Posts
All the articles I've posted.
SSL 64-bit Block Size Cipher Suites Supported (SWEET32)
Updated:Nessus reports a vulnerability because of 64-bit cipher suites and SSL Medium Strength Cipher Suites Supported (even though it shows up as strong ). Window
PacketFence Join Domain
Updated:This has caused me a lot of frustration this morning. The new version of PacketFence doesn't like the externally configured domain configuration that I was forced to use when I first set things up.
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam)
Updated:Create and set the following registry key value: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffi
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam) - Tomcat
Updated:Disable the ciphers that use Diffie-Hellman by adding !DHE into your ciphers list ciphers="HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA:!3DES:!DHE" Now
SSL 64-bit Block Size Cipher Suites Supported (SWEET32) - Tomcat
Updated:Following on from the Windows vulnerability for SWEET32, Here's how to resolve the same issue with Tomcat 8. This use the OpenSSL format string for ciphers
Java Ciphers & Algorithms
Updated:I've tasked myself with getting one of our most used vendor apps up to compliance with our security audits. It's not as easy as I'd hoped. Especially seein
Rant by a Complete Java Noob
Updated:I confess, I'm a complete Java noob. In fact slightly worse than that, I'm a Java hater. In principle it's a great idea, cross platform and all that jazz,
VCSA /storage/log Full
/storage/log directory is full in vCenter Server Appliance 6.0 https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&external
Securing Tomcat
Updated:NEVER trust a vendor installation to be secure. Carry out a vulnerability scan whilst they're still onsite and don't sign off any installation until all security concerns have been resolved.
Renamed Machine & Wrong Certificate Name
Updated:When we setup some virtual machines from a template and used temporary names for them because we needed to replace existing machines that were currently ru