.  I won&#8217;t go into the details of how to do the CA side of things here - I&#8217;ll assume that you&#8217;re probably just going to copy and paste the newreq.pem file into a page on your ISP&#8217;s web site, upon which they&#8217;ll make a signed certificate available to you, i.e. newcert.pem.</li>
<li>Once you have the signed certificate, you need to place it in the appropriate location and make configuration changes to the software that is going to use it.
<ul>
<li>For example, if you were using the certificate for Apache for a web site you&#8217;re wanting clients to access over HTTPS:
<ul>
<li>in your httpd.conf file for the site you&#8217;re administering, you&#8217;d add [SSLCertificateFile /path/to/newcert.pem] (without brackets, they&#8217;re included from here on out for readability&#8217;s sake).</li>
<li>You have the option of including the private key within the newcert.pem file, by simply cat-ing it and appending to the file.  But you can also keep them separate (my preference) and just add the following additional config line to httpd.conf [SSLCertificateKeyFile /path/to/newkey.pem].</li>
<li>You need to have a &#8216;lookup&#8217; for the client connecting to your site, so their browser will know where to go to verify your certificate. The file used by default gets generated when you compile/install Apache. Just find it and copy it into the directory which holds your other keys and point to it with the following directive.<br />
[SSLCACertificateFile /path/to/ca-bundle.crt].  If you CA is not a publicly registered CA, it&#8217;s not going to be included in this file, and you&#8217;ll need to obtain the certificate for the CA and append it to this file. Generally this would be accomplished by your CA Admin providing you with a plain text file that you simply cat and append to this ca-bundle.txt file.</li>
<li>If your SSL signing authority delegates its signing authority to &#8217;subordinate CA&#8217;s, then you also may need a &#8216;Certificate Chain&#8217; file, so that the connecting clients will know how to follow a CA&#8217;s authority up the &#8216;chain&#8217; to the parent CA and verify your certificate that way.  If you require a certificate chain file, your ISP will indicate it as part of their instructions for getting your certificate installed.  To include it, you use the following directive [SSLCertificateChainFile  /path/to/intermediate-bundle.crt].</li>
<li>There are a lot of other config options that are necessary for SSL, but there are plenty of examples for that out there.  My purpose here is just to help you understand/implement the certificate piece of things.  Now restart Apache and verify that you can connect to your web server over port 443 via HTTPS.</li>
</ul>
</li>
</ul>
<ul>
<li>If instead, you were planning on using the certificate for, say, TLS connectivity with postfix:
<ul>
<li>copy all of your certs (private key, public certificate, CA certificate) into the /etc/postfix directory, or wherever else you want them to live.</li>
<li>modify your main.cf to contain [smtpd_tls_security_level = may] in order to enable ability to receive TLS encrypted traffic.</li>
<li>in main.cf, add [smtpd_tls_key_file = /etc/postfix/newkey.pem] to tell postfix what to use as the private key</li>
<li>in main.cf, add [smtpd_tls_cert_file = /etc/postfix/newcert.pem] to tell postfix what to use as the public cert</li>
<li>in main.cf, add [smtpd_tls_CAfile = /etc/postfix/cacert.pem] to tell postfix what to use as it&#8217;s list of trusted root CAs.  If your cert was signed by a CA that is not included in this file, then you&#8217;ll need to append your CA&#8217;s cert to the end of this file.</li>
<li>in main.cf, add [smtp_tls_security_level = may] in order to tell postfix to utilize TLS if offered by the receiving server upon connecting (host will advertise STARTTLS).</li>
<li>set the settings for the smtp process to the same as those for smtpd, via the following: [smtp_tls_key_file = $smtpd_tls_key_file], [smtp_tls_cert_file = $smtpd_tls_cert_file], [smtp_tls_CAfile = $smtpd_tls_CAfile]</li>
<li>save main.cf and reload postfix.</li>
</ul>
</li>
</ul>
</li>
<li>If you wanted to check and make sure that you could connect to postfix over a TLS connection, the best way to test is like this:
<ul>
<li>openssl s_client -connect hostname:25 -starttls smtp</li>
</ul>
</li>
<li>If you want to check SSL connectivity to your HTTPS secured web site, do it like this:
<ul>
<li>openssl s_client -connect hostname:443</li>
</ul>
</li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2008/03/10/ssl-certificate-creation-howto/feed/</wfw:commentRss>
		</item>
		<item>
		<title>How the TCP Windows change in Vista and Windows 2008</title>
		<link>http://www.dearmisterjones.com/wordpress/2008/03/06/how-the-tcp-windows-change-in-vista-and-windows-2008/</link>
		<comments>http://www.dearmisterjones.com/wordpress/2008/03/06/how-the-tcp-windows-change-in-vista-and-windows-2008/#comments</comments>
		<pubDate>Thu, 06 Mar 2008 19:31:02 +0000</pubDate>
		<dc:creator>mister jones</dc:creator>
		
		<category><![CDATA[Technical Tom]]></category>

		<category><![CDATA[windows]]></category>

		<guid isPermaLink="false">http://www.dearmisterjones.com/index.php/2008/03/06/how-the-tcp-windows-change-in-vista-and-windows-2008/</guid>
		<description><![CDATA[If you want a better understanding of how TCP Windows work and how they interact with round trip time to contribute to delays that you may experience with network communications, I recommend reading this newsletter by Mark Minasi, specifically the &#8216;Vista and 2008&#8217;s New TCP Windows&#8217; section.
]]></description>
			<content:encoded><![CDATA[<p>If you want a better understanding of how TCP Windows work and how they interact with round trip time to contribute to delays that you may experience with network communications, I recommend reading this <a href="http://www.minasi.com/newsletters/nws0802.htm" target="_blank" onclick="javascript:pageTracker._trackPageview ('/outbound/www.minasi.com');">newsletter</a> by Mark Minasi, specifically the &#8216;Vista and 2008&#8217;s New TCP Windows&#8217; section.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dearmisterjones.com/wordpress/2008/03/06/how-the-tcp-windows-change-in-vista-and-windows-2008/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
