What IP addresses does GitHub use that I should whitelist?

Current IP Addresses

Github currently serves applications via the following IP address range. Note: This is in CIDR notation.

• 192.30.252.0/22

In order to access all of our services, please ensure that TCP ports 22, 80, 443, and 9418 are allowed via the IP range above.

These IPs may change (or be added to) in the future, and we will keep this page up to date.

Mockito All Bundles with Hamcrest = DERP.

This is just a rehash and rant related to the following excellent post at:

https://tedvinke.wordpress.com/2013/12/17/mixing-junit-hamcrest-and-mockito-explaining-nosuchmethoderror/

This could be due to the fact that JUnit itself brings along its own version of Hamcrest as a transitive dependency. Now if you would be using JUnit 4.11 it would depending on Hamcrest 1.3 already – see here. Getting above error would be weird – since the describeMismatch method is present in org.hamcrest.Matcher interface. --Ted Vinke

This is extremely discouraging that BOTH Junit and Mockito would embed hidden transitive dependencies that are almost impossible to find without looking into the contents of the jars in the classpath.


SHAME ON YOU

Filtering without Lambda or Java 8

I wanted a way to filter generally without using Lambda or Java 8.

File path from Class Relative

determine current filesystem location of executed class from the code of this class, in runtime, given that it's executed using java command?

http://stackoverflow.com/questions/11747833/getting-filesystem-path-of-class-being-executed

Creating CORS Web Service for AngularJS

CORS is the ability to allow cross domains scripting. This can be important if you say want to host your website on S3 and have those pages access web services in EC2. I spent TONS of time trying to find how to configure AngularJS to use CORS and what I generally saw was people saying...

"You need to configure the server side for access control, not the client."

Well that's not entirely true.

The example I am using is based on the Spring, Jersey, run-as-ajar example you can find on GitHub. So lets start with the server side then:

And here is the client side...

Jenkins Home

[ec2-user ~]$ sudo su -s /bin/bash jenkins bash-4.2$

log4j Configuration

Here is the basic log4j configuration I use with all the basics. Hope this helps.

Binary Tree Search Solution

I hate face2face interview problems. I am horrible at them. I need the mental space of the IDE to work out the problem and think about it, something I dont do well in interviews.

Ah the classic interview question. Recurse Binary Trees. I don't know why they just love to give this one but I have some time off so I thought I would solve it. This is for a github project where I will point interviewers at so maybe they will just believe I can do this stuff.

The key to this is to check the other node in the recursion of the find or it will go down the right or left leg and get lost. There are some good Data Structures articles on BTS that I used to come to this solution. Here you go:

• http://cslibrary.stanford.edu/110/BinaryTrees.html
• http://opendatastructures.org/ods-java/6_1_BinaryTree_Basic_Binary.html

AWS SSL Cert with Load Balancer Issues

I have been having all kinds of problems figuring out how to use SSL with AWS Load balancers in a way that keeps users from being redirected in weird ways that look like the site has problems or dropping them out of SSL. The only way I have found that lets you do SSL without being a complete expert is to install the cert on a load balancer and then proxy to port 80. This can have some unexpected outcomes *(see bottom section)

Really would appreciate help configuring either my load balancer, domain records, or the apache2 server to make this behave more professionally.

Overview

http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/US_UpdatingLoadBalancerSSL.html

1. Generate CSR
2. Get a Comodo cert
3. Cert must be PEM encoded
4. Create Load Balancer
5. Install CERT
6. Modify Host Records

Generate a CSR

https://support.comodo.com/index.php?/Knowledgebase/Article/View/1/19/csr-generation-using-openssl-apache-wmod_ssl-nginx-os-x

Two Files will be Created:

• mysite_com.csr
• mysite_com.key

Get Comodo Cert

• AddTrustExternalCARoot.crt
• COMODORSAAddTrustCA.crt
• COMODORSADomainValidationSecureServerCA.crt
• mysite_com.crt

Cert and Key Must be RSA PEM encoded

Failed to upload SSL certificate: java.lang.ClassCastException: org.bouncycastle.asn1.pkcs.PrivateKeyInfo cannot be cast to org.bouncycastle.openssl.PEMKeyPair

$ openssl rsa -in mysite_com.key -text > mysite_com_pem.key

http://stackoverflow.com/questions/991758/how-to-get-an-openssl-pem-file-from-key-and-crt-files

Install CERT

http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/US_UpdatingLoadBalancerSSL.html

Private Key:* Use a text editor and copy the contents of mysite_com_pem.key

Public Key Certificate:* Use a text editor and copy the contents of mysite_com.crt

Successfully created load balancer

Load balancer mysitecom-lb was successfully created.Note: It may take a few minutes for your instances to become active in the new load balancer.

Modify Host Records

@ https://www.mysite.com Record Type: URL Redirect
www mysite-lb-1551430537.us-east-1.elb.amazonaws.com. Record Type: CName

Problems with this approach

1. https://www.mysite.com is properly certified and encrypted (not a problem)
2. There is no cert for the named domain https://mysite.com, in fact DNS doesnt know how to resolve to ssl version of the naked domain at all.
3. The non naked version of http://mysite.com does redirect to https://www.mysite.com, while it is good that it redirects to an encrypted version it would be better if it redirected to the SSL based naked domain of https://mysite.com
4. http://www.mysite.com/ does not redirect, it should redirect to https://www.mysite.com/