Tag: ssl
All the articles with the tag "ssl".
SMTP Ciphers
Updated:What ciphers are used by your smtp server? Well that's a question I got asked today. Take a look at this testssl.sh - it spawned a whole report about my SM
OpenSSL Ciphers
Updated:OpenSSL is a very handy tool. Both on Linux and Windows. On both you can do all kinds of conversions and creations, but equally of use you can view cipher
Trusting CA Certificates
Updated:This is something that catches me out regularly. Adding our CA certificate onto a Linux server. Just so it can trust the interactions of LDAP over a secure channel. It's pretty straightforward to do but bites me almost every time. The secret seems to be make sure you CA certificate is in PEM format and named with a .crt extension. A .pem or .cer extensions just doesn't cut it.
Wrong Certificate!
Updated:"Your connection is not private!" This was a game over message that was the result of installing the wrong type of certificate onto our new printers. We're
Tomcat and HTTPS
Updated:By default Tomcat gets installed with HTTP only and a number of default applications. Previously I linked documents on how to secure Tomcat . But put simpl
Windows, Apache 2.4 and OpenSSL
In order to make Apache 2.4.27 compliant it needs the later version of OpenSSL v1.1.0. To get this you need to install the VC15 version. The VC11 etc. do not include the later OpenSSL and fail because they are compiled with v1.0.2
OpenSSL and Subject Alternative Names
Updated:Now that Google chrome has started bitching about certificates not having Subject Alternative Names because the practice of using Common Names in certifica
Dell iDRAC and Certificates
Updated:A wider vulnerability scan picked up that we had self signed certificates on our Dell iDRAC's (Dell Remote Access Controller). But also highlighted that th
HTTPS and SNI
Server Name Indication. How to present multiple certificates over the same port based on what the client is asking for. References: https://en.wikipedia.or
SSL/TLS Deployment - Best Practices
Updated:https://www.feistyduck.com/library/openssl-cookbook/online/apA-ssl-tls-deployment-best-practices.html From ssllabs.com