Tag: certificates
All the articles with the tag "certificates".

Ansible and Client Certificates
Now we know how to inject client certificates into Firefox and Chrome it's time to automate that process with Ansible. The goal is to take a client and CA

Firefox Certificates
Updated:Now with added Chromium! Fun and games with Nginx and client authentication certificates means we need to deploy certificates to the user for them to trust

Trusting CA Certificates
Updated:This is something that catches me out regularly. Adding our CA certificate onto a Linux server. Just so it can trust the interactions of LDAP over a secure channel. It's pretty straightforward to do but bites me almost every time. The secret seems to be make sure you CA certificate is in PEM format and named with a .crt extension. A .pem or .cer extensions just doesn't cut it.

PaperCut Certificate
Time to replace the PaperCut web server certificate. So pleased I ran into Keystore Explorer previously as this made changing the web server certificate a breeze.

Tomcat and HTTPS
Updated:By default Tomcat gets installed with HTTP only and a number of default applications. Previously I linked documents on how to secure Tomcat . But put simpl

OpenSSL and Subject Alternative Names
Updated:Now that Google chrome has started bitching about certificates not having Subject Alternative Names because the practice of using Common Names in certifica

Remmina/xfreerdp Certificate Name Mismatch
Updated:When using Remmina to connect to some of our older Windows systems we're seeing a certificate problem that prevents it from connecting. Remmina pretty much

Dell iDRAC and Certificates
Updated:A wider vulnerability scan picked up that we had self signed certificates on our Dell iDRAC's (Dell Remote Access Controller). But also highlighted that th

HTTPS and SNI
Server Name Indication. How to present multiple certificates over the same port based on what the client is asking for. References: https://en.wikipedia.or

Java Certificates
Updated:Certificates are the bane of my existence! After applying some updated certificates to Windows servers some of the systems are now failing to connect to da