RimuHosting Blog

Tag: SSL/TLS

  • SSLv3 and securing against Poodle

    If you are using SSL in your web server, you probably want to read this. Google recently published details about an attack that targets SSLv3. The exploit first allows attackers to initiate a “downgrade dance” that tells the client that the server doesn’t support the more secure TLS (Transport Layer Security) protocol and forces it…

  • How to install Drupal on Plesk – Step by Step instructions

    We have had a customer who is not overly technical wanting these instructions. Since i thought he was probably not the only one wanting a simple step by step instruction on how to install drupal on plesk easily, i though i would put them on the blog for anyone else interested

  • Old tomcat 5.5 installs being exploited

    We have noticed a couple of people running older tomcat 5.5 installs, and these are being exploited . The main thing we noticed were slowdowns on bandwidth as well as CPU along with a few odd other things running as tomcat user eg www-data 20654 0.0 0.6 38616 8004 ? S 21:26 0:00 \_ /usr/sbin/apache2…

  • Zonomi DNS TTL improvements

    There have been a few updates to the Zonomi service (and RimuHosting’s DNS as well after the next code push there).  These changes have been added to help address improve the service for a few ‘niche/advanced’ users. Time To Live (TTL) edits TTL values tell name servers how long they can cache DNS results before…

  • Account authorization and password resets

    The primary way we identify our customers is via the email addresses associated with your account. If you do not communicate with us using one of these listed accounts, it may delay or slow the work we do on your server until we can verify you are authorized to request work done on the server.…

  • DigiNotar and SSL certificates

    Great news! We were pretty sure, but a recent notification from our certificate supplier told us that none of the certificates ordered on behalf of our customers are signed by DigiNotar. For those of you not aware, DigiNotar is a Certificate Authority who provided signed SSL Certificates against their own trust chain. Which was recognized…

  • PCI compliance – a basic HOWTO

    A lot of people are wanting to be PCI compliant these days, and this is generally a good thing. PCI compliance is not just a server spec, but a list of procedures, policies, controls over access to data. Therefore the server side is only one part of the process. It can be expensive and time…

  • Jboss Exploits

    There is a JBoss exploit out in the wild.  See http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0738 and https://access.redhat.com/kb/docs/DOC-30741 for details.

  • Plesk 10 – redirect problem

    We have a few people using Plesk 10, and there has been one notable bug with new installs and upgrades. Plesk has decided to redirect after the login to the server https://hostname:11444/relay Whilst this is fine if your hostname is a valid domain name that points to your server, this can be problematic for new…

  • Proftpd exploitable versions

    Due the severity of the proftp bug, and the mixed systems and versions in the VPSs, we many customers have switched to use vsftp, others just started using sftp, regardless that we have the following notes for customers willing to enable proftpd again: The bug affects versions >= 1.3.2rc3, for more information: http://bugs.proftpd.org/show_bug.cgi?id=3521 Here is…