<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>NONparametrics</title>
	<atom:link href="http://nonparametrics.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://nonparametrics.com</link>
	<description>geekdom without assumption</description>
	<lastBuildDate>Thu, 15 Oct 2009 23:09:48 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Lightscribe on Linux!</title>
		<link>http://nonparametrics.com/2009/10/15/lightscribe-on-linux/</link>
		<comments>http://nonparametrics.com/2009/10/15/lightscribe-on-linux/#comments</comments>
		<pubDate>Thu, 15 Oct 2009 22:41:59 +0000</pubDate>
		<dc:creator>Bryan</dc:creator>
				<category><![CDATA[tools (toys)]]></category>
		<category><![CDATA[drivers]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://nonparametrics.com/?p=45</guid>
		<description><![CDATA[Being the idealist that I am, naturally linux is my operating system of choice. In fact, I don&#8217;t remember the last time I booted something else on one of my machines. Maybe minix, a couple years ago. At any rate, there is a price to pay for jumping off of the M$ bandwagon, and most [...]]]></description>
			<content:encoded><![CDATA[<p>Being the idealist that I am, naturally linux is my operating system of choice. In fact, I don&#8217;t remember the last time I booted something else on one of my machines. Maybe minix, a couple years ago. At any rate, there is a price to pay for jumping off of the M$ bandwagon, and most of the time that comes in hardware support. Our monopolistic software giant likes to encourage hardware vendors to support only a certain, popular OS (for the dis-believing, check out <a href="http://www.groklaw.net/article.php?story=20090421111327711" target="_blank">this article on GrokLaw</a>, or at least check out <a href="http://www.ecis.eu/documents/Finalversion_Consumerchoicepaper.pdf" target="_blank">the paper</a> it mentions.). The result is many devices that end up having to be reverse engineered, usb snooped, or other in order to force them into penguine submission.</p>
<p>Laptops are the worst for this, since there are more vendors turning out more new crap&#8230;. For example, my HP Pavailion dv6-1230us; the HDMI port is tempermental, and the sound card fails to run at all in Ubuntu 9.04. I&#8217;m currently upgrading to the Beta 9.10 with high hopes, but I&#8217;ll be sure to let you know. Another feature this machine happened to have is LightScribe&#8211;a feature I just assumed would not be usable. On a whim, I <a href="http://www.google.com/search?ie=UTF-8&amp;oe=UTF-8&amp;sourceid=navclient&amp;gfns=1&amp;q=g+ubuntu+lightscribe" target="_blank">googled &#8220;ubuntu lightscribe&#8221;</a> and was thrilled to discover a page detailing the <a href="https://help.ubuntu.com/community/LightScribe" target="_blank">5 easy steps to get it running on Ubuntu</a>. It&#8217;s a pretty stripped, simple interface, but hey&#8211;it works!</p>
<p>You can find the debs or rpms pretty easily on the <a href="http://www.lightscribe.com/downloadSection/linux/index.aspx" target="_blank">lightscribe</a> site if you need them for another distro.</p>
]]></content:encoded>
			<wfw:commentRss>http://nonparametrics.com/2009/10/15/lightscribe-on-linux/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Project madness (~management)</title>
		<link>http://nonparametrics.com/2009/10/10/project-madness-management/</link>
		<comments>http://nonparametrics.com/2009/10/10/project-madness-management/#comments</comments>
		<pubDate>Sat, 10 Oct 2009 19:53:08 +0000</pubDate>
		<dc:creator>Bryan</dc:creator>
				<category><![CDATA[tools (toys)]]></category>
		<category><![CDATA[development]]></category>
		<category><![CDATA[FOSS]]></category>

		<guid isPermaLink="false">http://nonparametrics.com/?p=38</guid>
		<description><![CDATA[If you&#8217;re anything like most developers I know, then time management, project management, and organization are not among your most natural strengths. Thank goodness Wikipedia has a list of project/ticketing systems to ease the pain; if only it wasn&#8217;t so long that it takes several weeks to read, let alone evaluate.
Caught in the balanace of [...]]]></description>
			<content:encoded><![CDATA[<p>If you&#8217;re anything like most developers I know, then time management, project management, and organization are not among your most natural strengths. Thank goodness Wikipedia has a list of <a href="http://en.wikipedia.org/wiki/Comparison_of_issue_tracking_systems">project/ticketing systems</a> to ease the pain; if only it wasn&#8217;t so long that it takes several weeks to read, let alone evaluate.</p>
<p>Caught in the balanace of wanting to get something good and wanting to just get something soon, I followed a recommendation on a forum to try out trac. <a href="http://trac.edgewall.com" target="_blank">Trac</a> is an open source, &#8220;Integrated Project and SCM Management&#8221; system. After digging around in a couple of demos, and reading a few reviews, I decided to jump in and give it a shot. The features that sold me: 1)the entire thing functions like a wiki; there is an explict wiki built in, but then all milestones, tickets, and revisions (see next feature) can be written in wiki formatting and accessed via internal wiki links. 2) <a href="http://subversion.tigris.org/" target="_blank">Subversion</a> and <a href="http://git-scm.com/" target="_blank">git</a> integration; you can review the timeline, and see change sets or entire source files right in the browser! 3) plug-in extensibility; I immediately added plugins for finer-grained <a href="http://trac-hacks.org/wiki/AccessMacro">access control</a>, and <a href="http://trac-hacks.org/wiki/AccountManagerPlugin">account management</a>. I also tried out a time estimation plugin, but decided that it has a ways to go before it is truely useful.</p>
<p>A couple months into it, I&#8217;d say it&#8217;s been well worth while. The interface has been well done, including the ability to pull ticket reports based on which side of the milestone progress bar you click (very cool), and it&#8217;s saved us a lot of headaches by concentrating and connecting our internal documentation with our tickets <em>and</em> our source code. A couple of things I would love to see in the future are out-of-the-box ldap support and the ability to nest tickets. I really can&#8217;t complain though, given that it beats out a lot of pricey solutions, and it took next to no time to connect our geographically distributed teams up. Quite a few well-known FOSS projects have adopted it, including <a href="http://dev.piwik.org/trac" target="_blank">Piwik</a>, the <a href="http://dev.wp-plugins.org/">Wordpress Plugin Directory</a>, and <a href="http://trac.browsershots.org" target="_blank">Browsershots</a> (there is a decent list on the trac site).</p>
]]></content:encoded>
			<wfw:commentRss>http://nonparametrics.com/2009/10/10/project-madness-management/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Interface tuning</title>
		<link>http://nonparametrics.com/2009/10/07/interface-tuning/</link>
		<comments>http://nonparametrics.com/2009/10/07/interface-tuning/#comments</comments>
		<pubDate>Thu, 08 Oct 2009 01:33:30 +0000</pubDate>
		<dc:creator>Bryan</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[tools (toys)]]></category>
		<category><![CDATA[FOSS]]></category>
		<category><![CDATA[interface]]></category>
		<category><![CDATA[webmin]]></category>

		<guid isPermaLink="false">http://nonparametrics.com/?p=33</guid>
		<description><![CDATA[Alyssa sent me a really cool article on interface design today. I resonate with this one particularly because simplicity in software and SaaS (Software as a Service) is one of my standard soap-boxes. I believe that a large part of the gap between techies and the real world can be attributed to the complexity that we blast the poor non-techies with--real or perceived. I definitely recommend that you read it, if you have the time.

The article mentions the 80/20 rule of feature use, and that got me to thinking ...]]></description>
			<content:encoded><![CDATA[<p>Alyssa sent me a really cool <a href="http://www.smashingmagazine.com/2009/10/07/minimizing-complexity-in-user-interfaces/" target="_blank">article on interface design</a> today. I resonate with this one particularly because simplicity in software and SaaS (Software as a Service) is one of my standard soap-boxes. I believe that a large part of the gap between techies and the real world can be attributed to the complexity that we blast the poor non-techies with&#8211;real or perceived. I definitely recommend that you read it, if you have the time.</p>
<p>The article mentions the 80/20 rule of feature use, and that got me to thinking of something I&#8217;d seen in the Piwik plug-ins directory: <a href="http://www.labsmedia.com/clickheat/index.html" target="_blank">clickheat</a>. I looked it up out of curiosity, and not ten minutes later I had a copy running, logging clicks on my development system. Our system is resource based (having several hundered individually assigned/authorized resources), and each user is presented with a menu tailored to the features that they have access to. That gives us a pretty good edge on keeping things simple, but even so I know that there are well-intentioned features that can get in the way; as such I&#8217;m not about to turn down any intelligence available to me.</p>
<p>Clickheat&#8211;like it sounds&#8211;logs all the clicks on whatever page you add it to, and then does some geometric math to overlay a heat pattern on a copy of the webpage; the result? A graphical representaion of what users are doing on any given page, overlaid on the actual page that clickheat fetches with javascript.</p>
<div id="attachment_34" class="wp-caption alignnone" style="width: 353px"><img class="size-full wp-image-34" title="Clickheat" src="http://nonparametrics.com/wp-content/uploads/2009/10/Clickheat.png" alt="A &quot;thermal&quot; map of clicks overlaid on the page" width="343" height="247" /><p class="wp-caption-text">A &quot;thermal&quot; map of clicks overlaid on the page</p></div>
<p>To be perfectly candid, it&#8217;s not the easiest thing in the world to figure out, but it sure wasn&#8217;t bad. You have to do a couple of simple things (like setting a site name in the javascript tag before pasting it into your html, and deciding how to group pages for logging) and the documentation leaves much to be desired, but all in all it was worth a few moments that it took to install. It will be great when this tool matures a little and possibly adds a database back-end (right now it&#8217;s all file logging), but in the mean time it will still provide interesting use information to help us reduce the effort for our users to find and access what they really want: that golden 20.</p>
]]></content:encoded>
			<wfw:commentRss>http://nonparametrics.com/2009/10/07/interface-tuning/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Analytics without &#8216;the Man&#8217;</title>
		<link>http://nonparametrics.com/2009/09/29/analytics-without-the-man/</link>
		<comments>http://nonparametrics.com/2009/09/29/analytics-without-the-man/#comments</comments>
		<pubDate>Wed, 30 Sep 2009 02:23:02 +0000</pubDate>
		<dc:creator>Bryan</dc:creator>
				<category><![CDATA[tools (toys)]]></category>
		<category><![CDATA[FOSS]]></category>
		<category><![CDATA[webmin]]></category>

		<guid isPermaLink="false">http://nonparametrics.com/?p=31</guid>
		<description><![CDATA[One of my buddies turned me on to an awesome new tool a few months back. If you're not familiar with analytics, then you owe it to your geekiness to get in touch. Analytics allow you to see ( with non-personally identifiable information ) how--and how much--your site is being used. It will tell you geography of users, bounce rates, how people find you...]]></description>
			<content:encoded><![CDATA[<p>One of my buddies turned me on to an awesome new tool a few months back. If you&#8217;re not familiar with <a href="http://en.wikipedia.org/wiki/Web_analytics">analytics</a>, then you owe it to your geekiness to get in touch. Analytics allow you to see ( with non-personally identifiable information ) how&#8211;and how much&#8211;your site is being used. It will tell you geography of users, bounce rates, how people find you, and what pages they look at/files they download. This may sound a bit creepy at first, but the practice is already widely in use, and the information can prove invaluable when making decisions on changing and improving your site.</p>
<p>If you already understand the value of analytics, then you likely also know that Google is the modus operandi for the majority of webmins: mostly due to the lack of viable alternatives. Now, I&#8217;m all about the innovation, convenience, and especially anti-Microsoftism that Google brings to bear. That being said, they have more information about more people&#8230;.and &#8220;Don&#8217;t be evil?&#8221; Really?</p>
<p>Enter a new option, <a href="http://www.piwik.org">Piwik</a>. Piwik offers all of the basics (referrers, search engines with keywords, page counts, etc.), but what&#8217;s more, it&#8217;s all open source MVC. In other words, anything it lacks, you can add. It has an easy modules and hooks design so that your MVC plug-ins can be displayed in the eye-candy, flash-based graphing widgets&#8211;it took me all of five minutes to drop in the <a href="http://dev.piwik.org/trac/ticket/45">GeoIP plugin</a>. The API is very clean for dropping calls into other apps as well. Installation couldn&#8217;t be easier, requiring only a database user and php5 with the mysql module.</p>
<p>I&#8217;m now using Piwik on pretty much all the pages I host and a few others I have a stake in, or as favors for friends, so I know what you&#8217;re looking at =). Don&#8217;t worry, I&#8217;m just using it to improve things.</p>
]]></content:encoded>
			<wfw:commentRss>http://nonparametrics.com/2009/09/29/analytics-without-the-man/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Tech for the techies</title>
		<link>http://nonparametrics.com/2009/09/27/tech-for-the-techies/</link>
		<comments>http://nonparametrics.com/2009/09/27/tech-for-the-techies/#comments</comments>
		<pubDate>Sun, 27 Sep 2009 18:59:39 +0000</pubDate>
		<dc:creator>Bryan</dc:creator>
				<category><![CDATA[General]]></category>

		<guid isPermaLink="false">http://nonparametrics.com/?p=1</guid>
		<description><![CDATA[After a long and ardorous battle to claim the time required for it, I have decided to make use of my long-parked domain, nonparametrics.com. The intent is to migrate all of the techie posts from my personal blog, bryanjeffrey.com, over to this site and allow readers to abstain from the torturous shop talk that has [...]]]></description>
			<content:encoded><![CDATA[<p>After a long and ardorous battle to claim the time required for it, I have decided to make use of my long-parked domain, nonparametrics.com. The intent is to migrate all of the techie posts from my personal blog, <a href="http://www.bryanjeffrey.com" target="_blank">bryanjeffrey.com</a>, over to this site and allow readers to abstain from the torturous shop talk that has been its mainstay. I&#8217;m starting without the flashy style and design, since Google (and most readers) could care less about the look as long as the content is there. At some yet-undetermined time in the future, I may get to that. No promises, but I&#8217;m hoping this will help with some of my prior blogging inhibitions, and both will see some action henceforth. Happy surfing.</p>
]]></content:encoded>
			<wfw:commentRss>http://nonparametrics.com/2009/09/27/tech-for-the-techies/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>the last fedora</title>
		<link>http://nonparametrics.com/2008/04/07/the-last-fedora/</link>
		<comments>http://nonparametrics.com/2008/04/07/the-last-fedora/#comments</comments>
		<pubDate>Mon, 07 Apr 2008 15:43:50 +0000</pubDate>
		<dc:creator>Bryan</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[disaster aversion]]></category>
		<category><![CDATA[filesystem]]></category>

		<guid isPermaLink="false">http://nonparametrics.com/?p=9</guid>
		<description><![CDATA[Given the high volume of quality content &#60;wink wink&#62;  on this blog, I&#8217;m sure that many were heart broken when the server hosting this had a harddrive hiccup and downed for 10 days.  If you didn&#8217;t notice, I don&#8217;t blame you. I keep telling myself and everyone else that I will someday maintain this, but [...]]]></description>
			<content:encoded><![CDATA[<p>Given the high volume of quality content &lt;wink wink&gt;  on this blog, I&#8217;m sure that many were heart broken when the server hosting this had a harddrive hiccup and downed for 10 days.  If you didn&#8217;t notice, I don&#8217;t blame you. I keep telling myself and everyone else that I will someday maintain this, but it happens to fall a ways down in a very long list of life and professional goals. Not that I don&#8217;t see this as important, but our little I/O episode is case in point.</p>
<p>The issue was actually a rather simple one, involving only a corrupted ext3 journal in the /var partition; that unfortunetly becomes much more complicated when the offending host is located some 350 miles away in a dark basement&#8217;s much darker closet with no known *nix admins to be had. I tried to do a phone walkthough with my very patient and forgiving brother-in-law, but that ended when I failed to assert the gravitous difference between</p>
<p><code>tune2fs -O ^has_journal /var</code></p>
<p>and</p>
<p><code>tune2fs -O ^has_journal / var</code>.</p>
<p>If you&#8217;re not a sysamdin, the short story is that the mis-placement of a single space made the machine completely unbootable. So thanks to FEDEX, we&#8217;re back in business little the worse for the wear.</p>
<p>Aside from hosting a few blogs and our primary DNS, that server was not doing much anyway, and I was in the process of backing up the data to decommission it when the error occurred. I never would have guessed it a year ago, but we are now 100% <a href="http://ubuntu.com">Ubuntu</a> as that was our last <a href="http://fedoraproject.org">Fedora</a> based server. We just upgraded most of our desktops at work to the new Beta release of Hardy Heron, and I&#8217;m happy as cake. The NVidia drivers for my GeForce 6150 LE are finally solid in Compiz-Fusion after endless screen locks (the mouse would move, but no one was home) and the intel video cards are doing their own work so that the processor is freed up for snappy performance. The background art is the best yet.</p>
<p>I apologize to the faithful few who keep checking in hoping for personal news and continue to get assualted with tech jargon.. I have plans to split my personal and professional blogs apart&#8211;stop laughing, I know that keeping has been more than a task for me so far. Thanks for sticking with me anyway. Blessings!</p>
]]></content:encoded>
			<wfw:commentRss>http://nonparametrics.com/2008/04/07/the-last-fedora/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>man with a mirror</title>
		<link>http://nonparametrics.com/2007/11/07/man-with-a-mirror/</link>
		<comments>http://nonparametrics.com/2007/11/07/man-with-a-mirror/#comments</comments>
		<pubDate>Wed, 07 Nov 2007 15:46:54 +0000</pubDate>
		<dc:creator>Bryan</dc:creator>
				<category><![CDATA[HOWTO]]></category>
		<category><![CDATA[apt]]></category>
		<category><![CDATA[debian]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://nonparametrics.com/?p=21</guid>
		<description><![CDATA[I&#8217;m sure that you&#8217;ve all heard me sing the glories of Linux at some point, and probably most of you know that I run Ubuntu (among other OSes). I&#8217;m constantly impressed by the relative ease of use and how quickly it is continually improving. I&#8217;ve got 7.04 (Feisty Fawn) running on 5 machines at the [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;m sure that you&#8217;ve all heard me sing the glories of Linux at some point, and probably most of you know that I run <a href="http://www.ubuntu.com" target="_blank">Ubuntu</a> (among other OSes). I&#8217;m constantly impressed by the relative ease of use and how quickly it is continually improving. I&#8217;ve got 7.04 (Feisty Fawn) running on 5 machines at the moment, and I&#8217;ve been wanting to upgrade to 7.10 (Gutsy Gibbon) since it came out a few weeks ago; I just haven&#8217;t had the time to add a new hard drive to my apt-mirror machine. BTW, any of you really geeky fellows who run Ubuntu on more than two machines, <a href="http://apt-mirror.sourceforge.net">apt-mirror</a> is well worth the effort and bandwidth (if you have it).</p>
<p>It takes all of about 10 minutes to set up, and about 12-72 hours to download the packages. Once it&#8217;s done, your updates and installs will happen in seconds, since the downloads are only limited by your local LAN. With my sources enabled (all of the official and community repos on the ubuntu mirror plus the wineHQ one) it was a 37 gig download. Assuming you have a running web server, all it takes is:</p>
<p><code>sudo apt-get install apt-mirror</code></p>
<p>After the install, open up your mirror.list and replace the lines that start with deb with the similar ones in your sources.list. here is mine:</p>
<p><code>sudo vim /etc/apt/mirror.list</code></p>
<blockquote><p>############# config ##################<br />
#<br />
# set base_path    /var/spool/apt-mirror<br />
#<br />
# if you change the base path you must create the directories below with write privlages<br />
#<br />
# set mirror_path  $base_path/mirror<br />
# set skel_path    $base_path/skel<br />
# set var_path     $base_path/var<br />
# set cleanscript $var_path/clean.sh<br />
# set defaultarch<br />
set nthreads     20<br />
set tilde 0<br />
#<br />
############# end config ##############</p>
<p>deb http://us.archive.ubuntu.com/ubuntu/ feisty main restricted<br />
deb-src http://us.archive.ubuntu.com/ubuntu/ feisty main restricted</p>
<p>deb http://us.archive.ubuntu.com/ubuntu/ feisty-updates main restricted<br />
deb-src http://us.archive.ubuntu.com/ubuntu/ feisty-updates main restricted</p>
<p>deb http://us.archive.ubuntu.com/ubuntu/ feisty universe<br />
deb-src http://us.archive.ubuntu.com/ubuntu/ feisty universe</p>
<p>deb http://us.archive.ubuntu.com/ubuntu/ feisty multiverse<br />
deb-src http://us.archive.ubuntu.com/ubuntu/ feisty multiverse</p>
<p>deb http://security.ubuntu.com/ubuntu feisty-security main restricted<br />
deb-src http://security.ubuntu.com/ubuntu feisty-security main restricted<br />
deb http://security.ubuntu.com/ubuntu feisty-security universe<br />
deb-src http://security.ubuntu.com/ubuntu feisty-security universe<br />
deb http://security.ubuntu.com/ubuntu feisty-security multiverse<br />
deb-src http://security.ubuntu.com/ubuntu feisty-security multiverse</p>
<p>clean http://us.archive.ubuntu.com/ubuntu</p></blockquote>
<p>After that you just need to run the mirror updating command&#8230;<br />
<code>sudo su - apt-mirror -c apt-mirror</code><br />
&#8230;and wait for several hours. Or days.</p>
<p>Once it has completed the first run, you can go into /etc/cron.d/apt-mirror and uncomment the line in there to make it run on it&#8217;s own every day.</p>
]]></content:encoded>
			<wfw:commentRss>http://nonparametrics.com/2007/11/07/man-with-a-mirror/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>ssl and virtual hosts in apache 2</title>
		<link>http://nonparametrics.com/2007/05/10/ssl-and-virtual-hosts-in-apache-2/</link>
		<comments>http://nonparametrics.com/2007/05/10/ssl-and-virtual-hosts-in-apache-2/#comments</comments>
		<pubDate>Thu, 10 May 2007 08:58:11 +0000</pubDate>
		<dc:creator>Bryan</dc:creator>
				<category><![CDATA[HOWTO]]></category>
		<category><![CDATA[apache]]></category>
		<category><![CDATA[virtual hosts]]></category>

		<guid isPermaLink="false">http://nonparametrics.com/?p=27</guid>
		<description><![CDATA[I purchased a third-party signed certificate for one of our sites to get rid of the annoying security warnings. There are a dozen sites running on the server, so I have been using named virtual hosts in apache in order to avoid wasting valuable ips. I went through the whole exciting process of generating the [...]]]></description>
			<content:encoded><![CDATA[<p>I purchased a <a title="DigiCert SSL Certificates" href="http://www.digicert.com">third-party</a> signed certificate for one of our sites to get rid of the annoying security warnings. There are a dozen sites running on the server, so I have been using named virtual hosts in apache in order to avoid wasting valuable ips. I went through the whole exciting process of generating the cert <a title="Simple HOWTO for Generating the request with openssl" href="http://support.serve.com/index.php?_m=knowledgebase&amp;_a=viewarticle&amp;kbarticleid=57" target="_blank">request</a> in openssl, verifying the <a title="A whois Lookup For bryanjeffrey.com" href="http://www.whois.net/whois_new.cgi?d=bryanjeffrey&amp;tld=com">whois</a> records, and sending in proof that we own the name and that we are who we say we are. The process was relatively painless while still showing that they due their due diligence to assure proper authentication. At any rate, I had my certificate within a couple of hours, thinking that this was all to easy.</p>
<p>With the files in hand, I opened up my httpd.conf to replace my self-signed certs with the real deal. I made the changes and restarted the server, only to find that the old certificate was still being used. At first I thought that the issue was in reloading the .conf file, but that proved not to be true after a reboot. I started googling to see what could be wrong, only to learn that name-based virtual hosting and SSL do not mix. Apparently the <a title="In-depth article on how SSL works" href="http://www.cisco.com/en/US/netsol/ns340/ns394/ns50/ns140/networking_solutions_white_paper09186a0080136858.shtml">SSL</a> handshake occurs before the http headers with the hostname (which is how Apache knows what page to serve you) so that you can only use one SSL cert per IP address.</p>
<p>I made myself another latte and sat down to figure the damage on switching everything over to ip-based hosting. Running Linux makes it trivial to use multiple ip addresses on one network card (I don&#8217;t know of any limit), but I was afraid I would run short on leased ips. After scanning half a dozen sites with bits and pieces about ip virtual on Apache, it dawned on me that I might be able to run both name-based and IP-based on the same daemon. I&#8217;m sure why I assumed I couldn&#8217;t (maybe because almost every howto contains something to the effect of &#8220;Name-Based vs. IP-Based&#8221; in the title), but the revelation was a cheering thought.</p>
<p>After backing up my old httpd.conf, I changed the virtual server in question to a <a title="A page detailing the &lt;VirtualHost&gt; section for both types" href="http://www.apacheweek.com/features/vhost">IP based one</a> (leaving the others in tact). A quick change in the DNS A records and I was ready to test it out. To my delight, everything worked as it should. Anyone who can read this&#8211;and comprehend it&#8211;knows that it&#8217;s never that easy, but lucky for me it was.</p>
<p>The power and flexibility of the <a title="Linux, Apache, MySQL, PHP" href="http://en.wikipedia.org/wiki/LAMP_%28software_bundle%29">LAMP</a> stack continues to amaze me. No matter how messy the situation is, this winning combination will deliver in spades. It is no wonder that so many organizations use it.</p>
]]></content:encoded>
			<wfw:commentRss>http://nonparametrics.com/2007/05/10/ssl-and-virtual-hosts-in-apache-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
