545 posts tagged ssl
Subscribe-
MultiFactor Facilitates Secure Cisco IPSec -> Cisco SSL VPN Migration
http://security-blog.multifa.com/ 2008/ 05/ multifactor-facilitates-secure-cisco…"SecureAuth® facilitates a secure transition from Cisco IPSec to SSL VPN" By Garret Grajek, CISSP COO, MultiFactor Corp. One of the vexing issues facing enterprises today – is how to realize the administrative cost savings and increase user functionality of Cisco’s ASA SSL VPN offering.
-
SSL Mynx
http://blog.califaudio.com/ 2008/ 05/ ssl-mynx.htmlMynx is the new SSL enclosure that fits 2 SuperAnalogue X-Rack modules in a small desktop box. There are currently 8 different modules to choose from: X-Rack Mic AmpX-Rack VHD InputChannel EQDynamicsStereo Bus CompressorFour Channel InputMaster BusX-Rack modules use identical circuit design and manufacturing to the SSL Duality and AWS 900+ consoles.
-
Painful Debian / Ubuntu SSL bug
http://www.itwriting.com/ blog/ ?p=626A bug in the Debian-modified version of OpenSSL (also used by Ubuntu) means that cryptographic keys generated on Debian systems for the last couple of years may be insecure. Instead of being well randomized, they are easily guessable. More information about the vulnerability is here; how to fix it here.
-
Debian OpenSSL stuffup - SSH keys and SSL certs not random enough
http://allstarnic.com/ ssl-certificates-news/ debian-openssl-stuffup-ssh-keys-an…This particularly affects the use of encryption keys in OpenSSH, OpenVPN and SSL certificates. This is a Bad Thing(tm), Debian have told their own developers:. Since the nature of the crypto used in ssh cannot ensure confidentiality if … Originally posted here: Debian OpenSSL stuffup - SSH keys
-
OpenSSL what?
http://blog.0x82.com/ 2008/ 5/ 14/ openssl-whatOpenSSL what? Wed 14, 2008 10:40 | Permalink | Comments (0) | Trackbacks (0) This is not good news…. $ ssh-vulnkey COMPROMISED: 2048 b0:39:fe:46:51:0f:6b:87:24:db:af:c0:fa:d7:63:d3 and this is only my laptop…. I’m (we’re?) screwed… ssl debian
-
How to deal with the recent random number generator bug in OpenSSL and update your SSH keys.
http://blog.niekie.com/ 2008/ 05/ 14/ how-to-deal-with-the-recent-random-number-…You may have heard of the predictable random number generator bug in Debian and distributions based on Debian (like Ubuntu). Those of you using SSH to log in to other systems are probably mostly affected by this, so here is a quick tutorial to get you back up and running: First, make sure you upgrade your system.
-
Change SSL host key on Debian [Update]
http://thijs.all2all.org/ voco/ ?p=44Where yesterday decent how-to information about DSA-1571-1 was still scarce, today it’s all around. I learned the most from the Debian wiki about SSL keys. It made me change the update procedure for servers to: apt-get update apt-get install openssl rm /etc/ssh/ssh_host_* dpkg-reconfigure openssh-server Which will update any keys (dsa, rsa or whatever) for the openssh-server.
-
Setting up SSL for Lighttpd/Django
http://coderseye.com/ 2008/ setting-up-ssl-for-lighttpddjango.htmlMy latest client Farinaz Taghavi is finally in beta on her site, and one of the last steps to push her live was to set up SSL for her. Luckily, I’ve done this a number of times, so it was quick and easy to do, but still I had to refer to various reference sites and remember exactly what I do differently than some.
-
RSpec and stubbing ssl_required
http://43n141e.blogspot.com/ 2008/ 05/ rspec-and-stubbing-sslrequired.htmlHere's a quick rspec stubbing tip for those of you using RSpec and Spec::Rails with a need to stub out the controller behavior for ssl_required. I wrote this tip with mocha in mind, but you can easily apply this to whatever mocking/stubbing framework you may be using.
-
Debian (and Ubuntu) SSH / OpenSSL Security Hole
http://www.mneylon.com/ blog/ archives/ 2008/ 05/ 13/ debian-and-ubuntu-ssh-open…Debian (and Ubuntu) SSH / OpenSSL Security Hole By Michele Neylon on May 13, 2008 8:34 PM | Permalink | Comments (0) Earlier today both Debian and Ubuntu maintainers announced a serious security issue with both Open SSH and Open SSL. There is, of course, a post about it on SlashDot, but if you'd rather skip the crud (ie.