bxb100

Comparison of Spring Cloud with Eureka

I feel Consul.io does better in the following area:

• The focus on scriptable configuration allows for better container management.
  Eureka requires either external Configuration Server or multiple configuration files.

• The options for securing communications is more advanced.
  Eureka requires creating application with security settings desired. Default will allow HTTP only. Registration of end points assumes http but can be forced to https with code.

bxb100

import { useCallback, useEffect, useRef, useState } from "react";

interface UseUndoHook<T> {
  value: T;
  onChange: (newValue: T) => void;
  undo: () => void;
  redo: () => void;
  clear: () => void;
  canUndo: boolean;
  canRedo: boolean;

bxb100

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

bxb100

The repository for the assignment is public and Github does not allow the creation of private forks for public repositories.

The correct way of creating a private frok by duplicating the repo is documented here.

For this assignment the commands are:

1. Create a bare clone of the repository. (This is temporary and will be removed so just do it wherever.)

git clone --bare git@github.com:usi-systems/easytrace.git

bxb100

People

:bowtie:	😄 :smile:	😆 :laughing:
😊 :blush:	😃 :smiley:	☺️ :relaxed:
😏 :smirk:	😍 :heart_eyes:	😘 :kissing_heart:
😚 :kissing_closed_eyes:	😳 :flushed:	😌 :relieved:
😆 :satisfied:	😁 :grin:	😉 :wink:
😜 :stuck_out_tongue_winking_eye:	😝 :stuck_out_tongue_closed_eyes:	😀 :grinning:
😗 :kissing:	😙 :kissing_smiling_eyes:	😛 :stuck_out_tongue:

bxb100

  ZigZag-Encoding
  ---------------
  
  Maps negative values to positive values while going back and
  forth (0 = 0, -1 = 1, 1 = 2, -2 = 3, 2 = 4, -3 = 5, 3 = 6 ...)

  (i >> bitlength-1) ^ (i << 1)

  with "i" being the number to be encoded, "^" being
  XOR-operation and ">>" would be arithemtic shifting-operation

bxb100

Table of Contents

• set -e, -u, -x, -o pipefail
• set -e
• set -x
• set -u
• set -o pipefail
• Setting IFS
• Original Reference

set -e, -u, -x, -o pipefail

bxb100

The main point is to save the SSL/TLS keys those used by the web browser (SSLKEYLOGFILE=/tmp/tmp-google/.ssl-key.log).
In the example below we run brand new instance of Google Chrome (--user-data-dir=/tmp/tmp-google do the trick):
SSLKEYLOGFILE=/tmp/tmp-google/.ssl-key.log /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --user-data-dir=/tmp/tmp-google
Then run the Wireshark and open the Preferences -> Protocols -> SSL, where we put the path to the SSL keys log file into the (Pre)-Master-Secret log filename field.
Now all SSL/TLS traffic from this browser instance will be decrypted.

bxb100

mTLS 配置

对于mTLS的配置的证书来说，有如下的提示。

• 三个文件。 对于大多数系统，如：MySQL, Redis，PostgreSQL。会需要三个文件：CA证书 + CERT 和 KEY。可以在我的这个开源项目（https://github.com/haoel/mTLS/tree/main/certs ）中找到我生成的CA，以及 Server 和 Client的 .crt 和 .key 文件。生成的方法也在我的那个开源项目中了。

• 两个文件。 对于有的系统，比如：MongoDB，他只要两个文件，一个是CA，一个是 pem 文件，对于pem文件，你可以直接把上面的 .crt 和 .key 合并了就好了。如：cat server.crt server.key > server.pem

• JKS文件。 对于一些系统，比如：Kafka 和 Zookeeper。他要的不是上面的明文的格式，他要的是一种jks的格式，这是Java的格式。怎么从上面的明文的方式转到jks的文件。需要经过下面几步。