519 reputation
28
bio website
location
age
visits member for 3 years, 1 month
seen Oct 15 at 0:36

Jun
19
answered Info on SSH tunelling etc in certain context
Jun
18
comment Is there an SSL equivelent to an ssh agent?
You can use client certificates to authenticate your developers so it will work from anywhere they have unfettered network access. This is what many companies use for remote access for those who need something more than email or exchange access.
Jun
16
answered Is there an SSL equivelent to an ssh agent?
Jun
16
answered Secure NAT setup with iptables
Jun
14
comment How do I use a Multi-SAN certificate on both Lync and Exchange servers?
Looks like he has all the right subjectAltNames in there
Jun
14
revised stunnel version 4.53 says SSL server needs a certificate on Windows 7
grammar, formatting
Jun
14
comment stunnel version 4.53 says SSL server needs a certificate on Windows 7
It matters because the requirements for using it as a client are different from using it as a server. For a client you have to configure trust of the server (or disable caring about trust) while for a server you have to give it a key-pair and a certificate.
Jun
14
answered stunnel version 4.53 says SSL server needs a certificate on Windows 7
Jun
14
comment SSH access and control
What do this have to do with SSH access and control?
Jun
14
comment stunnel version 4.53 says SSL server needs a certificate on Windows 7
Are you using this to ssl enable a server or a client?
Jun
14
comment Export SSL Cert from IIS and import into GlassFish keystore
Are you sure the PFX contains the private-key and not just the certificate(s)? Why does the error message refer to 'reply'?
May
29
comment Using client certificates with wget
You're confusing your certs and keys. Until you get it to work with openssl s_client you can be sure you are passing the wrong file (contents) to wget. Look inside the files and see if they are tagged (usually are with something like ---BEGIN PRIVATE KEY--- or ---BEGIN RSA KEY--- or ---BEGIN CERTIFICATE--- ... etc.. .that will tell you what's in the files)
May
28
comment Mismatched address error on self-signed ssl certtificate
Two options: 1 is to use wildcards in the CN or altName (e.g. *.example.com); 2 is to use mulitple altNames (ww1.example.com, ww2.example.com, some.other.exampletld)
May
28
answered Mismatched address error on self-signed ssl certtificate
Apr
6
comment Problems with IE/wget confusing a subdomain's SSL cert with the main domain's cert
you might be able to just get a cert with multiple SANs (subjectAltNames)... that way each client will get the cert they need (imagine a certificate valid for each of one.example.com, two.example.com and three.four.example.com rolled into one)
Apr
5
comment Problems with IE/wget confusing a subdomain's SSL cert with the main domain's cert
Is the sub hosted on the same server?
Mar
26
comment What is the correct response for a DNS server when a domain does not exist?
You can run your on resolver starting at root just like the big boys do - then you can return the correct NXDOMAIN to your services and do the right thing. Pretty easy to do if you're technologically competent otherwise you might try someone like dyn.com who for not much money will give you a clean DNS resolver (meaning conforming to best practices).
Jan
13
awarded  Critic
Jan
13
comment Migrating an SSL Certificate from one host to another during site migration
No down time needed. Get your new server running with a valid cert for your domain then change DNS so your domain name resolves to the new IP.
Jan
13
comment Migrating an SSL Certificate from one host to another during site migration
I think you shouldn't move private-keys around.