-
SMTP, SPF, DKIM, DMARC, TLS
Did you know anyone can send an email impersonating your email address? Back in 1971 when ’email’ was invented and later when it was connected to the Internet both email users knew each other. Since then spammers and other bad actors started to abuse this ‘feature’. And since then some new mechanisms have been added…
-
Centos8 + Apache + Tomcat + LetsEncrypt Setup
A popular setup for Tomcat is to run it as a backend behind Apache. This lets you use Apache for some websites and URLs and Tomcat for others (while keeping the same IP address and port). Another common requirement is to have a valid SSL certificate. This HOWTO describes that setup. The HOWTO is for…
-
Your Let’s Encrypt client used ACME TLS-SNI-01 domain validation to issue
Are you seeing this message about your server ? Action may be required to prevent your Let’s Encrypt certificate renewalsfrom breaking.If you already received a similar e-mail, this one contains updatedinformation.Your Let’s Encrypt client used ACME TLS-SNI-01 domain validation to issuea certificate in the past 60 days This is an issue caused by the certbot binary being out…
-
Solve Letsencrypt (including Certbot) problems caused by rogue .htaccess files
At RimuHosting we’re enthusiastic about how Let’s Encrypt gives website owners a great way to secure their websites. And certbot is the tool we usually recommend to get a Let’s Encrypt certificate. We find it’s easy to use and works well on recent distributions. However, sometimes issuing or renewing a certificate fails. A common reason…
-
Certbot/Letsencrypt with Apache and Tomcat using proxypass
LetsEncrypt/Certbot is a wonderful cheap way to have an SSL cert to secure things. It works out of the box and no issues for the most part until you have things like proxy pass or other things. The fix is fairly easy however, and this works well in particular with those running tomcat behind apache…
-
Letsencrypt with Zonomi and Rimuhosting name servers using hooks
SSL is good, you should use it everywhere! Letsencrypt it is a project that allows you to obtain signed certificates for free (you should consider donating though) to secure your website. Big efforts have been done to make this accessible to anyone. In order to issue SSL certificates Certificate Authorities will check that you can control…
-
Lets Encrypt with Virtualmin
Virtualmin now supports Let Encrypt, this means you can easily get multiple SSL certificates easily and free if needed. Here is how you can set that up. Step 1: Login to your virtualmin, select the domain from the drop down in the top left. Step 2: Click ‘Edit Virtual Server’ , under the ‘Enabled Features’…
-
How to get an A pass SSL rating for your SSL website
Everyone wants security, and its ideal that your SSL certificates are also secure. With this in mind, websites like SSLLabs have a testing tool that is used to grade the SSL certificate installed on your server. Often people get a low ranking when its fairly easy to get an A. I could make this post…
-
deghost ridding the world of the ghost vulnerability one host at a time
As part of our mission to wipe the ‘ghost’ vulnerability (CVE-2015-0235) from our customers servers we have created ‘deghost’. Deghost is a cross-distro script to determine the vulnerability of a libc library on a server and then patch that where possible. https://github.com/pbkwee/distrorejuve In most cases this is as simple as apt-get install libc6 or yum…
-
Replace webmin self-signed certificate to avoid sec_error_invalid_key error
Recent browser versions (e.g. Firefox 33) refuse to work with older Webmin installs. They give a sec_error_invalid_key error, offer a ‘Try again’ button, but do not offer an option to add an exception. Firefox 33 no longer supports certificates with private keys smaller than 1024 bits. You can replace your webmin certificate with a new…