-
Your Let’s Encrypt client used ACME TLS-SNI-01 domain validation to issue
Are you seeing this message about your server ? Action may be required to prevent your Let’s Encrypt certificate renewalsfrom breaking.If you already received a similar e-mail, this one contains updatedinformation.Your Let’s Encrypt client used ACME TLS-SNI-01 domain validation to issuea certificate in the past 60 days This is an issue caused by the certbot binary being out…
-
Solve Letsencrypt (including Certbot) problems caused by rogue .htaccess files
At RimuHosting we’re enthusiastic about how Let’s Encrypt gives website owners a great way to secure their websites. And certbot is the tool we usually recommend to get a Let’s Encrypt certificate. We find it’s easy to use and works well on recent distributions. However, sometimes issuing or renewing a certificate fails. A common reason…
-
Certbot/Letsencrypt with Apache and Tomcat using proxypass
LetsEncrypt/Certbot is a wonderful cheap way to have an SSL cert to secure things. It works out of the box and no issues for the most part until you have things like proxy pass or other things. The fix is fairly easy however, and this works well in particular with those running tomcat behind apache…
-
Drupal Exploits – script to detect versions
We are currently seeing a high volume of Drupal exploits running a lot of arbitrary code, including crypto mining, attacking other servers and similar due to this exploit https://www.drupal.org/sa-core-2018-002 If you want to find out if you have any vulnerable Drupal installs quickly and easily i wrote a shell script for that . Just run…
-
Spectre and Meltdown article roundup
Our team is working on the best approach to secure our customers’ systems against the recently reported Spectre and Meltdown vulnerabilities. Our first step is to understand the problem and its mitigations. This post provides a roundup of discussions and work on the topic with a focus on mitigation for the Xen hypervisor. The vulnerabilities…
-
Letsencrypt with Zonomi and Rimuhosting name servers using hooks
SSL is good, you should use it everywhere! Letsencrypt it is a project that allows you to obtain signed certificates for free (you should consider donating though) to secure your website. Big efforts have been done to make this accessible to anyone. In order to issue SSL certificates Certificate Authorities will check that you can control…
-
Reboot-less Xen patching
Recently there have been two sets of Xen vulnerabilities. One being disclosed in September, the other earlier today. Historically we have had to organize host updates which required downtime to reboot VMs. For these last sets of vulnerabilities we have been able to use a recently introduced live patching feature in Xen to mitigate the…
-
Whitelist your own computer in fail2ban
Fail2ban is a great “dynamic” firewall for servers that is installed by default on many of our VPSs, and we can install it on your VPSs at your request. It protects against brute-force attacks, where an attacker is trying to guess a password or exploit certain classes of vulnerabilities on servers. One potential problem with…
-
Lets Encrypt with Virtualmin
Virtualmin now supports Let Encrypt, this means you can easily get multiple SSL certificates easily and free if needed. Here is how you can set that up. Step 1: Login to your virtualmin, select the domain from the drop down in the top left. Step 2: Click ‘Edit Virtual Server’ , under the ‘Enabled Features’…
-
ClamAV: mpool_malloc and disk space
ClamAV is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats. The most common use we see is to check emails for bad content. Some of our users have recently been seeing errors from “freshclam” processes that look like the below entry. These will occur quickly and will often cause…