Tag: certificates

All the articles with the tag "certificates".

• acme.sh

  Updated:19 Apr, 2021

  We've been using certbot and Let's Encrypt for years. But we have some legacy systems hidden in the bowels and darkest corners or our data centre that are

• Trusting CA Certificates (manjaro)

  Updated:22 Mar, 2021

  This uses a completely different scheme than Debian. Let's say I have two .crt files (pem format) for intermediate and root certs use the trust program to

• Prosody Debugging

  Updated:9 Feb, 2021

  After building an ejabberd container set I'm continuing my foray into the world of xmpp by looking at prosody . I've run into a few man traps along the way

• step-ca and ACME

  Updated:15 Jan, 2021

  We have a couple of hundred certs with Let's Encrypt and it is a great service. Right now though we need to issue certs to internal systems and thought it

• Auto Select Client Certificate

  Updated:23 Oct, 2020

  When you visit a site requiring a client certificate you'll be presented with a dialog to select a certificate to use. This is awkward in a kiosk scenario

• Nginx SSL Certificate Error

  Updated:14 Oct, 2020

  We're using client side certificates on an Nginx host to ensure the credentials of the connecting users and haven't used the site for a while. I tried to l

• SMTP Ciphers

  Updated:16 Jul, 2020

  What ciphers are used by your smtp server? Well that's a question I got asked today. Take a look at this testssl.sh - it spawned a whole report about my SM

• Ansible and Client Certificates

  4 Mar, 2020

  Now we know how to inject client certificates into Firefox and Chrome it's time to automate that process with Ansible. The goal is to take a client and CA

• Firefox Certificates

  Updated:6 Feb, 2020

  Now with added Chromium! Fun and games with Nginx and client authentication certificates means we need to deploy certificates to the user for them to trust

• Trusting CA Certificates

  Updated:24 Oct, 2018

  This is something that catches me out regularly. Adding our CA certificate onto a Linux server. Just so it can trust the interactions of LDAP over a secure channel. It's pretty straightforward to do but bites me almost every time. The secret seems to be make sure you CA certificate is in PEM format and named with a .crt extension. A .pem or .cer extensions just doesn't cut it.