Archivo por meses: enero 2018

Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed certificates ca root ssl

Since version 58, Chrome requires SSL certificates to use SAN (Subject Alternative Name) instead of the popular Common Name (CN), thus CN support has been removed. If you’re using self signed certificates (but not only!) having only CN defined, you get an error like this when calling a website using the self signed certificate: Here’s how… Read More: Fixing Chrome 58+ [missing_subjectAltName] with openssl when using self signed… »

Sign server and client certificates CA

https://jamielinux.com/docs/openssl-certificate-authority/sign-server-and-client-certificates.html

Guide to Deploying Diffie-Hellman for TLS ( Weak Diffie-Hellman and the Logjam Attack )

Guide to Deploying Diffie-Hellman for TLS Our study finds that the current real-world deployment of Diffie-Hellman is less secure than previously believed. This page explains how to properly deploy Diffie-Hellman on your server. We have three recommendations for correctly deploying Diffie-Hellman for TLS: Disable Export Cipher Suites. Even though modern browsers no longer support export… Read More: Guide to Deploying Diffie-Hellman for TLS ( Weak Diffie-Hellman and… »

Setting up a SSL Cert from Comodo

Setting up a SSL Cert from Comodo These are the steps I went through to set up an SSL cert. Purchase the cert Prior to purchasing a cert, you need to generate a private key, and a CSR file (Certificate Signing Request). You’ll be asked for the content of the CSR file when ordering… Read More: Setting up a SSL Cert from Comodo »

How To Show Number of Queries and Page Load Time in WordPress

in WordPress. Simply paste the following code anywhere you like in your theme files (such as footer.php). 1 <?php echo get_num_queries(); ?> queries in <?php timer_stop(1); ?> seconds. And refresh the page. You will see the number of queries and the execution time.

How To Install Linux, Nginx, MySQL, PHP (LEMP) stack On CentOS 7

Introduction A LEMP software stack is a group of open source software that is typically installed together to enable a server to host dynamic websites and web apps. This term is actually an acronym which represents the Linux operating system, with the ENginx web server (which replaces the Apache component of a LAMP stack). The… Read More: How To Install Linux, Nginx, MySQL, PHP (LEMP) stack On… »

fail2ban quick commands

fail2ban-client status fail2ban-client status sshd fail2ban-client set sshd unbanip IPADDRESSHERE

fail2ban security How To Protect SSH With Fail2Ban on CentOS 7

Introduction While connecting to your server through SSH can be very secure, the SSH daemon itself is a service that must be exposed to the Internet to function properly. This comes with some inherent risk and offers a vector of attack for would-be assailants. Any service that is exposed to the network is a potential… Read More: fail2ban security How To Protect SSH With Fail2Ban on CentOS… »

How to Password Protect Web Directories in Nginx and apache

Step 1: Create User and Password 1. To password protect our web directory, we will need to create the file that will contain our encrypted username and password. When using Apache, you can use the “htpasswd” utility. If you have that utility installed on your system, you can use this command to generate the password… Read More: How to Password Protect Web Directories in Nginx and apache »

wordpress permissions

For those who have their wordpress root folder under their home folder: Ubuntu/apache Add your user to www-data group: CREDIT Granting write permissions to www-data group You want to call usermod on your user. So that would be: sudo usermod -aG www-data yourUserName Assuming www-data group exists Check your user is in www-data group: groups… Read More: wordpress permissions »