Security
-
Software Development
Signing Digital Certificates with OpenSSL Library
While working on the pgopenssltypes extension I realized that I haven’t discussed how to sign digital certificates using the OpenSSL…
Read More » -
Software Development
Adding OpenSSL User-Defined Types to PostgreSQL
PostgreSQL supports user-defined types (UDT). These types can be used to provide type-safety on user-defined functions when we would otherwise…
Read More » -
Software Development
Database Threat Models
I finally have a breather and can start working through my backlog of ideas. I start with some background that…
Read More » -
Software Development
In Favour of Self-Signed Certificates
Today I watched the Google I/O presentation about HTTPS everywhere and read a couple of articles, saying that Google is…
Read More » -
Software Development
Revamping WSO2 API Manager Key Management Architecture around Open Standards
WSO2 API Manager is a complete solution for designing and publishing APIs, creating and managing a developer community, and for…
Read More » -
Software Development
Securing the Insecure
The 33 years old, Craig Spencer returned back to USA on 17th October from Africa after treating Ebola patients. Just…
Read More » -
DevOps
How to use SSH tunneling to get to your restricted servers
Have you ever been told that in your network serverX can only be reached by a serverY via SSH? Now…
Read More » -
Core Java
How to setup custom SSLSocketFactory’s TrustManager per each URL connection
We can see from javadoc that javax.net.ssl.HttpsURLConnection provided a static method to override with setDefaultSSLSocketFory() method. This allow you to…
Read More » -
Software Development
Single Sign-On with the Delegated Access Control Pattern
Suppose a medium-scale enterprise has a limited number of RESTful APIs. Company employees are allowed to access these APIs via…
Read More »