Cipherli.st - Strong ciphers for Apache, nginx and Lighttpd
Vulnerability in SSL 3.0 Could Allow Information Disclosure The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. The vulnerability, which is more formally known as CVE-2014-0160, allows an attacker […]
Have you ever generated your SSL CSR (certificate signing request) request on a Windows box and needed to install it on Linux afterwards?
First, you have to get the certificate and private key out of Windows,preferably in a PFX (PKCS #12) format.
In Outlook 2007 through Outlook 2010 all domain-joined Outlook clients would initially query Active Directory for AutoDiscover information and ultimately find a Service Connection Point (SCP) value that would point them to their nearest Client Access Server's AutoDiscover virtual directory. If that failed then they would revert to using DNS like any non-domain-joined Outlook client. […]
Today I ran into IIS 7.5 SSL certificate binding error 0x80070520 after running sysprep to create a new bundled EC2 AMI. First I launched a Windows 2008 R2 instance from an official Amazon AMI, installed IIS and imported our wildcard SSL certificate to be used on future websites. Launched the ec2Config service and ran sysprep. Created […]