<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>number 9 &#187; security</title>
	<atom:link href="http://number9.hellooperator.net/articles/category/security/feed" rel="self" type="application/rss+xml" />
	<link>http://number9.hellooperator.net</link>
	<description>a bird to bring my message home</description>
	<lastBuildDate>Fri, 11 Dec 2009 15:13:29 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>hacking servers to trust your CA</title>
		<link>http://number9.hellooperator.net/articles/2008/10/27/hacking-servers-to-trust-your-ca</link>
		<comments>http://number9.hellooperator.net/articles/2008/10/27/hacking-servers-to-trust-your-ca#comments</comments>
		<pubDate>Mon, 27 Oct 2008 07:22:40 +0000</pubDate>
		<dc:creator>Dick</dc:creator>
				<category><![CDATA[coding]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[sysadmin]]></category>

		<guid isPermaLink="false">http://number9.hellooperator.net/?p=231</guid>
		<description><![CDATA[Welcome, Googlers
For the second time this millenium, I’ve had to persuade a server to trust the LDAP server
in the corner. The one with an SSL certificate written in crayon.
Eventually I found a fix – my own, from a few years back, on a mailing list archive (I never got round to restoring my old inbox [...]]]></description>
		<wfw:commentRss>http://number9.hellooperator.net/articles/2008/10/27/hacking-servers-to-trust-your-ca/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>second place in the arms race</title>
		<link>http://number9.hellooperator.net/articles/2008/07/24/second-place-in-the-arms-race</link>
		<comments>http://number9.hellooperator.net/articles/2008/07/24/second-place-in-the-arms-race#comments</comments>
		<pubDate>Thu, 24 Jul 2008 12:03:31 +0000</pubDate>
		<dc:creator>Dick</dc:creator>
				<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://number9.hellooperator.net/?p=159</guid>
		<description><![CDATA[Came across this on my travels last night. 
Like your style, girl. Posted without further comment (it might give the game away).
]]></description>
		<wfw:commentRss>http://number9.hellooperator.net/articles/2008/07/24/second-place-in-the-arms-race/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>adding existing SSL keypairs to Java keystores</title>
		<link>http://number9.hellooperator.net/articles/2007/06/26/adding-existing-ssl-keypairs-to-java-keystores</link>
		<comments>http://number9.hellooperator.net/articles/2007/06/26/adding-existing-ssl-keypairs-to-java-keystores#comments</comments>
		<pubDate>Tue, 26 Jun 2007 22:36:00 +0000</pubDate>
		<dc:creator>Dick</dc:creator>
				<category><![CDATA[glassfish]]></category>
		<category><![CDATA[java]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://number9.hellooperator.net/articles/2007/06/26/adding-existing-ssl-keypairs-to-java-keystores</guid>
		<description><![CDATA[I want my Roller install
to use LDAP authentication (instead of its own account database).
LDAP auth means cleartext passwords, so I need to run the site over SSL.
where glassfish keeps SSL certs and keys
Each Glassfish domain has it&#8217;s own keystore, which is protected by what the docs call the
&#8216;admin master password&#8217; (not the same as the [...]]]></description>
		<wfw:commentRss>http://number9.hellooperator.net/articles/2007/06/26/adding-existing-ssl-keypairs-to-java-keystores/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>roam if you want to</title>
		<link>http://number9.hellooperator.net/articles/2006/04/06/roam-if-you-want-to</link>
		<comments>http://number9.hellooperator.net/articles/2006/04/06/roam-if-you-want-to#comments</comments>
		<pubDate>Thu, 06 Apr 2006 21:56:00 +0000</pubDate>
		<dc:creator>Dick</dc:creator>
				<category><![CDATA[linux]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[wpa]]></category>

		<guid isPermaLink="false">http://number9.hellooperator.net/articles/2006/04/06/roam-if-you-want-to</guid>
		<description><![CDATA[UPDATE: I&#8217;ve gone off the idea. I don&#8217;t roam, I don&#8217;t want all the family to have to know the WPA passphrase to use their laptop account, and I like wmii  , where applets don&#8217;t really make any sense.  I prefer the system-wide way of doing WPA   myself.
Here&#8217;s the Ubuntu Dapper [...]]]></description>
		<wfw:commentRss>http://number9.hellooperator.net/articles/2006/04/06/roam-if-you-want-to/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>wpa for freebsd</title>
		<link>http://number9.hellooperator.net/articles/2006/01/23/wpa-for-freebsd</link>
		<comments>http://number9.hellooperator.net/articles/2006/01/23/wpa-for-freebsd#comments</comments>
		<pubDate>Mon, 23 Jan 2006 21:51:00 +0000</pubDate>
		<dc:creator>Dick</dc:creator>
				<category><![CDATA[bsd]]></category>
		<category><![CDATA[howto]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[sysadmin]]></category>
		<category><![CDATA[wpa]]></category>

		<guid isPermaLink="false">http://number9.hellooperator.net/articles/2006/01/23/wpa-for-freebsd</guid>
		<description><![CDATA[Despite our ups and downs, for me there&#8217;s still
only one choice for a server OS .
Luckily, FreeBSD 6.x now has WPA supplicant in the base,
along with ipi/ipw (Centrino 802.11b/g support), and word is
the 5.x wrinkles are ironed out.
So I thought I&#8217;d do a BSD version of the
WPA howto
I wrote the other day.
0: ingredients:

FreeBSD 6.0
a WPA [...]]]></description>
		<wfw:commentRss>http://number9.hellooperator.net/articles/2006/01/23/wpa-for-freebsd/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>fun with wpa_supplicant</title>
		<link>http://number9.hellooperator.net/articles/2005/11/21/fun-with-wpa_supplicant</link>
		<comments>http://number9.hellooperator.net/articles/2005/11/21/fun-with-wpa_supplicant#comments</comments>
		<pubDate>Mon, 21 Nov 2005 00:21:00 +0000</pubDate>
		<dc:creator>Dick</dc:creator>
				<category><![CDATA[howto]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[wpa]]></category>

		<guid isPermaLink="false">http://number9.hellooperator.net/articles/2005/11/21/fun-with-wpa_supplicant</guid>
		<description><![CDATA[Here&#8217;s how I got an 11Mbit Centrino (ipw2100) to work with WPA2.
This should apply to 54Mbit cards too (e.g. for Atheros, use &#8216;madwifi&#8217; for the driver and &#8216;ath0&#8217; for the interface).
before you read on
If you&#8217;re on Feisty (Ubuntu 7.04) or better, network manager  is now in the base and can handle WPA for you. [...]]]></description>
		<wfw:commentRss>http://number9.hellooperator.net/articles/2005/11/21/fun-with-wpa_supplicant/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>10 4 rubber duck</title>
		<link>http://number9.hellooperator.net/articles/2005/11/17/10-4-rubber-duck</link>
		<comments>http://number9.hellooperator.net/articles/2005/11/17/10-4-rubber-duck#comments</comments>
		<pubDate>Thu, 17 Nov 2005 12:07:00 +0000</pubDate>
		<dc:creator>Dick</dc:creator>
				<category><![CDATA[hardware]]></category>
		<category><![CDATA[networking]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://number9.hellooperator.net/articles/2005/11/17/10-4-rubber-duck</guid>
		<description><![CDATA[After a few false starts I
finally got stitch onto davie so I can replace my aging NetBSD box
with the WRT54g I bought ages ago (it&#8217;s is still someones backup MX, but a day off won&#8217;t kill anyone).
I set aside an hour last night to do it before I went bed. It took about 3 minutes.
the [...]]]></description>
		<wfw:commentRss>http://number9.hellooperator.net/articles/2005/11/17/10-4-rubber-duck/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
