Tag Info

New answers tagged

2

BitLocker can be enabled at the host level. The host can start without intervention provided that the server has a TPM chip (any decent server hardware in the last five years has a TPM chip). Microsoft added BitLocker support for CSV volumes in Windows Server 2012. BitLocker in a guest is currently not supported by Microsoft. It is possible, but to ...


1

Note that it's insufficient to verify that the certificate contains an SHA-2 signature. You need to check that none of the intermediate certificates in the chain up to the root are signed with SHA-1. NSS features an environment variable, NSS_HASH_ALG_SUPPORT, which can be used to control what hashing algorithms are available to progams using the library. ...


4

Unless you're forking out for an EV certificate, it's not worth paying more than $10-$15 for a single-domain cert. As long as the CA root/chain is trusted by major browsers, there's very little technical difference between a $5 cert and a $50 cert. I've been using SSLMate recently, and have found it to be a really slick way to purchase and maintain ...


1

You could use something like python-gnupg to have a file encrypted with gnupg. To achieve "real" security you need to put a passphrase to the private key, otherwise you have the encrypted file containing the password and the private key in the same server, so decrypting the file would be trivial. The bad thing of having a passphrase everytime you start your ...


0

This would be security through obscurity, but there is hardly any other option. If you want to make life hard for the potential thief, I would suggest embedding the key inside the script, and later converting the script into an executable using shc. You might also want to obfuscate the elf itself (Methods to obfuscate an elf.) Keep in mind however, that ...


0

If I am not mistaken, mount.cifs does not support the encryption feature of Samba (yet!?). The -e option of smbclient should work, though.


1

encfs is a FUSE (File system in user space) file system. Access to FUSE file systems is usually limited to the user that mounted it by the kernel, but it can be granted to others with the allow_other and allow_root mount options (mount_fuse manpage). This is somewhat similar to NFS file systems that can't be access by root if they are exported with ...


0

Add the "ssl" in the [mysqld] section in my.cnf file like ssl ssl-ca = /root/abc/ssl_certs/ca.pem ssl-cert = /root/abc/ssl_certs/server-cert.pem ssl-key = /root/abc/ssl_certs/server-key.pem and then restart mysql and check again. It will work.



Top 50 recent answers are included