<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for bombast.net blog</title>
	<atom:link href="http://blog.bombast.net/?feed=comments-rss2" rel="self" type="application/rss+xml" />
	<link>http://blog.bombast.net</link>
	<description>..idle writings from an idle mind..</description>
	<lastBuildDate>Wed, 01 Sep 2010 00:53:40 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
	<item>
		<title>Comment on Virgin Blue network review and Etihad partnership by Ramsey</title>
		<link>http://blog.bombast.net/?p=664&#038;cpage=1#comment-75204</link>
		<dc:creator>Ramsey</dc:creator>
		<pubDate>Wed, 01 Sep 2010 00:53:40 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=664#comment-75204</guid>
		<description>Wow, I just found your blog. It&#039;s so useful. Most of the stuff I read so far are pretty much my interests. I really like it. Thx!</description>
		<content:encoded><![CDATA[<p>Wow, I just found your blog. It&#8217;s so useful. Most of the stuff I read so far are pretty much my interests. I really like it. Thx!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on A few thoughts.. by Johan</title>
		<link>http://blog.bombast.net/?p=607&#038;cpage=1#comment-74992</link>
		<dc:creator>Johan</dc:creator>
		<pubDate>Tue, 06 Jul 2010 02:27:47 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=607#comment-74992</guid>
		<description>You&#039;re in my Google Reader - I read everything you write - muhahahhaha *evil stalker laugh*.

Johan :)</description>
		<content:encoded><![CDATA[<p>You&#8217;re in my Google Reader &#8211; I read everything you write &#8211; muhahahhaha *evil stalker laugh*.</p>
<p>Johan <img src='http://blog.bombast.net/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on OS X Server Security Update 2010-001 and Apache client authentication by Apache 2 Client Auth Redux (or how to fix what OpenSSL broke) &#124; bombast.net blog</title>
		<link>http://blog.bombast.net/?p=575&#038;cpage=1#comment-74979</link>
		<dc:creator>Apache 2 Client Auth Redux (or how to fix what OpenSSL broke) &#124; bombast.net blog</dc:creator>
		<pubDate>Thu, 01 Jul 2010 15:27:56 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=575#comment-74979</guid>
		<description>[...] Practical outcome: client auth in many web apps using Apache and mod_ssl simply stopped working. I found out the hard way when a service I had set up to use client auth to keep non-work-people out broke after OpenSSL was [...]</description>
		<content:encoded><![CDATA[<p>[...] Practical outcome: client auth in many web apps using Apache and mod_ssl simply stopped working. I found out the hard way when a service I had set up to use client auth to keep non-work-people out broke after OpenSSL was [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Apache 2 client authentication by Apache 2 Client Auth Redux (or how to fix what OpenSSL broke) &#124; bombast.net blog</title>
		<link>http://blog.bombast.net/?p=468&#038;cpage=1#comment-74978</link>
		<dc:creator>Apache 2 Client Auth Redux (or how to fix what OpenSSL broke) &#124; bombast.net blog</dc:creator>
		<pubDate>Thu, 01 Jul 2010 15:25:06 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=468#comment-74978</guid>
		<description>[...] a quick look again at setting up client authentication in Apache 2 &#8211; my previous post on the topic was fine, right up until an OpenSSL vuln was discovered where renegotiation handshakes were not [...]</description>
		<content:encoded><![CDATA[<p>[...] a quick look again at setting up client authentication in Apache 2 &#8211; my previous post on the topic was fine, right up until an OpenSSL vuln was discovered where renegotiation handshakes were not [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on OS X Server Security Update 2010-001 and Apache client authentication by zac</title>
		<link>http://blog.bombast.net/?p=575&#038;cpage=1#comment-74969</link>
		<dc:creator>zac</dc:creator>
		<pubDate>Tue, 29 Jun 2010 14:27:50 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=575#comment-74969</guid>
		<description>Oh wow, trying this out for myself has been quite a pain the the ass. For one - OS X Server doesn&#039;t have a version of Apache recent enough to recognise the SSLInsecureRenegotiation command, so that&#039;s a complete deal-breaker. Hopefully Apple will update to a more modern version of Apache at some point, but I&#039;m not holding my breath.

In testing on another server (running Debian Lenny), I found a similarly ancient version of Apache as well - so I had to &quot;dist-upgrade&quot; to Debian Squeeze (which is the current &#039;testing&#039; Debian distro) first before I was able to get things up and running.

Finally got it all sorted out, plus for bonus points I actually got logging working the way I wanted it to. I&#039;ll write up a new post on how to get this working in detail soon. :)</description>
		<content:encoded><![CDATA[<p>Oh wow, trying this out for myself has been quite a pain the the ass. For one &#8211; OS X Server doesn&#8217;t have a version of Apache recent enough to recognise the SSLInsecureRenegotiation command, so that&#8217;s a complete deal-breaker. Hopefully Apple will update to a more modern version of Apache at some point, but I&#8217;m not holding my breath.</p>
<p>In testing on another server (running Debian Lenny), I found a similarly ancient version of Apache as well &#8211; so I had to &#8220;dist-upgrade&#8221; to Debian Squeeze (which is the current &#8216;testing&#8217; Debian distro) first before I was able to get things up and running.</p>
<p>Finally got it all sorted out, plus for bonus points I actually got logging working the way I wanted it to. I&#8217;ll write up a new post on how to get this working in detail soon. <img src='http://blog.bombast.net/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on OS X Server Security Update 2010-001 and Apache client authentication by zac</title>
		<link>http://blog.bombast.net/?p=575&#038;cpage=1#comment-74939</link>
		<dc:creator>zac</dc:creator>
		<pubDate>Sun, 20 Jun 2010 04:06:12 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=575#comment-74939</guid>
		<description>Hey Bob, thanks for posting those pointers (and sorry it took me so long to notice your comment!)</description>
		<content:encoded><![CDATA[<p>Hey Bob, thanks for posting those pointers (and sorry it took me so long to notice your comment!)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Birthday drink by zac</title>
		<link>http://blog.bombast.net/?p=572&#038;cpage=1#comment-74590</link>
		<dc:creator>zac</dc:creator>
		<pubDate>Thu, 29 Apr 2010 03:04:08 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=572#comment-74590</guid>
		<description>That sounds interesting - though I&#039;m worried that with that much lemon juice, the tartness of the lemon will wipe out the raspberry/Cointreau flavour mix.

Hmmmm....</description>
		<content:encoded><![CDATA[<p>That sounds interesting &#8211; though I&#8217;m worried that with that much lemon juice, the tartness of the lemon will wipe out the raspberry/Cointreau flavour mix.</p>
<p>Hmmmm&#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Birthday drink by sandi</title>
		<link>http://blog.bombast.net/?p=572&#038;cpage=1#comment-74587</link>
		<dc:creator>sandi</dc:creator>
		<pubDate>Wed, 28 Apr 2010 18:04:47 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=572#comment-74587</guid>
		<description>I have an idea to perfect this most delicious-sounding drink: skip the orange juice and lemonade. Instead, use the juice from a yet-to-be-determined number of freshly squeezed tangelos and lemons. Maybe a 4 to 1 ratio. And sugar the rim of the glass. 

Now I want a cocktail, damn it!</description>
		<content:encoded><![CDATA[<p>I have an idea to perfect this most delicious-sounding drink: skip the orange juice and lemonade. Instead, use the juice from a yet-to-be-determined number of freshly squeezed tangelos and lemons. Maybe a 4 to 1 ratio. And sugar the rim of the glass. </p>
<p>Now I want a cocktail, damn it!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Mac OS X and eToken PKI Client by Adam</title>
		<link>http://blog.bombast.net/?p=545&#038;cpage=1#comment-74528</link>
		<dc:creator>Adam</dc:creator>
		<pubDate>Sun, 25 Apr 2010 03:09:23 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=545#comment-74528</guid>
		<description>The following was Google Translated from aladdin.ru:

No. Currently PKI Client does not support in Mac OS 10.6 
Snow Leopard. 

Release of PKI Client with support for Mac OS 10.6 Snow Leopard is scheduled 
the first quarter of 2010.</description>
		<content:encoded><![CDATA[<p>The following was Google Translated from aladdin.ru:</p>
<p>No. Currently PKI Client does not support in Mac OS 10.6<br />
Snow Leopard. </p>
<p>Release of PKI Client with support for Mac OS 10.6 Snow Leopard is scheduled<br />
the first quarter of 2010.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Mac OS X and eToken PKI Client by Rick</title>
		<link>http://blog.bombast.net/?p=545&#038;cpage=1#comment-74522</link>
		<dc:creator>Rick</dc:creator>
		<pubDate>Sat, 24 Apr 2010 19:18:25 +0000</pubDate>
		<guid isPermaLink="false">http://blog.bombast.net/?p=545#comment-74522</guid>
		<description>Aladdin pki client support for snow leopard probably will be late than first Q 2010.
Any news about other brands supporting snow?</description>
		<content:encoded><![CDATA[<p>Aladdin pki client support for snow leopard probably will be late than first Q 2010.<br />
Any news about other brands supporting snow?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
