... until the collector arrives ...

This "blog" is really just a scratchpad of mine. There is not much of general interest here. Most of the content is scribbled down "live" as I discover things I want to remember. I rarely go back to correct mistakes in older entries. You have been warned :)

2004-04-30

SharePoint

A colleague was getting as SecurityException while running a .Net WebPart (MS-speak for portlet) under SharePoint.  We poked around to figure out how to grant permissions to WebParts.  The usual .Net config editor approach didn't work.  After a bit of googling, we turned up:

Microsoft Windows SharePoint Services and Code Access Security

OpenLDAP

I figured out how to import a sample LDIF file into OpenLDAP:

ldapadd -f sample.ldif -x -D \
    "cn=administrator,dc=somedomain,dc=com" -w secret

SSL Problems

A colleague and I had a hard time getting our IIS servers to accept client side certificates.  It turns out the problem was that we had installed the SSI-TEST-CA certificate in the trusted root of our own user accounts, not in the machine trusted root.  He had an even more difficult time of it since SSL on his server became completely disabled for reasons unknown.  He and I spent most of the day trying to troubleshoot it, with no result.  The problems were:

  • At first, client-side certificates would not be recognized.
  • Later, server-side certificates started failing.
  • Finally, HTTPS failed completely.

This degradation occurred as he was uninstalling and re-installing certificates.  We tried:

  • blowing all the certificates away and re-installing them
  • uninstalling IIS and re-installing it
  • hacking at IIS's metabase.bin file using metaedit
  • restoring the system to an earlier restore point (this one worked, but when we tried to reconfigure IIS for SSL, it quickly degraded again).

We are stumped.

2004-04-29

Java keytool

The java keytool cannot import or export private keys.  In particular it cannot handle PKCS12 files (although the J2EE version of keytool can).  As a workaround, I downloaded PKCS12Import.java from the Jetty project.  It can create a JKS keystore file from a PKCS12 file.

Blog Archive