Fraser's IdM Blog

Here you can find all my previous posts.

By tag

2fa acme asn1 certificates certmonger cgroups containers cryptography dns dogtag freebsd freeipa gotchas haskell howto idm integration internals java kubernetes ldap openshift profiles programming python renewal revocation security sysadmin systemd testing troubleshooting

By date

2023-02-02 - CVE-2022-4254: FreeIPA PKINIT certificate mapping vulnerability
2023-01-22 - Enabling Kubernetes feature gates in OpenShift
2022-08-29 - Controlling header formatting in JAX-RS applications
2022-03-24 - Experimenting with ExternalDNS
2022-02-02 - Running Pods in user namespaces without privileged SCCs
2021-11-18 - Bare TCP and UDP ingress on Kubernetes
2021-10-15 - Creating user namespaces inside containers
2021-07-22 - Demo: namespaced systemd workloads on OpenShift
2021-07-21 - FreeIPA on OpenShift: July 2021 update
2021-06-29 - Live-testing changes in OpenShift clusters
2021-06-09 - systemd, cgroups and subuid ranges
2021-05-27 - Using runc to explore the OCI Runtime Specification
2021-03-30 - systemd containers on OpenShift with cgroups v2
2021-03-10 - Multiple users in user namespaces on OpenShift
2021-03-03 - User namespace support in OpenShift 4.7
2020-12-16 - Simple Java to C bindings via JNA
2020-12-08 - Kubernetes DNS Service Discovery limitations
2020-12-05 - Pod hostnames and FQDNs
2020-12-01 - User namespaces in OpenShift via CRI-O annotations
2020-11-30 - Using the OpenShift Machine Config Operator
2020-11-13 - ACME Service Discovery
2020-11-05 - OpenShift and user namespaces
2020-10-20 - Issuing certificates for long hostnames
2020-09-17 - Dogtag, number ranges and VLV indices
2020-08-13 - Dynamic volume provisioning with OpenShift storage classes
2020-06-19 - CRLs for Dogtag Lightweight CAs
2020-05-13 - ACME DNS challenges and FreeIPA
2020-05-07 - ACME for Apache httpd with mod_md
2020-05-06 - Introducing the FreeIPA ACME service
2020-01-28 - Deploying FreeIPA with a 4096-bit CA signing key
2019-12-12 - Disabling Certmonger auto-renewal
2019-12-06 - Plans for ACME support in FreeIPA
2019-10-24 - Removing the CA from a FreeIPA deployment
2019-09-23 - Requesting certificates from FreeIPA on Active Directory clients
2019-08-02 - Certificates need not be limited to the CA’s validity period
2019-07-26 - Dogtag replica range management
2019-07-19 - Designing revocation self-service for FreeIPA
2019-05-28 - A Distinguished Name is not a string
2019-05-24 - Fixing expired system certificates in FreeIPA
2019-03-18 - cert-fix redux
2019-03-04 - Customising Dogtag system certificate lifetimes
2019-03-01 - Specifying a CA Subject Key Identifier during Dogtag installation
2019-02-28 - Offline expired certificate renewal for Dogtag
2019-02-18 - IP address SAN support in FreeIPA
2019-02-07 - staticmethod considered beneficial
2019-02-04 - How does Dogtag PKI spawn?
2019-01-29 - X.509 Name Constraints and FreeIPA
2018-11-30 - Diagnosing Dogtag cloning failures
2018-11-20 - FreeIPA CA renewal master explained
2018-10-19 - Should FreeIPA ship a subordinate CA profile?
2018-08-21 - Issuing subordinate CA certificates from FreeIPA
2018-05-31 - Replacing a lost or broken CA in FreeIPA
2018-05-11 - Certificate renewal and revocation in FreeIPA
2018-03-26 - Can we teach an old Dogtag new tricks?
2018-03-15 - DN attribute value encoding in X.509
2017-11-22 - Changing a CA’s Subject DN; Part II: FreeIPA
2017-11-20 - Changing a CA’s Subject DN; Part I: Don’t Do That
2017-11-10 - Changing the X.509 signature algorithm in FreeIPA
2017-09-04 - Running Keycloak in OpenShift
2017-08-14 - Installing FreeIPA with an Active Directory subordinate CA
2017-07-11 - Implications of Common Name deprecation for Dogtag and FreeIPA
2017-06-26 - Wildcard SAN certificates in FreeIPA
2017-03-21 - Supporting large key sizes in FreeIPA certificates
2017-02-20 - Wildcard certificates in FreeIPA
2016-08-12 - Smart card login with YubiKey NEO
2016-07-26 - FreeIPA Lightweight CA internals
2016-07-25 - Lightweight Sub-CAs in FreeIPA 4.4
2016-02-11 - Introduction to Tang and Clevis
2015-11-04 - FreeIPA PKI: current plans and a future vision
2015-09-09 - Automatic decryption of TLS private keys with Deo
2015-09-02 - Delegating certifiate issuance in FreeIPA
2015-08-06 - User certificates and custom profiles with FreeIPA 4.2
2014-10-22 - Configuring FreeBSD as a FreeIPA client
2014-09-30 - LDAP persistent searches with ldapjdk
2014-08-18 - Musings on Identity Management
2014-07-29 - OTP authentication in FreeIPA
2014-07-11 - Daniel J. Bernstein lecture on software (in)security
2014-07-09 - Diagnosing a Dogtag SELinux Issue
2014-06-02 - Introduction to the Dogtag Python API
2014-05-28 - More entropy with haveged
2014-05-19 - Docker build context and symbolic links
2014-05-14 - Dogtag profile definitions
2014-05-12 - Dogtag certificate profiles - certificate requests