https://blogs.damiendye.uk/en/tags/tls/ Recent content in Tls on Damien Dye's Blog Hugo en-GB Tue, 15 Sep 2026 09:30:00 +0100 https://blogs.damiendye.uk/en/certificates/webex-certificates-on-a-build-server/ Tue, 15 Sep 2026 09:30:00 +0100 https://blogs.damiendye.uk/en/certificates/webex-certificates-on-a-build-server/ Webex on Linux says "Offline - No internet connection" on a machine whose network is fine: the OpenSSL Cisco ship looks for its trust store inside their own build container. What breaks, the fixes that fail, the one that works, what the build process got wrong, and how a security appliance vendor ships a client that cannot check a certificate. https://blogs.damiendye.uk/en/networking/a-vpn-out-of-parts-and-what-egress-really-is/ Mon, 14 Sep 2026 15:00:00 +0100 https://blogs.damiendye.uk/en/networking/a-vpn-out-of-parts-and-what-egress-really-is/ A VPN is a virtual link plus a carrier, and Linux ships a program for each: pppd or a tap device, and netcat. Building it both ways — over TCP, UDP, TLS and DTLS, with zstd compression — shows what a VPN is made of, and what egress really is: once an attacker has root and outbound is open, the tunnel is already installed. https://blogs.damiendye.uk/en/proxmox/vm-time-ptp-kvm/ Fri, 07 Aug 2026 13:00:00 +0100 https://blogs.damiendye.uk/en/proxmox/vm-time-ptp-kvm/ A virtual machine's clock is built on an assumption virtualisation breaks: that the CPU keeps counting. Why guest time drifts on every hypervisor, what the skew actually breaks — Kerberos, TLS, Ceph, Windows — and how ptp_kvm fixes it properly on QEMU/KVM.