Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

1
vote
0answers
11 views

Use postfix through a proxy. How should it be configured?

Postfix by default uses ports 25, 465 and 587. In my configuration, I enabled TLS encryption using the option smtpd_use_tls=yes in postfix's main.cf. This makes all smtp communications encrypted as ...
1
vote
1answer
20 views

Is it possible to encrypt a virtual machine or container so the host is not able to read any of its data?

I'm wondering whether it would be theoretically possible for a cloud hosting provider to run an application for a customer where the customer doesn't trust the hosting provider with the data in the ...
0
votes
0answers
13 views

Plesk 11 CLI: Which method is used to encrypt database password [on hold]

i want to create a new database user on my plesk server with the CLI. As this will happen via a script I dont want to use a plain text password. Plesk CLI offers an -passwd_type as shown in the ...
-1
votes
1answer
21 views

How to encrypt boot partition in CentOS 7 kickstart?

I have a kickstart file for CentOS 7 Minimal. I would like to add encryption only to my /boot partition. but when I added the following line in the kickstart file, the complete installation fails. The ...
-1
votes
0answers
28 views

How do I encrypt Windows Server 2012 storage pools?

I want to use VeraCrypt to encrypt the data in my storage pools on my Windows Server 2012 R2 box. Unfortunately I've already built and am using my pools. I believe I could create an encrypted folder ...
-1
votes
1answer
20 views

Windows Server File Encryption [closed]

We currently use Windows built in File encryption as described in this hyperlink but its not very user friendly for our users. Does any one use this or third party software that they recommend that ...
1
vote
1answer
9 views

Remote Entry of PRE-BOOTDrive Encryption Key

I have a client with approximately 30 machines in a domain and each machine has Endpoint Encryption requiring a key to be entered at the machine keyboard each time the system is rebooted. These are ...
0
votes
0answers
10 views

Secure an external linux distro

I have a fairly complex situation, I have researched all the parts required before asking this question. I am trying to make a bootable linux distro on which I have an app that is located on an ...
0
votes
1answer
72 views

How to disable 112 bits cipher suite in ssl of a java server

How to disable 112 bit cipher suite on java application server. Specifically these one. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA ...
0
votes
0answers
20 views

Rsync backup to veracrypt-encrypted USB memory stick results in errors

I have created encrypted USB memory stick using Veracrypt for backup. First sync went ok, now trying to update it results in error. I'm using this command after mounting the volume: sudo rsync ...
0
votes
3answers
262 views

Encrypting all internal communication on an ESXi box

Lets say I have a large system made up of many VMs running on one bare metal esxi box. Each of these VMs are running application(s) that are necessary for the system. I do not have the ability to ...
1
vote
0answers
29 views

OpenVPN with CryptoAPI on Linux

I have an OpenVPN config file that uses Microsoft CryptoAPI. Meaning, it contains these lines: cryptoapicert "SUBJ:..." ca ca_file.crt tls-auth tls.key It works fine on a Windows system. However, ...
-4
votes
3answers
53 views

How to quickly encrypt a 200GB file? [closed]

I need to encrypt a 200gb file. Using 7z, on a pretty fast win2012 server, it is going to take 12 hours (using the fastest option). Is there a faster way?
2
votes
0answers
62 views

gmail this message was not encrypted [closed]

I just moved my site to another hosting provider. I use SSL/TLS for connection security and port 995. It sends my messages but the problem is that gmail shows This message was not encrypted red flag. ...
6
votes
5answers
532 views

Windows Server - any way to prevent file encryption?

I'm not talking about EFS or Bitlocker here. I'm asking if there's a way to prevent files from being encrypted. I'm referring to some extent to ransomware, but specifically I want the following ...
0
votes
2answers
21 views

Securing a forward proxy connection

I have a huge network with around 1000 users. We use squid(3.1.x) as forward caching proxy server, and we also authenticate our users to allow them access to the internet (helps us log what a ...
0
votes
1answer
40 views

Automatically encrypt application files on Linux

I get requests from customers where they have an application dump files into the FS on linux and want those files to be automatically encrypted. Not in the sense of an enrypted FS, but in a way that ...
1
vote
0answers
8 views

Fetchmail and Procmail set up with TLS

I'll start by saying I'm pretty uninformed when it comes to mail protocols, encryption, and basically everything else relevant to this question. My goal is to set up fetchmail/procmail on a machine ...
3
votes
2answers
163 views

Gmail flagging Dovecot email as insecure

I thought I successfully secured my Postfix/Dovecot email server. I have a signed certificate from LetsEncrypt, which is valid for my domain. Sending & receiving works fine, but since Gmail ...
0
votes
1answer
50 views

How to handle a private key SSL certificate with Ansible

I'd like to deploy my webserver config with copy. Is there any way to keep the SSL cert private key encrypted, and to decrypt it when the playbook is started? The reason is that I want to to use ...
0
votes
0answers
7 views

What could be causing traffic with URL parameters rotated by a caesar cipher? [duplicate]

Customers coming into our website from our newsletter go through an email tracker through a url like: https://www.domain.com/email/tracking?u=https%3N%2S%2Swww.domain.com&e=aA-bB_cC Where url ...
3
votes
1answer
358 views

Cryptsetup luks - Check that kernel supports aes-xts-plain64 cipher

I encrypted a bunch of hard drives with cryptsetup luks encryption on CentOS 5. Everything was fine, until I upgraded my system to CentOS 6. Now I cannot mount the disks anymore. To mount with my ...
0
votes
1answer
29 views

Cannot connect with WPA2 ((AES)) algorithm + EAP-TTLS PAP with freeradius auth

I setup successfully an enterprise wifi connection with LDAP authentication by the mediation of Freeradius. I used EAP-TTLS PAP because I have hashed passwords in my OpenLDAP directory. In case I used ...
-1
votes
1answer
34 views

Can a remote connetion from outside a LAN be invisible to protocol analyzers such as Wireshark, Process Hacker, Nbtstat? [closed]

When studying the behavior of trojans and (RAT) Remote Access Trojans this question came up. Can an attacker create a trojan that could trick the OS or the NIC into hiding a remote connection to a ...
0
votes
0answers
48 views

How to decrypt owncloud backups manually without a working installation?

I recently had a data lack and miss some very important files. Encrypted backups I had an owncloud 8.x instance running on my server last year for keeping backups and already located the wanted ...
-1
votes
1answer
16 views

Amazon S3: encryption speed and keys

I have couple theoretical questions about Amazon S3 I need to encrypt all my files. What encryption speed Amazon provide for S3? After encryption Amazon gives my key for file (or files package), it ...
1
vote
1answer
95 views

Dovecot: increase ssl_dh_parameters_length

I'm using Dovecot 2.2.21 I set ssl_dh_parameters_length = 4096. Before that, I had set 2048. After the change I reloaded Dovecot. Since then, SSL doesn't work any more and I get these logs ...
4
votes
1answer
509 views

How to setup an encrypted L2-Tunnel using MikroTik Routers?

What I would like to achieve I want to securely spread an existing internal subnet over multiple buildings. That means that I have two locations with virtual machines that need to be within the same ...
3
votes
2answers
36 views

Are Windows internal CA-issued certificates compatible with Mac clients?

I am looking into deploying an internal CA to replace the GlobalSign certificates we use for our internal email encryption: Internal CA would be set up using ADCS in a two-tier hierarchy, no other ...
0
votes
0answers
31 views

IIS to SQL Server IPSec configuration

I'm trying to configure 2 servers on a VPC on Amazon AWS to use IPSec. One server has Win2008 R2 with SQL Server 2008 and the other one is a Win 2012 R2 with IIS. I want to secure the connection ...
1
vote
0answers
66 views

Bitlocker data drive opens as read only -

I have a virtualized Windows Server 2012R2 running on ESXi 6.0 There are 2 virtual disks in this system, an unencrypted C drive for the OS and a Bitlocker encrypted D drive for data sharing. Bitlocker ...
0
votes
1answer
51 views

Fixing security holes on my web server

Full disclosure: I'm largely ignorant on web security matters. I'm a self-taught webmaster, and I manage lifering.org, a WordPress site, as a volunteer for Lifering Secular Recovery. We would like ...
0
votes
0answers
54 views

I'm having trouble installing perl module Crypt::OpenSSL::AES

I'm having trouble installing a perl module onto my server called Crypt::OpenSSL::AES I'm using cpan to try to install it but it keeps coming back with an error: Checking if your kit is ...
1
vote
0answers
47 views

Allowing IIS_IUSRS to encrypt & decrypt files [closed]

I have a simple ASP.NET site (on Windows Server 2012 R2 & IIS 8.5) for uploading files to a server. I would like to automatically encrypt these files using Windows' built-in Cryptographic Service ...
1
vote
0answers
16 views

VPN connection drops when using encryption

I have set up VPN server on Windows Server 2012 If I use encryption to connect to the VPN server the connection would drop after 20min, If I dont use encryption the coonection stays fine. The client ...
2
votes
0answers
55 views

How can I connect *with* RC4 ciphers using a browser on an HTTPS connection

I would like to use a web browser to surf some sites while using the RC4 ciphers so I can verify if logging said connections is working on some load balancers. Is there some way for me to enable and ...
1
vote
0answers
135 views

MySQL encryption at rest

Context: Rackspace CloudServers. The options I can find are rather slim. Amazon will encrypt the whole disk (meh), Gazzang could encrypt a virtual partition with just the DB files on it (if the ...
35
votes
7answers
2k views

Is enforcing encryption for SMTP a good idea (yet)?

I am running an email server which is currently set up to use TLS if possible, when sending and receiving emails. When you read in the documentation about this, there is also the option to enforce ...
-1
votes
2answers
51 views

How can I protect business data from being removed by an employee using encryption? [closed]

I am looking to beef up security on an office network. Aside from the obvious: physical security, limiting user privileges using Active Directory, running a firewall that does stateful packet ...
1
vote
0answers
20 views

Web encryption on uncontrolled LAN

I have a situation in which I wish to produce (physical hardware) widgets that plug into a LAN and act as a web server, serving content to web clients that are also on the LAN. The traffic from the ...
-2
votes
1answer
77 views

how do I LUKS encrypt a drive that already has data?

On a CentOS 7 server, I would like to LUKS encrypt the entire hard drive, including a 50GB partition that has already received yum install and a few other updates, but nothing else. But this tutorial ...
2
votes
2answers
84 views

Allowing multiple users to decrypt pgp emails for one email-address

me and my business partner each have our own company email address for which we use PGP. This allows us to communicate safely with our customers. However in order to communicate securely, the sender ...
1
vote
0answers
56 views

Encrypt credentials JNDI authenticating to JBoss 7.1.1.Final

In my JNDI Lookup, connecting to JBoss 7.1.1.Final from remote clients with plain text password is working fine. Now, I am trying to encrypt credentials in the form, but it's not working. ...
0
votes
2answers
230 views

Centos, PHP encrypted connection through freeTDS/ODBC to Microsoft SQL Server

I would like to connect from PHP to a Microsoft SQL Server through an encrypted connection. PHP scripts will run from a CentOS release 6.7 (Final) I want to connect to a Microsoft SQL Server 2014 ...
1
vote
1answer
294 views

How to enable LDAP over SSL/TLS in AD without installing AD Certificate Services

I am installing a Sonicwall firewall into my organization. I've connected the Sonicwall with the Active Directory domain, however now on the status page of the appliance there is a huge warning: ...
2
votes
0answers
276 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
1
vote
2answers
49 views

openssl smime message signing: why do I need a -certfile key?

Here is how one should sign a message with openssl smime? according to the docs openssl smime -sign -in in.txt -text -out mail.msg -signer mycert.pem \ -inkey mykey.pem -certfile mycerts.pem But ...
0
votes
1answer
69 views

How to save output from grub-md5-crypt to a file ?

I am using Cent OS 6.5 and I want to save the generated output and md5 hash from grub-md5-crypt command to a file. The grub-md5-crypt command asks us to set a password. I want the password(which I ...
2
votes
1answer
189 views

connection is encrypted and authenticated using 128. expecting 256

I have two servers that I have been working to configure to use modern ciphers. One is working and the other seems to be reporting mixed results. I'm not sure what the issue is. Specifically when I ...
0
votes
1answer
77 views

tinc - TCP Cipher method

In tinc 1.0.x there is Cipher param which allows to set encryption for UDP packets. For TCP packets encryption method is not allowed to be changed ...