All too often people I see Python code using the requests module to query an API that just bypass TLS verification (i.e it sets verify=False in the requests function calls). On RedHat Linux and derivatives, you can simply set this to verify=/etc/pki/tls/certs/ca-bundle.crt and your Python code will then automatically …

Read More

Is there anybody in the IT industry that wasn't doing something with openssl in April? I don't use the openssl command line utility that often, but last week it reminded me that openssl command line tool is pretty comprehensive and has some nice features. I thought on this occasion I'd record the most useful ones so …

Read More