Posted
by Webnet
on Server Fault
See other posts from Server Fault
or by Webnet
Published on 2010-03-30T19:23:18Z
Indexed on
2010/03/30
19:33 UTC
Read the original article
Hit count: 487
Everything's running off of self-secured https. Aside from setting up user authentication, what steps should I take to be sure we're secured?
© Server Fault or respective owner
as seen on Server Fault
- Search for 'Server Fault'
I'm running Plesk 8.6.0:
I have an SSL cert installed through Plesk's admin interface. But I have a bit of an issue: When I enabled SSL for the site, and selected my cert, then restart httpd, Plesk defaults to using my self-signed default certificate.
Conversely, when I disable SSL support for the…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
Downloaded a new ssl cert from go daddy and installed the cert on apache2 server
put the cert in /etc/ssl/certs/ folder
put the gd_bundle.crt in the /etc/ssl/ folder
private key is in /etc/ssl/private/private.key
I just replaced the original files with the new files, did not replace the private…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
After creating a self-signed SSL certificate, I have configured my remote mysqld to use them (and ssl is enabled)
I ssh into my remote server, and try connecting to its own mysqld using ssl (mysql server is 5.5.25)..
~> mysql -u <user> -p --ssl=1 --ssl-cert=client.cert --ssl-key=client…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I have a IIS web site which requires client certificate. I have turned off CRL checking. The client is unable to access the web site - he gets 403.17 (certificate expired) error.
I would like to log the certificate he is using, becaue I think he is using the wrong certificate.
Is there a way to…
>>> More
as seen on Server Fault
- Search for 'Server Fault'
I have a (hopefully) common scenario for one of my sites that I just can't seem to figure out how to deploy correctly.
I have the following site and directories for example.com:
These need to require SSL:
/var/www/example.com/admin
/var/www/example.com/order
These need to be non-SSL:
/var/www/example…
>>> More
as seen on Ask Ubuntu
- Search for 'Ask Ubuntu'
Here is what I get on my terminal when running sudo apt-get update errors. I dont know if the issue is from my sources.list or my proxy setup(have not made any changes to proxies). Thank you for any help in advanced.
Ign http://security.ubuntu.com oneiric-security Release.gpg
Ign http://security…
>>> More
as seen on Devx
- Search for 'Devx'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers.
>>> More
as seen on Internet.com
- Search for 'Internet.com'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers.
>>> More
as seen on Stack Overflow
- Search for 'Stack Overflow'
Hello all,
I am a newbie to AS400-Java programming. I am trying to create my first program to test the implementation of Message Authentication Code (MAC). I am trying to use the HMACSHA1 hash function. My (Java 1.4) program runs fine on a dev box (V5R4).But fails terribly on the QA box (V5R3). My…
>>> More
as seen on Stack Overflow
- Search for 'Stack Overflow'
I'm currently getting the AccessControlException below when I deploy to app engine (I don't see it when I run in my local environment). I'm using GAE 1.3.1, Spring 3.0.1, and Spring Security 3.0.2. Any ideas how to get around this issue? It appears to be an issue with Spring Security trying to get…
>>> More
