Browsed by
Tag: Network

Create certificate request with SHA256 on IIS 7

Create certificate request with SHA256 on IIS 7

Creating a CSR (or Certificate Singing Request) on an IIS 7 is pretty straight forward, but you end up with a request which uses the old SHA1 hashing method. Your certificate request will work, but the end result will be that your site might be vulnerable to SSL/TLS related attacks. So how to create a CSR that uses the SHA256 algorithm? All the information bellow can be found on ServerFault. First make a request.inf file. (Just use a text editor…

Read More Read More

Enable web deploy on IIS 8 running on 2012 R2

Enable web deploy on IIS 8 running on 2012 R2

Web deploy enables a developer (or anyone with sufficient privileges) to build and deploy a website using visual studio or via the command line using MSBuild. An example of such a build command can be found in my previous posts. We use it mainly in our continuous integration environment to automatically build, test and deploy new code if a new commit to the git master branch was detected. Installation via web platform installer First you will need administrator rights to…

Read More Read More

Block WordPress login attempts when no WordPress is present

Block WordPress login attempts when no WordPress is present

I’ve set up LogWatch and saw these entries turning up every day. 404 Not Found /admin/wp-login.php: 2 Time(s) /administrator/index.php: 2 Time(s) /blog/wp-login.php: 2 Time(s) /section/wp-login.php: 2 Time(s) /site/wp-login.php: 2 Time(s) /wordpress/wp-login.php: 2 Time(s) /wp-login.php: 2 Time(s) /wp-login/: 2 Time(s) /wp/wp-login.php: 2 Time(s) /www.google.com/chrome: 1 Time(s) I decided to ban them using fail2ban, seeing as there is no reason to try and use a WordPress login, when there is no wp running on that server. I based this on https://github.com/miniwark/miniwark-howtos/wiki/Fail2Ban-setup-for-Apache. vi…

Read More Read More

SSH config file

SSH config file

I learned a neat trick lately that has to do with SSH. If you are like me and use secure shell to connect to a remote box or for git push/pulls then you most likely be interested in this next little configuration file. As you probably know, all your ssh configurations and keys probably reside in the .ssh folder of your home directory. Go to this directory and use vim to create a file named config. vim ~/.ssh/config Lets add…

Read More Read More

SNI not working in IE

SNI not working in IE

We have a setup of an Nginx + Apache based web server, that uses SNI (Server Name Indication) to determine the website certificate to use. Now I knew that SNI doesn’t work on windows XP, but today it failed on Windows 7 using IE 10. Turns out that anti virus software such as McAffee can turn off some settings in IE. The settings in question to tackle this problem are under Internet options >> Advanced >> Scroll down to security…

Read More Read More