mirror of
https://git.sr.ht/~seirdy/seirdy.one
synced 2024-11-30 15:22:09 +00:00
Compare commits
2 commits
ca60434324
...
0b6c265223
Author | SHA1 | Date | |
---|---|---|---|
|
0b6c265223 | ||
|
f0a3694023 |
6 changed files with 24 additions and 3 deletions
|
@ -8,7 +8,7 @@ title: Seirdy's Home
|
|||
sitemap:
|
||||
- ChangeFreq: weekly
|
||||
- Priority: 0.9
|
||||
stype: "WebSite"
|
||||
stype: "https://schema.org/WebSite"
|
||||
---
|
||||
About me
|
||||
--------
|
||||
|
|
|
@ -5,6 +5,7 @@ outputs:
|
|||
- html
|
||||
- gemtext
|
||||
description: "Get to know Rohan Kumar, also known as Seirdy. Contact info, my projects, interests, online accounts, etc."
|
||||
stype: "https://schema.org/AboutPage https://schema.org/ProfilePage"
|
||||
---
|
||||
<div itemscope="" itemprop="about" itemtype="https://schema.org/Person" itemid="https://seirdy.one/#seirdy" class="h-card vcard">
|
||||
|
||||
|
|
|
@ -5,6 +5,7 @@ title: "Notes"
|
|||
sitemap:
|
||||
ChangeFreq: daily
|
||||
Priority: 0.8
|
||||
stype: "https://schema.org/CollectionPage"
|
||||
---
|
||||
Notes
|
||||
=====
|
||||
|
|
18
content/notes/using-boringssl.md
Normal file
18
content/notes/using-boringssl.md
Normal file
|
@ -0,0 +1,18 @@
|
|||
---
|
||||
title: "Using BoringSSL"
|
||||
date: 2022-10-30T13:10:29-07:00
|
||||
replyURI: "https://lobste.rs/s/9eas9d/you_should_prepare_for_openssl_3_x_secvuln#c_sk5f3v"
|
||||
replyTitle: "“BoringSSL…is not intended for general use”"
|
||||
replyType: "Comment"
|
||||
replyAuthor: "AJ Jordan"
|
||||
replyAuthorURI: "https://strugee.net/"
|
||||
---
|
||||
|
||||
Despite BoringSSL's "not intended for general use" warning, it's used by many projects:
|
||||
|
||||
- The "ring" rust crate's crypto primitives (used by Rustls)
|
||||
- Cloudflare: used everywhere, including Quiche.
|
||||
- Apple's Secure Transport (it's in both major mobile OSes!)
|
||||
- Optionally: Nginx, libcurl
|
||||
|
||||
I use nginx-quic with BoringSSL without issue, although I did have to use [a separate script](https://github.com/tomwassenberg/certbot-ocsp-fetcher) to manage the OCSP cache. The script manages the cache better than Nginx ever did, so I recommend it; it should be trivial to switch it from OpenSSL to LibreSSL.
|
|
@ -5,6 +5,7 @@ title: "Articles"
|
|||
sitemap:
|
||||
ChangeFreq: weekly
|
||||
Priority: 0.7
|
||||
stype: "https://schema.org/CollectionPage"
|
||||
---
|
||||
Articles
|
||||
========
|
||||
|
|
|
@ -1,11 +1,11 @@
|
|||
<!DOCTYPE html>
|
||||
<html xmlns="http://www.w3.org/1999/xhtml" lang="{{- default "" .Site.LanguageCode }}" xml:lang="{{- default "" .Site.LanguageCode }}" prefix="og: https://ogp.me/ns# article: https://ogp.me/ns/article# cc: http://creativecommons.org/ns#">
|
||||
{{ partial "head.html" . -}}
|
||||
{{- $stype := "WebPage" -}}
|
||||
{{- $stype := "https://schema.org/WebPage" -}}
|
||||
{{- with .Params.stype -}}
|
||||
{{- $stype = . -}}
|
||||
{{- end -}}
|
||||
<body itemscope="" itemtype="https://schema.org/{{ $stype }}">
|
||||
<body itemscope="" itemtype="{{ $stype }}">
|
||||
{{ partial "header.html" . -}}
|
||||
{{- block "main" . }}{{- end -}}
|
||||
{{ partial "footer.html" . }}
|
||||
|
|
Loading…
Reference in a new issue