## connect to mail server for testing purpose ##
openssl s_client -connect smtp.server.com:995
openssl s_client -connect smtp.server.com:995 -CApath /etc/ssl

## encrypt file ##
openssl aes-256-cbc -salt -in records-fy-2011-12.dbx   -out records-fy-2011-12.dbx.aes
## decrypt file ##
openssl aes-256-cbc -d -in records-fy-2011-12.dbx.aes -out records-fy-2011-12.dbx

Cheers,

Pedro M. S. Oliveira

Binary:

tor-0.2.2.39-tor.0.rh6_3.x86_64.rpm

Source:

tor-0.2.2.39-tor.0.rh6_3.src.rpm

How to re-scan the SCSI bus on Linux
Note to self/Google, here’s how to re-scan the SCSI bus on Linux:

echo “- – -” > /sys/class/scsi_host/host0/scan

Update: Tim Verhoeven has a more complete description of the re-scanning process.
(http://misterd77.blogspot.com/2007/12/how-to-scan-scsi-bus-with-26-kernel.html)

find /home/vmail -type f -name [0-9]* -exec ls -l {} \; | gawk '{sum += $5; n++;} END {print sum/n;}'

First I find all the files that starts with a number on the base directory of my dovecot server (IMAP storage), and the I need to list them as the size info is needed.
Second I’ve a little gawk script (and this part isn’t mine (I’ve looked for it on the net years ago)) that will do the sum and division.
Let me say this took a few hours as the storage holding the files has 8TB of data.
Well hope this will help some1 else.
Cheers,
Pedro

About a year ago I’ve setup some linux RHEL 6 with multipath access to an HP EVA storage.

Today I needed to do it again, and to do so i needed to list all the path available to the storage device, here’s my command line (hope it helps someone else) to list all the path and volumes:

ls /dev/sd* | grep -E -v '[0-9]' | while read D ; do F=$(echo $D) ; \
echo -n $F ; echo -n " " ; scsi_id --page=0x83 --whitelisted --device=$F | \
sort -k 2 ; done | sort -k 2

The output should be something like this:

/dev/sda 3600508b1001c927a634cedb90322b49e
/dev/sdb 3600508b4000744ff0000a00001fd0000
/dev/sdf 3600508b4000744ff0000a00001fd0000
/dev/sdj 3600508b4000744ff0000a00001fd0000
/dev/sdn 3600508b4000744ff0000a00001fd0000
/dev/sdd 3600508b4000744ff0000a000025c0000
/dev/sdh 3600508b4000744ff0000a000025c0000
/dev/sdl 3600508b4000744ff0000a000025c0000
/dev/sdp 3600508b4000744ff0000a000025c0000
/dev/sde 3600508b4000744ff0000a000025f0000
/dev/sdi 3600508b4000744ff0000a000025f0000
/dev/sdm 3600508b4000744ff0000a000025f0000
/dev/sdq 3600508b4000744ff0000a000025f0000
/dev/sdc 3600508b4000744ff0000a00002660000
/dev/sdg 3600508b4000744ff0000a00002660000
/dev/sdk 3600508b4000744ff0000a00002660000
/dev/sdo 3600508b4000744ff0000a00002660000

As you can see I’ve one available disk on this server, actually this one is a RAID1 (HW) config (sda), 16 paths to my storage device, that delivers 4 different volumes (4 paths to each volume).
Sometime later I’ll discuss the multipath configuration but for now i just wanted to leave the command line that help me list all the paths ids.
Cheers,
Pedro Oliveira

Recently I installed a tor relay server but I couldn’t find the rpm for Scientific Linux, so i decided to get the source code and copile it myself, even better i decided to make the RPM.

I’m really short on time so I didn’t create a repo for it (if someone out there vulunters to help maintaining the repo I’ll do it)

For now here’s the rpm, enjoy.

Pedro M. S. Oliveira

PS – For those of you that doesn’t know what tor project is you may check https://www.torproject.org/

http://news.opensuse.org/2012/01/23/using-btrfs-on-opensuse-12-1/

Cheers,
Pedro

1. Install all needed packages:

yum install bridge-utils

yum install tunctl

2. Disable NetworkManager and enable network at boot time:

chkconfig NetworkManager off

chkconfig –levels 35 network on

/etc/init.d/NetworkManager stop

/etc/init.d/network restart

3. Create br0 configuration

vi /etc/sysconfig/network-scripts/ifcfg-br0

Change following configuration to your needs.

DEVICE=br0

TYPE=Bridge

BOOTPROTO=static

DNS1=192.168.0.1

GATEWAY=192.168.0.1

IPADDR=192.168.0.100

NETMASK=255.255.255.0

ONBOOT=yes

SEARCH=”example.com”

4. Modify eth0 configuration:

vi /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0

HWADDR=00:1e:90:f3:f0:02

ONBOOT=yes

TYPE=Ethernet

IPV6INIT=no

USERCTL=no

BRIDGE=br0

5. Restart network or reboot machine

/etc/init.d/network restart

or

reboot

Credits to: http://www.banym.de

Dovecot, for example, seems to expect pem-files, while RapidSSL only issues
crt-files. The solution? Use OpenSSL to convert (via the DER-format) to pem:

openssl x509 -in input.crt -out input.der -outform DER

then

openssl x509 -in input.der -inform DER -out output.pem -outform PEM

Today I was playing MW3 on my Playstation3 and I thought it would be nice to have the online players face somewhat showing on the screen, I was imagining how this could be done so I look for inspiration on my newest gadget the GALAXY NEXUS which just arrived a few days ago.

One of the functionalities I like the most is the face recognition feature and I use it from day one.

But first let me tell you what i think about the Galaxy Nexus, I’m so thrilled with it that i don’t see any negative spots yet, the one i can remember it’s also a positive thing and is it’s size.

Apart from that the screen is simply astonishing and the speed and easy to use make this phone a rock star, I know this isn’t an objective review on the mobile phone but this post is not intended to be a review.

On the other end there is a functionality that is also a very big security flaw – FACE UNLOCK.

Google warns you about face recognition not being the safest of methods to unlock your phone, but nevertheless you can pass the locking feature just by using any other photo of you.

I used my facebook.com photos to unlock the phone and I had about 80% success with a couple of face photos, nevertheless I didn’t succeed with the profile photo (maybe the resolution was too low, on the smaller picture). This trick took me less than a minute to accomplish.

It’s not an high tech hack, and it probably works if your phone is stolen or lost, but it won’t save you from your jealous girlfriend (or boyfriend), won’t save you from your dads or sons. In the end it’s way too easy for someone familiar with you to access your personal data if you use face unlock.

Maybe this could be fixed using the phone proximity sensor that could be used to determine the distance of the phone to the face (i was only successful using the phone about 10-15cm from the monitor), also recording the phone relative inclination with the face and finally by detecting any type of movement on the moment the face is being verified.

Despite one of the biggest innovations being a big “no go” at least in my opinion, I still love my Nexus.

That’s all folks,

Pedro Oliveira