Making self-signed SSL certificates with OpenSSL

So that I don't have to try to remember it or look it up next timearound, here is how to generate a real self-signed SSL certificate withOpenSSL. The basic but incomplete incantation is:

openssl req -x509 -nodes -days -keyout .key -out.crt ...

If you want a merged PEM certificate, just make the -keyout and -out arguments the same thing. The key (or the PEM


無限廣告在險峰

我和可洛都會去, 當然也要請各位到場撐場,讀讀自己的詩 。否則我們一直讀下去就太悶了。(ps.這不是發佈會)。


幻聽不曾移動瓶子樹 廿九几讀詩會
日期:2005年11月27日
時間:15:00-16:30地點:kubrick書

20051124網摘 – SSE 使 RSS 互動起來

IT News


Solaris 9's slow patch installs

Yesterday was my first time installing the Solaris 9 recommended patchset on a production machine; we rolled it onto a basically unpatchedserver. Because it was a server, I did it in single user mode (thepatch set recommends this, as some patches in the patch set sayexplicitly to apply them in single-user mode).

I already knew that installing the patch set was achingly slow on mytest machine, but my test machine is an Ultra 10 so I wasn'tsurprised. The machine from


Multiprocessors are a leaky abstraction

Earlier this week, the story started rumbling through the usual places that using hyperthreading on Intel CPUs could cause seriousperformance problems in some applications, like Microsoft SQL Server.The current best guess of the cause is cache thrashing due toHyperthreaded processors sharing L1 and L2 cache. If a process thathammers the cache is scheduled onto one logical processor of a HTpair, it will destroy the performance of anything running on theother logical CPU (I'm summarizing from here ).

As this vividly demonstrates, multiprocessors


寫文壞習慣

寫 Blog 寫得多,多少對自己的寫文陋習有些了解。

其一是多餘字眼,我寫東西重看一遍後,除了要更正錯字別字,最常見是要刪去無用的「其實」、「基本上」、「實際上」、「事實上」、「當然」等等。這些字最常出現在我的文


雪溶於霜

應湘曲線召喚
浩二發飆搶閘
四號不見不散

謹以此紀念某位稱讚胡生「是位心思細膩頭腦精明的商人」的貴族小姐。

A quick outline of Firefox extension structure

Yesterday I mentioned Firefox extensions inpassing. Let's fill in the blanks.

Firefox extensions come as .xpi files, which are just yet anotherextension for ZIP archives. Unpacked, extensions live in their owndirectory in the extensions/ subdirectory in your Firefox profiledirectory. Firefox profile directories live under ~/.mozilla/firefox ; the default profile is in .default .(Firefox randomizes the name of the profile directory, I believe dueto security concerns.)

The actual name of an extension


搞錯了

有些事情令人啼笑皆非。例如,一個人在闡釋自己某些處於特定前提下產生的個別感覺時,不但表現出一種樣板性,同時還不幸表現出,該位人士自己完全不能聽懂對方在說什麼。

(所謂樣板性,在這裡是這個意思:例如,見人

How to fiddle with Firefox .jar files relatively easily

A lot of Firefox's code is actually written in various interpretedlanguages, especially JavaScript, and Firefox extensions are prettymuch all interpreted. This means that you can do a lot of Firefox andextension hacking without ever having to rebuild from source; you justzap the interpreted files in place in your installed copy.

Firefox doesn't leave all of these files sitting around for you toedit; it bundles them up in various .jar files (pretty much all inthe chrome/ subdirectory). Fortunately .jar