Posts
All the articles I've posted.
Dell iDRAC and Certificates
Updated:A wider vulnerability scan picked up that we had self signed certificates on our Dell iDRAC's (Dell Remote Access Controller). But also highlighted that th
HTTPS and SNI
Server Name Indication. How to present multiple certificates over the same port based on what the client is asking for. References: https://en.wikipedia.or
SSL/TLS Deployment - Best Practices
Updated:https://www.feistyduck.com/library/openssl-cookbook/online/apA-ssl-tls-deployment-best-practices.html From ssllabs.com
Setting the Killbit for an ActiveX Control
Updated:Adding a killbit for a control that Nessus says requires one. https://support.microsoft.com/en-gb/help/240797/how-to-stop-an-activex-control-from-running-i
SSH Logon with Private Key
Updated:There are a number of ways to configure authentication in Linux, you can even use Windows credentials. But generally, for SSH, I find it easier to just use
Kali and OpenVAS
Updated:In house we use Nessus to scan for vulnerabilities, but that's a commercial subscription based product. It's not expensive, but it's not something I want t
OpenVPN Create User Keys
Updated:As I'd forgotten how to create a new OpenVPN user, it's not something I do every day, I thought I put here a reminder of the process used. To get a private
OpenVPN & DNS Lookup Failures
Updated:I've noticed that occasionally my OpenVPN connection fails to resolve host names for systems at the other end of the tunnel. If I check the DHCP settings I can see I am being pushed the DNS servers for the remote end, but nslookup fails to use them.
Hardening Windows
Updated:When it comes to Microsoft Windows straight out of the box it's full of security weaknesses. These are a number of ways to harden it so that your vulnerabi
Mozilla Thunderbird Logging
I had the need to view the actual SMTP server conversation to confirm TLS and authentication were being used. I could have done this from server logs, but as we transmit thousands of SMTP messages a day it was easier to look to the client for logs, rather than for the needle in a stack of other needles.