The starting point is a running ORDOID-C1 with the Ubuntu minimal image. Make sure the Ubuntu installation has been dist-upgraded and to use the latest linux-image-c1 kernel image available (3.10.72-78 as of this writing). The ODROID-C1 has to be running the lastest kernel available, check with uname -r. Some of the early Ubuntu minimal images may …
Continue reading “How to encrypt an ODROID-C1’s Ubuntu root filesystem with DM-crypt LUKS”
Since everyone now can get free 2-year multi-domain certificates from WoSign, I grabbed one for one of my web sites. However, WoSign’s OCSP server is located in China which may, depending on your and your server’s location, increase latency once the web browser is verifying the certificate’s revocation status. In my case from Europe: PING …
Continue reading “Free multi-domain SSL certificates from WoSign and HAProxy OCSP stapling”
I created a transparent VPN Internet gateway tunnel (sorry, couldn’t come up with a better name for it) using OpenVPN and my new Odroid-C1 Linux mini computer. However, this will work with any Linux PC (including the Raspberry Pi). The beauty of a transparent VPN gateway is that a device in the LAN doesn’t have …
Continue reading “How to set up a transparent VPN Internet gateway tunnel using OpenVPN”
Sep 29 19:19:41 wopr sshd[11801]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key If you’re getting this error message in the log file, you most likely have the ed25519 HostKey enabled in your sshd_config file but for some reason, no host key was generated for it. Since openssh-6.4 you can run the ssh-keygen command to generate …
Continue reading “Could not load host key: /etc/ssh/ssh_host_ed25519_key”
I prefer strongSwan over Openswan because it’s still in active development, easier to setup and doesn’t require a L2TP daemon. I prefer a simple IKEv1 setup using PSK and XAUTH over certificates. If you plan to share your VPN server with your friends it’s also a lot easier to setup for them without certificates. I …
Continue reading “strongSwan 5 based IPSec VPN, Ubuntu 14.04 LTS and PSK/XAUTH”
