<?xml version="1.0" encoding="utf-8" ?>
<feed xmlns="http://www.w3.org/2005/Atom">

  <title>TechBlog by Alexander Koponen</title>
  <author>
    <name>Alexander Koponen</name>
  </author>
  <id>https://techblog.koponen.se/</id>
  <updated>2021-11-05T23:30:10Z</updated>
  <subtitle>Alexander Koponen writes about technology.
    Nothing fancy, just some notes, HOWTOs and other things relevant to
    a professional hacker.
  </subtitle>
  <link href="https://techblog.koponen.se/"
         rel="alternate" />
  <link href="https://techblog.koponen.se/feed/atom.xml"
         rel="self"
        type="application/atom+xml" />

  <!-- TEMPLATE -->
  <!-- 2000-11-01 23:39 -->
  <!--
  <entry>
    <title>Title of article</title>
    <id>https://techblog.koponen.se/howto/link/</id>
    <category term="metadataword1" />
    <category term="metadataword2" />
    <link href="https://techblog.koponen.se/howto/link/"
           rel="alternate" />
    <published>2018-11-01T20:39:00Z</published>
      <updated>2018-11-01T20:39:00Z</updated>
    <content>
      A brief description on what's in the article
    </content>
  </entry>
  -->

  <!--
    ____   ___  _  ___
   |___ \ / _ \/ |( _ )
     __) | | | | |/ _ \
    / __/| |_| | | (_) |
   |_____|\___/|_|\___/

   -->

  <!-- 20181101 203900 -->
  <entry>
    <title>NEWS - I've started a techblog</title>
    <id>https://techblog.koponen.se/</id>
    <category term="blog" />
    <link href="https://techblog.koponen.se/"
           rel="alternate" />
    <published>2018-11-01T20:39:00Z</published>
      <updated>2018-11-01T20:39:00Z</updated>
    <content>
      I've finally started a techblog, nothing fancy.
      Just some notes and HOWTOs on technology.
    </content>
  </entry>

  <!-- 20181106 -->
  <entry>
    <title>HOWTO - Change public IPv4 address on an instance</title>
    <id>https://techblog.koponen.se/howto/aws/change-public-ipv4-address-on-an-instance/</id>
    <category term="aws" />
    <link href="https://techblog.koponen.se/howto/aws/change-public-ipv4-address-on-an-instance/"
           rel="alternate" />
    <published>2018-11-06T12:00:00Z</published>
      <updated>2018-11-06T12:00:00Z</updated>
    <content>
      Step by step notes on how to change the public IPv4 address on an AWS instance
    </content>
  </entry>

  <!-- 20181119 -->
  <!-- 20220203 185348 -->
  <entry>
    <title>HOWTO - Add your own CA to Google Chrome</title>
    <id>https://techblog.koponen.se/howto/cert/add-your-own-ca-to-google-chrome/</id>
    <category term="cert" />
    <category term="certificates" />
    <category term="encryption" />
    <link href="https://techblog.koponen.se/howto/cert/add-your-own-ca-to-google-chrome/"
           rel="alternate" />
    <published>2018-11-19T12:00:00Z</published>
      <updated>2022-02-03T18:53:48Z</updated>
    <content>
      Step by step notes on how to add your own CA-certificate to Google Chrome
    </content>
  </entry>

  <!-- 20181221 -->
  <entry>
    <title>HOWTO - Create your own CA</title>
    <id>https://techblog.koponen.se/howto/cert/create-your-own-ca/</id>
    <category term="cert" />
    <category term="certificates" />
    <category term="encryption" />
    <link href="https://techblog.koponen.se/howto/cert/create-your-own-ca/"
           rel="alternate" />
    <published>2018-12-21T12:00:00Z</published>
      <updated>2018-12-21T12:00:00Z</updated>
    <content>
      Step by step notes on how to create your own CA and how to use it
    </content>
  </entry>

  <!--
    ____   ___  _  ___  
   |___ \ / _ \/ |/ _ \ 
     __) | | | | | (_) |
    / __/| |_| | |\__, |
   |_____|\___/|_|  /_/

   -->

  <!-- 20190110 120000 -->
  <entry>
    <title>HOWTO - Disable the IPv4 stack in FreeBSD</title>
    <id>https://techblog.koponen.se/howto/ipv6/disable-the-ipv4-stack-in-freebsd/</id>
    <category term="ipv6" />
    <category term="freebsd" />
    <link href="https://techblog.koponen.se/howto/ipv6/disable-the-ipv4-stack-in-freebsd/"
           rel="alternate" />
    <published>2019-01-10T12:00:00Z</published>
      <updated>2019-01-10T12:00:00Z</updated>
    <content>
      Step by step notes on how to completely remove IPv4 from a FreeBSD machine
    </content>
  </entry>

  <!-- 20190119 120000 -->
  <entry>
    <title>HOWTO - Install private key and certificate into an HP printer</title>
    <id>https://techblog.koponen.se/howto/cert/install-private-key-and-certificate-into-an-hp-printer/</id>
    <category term="cert" />
    <category term="certificates" />
    <category term="encryption" />
    <link href="https://techblog.koponen.se/howto/cert/install-private-key-and-certificate-into-an-hp-printer/"
           rel="alternate" />
    <published>2019-01-19T12:00:00Z</published>
      <updated>2019-01-19T12:00:00Z</updated>
    <content>
      Step by step notes on how to add your own private key and certificate into an HP printer
    </content>
  </entry>

  <!-- 20190120 120000 -->
  <entry>
    <title>HOWTO - View calendar attachment in a Linux terminal</title>
    <id>https://techblog.koponen.se/howto/email/view-calendar-attachment-in-a-linux-terminal/</id>
    <category term="linux" />
    <category term="cli" />
    <category term="calendar" />
    <category term="ical" />
    <link href="https://techblog.koponen.se/howto/email/view-calendar-attachment-in-a-linux-terminal/"
           rel="alternate" />
    <published>2019-01-20T12:00:00Z</published>
      <updated>2019-01-20T12:00:00Z</updated>
    <content>
      Step by step notes on how to add your own private key and certificate into an HP printer
    </content>
  </entry>

  <!-- 20190125 120000 -->
  <entry>
    <title>HOWTO - Adding external IPv4 access to a service on an internal IPv6 only network</title>
    <id>https://techblog.koponen.se/howto/ipv6/adding-external-ipv4-access-to-a-service-on-an-internal-ipv6-only-network/</id>
    <category term="network" />
    <category term="ipv6" />
    <link href="https://techblog.koponen.se/howto/ipv6/adding-external-ipv4-access-to-a-service-on-an-internal-ipv6-only-network/"
           rel="alternate" />
    <published>2019-01-25T12:00:00Z</published>
      <updated>2019-01-25T12:00:00Z</updated>
    <content>
      A brief example on how to setup an IPv4 capable load balancer (HAProxy) in front of an IPv6 only network
    </content>
  </entry>

  <!-- 20190205 120000 -->
  <entry>
    <title>HOWTO - Use GPG (GnuPG)</title>
    <id>https://techblog.koponen.se/howto/encryption/use-gpg/</id>
    <category term="encryption" />
    <category term="privacy" />
    <link href="https://techblog.koponen.se/howto/encryption/use-gpg/"
           rel="alternate" />
    <published>2019-02-05T12:00:00Z</published>
      <updated>2019-02-05T12:00:00Z</updated>
    <content>
      A quick tutorial/reference on HOWTO setup and use GPG (GnuPG)
    </content>
  </entry>

  <!-- 20190228 225542 -->
  <!-- 20190705 130000 -->
  <entry>
    <title>HOWTO - HLS streaming with NGINX-RTMP</title>
    <id>https://techblog.koponen.se/howto/streaming/hls-streaming-with-nginx-rtmp/</id>
    <category term="streaming" />
    <category term="video" />
    <category term="hlsg" />
    <category term="rtmp" />
    <category term="nginx" />
    <link href="https://techblog.koponen.se/howto/streaming/hls-streaming-with-nginx-rtmp/"
           rel="alternate" />
    <published>2019-02-28T22:55:42Z</published>
      <updated>2019-07-05T13:00:00Z</updated>
    <content>
      Notes on how to setup NGINX as an RTMP to HLS streaming server
    </content>
  </entry>

  <!-- 20190228 105437 -->
  <entry>
    <title>HOWTO - Install OpenVPN server</title>
    <id>https://techblog.koponen.se/howto/vpn/install-openvpn-server/</id>
    <category term="vpn" />
    <category term="openvpn" />
    <link href="https://techblog.koponen.se/howto/vpn/install-openvpn-server/"
           rel="alternate" />
    <published>2019-02-28T10:54:37Z</published>
      <updated>2019-02-28T10:54:37Z</updated>
    <content>
      Howto install OpenVPN server
    </content>
  </entry>

  <!-- 20190228 160310 -->
  <entry>
    <title>HOWTO - Use OpenVPN profiles</title>
    <id>https://techblog.koponen.se/howto/vpn/use-openvpn-profiles/</id>
    <category term="vpn" />
    <category term="openvpn" />
    <link href="https://techblog.koponen.se/howto/vpn/use-openvpn-profiles/"
           rel="alternate" />
    <published>2019-02-28T16:03:10Z</published>
      <updated>2019-02-28T16:03:10Z</updated>
    <content>
      Howto install an OpenVPN server
    </content>
  </entry>

  <!-- 20190316 112145 -->
  <!-- 20190322 060651 -->
  <!-- 20190410 120000 -->
  <!-- 20190415 120000 -->
  <entry>
    <title>REVIEW - Pop!_OS on Clevo Laptop</title>
    <id>https://techblog.koponen.se/reviews/popos-on-clevo-laptop/</id>
    <category term="linux" />
    <category term="clevo" />
    <category term="pop!_os" />
    <category term="linuxgaming" />
    <link href="https://techblog.koponen.se/reviews/popos-on-clevo-laptop/"
           rel="alternate" />
    <published>2019-03-16T11:21:45Z</published>
      <updated>2019-04-15T12:00:00Z</updated>
    <content>
      A review on using Pop!_OS on a Clevo Laptop
    </content>
  </entry>

  <!-- 20190329 120000 -->
  <entry>
    <title>HOWTO - Post install procedures to secure a VMware ESXi host</title>
    <id>https://techblog.koponen.se/howto/vmware/post-install-procedures-to-secure-a-vmware-esxi-host/</id>
    <category term="vmware" />
    <category term="esxi" />
    <link href="https://techblog.koponen.se/howto/vmware/post-install-procedures-to-secure-a-vmware-esxi-host/"
           rel="alternate" />
    <published>2019-03-29T12:00:00Z</published>
      <updated>2019-03-29T12:00:00Z</updated>
    <content>
      Step by step guide on how to secure a newly installed VMware ESXi host
    </content>
  </entry>

  <!-- 20190412 150506 -->
  <entry>
    <title>HOWTO - Add a new user to a VMware ESXi host</title>
    <id>https://techblog.koponen.se/howto/vmware/add-a-new-user-to-a-vmware-esxi-host/</id>
    <category term="vmware" />
    <category term="esxi" />
    <link href="https://techblog.koponen.se/howto/vmware/add-a-new-user-to-a-vmware-esxi-host/"
           rel="alternate" />
    <published>2019-04-12T15:05:06Z</published>
      <updated>2019-04-12T15:05:06Z</updated>
    <content>
      Step by step guide on how to add a new user to a VMware ESXi host
    </content>
  </entry>

  <!-- 20190413 090344 -->
  <entry>
    <title>HOWTO - Reset the lockout counter on a VMware ESXi account</title>
    <id>https://techblog.koponen.se/howto/vmware/reset-the-lockout-counter-on-a-vmware-esxi-account/</id>
    <category term="vmware" />
    <category term="esxi" />
    <link href="https://techblog.koponen.se/howto/vmware/reset-the-lockout-counter-on-a-vmware-esxi-account"
           rel="alternate" />
    <published>2019-04-13T09:03:44Z</published>
      <updated>2019-04-13T09:03:44Z</updated>
    <content>
      Step by step guide on how to add a new user to a VMware ESXi host
    </content>
  </entry>

  <!-- 20190826 120000 -->
  <entry>
    <title>HOWTO - Notes on using Ubiquiti Edgeswitch</title>
    <id>https://techblog.koponen.se/howto/ethernet/notes-on-using-ubiquiti-edgeswitch/</id>
    <category term="ethernet" />
    <link href="https://techblog.koponen.se/howto/ethernet/notes-on-using-ubiquiti-edgeswitch/"
           rel="alternate" />
    <published>2019-08-26T12:00:00Z</published>
      <updated>2019-08-26T12:00:00Z</updated>
    <content>
      Notes on how to get started with an Ubiquiti Edgeswitch without compromising security
    </content>
  </entry>

  <!-- 20191222 120000 -->
  <!-- 20191226 120000 -->
  <entry>
    <title>HOWTO - Ethernet over USB on Raspberry Pi</title>
    <id>https://techblog.koponen.se/howto/ethernet/ethernet-over-usb-on-raspberry-pi/</id>
    <category term="ethernet" />
    <category term="raspberry-pi" />
    <link href="https://techblog.koponen.se/howto/ethernet/ethernet-over-usb-on-raspberry-pi/"
           rel="alternate" />
    <published>2019-12-22T12:00:00Z</published>
      <updated>2019-12-26T12:00:00Z</updated>
    <content>
      How to use Ethernet over USB on Raspberry Pi
    </content>
  </entry>

  <!--
    ____   ___ ____   ___
   |___ \ / _ \___ \ / _ \
     __) | | | |__) | | | |
    / __/| |_| / __/| |_| |
   |_____|\___/_____|\___/

   -->

  <!-- 20200113 -->
  <!-- 20200727 -->
  <entry>
    <title>HOWTO - ZFS on Raspberry Pi</title>
    <id>https://techblog.koponen.se/howto/filesystem/zfs-on-raspberry-pi/</id>
    <category term="raspberry-pi" />
    <category term="filesystem" />
    <category term="zfs" />
    <link href="https://techblog.koponen.se/howto/filesystem/zfs-on-raspberry-pi/"
           rel="alternate" />
    <published>2020-01-13T12:00:00Z</published>
      <updated>2020-07-27T12:00:00Z</updated>
    <content>
      ZFS on Raspberry Pi
    </content>
  </entry>

  <!-- 20200927 125559 -->
  <entry>
    <title>NEWS - https, feed and atom.xml</title>
    <id>https://techblog.koponen.se/feed/</id>
    <category term="blog" />
    <category term="feed" />
    <category term="atom" />
    <category term="https" />
    <link href="https://techblog.koponen.se/feed/"
           rel="alternate" />
    <published>2020-09-27T12:55:59Z</published>
      <updated>2020-09-27T12:55:59Z</updated>
    <content>
      Blog has moved to https, added HSTS and...
      now there's a feed page, with an atom.xml
    </content>
  </entry>

  <!-- 20200929 021332 -->
  <!-- 20210105 130940 -->
  <entry>
    <title>HOWTO - Insert a blank line inside a markdown code block</title>
    <id>https://techblog.koponen.se/howto/markdown/insert-a-blank-line-inside-a-markdown-code-block/</id>
    <category term="markdown" />
    <category term="blog" />
    <link href="https://techblog.koponen.se/howto/markdown/insert-a-blank-line-inside-a-markdown-code-block/"
           rel="alternate" />
    <published>2020-09-29T02:13:32Z</published>
      <updated>2021-01-05T13:09:40Z</updated>
    <content>
      A very short note on how to get that highly sought after blank line
    </content>
  </entry>

  <!-- 20200929 204540 -->
  <!-- 20200930 233724 -->
  <entry>
    <title>HOWTO - Install Apache HTTPS (URL fixed)</title>
    <id>https://techblog.koponen.se/howto/www/install-apache-https/</id>
    <category term="apache" />
    <category term="https" />
    <category term="hsts" />
    <link href="https://techblog.koponen.se/howto/www/install-apache-https/"
           rel="alternate" />
    <published>2020-09-29T20:45:40Z</published>
      <updated>2020-09-30T23:37:24Z</updated>
    <content>
      Complete tutorial on how to setup an Apache web server. This includes:
      virtual hosting, Let's Encrypt certificates, HTTPS, 301 redirection and
      HSTS.
    </content>
  </entry>

  <!-- 20201003 175343 -->
  <entry>
    <title>HOWTO - WebDAV on Apache</title>
    <id>https://techblog.koponen.se/howto/filesystem/webdav-on-apache/</id>
    <category term="apache" />
    <category term="filesystem" />
    <category term="webdav" />
    <link href="https://techblog.koponen.se/howto/filesystem/webdav-on-apache/"
           rel="alternate" />
    <published>2020-10-03T17:53:43Z</published>
      <updated>2020-10-03T17:53:43Z</updated>
    <content>
      Some notes on how to get started with WebDAV on Apache.
    </content>
  </entry>

    <!--
     ____   ___ ____  _
    |___ \ / _ \___ \/ |
      __) | | | |__) | |
     / __/| |_| / __/| |
    |_____|\___/_____|_|

   -->

  <!-- 20210105 -->
  <entry>
    <title>HOWTO - HTTPS routing with HAProxy</title>
    <id>https://techblog.koponen.se/howto/www/https-routing-with-haproxy/</id>
    <category term="www" />
    <category term="https" />
    <category term="haproxy" />
    <category term="sni" />
    <category term="sni routing" />
    <category term="tls" />
    <category term="tls offloading" />
    <link href="https://techblog.koponen.se/howto/www/https-routing-with-haproxy/"
           rel="alternate" />
    <published>2021-01-05T12:48:27Z</published>
      <updated>2021-01-05T12:48:27Z</updated>
    <content>
      HTTPS routing with HAProxy
    </content>
  </entry>

  <!-- 20211105 -->
  <entry>
    <title>REVIEW - Pop!_OS on Raspberry Pi 4</title>
    <id>https://techblog.koponen.se/reviews/popos-on-raspberry-pi-4/</id>
    <category term="popos" />
    <category term="pop-os" />
    <category term="system76" />
    <category term="raspberry pi" />
    <category term="raspberry pi 4" />
    <link href="https://techblog.koponen.se/reviews/popos-on-raspberry-pi-4/"
           rel="alternate" />
    <published>2021-11-05T23:30:30Z</published>
      <updated>2021-11-07T00:24:49Z</updated>
    <content>
      A very brief review of Pop!_OS on Raspberry Pi 4
    </content>
  </entry>

  <!-- 20211107 173437 -->
  <entry>
    <title>HOWTO - Install private key and certificate on OpenWRT</title>
    <id>https://techblog.koponen.se/howto/cert/install-private-key-and-certificate-on-openwrt/</id>
    <category term="cert" />
    <category term="certificates" />
    <category term="openwrt" />
    <category term="encryption" />
    <link href="https://techblog.koponen.se/howto/cert/install-private-key-and-certificate-on-openwrt/"
           rel="alternate" />
    <published>2021-11-07T17:34:37Z</published>
      <updated>2021-11-07T17:34:37Z</updated>
    <content>
      Step by step notes on how to install your own private key and certificate on OpenWRT
    </content>
  </entry>

  <!-- 20211107 183417 -->
  <entry>
    <title>HOWTO - Install private key and certificate on wireless router GL.iNet GL-AR750S Slate</title>
    <id>https://techblog.koponen.se/howto/cert/install-private-key-and-certificate-on-wireless-router-gl-inet-gl-ar750s-slate/</id>
    <category term="cert" />
    <category term="certificates" />
    <category term="openwrt" />
    <category term="gl-ar750s" />
    <category term="encryption" />
    <link href="https://techblog.koponen.se/howto/cert/install-private-key-and-certificate-on-wireless-router-gl-inet-gl-ar750s-slate/"
           rel="alternate" />
    <published>2021-11-07T18:34:17Z</published>
      <updated>2021-11-07T18:34:17Z</updated>
    <content>
      Step by step notes on how to install your own private key and certificate on wireless router GL.iNet GL-AR750S Slate
    </content>
  </entry>

  <!-- 20211124 080240 -->
  <entry>
    <title>HOWTO - Notes on DNSSEC on BIND</title>
    <id>https://techblog.koponen.se/howto/dns/notes-on-dnssec-on-bind/</id>
    <category term="bind" />
    <category term="dns" />
    <category term="dnssec" />
    <category term="cert" />
    <category term="certificates" />
    <link href="https://techblog.koponen.se/howto/dns/notes-on-dnssec-on-bind/"
           rel="alternate" />
    <published>2021-11-24T08:02:40Z</published>
      <updated>2021-11-24T08:02:40Z</updated>
    <content>
      Just some brief step by step notes on how to enable DNSSEC for a DNS zone on BIND 9
    </content>
  </entry>

  <!--
   ____   ___ ____  ____
  |___ \ / _ \___ \|___ \
    __) | | | |__) | __) |
   / __/| |_| / __/ / __/
  |_____|\___/_____|_____|

   -->

  <!-- 20220107 030024 -->
  <!-- 20220131 193123 -->
  <entry>
    <title>HOWTO - The best way to learn Linux</title>
    <id>https://techblog.koponen.se/howto/linux/the-best-way-to-learn-linux/</id>
    <category term="linux" />
    <link href="https://techblog.koponen.se/howto/linux/the-best-way-to-learn-linux/"
           rel="alternate" />
    <published>2022-01-07T03:00:24Z</published>
      <updated>2022-01-31T19:31:23Z</updated>
    <content>
      I often get the question: "What's the best way to learn Linux?" and I
      can almost never refuse to answer, as if the question would be my
      biggest and most obvious trigger. But the answer can be quite long,
      not only because there's a lot of knowledge and experience to transfer,
      but also because I want to be sure you stick with it.

      In this article I've gathered all my thoughts and opinions on how
      someone should go about learning Linux. It wont explain how you do
      things, but rather which things you should do, in which order and why.
      You can view it as an advanced list of goals and checkpoints.

      I hope this helps!
    </content>
  </entry>

  <!-- 20220203 171834 -->
  <entry>
    <title>HOWTO - Add your own CA-cert to Linux</title>
    <id>https://techblog.koponen.se/howto/cert/add-your-own-ca-to-linux/</id>
    <category term="cert" />
    <category term="certificates" />
    <link href="https://techblog.koponen.se/howto/cert/add-your-own-ca-to-linux/"
           rel="alternate" />
    <published>2022-02-03T17:18:34Z</published>
      <updated>2022-02-03T17:18:34Z</updated>
    <content>
      Step by step notes on how to add your own CA-certificate to Linux
    </content>
  </entry>

  <!-- 20220203 192205 -->
  <entry>
    <title>HOWTO - Add your own CA-cert to Firefox</title>
    <id>https://techblog.koponen.se/howto/cert/add-your-own-ca-to-firefox/</id>
    <category term="cert" />
    <category term="certificates" />
    <link href="https://techblog.koponen.se/howto/cert/add-your-own-ca-to-firefox/"
           rel="alternate" />
    <published>2022-02-03T19:22:05Z</published>
      <updated>2022-02-03T19:22:05Z</updated>
    <content>
      Step by step notes on how to add your own CA-certificate to Firefox
    </content>
  </entry>

  <!-- 20221023 195252 -->
  <entry>
    <title>HOWTO - Install Jitsi server with Docker Compose</title>
    <id>https://techblog.koponen.se/howto/videochat/install-jitsi-server-with-docker-compose/</id>
    <category term="videochat" />
    <link href="https://techblog.koponen.se/howto/videochat/install-jitsi-server-with-docker-compose/"
           rel="alternate" />
    <published>2022-10-23T19:52:52Z</published>
      <updated>2022-10-23T19:52:52Z</updated>
    <content>
      Step by step notes on how to install a Jitsi server with Docker Compose

      Also including how to maintain (update) the Jitsi server and a whole
      bunch of complaints on why IPv4 NAT is such a pain.
    </content>
  </entry>

  <!-- 20221102 161047 -->
  <entry>
    <title>HOWTO - Verify SSH host keys with SSH CA</title>
    <id>https://techblog.koponen.se/howto/ssh/verify-ssh-host-keys-with-ssh-ca/</id>
    <category term="ssh" />
    <link href="https://techblog.koponen.se/howto/ssh/verify-ssh-host-keys-with-ssh-ca/"
           rel="alternate" />
    <published>2022-11-02T16:10:47Z</published>
      <updated>2022-11-02T16:10:47Z</updated>
    <content>
      Brief notes on how to verify SSH host keys by setting up SSH CA
    </content>
  </entry>

  <!-- 20221225 105120 -->
  <entry>
    <title>HOWTO - Notes on using local sudo with YubiKey</title>
    <id>https://techblog.koponen.se/howto/yubikey/notes-on-using-local-sudo-with-yubikey/</id>
    <category term="yubikey" />
    <link href="https://techblog.koponen.se/howto/yubikey/notes-on-using-local-sudo-with-yubikey/"
           rel="alternate" />
    <published>2022-12-25T10:51:20Z</published>
      <updated>2022-12-25T10:51:20Z</updated>
    <content>
      Brief notes on how to setup sudo on your local machine so you can
      authenticate with just the touch of a YubiKey.
    </content>
  </entry>

  <!-- 20221225 143522 -->
  <entry>
    <title>HOWTO - Passwordless Remote Server Administration with SSH, sudo and YubiKey</title>
    <id>https://techblog.koponen.se/howto/yubikey/passwordless-remote-server-administration-with-ssh-sudo-and-yubikey/</id>
    <category term="yubikey" />
    <link href="https://techblog.koponen.se/howto/yubikey/passwordless-remote-server-administration-with-ssh-sudo-and-yubikey/"
           rel="alternate" />
    <published>2022-12-25T14:35:22Z</published>
      <updated>2022-12-25T14:35:22Z</updated>
    <content>
      A working proof of concept on how you can configure a server to only
      allow SSH login via YubiKey (U2F key) hardened key pairs and then use
      the same YubiKey mechanism (pressing the YubiKey "button") on the client
      side in order to gain sudo on the server, all while having no passwords
      anywhere.
    </content>
  </entry>

</feed>
