Archives for security

hacking servers to trust your CA

Welcome, Googlers
For the second time this millenium, I’ve had to persuade a server to trust the LDAP server
in the corner. The one with an SSL certificate written in crayon.
Eventually I found a fix – my own, from a few years back, on a mailing list archive (I never got round to restoring my old inbox [...]

second place in the arms race

Came across this on my travels last night. 
Like your style, girl. Posted without further comment (it might give the game away).

adding existing SSL keypairs to Java keystores

I want my Roller install
to use LDAP authentication (instead of its own account database).
LDAP auth means cleartext passwords, so I need to run the site over SSL.
where glassfish keeps SSL certs and keys
Each Glassfish domain has it’s own keystore, which is protected by what the docs call the
‘admin master password’ (not the same as the [...]