@MichaelHomer And also, can you think of openssl req -new -key $NAME.key -out $NAME.csr as creating an unsigned certificate, and then the following actually signs it?
I think I understand, any server can say that they own the certificate (since the certificate is public, so it's available on the net), but unless a private key accompanies the certificate to say "Yes, this server actually owns/was given the certificate, it doesn't mean the Server is the actual owner as he may have stolen/intercepted it. Is this better? :)
To a first approximation nobody is running a CA, but if they are then yes, they should have the private key encrypted
For the TLS keys, the benefit of encryption is fairly low since they need to be in cleartext memory anyway and you'd need to encode the password in configuration to let the web server start unattended
Sorry, I was testing the latest attempt, and it now works!!! I ran the command openssl pkcs12 -export -out localhost.pfx -inkey localhost.key -in localhost.crt, and now chrome connects to Kestrel!
I now know how to setup HTTPS in a web app.
Thank you @MichaelHomer . And also for explaining to me about the exchange of a certificate between a server and a client.
@BlackPanther In production you should probably just use Let's Encrypt and certbot will put the files somewhere for you, so the part where you tell it which files to use may still be relevant
Not a lot of reason to generate manual CSRs and so on these days for most uses
I'm sure there are a lot of developers that get buy without knowing the details, but it may be useful for me to understand things like ip addresses, servers, clients, and lots of other web stuff.
@MichaelHomer Aah I see, that makes sense. Your grasp is very strong.
@AndrasDeak I am in PL, so it's germane. The ECMAScript specification is pretty well-assembled, given what it's trying to describe. Definitely in the better half of language specs
@MichaelHomer "the better half of language specs", do you mean ECMAScript spec is one of the good language specs? I was wondering what are some/the others also in "the better half of language specs"? What are some/the others not in?
@BlackPanther I had some practical questions about CA and HTTPS a few months ago when I self studied Flask, but I didn't find something good to read. I just found this link blog.miguelgrinberg.com/post/…. Does it help your questions in ASP.NET Core?
@Tim perhaps that's a question for their Meta or chat room, not the U&L chat room, but seeing as how that site's main page and their Meta page are predominately Russian, I'd have to assume no.
I tried looking through their Meta pages for hints, but didn't find anything obvious. Then again, I'm using machine translation to "read" them.
Bought a Genius Mousepen (wacom-like just a lot cheaper) tablet, friend had a friend who said it works with linux too. Turns out my debian supports it out of the box.
Now all I've got to do is find some hand-eye coordination somewhere...
@AndrasDeak Krita is a great drawing program, open source, great Linux support and (I have read) great drawing tablet support. I don't have a tablet, but it's nice even if you don't have one. Should be your first choice.
I normally do... but then I have to scan dozens of mid-terms on a flatbed scanner and it takes a workday
I'll probably have remote mid-terms in the future (and physical mid-terms could be scanned on-site fast), which would spare me a step of printing them at home and then scanning them back again.
Then again, it wouldn't be very pleasant with a computer, period. Though a freehand drawing program might be usable. Though I've not had great experiences with those.
In that sort of situation you're really better off just working with paper directly.
@FaheemMitha I'm in a pickle of having a remote lecture, but students attend it on site (they watch a recording of a presentation I prepare for them). And mid-terms are in person too.
The genius tablet I mentioned is cheap and seems to work with debian. I'll have to see if Krita or some other drawing program can offer me a workflow with which I'm more productive
@FaheemMitha I enjoy teaching, it's the unnecessary hoop jumping that's a pain in my side
Inkscape is normally a vector graphics program, I think. I need bitmap. Which it probably can do, but it's probably easier if it's originally geared at that.
Probably. But I also want to overlay it on an image without much fuss. I just imagine something like gimp can do this more naturally (except gimp is also not ideal for this based on my experience). I'll just try Krita that Wildcard suggested and see how that works for me.
@AndrasDeak I was also about to suggest GIMP. But yes, that's not ideal either.
For end user stuff like that, Apple systems are probably better. Because they are used my non-tech artistic types. *nix historically isn't. And there isn't enough uptake of those sorts of people to have programs with really good user experiences.
@FaheemMitha Krita is the main counter-example for that. It's super clean, super slick UI, very very nice professional free software for digital painting. But other than that, yeah, creative workflows in Linux are not the greatest user experience.
I hate apple. And if I wanted to spend a lot of money on this I'd buy a wacom tablet. Or one of those fancy samsung phones/tablets that a coworker used for grading and worked like a charm.
Well, I was offered a loaned wacom tablet for this use case... but I didn't want to bother with it until I was sure that it would play nicely with debian and my workflow. Now I have the cheap genius tablet and if it works it will suffice (and if it doesn't work the wacom won't help me either)
@AndrasDeak If you're looking into using Wacom tablets with Linux, you'll definitely want to read up on David Revoy's blog posts. davidrevoy.com/index.php?tag/hardware
@Tim I notice a lot of your recent questions are about the Linux kernel. I would recommend the book "The Linux Programming Interface" which will probably answer most of your questions.