HRBuckley.Net

This article discusses two things that all WordPress plugins should do.

Operation n » Writing Secure WordPress Plugins.

I’ve been trying to mash up a way to serve PK certificates (X.509) to Blackberries without the overhead of the whole BES server. It turns out that a very plan OpenLDAP installation (available for most Linux distributions) works very well. The quick start guide is enough to get the server up and running. It took a little work figure out how to get the certificates pushed into the server. It turns out that they have to be in DER format, while they are normally in PEM format. No problem OpenSSL takes care of that:

openssl x509 -outform DER -in incert.pem -out outcert.der

Then include the following line in your LDIF file for the user:

userCertificate;binary:< file:///path/to/outcert.der

I finally found that out from here.

According to an article on Slashdot Debian and all derivative systems, including Ubuntu have a serious security vulnerability. While there are remedies for this particular system, I feel this uncovers a systemic fault in the way the distributions are being maintained. I’m no longer recommending or using these distributions.