Requiring a client certificate

If you want to secure your web site you can configure your apache2 server to require a client certificate. You do this by adding the following to options to the ssl host configuration:

SSLCACertificateFile /etc/ssl/private/CAcert.pem

SSLVerifyClient require
SSLVerifyDepth 10

To create a client certificate use the following commands

openssl genrsa -out client.key 1024
openssl req -new -key client.key -out client.csr

The create client.csr file has to be signd by your CA with the following command:

openssl x509 -req -days 365 -CA private/CAcert.pem -CAkey private/CAkey.pem -CAcreateserial -in client.csr -out client.crt

To create a PKCS#12 document from the client private key and the signed certificate:

openssl pkcs12 -export -clcerts -in client.crt -inkey client.key -out client.p12

The client.p12 file has to be imported by a browser to a access your server.

Reading RSS Feeds on a BlackBerry

RIMarkable yesterday asked the question: “Besides email and making calls, what do you really use your BlackBerry for?”

In one the users comments I found a link to Berry Bloglines which is a small application for reading RSS feeds on a BlackBerry. I am using Google Readerto subscribe to RSS feeds for about three months now and I really love it. I gave a try today but it did not convince me. Maybe it is just the cool Web 2.0 UI the Google guys created but I’ll stick with it.  There is also a good way to read your fees on your BlackBerry using the Google Reader for Mobiles site: – I personally do this with Opera Mini.

T-Mobile Austria will provide EDGE

This one was really unexpected for me. But I am T-Mobile customer with a BlackBerry 8700g (which supports EDGE) and I am really happy about it. I never understood why T-Mobile did not provide EDGE while Mobilkom Austria started in 2005 with their EDGE upgrade.

In March 2007 it should be possible to use EDGE in 75% of Austria – can’t wait for it ;-)