Post thumbnail of Use openssl to see if TLS/SSL is working between Linux and Active Directory
16 March 2009
Continue reading Use openssl to see if TLS/SSL is working between Linux and Active Directory

Use openssl to see if TLS/SSL is working between Linux and Active Directory

So now I know this certificate is blessed by my client, I can try to use it to connect. But let’s say I try to use a self-signed certificate or another cert that’s not trusted… And using a self-signed certificate, you should see something like this… If it’s a trust issue, perhaps the certificate is valid, but it just can’t find the CA or intermediate certificate… But, if everythings working correctly, your client should connect just fine. And it will look something like this, with a big fat Verify return code: 0 (ok) at the end.

Share this:
  • Digg
  • Facebook
  • Reddit
  • LinkedIn
  • Google Bookmarks
Post thumbnail of Simple https encryption benchmarking using openssl
16 March 2009
Continue reading Simple https encryption benchmarking using openssl

Simple https encryption benchmarking using openssl

I’m going to test on a remote machine that I have a shell on, so lets see how many processors it has. I wonder how many connections it can handle with its current 1024 bit certificate. You could test by retrieving a file accessible from the encrypted web server if you wanted (to see how many requests for something specific that the server can handle for example) I’ll try this from a different machine.

Share this:
  • Digg
  • Facebook
  • Reddit
  • LinkedIn
  • Google Bookmarks
Post thumbnail of Convert binary DER Security Certificates to PEM format
11 March 2009
Continue reading Convert binary DER Security Certificates to PEM format

Convert binary DER Security Certificates to PEM format

If you submit an SSL certificate request for your Apache/Lighttpd web server to a Certificate Authority (CA) on a Windows Domain Controller, you might have to convert your resulting binary DER formatted Security Certificate into PEM so Apache or Lighttpd can understand it.

Share this:
  • Digg
  • Facebook
  • Reddit
  • LinkedIn
  • Google Bookmarks
Post thumbnail of Create a self-signed SSL certificate with a single command
29 September 2008
Continue reading Create a self-signed SSL certificate with a single command

Create a self-signed SSL certificate with a single command

This doesn’t have to be complicated at all.  This was what I did on my ldap servers:
[user@ldap-primary /etc/openldap/cacerts ]$ sudo openssl req -newkey rsa:1024 -x509 -nodes -out ldap-primary.pem -keyout ldap-primary.pem -days 3650
[user@ldap-slave1 /etc/openldap/cacerts ]$ sudo openssl req -newkey rsa:1024 -x509 -nodes -out ldap-slave1.pem -keyout ldap-slave1.pem -days 3650
That’s it!  No messing …

Share this:
  • Digg
  • Facebook
  • Reddit
  • LinkedIn
  • Google Bookmarks
Post thumbnail of How to reset a mysql password from the command line
12 September 2008
Continue reading How to reset a mysql password from the command line

How to reset a mysql password from the command line

I just got Wordpress installed and completely forgot to change the random password it started me off with to something I might have a chance of remembering.  So to change it, I opened a terminal and changed the password field for the account I just created in mysql.  Here’s how:
First …

Share this:
  • Digg
  • Facebook
  • Reddit
  • LinkedIn
  • Google Bookmarks
Powered by Wordpress   |   Lunated designed by ZenVerse