jiaoyk

 apps/s_client.c |  10 +++++
 ssl/s3_both.c   |   7 ++++
 ssl/s3_clnt.c   |   6 +++
 ssl/ssl.h       |  13 +++++++
 ssl/ssl_lib.c   | 116 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 ssl/ssl_locl.h  |  19 ++++++++++
 6 files changed, 171 insertions(+)

diff --git a/apps/s_client.c b/apps/s_client.c
index 8fa2b73..2b5abed 100644

jiaoyk

import javax.crypto.Cipher;
import java.security.spec.KeySpec;
import javax.crypto.spec.PBEKeySpec;
import javax.crypto.SecretKey;
import javax.crypto.spec.SecretKeySpec;
import javax.crypto.SecretKeyFactory;
import java.security.AlgorithmParameters;
import javax.crypto.spec.IvParameterSpec;

public class Decrypter {

jiaoyk

import javax.net.ssl.SSLSocket;
import javax.net.ssl.SSLSocketFactory;
import java.io.*;

/** Establish a SSL connection to a host and port, writes a byte and
 * prints the response. See
 * http://confluence.atlassian.com/display/JIRA/Connecting+to+SSL+services
 */
public class SSLPoke {
    public static void main(String[] args) {

jiaoyk

#!/bin/bash

socat -v -T0.05 tcp-l:8081,reuseaddr,fork system:"echo 'HTTP/1.1 200 OK'; echo 'Connection: close'; echo; cat"

jiaoyk

#!/bin/bash

rm *.jks 2> /dev/null
rm *.pem 2> /dev/null

echo "===================================================="
echo "Creating fake third-party chain root -> ca"
echo "===================================================="

# generate private keys (for root and ca)

jiaoyk

OpenSSL Base64 Encoding: Binary Safe and Portable

Herewith is an example of encoding to and from base64 using OpenSSL's C library. Code presented here is both binary safe, and portable (i.e. it should work on any Posix compliant system e.g. FreeBSD and Linux).

License

The MIT License (MIT)

Copyright (c) 2013 Barry Steyn

jiaoyk

import org.apache.commons.codec.binary.Base64;
import org.apache.commons.io.output.ByteArrayOutputStream;
import org.junit.Test;

import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.PBEKeySpec;
import java.io.IOException;
import java.nio.charset.StandardCharsets;
import java.security.NoSuchAlgorithmException;

jiaoyk

/*
 * First create the keystore (to allow SSL protection) by importing the LDAP
 * certificate (cert.pem) with:
 *   keytool -import -keystore keystore -storepass changeit -noprompt -file cert.pem
 *
 * You can get the certificate with OpenSSL:
 *   openssl s_client -connect ldap.server.com:636 </dev/null 2>/dev/null | sed -n '/^-----BEGIN/,/^-----END/ { p }' > cert.pem
 *  
 * Then compile this class with:
 *   javac LdapAuth.java

jiaoyk

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname

jiaoyk

// 把一个wstring转化为string
std::string& to_string(std::string& dest, std::wstring const & src)
{
   std::setlocale(LC_CTYPE, "");

   size_t const mbs_len = wcstombs(NULL, src.c_str(), 0);
   std::vector<char> tmp(mbs_len + 1);
   wcstombs(&tmp[0], src.c_str(), tmp.size());

   dest.assign(tmp.begin(), tmp.end() - 1);