François' Blog

UPDATE: Issues (1,2) below are fixed in the upcoming Ubuntu 26.04 release.

Recently I found out that go.mod is used for more than just specifying the name of the module and its dependencies.

Yes, I do realize it is 2024, and that we, well, at least some of us, have "State Of The Art" Multi Factor Authentication (MFA) using WebAuthn, using hardware tokens, or in some cases integrated directly in the OS with passkeys.

UPDATE: the repository instructions were updated for new releases of Debian/Ubuntu.

It took me quite a while to understand why it was so difficult to get the CI runner for Forgejo "Actions", forgejo-runner working to my satisfaction.

We'll describe how to set up a simple WireGuard VPN server between two Debian 12 systems.

Configuring WireGuard is not that difficult on OpenBSD, but what misses is a "complete" walkthrough.

After setting up a VM at Hetzner with IPv6-only and OpenBSD, some configuration was needed to make it work.

As part of my (ongoing) effort to leave GitHub (owned by Microsoft) I wanted to export my account data and delete all repositories and gists.

This is probably a bad idea as a generic solution for error handling in PHP, but it might have its uses in case you have a function that already has multiple return values. <?

It is 2022, and not everyone is using Let's Encrypt.

WireGuard is a new, relatively simple VPN technology implemented the "right way".

Every time I install a Debian Desktop (GNOME) in a VM on GNOME Boxes I forget how to get the automatic screen resolution resize thing working in the VM when resizing the GNOME Desktop window.

Previously, and earlier, we looked at modernizing the TLS configuration of OpenVPN.

This blog post is a copy of a blog post I wrote for the eduVPN blog...

One of the more infurating things about Debian is that they enable mouse support in Vim by default.

For the eduVPN project I'm using two Git servers.

This series of blog posts will take you along the process of creating a fully featured, but minimalist PHP template engine from scratch.

This blog post is a copy of a blog post I wrote for the eduVPN blog...

A little while back I read an interesting article on PGP, and how we really should stop using it.

Turns out getting PHP-FPM working on Debian 10 is very easy: $ sudo apt install php-fpm apache2 $ sudo /usr/sbin/a2enconf php7.3-fpm $ sudo /usr/sbin/a2enmod proxy_fcgi $ sudo systemctl restart apache2 $ echo '<?

Using PHP it is quite easy to generate a JSON Web Key (Set) from a PEM encoded (RSA) Public Key.

While working on Let's Connect!

This post describes how to create a PGP signed software release from your Git project.

Almost two years I wrote a post about using Apache with PHP-FPM on CentOS.

The Packagist service is used to make it possible to install PHP dependencies using the Composer tool.

This should really be easier.

So far, I notices two issues: Using the NDK (r17) does not work because it requires ncurses-compat-libs installed; The emulator won't run because you have to force it to use "system libs" instead of the libraries bundled with the emulator.

What a mess!

About 15 kilometer to the south east of Mostar, after the airport, you'll find Blagaj with its famous Dervish monastery, Blagaj Tekke at the spring of the Buna, Vrelo Bune.

One of the great things about traveling is that you have new environments for running.

After looking forward to going to Sarajevo so much, it does not disappoint!

As a response to this post about ditching certificates in TLS, I thought of some other approaches that may improve the situation for the user when dealing with phishing on the "modern" web.

This is both a blast from the past, and mostly a "note to self", as it was surprisingly hard to find how to do this.

Update: switched to new PPA, from ppa:chris-lea/libsodium to ppa:ondrej/php that contains a newer libsodium that actually has \Sodium\compare.

Having the Xdebug PHP extension always loaded slows down Composer and Phan.

There are so many misleading, confusing and extremely complicated instructions on how to create a bootable Windows USB stick on Linux that is not funny anymore.

Yesterday I closed my Skype account.

The audio quality of the Bose SoundTouch 10 is pretty good.

Doing a new round of tests for OpenVPN client support I decided to test how well Fedora 24 Beta and Ubuntu 16.04 work.

I want to respond in more detail to the response to my Tweet to @ownClouders earlier.

There is lots of crappy information out there about deploying PHP with Apache, or nginx.

Update (2015-08-12): see private-messaging-brainstorming for a discussion on the topic of private messaging.

Introduction Currently an OAuth client is supposed to know the Authorization Server (AS) that is used by a particular Resource Server (RS).

I've been playing around with OpenWrt and Freifunk.

Update (2015-07-21): fix the link to the Apache configuration file.

Finally I managed to get het Nitrokey working with IndieCert.

Update (2015-03-06): Aaron Parecki replied to this proposal here.

More feedback is required before this document can be considered finished.