Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
736
questions
0
votes
1answer
19 views
How can I check & configure Exchange 2013 for sending Encrypted messages to external Email address using Outlook?
One of my user wants to send encrypted messages to external vendor so he requested IT department that how he can do this? I have configured my Outlook from Files-> Options -> Trust Center ...
-1
votes
0answers
17 views
Encrypt home, connect via SSH, mount encrypted, resume boot of software that relies on files in home [closed]
I would like to encrypt my home folder on a remote raspberry server. I have several applications configured to start from my home folder though when ubuntu starts. If they start before my home is ...
0
votes
1answer
32 views
What is the optimal way to protect my data from my VPS provider? [closed]
What is the optimal way to protect my data (db and source code) from my hosting provider?
Would using an encrypted volume, such as truecrypt, suffice? However - for my program to access data on the ...
0
votes
1answer
91 views
Is VPS Disk Encryption pointless?
It's relatively straight-forward to create an encrypted storage volume (e.g. Like so: https://www.digitalocean.com/community/tutorials/how-to-create-an-encrypted-file-system-on-a-digitalocean-block-...
6
votes
1answer
196 views
Data missing after ZFS replication on FreeNAS/TrueNAS
In order to use the new encryption method in TrueNAS 12 I copied all data from a legacy encrypted FreeNAS pool to a newly formatted pool via a replication task.
After replication there seems to be ...
0
votes
0answers
79 views
Mysql keyring_file not loading
I am trying to encrypt some tables in a mysql database. I found a way in Mysql documentation (https://dev.mysql.com/doc/refman/8.0/en/innodb-data-encryption.html)
I have added the following lines ...
0
votes
0answers
29 views
Are there any Operating Systems or Browsers that still depend on having these Ciphers enabled?
Doing a litle Cryptography Research and hit a case of conflicting data so wanted to try here.
I'm running a Web Service and currently support these 2 Ciphers:
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0X9F)...
0
votes
1answer
27 views
How do I setup ipsec VPN between APIs on different servers?
There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
1
vote
1answer
87 views
How to set up a secure system to allow only specific clients to access specific services on a server?
Preface
Please bear with me if I use incorrect terminology or don't express the problem too well since I'm not an expert on system administration/server maintenance. Let me know/correct me if I do so ...
0
votes
0answers
9 views
optimizing Linux VM build for openPGP
I'm trying to encrypt and archive 100s of TBs of data, files that are no longer referenced regularly but not yet ready to be deleted. So it would be taking files from one network share to another. I ...
1
vote
2answers
76 views
How to securely pass secrets to an application
I have an application exposing a REST API which needs some secrets to launch, like database password, p12 keystore password or HS512 secret for issuing tokens. Those values are extracted from ...
1
vote
2answers
121 views
Is all web traffic sent over http/https protocol?
I was wondering what were the differences (security-wise) between VPN encryption and HTTPS encryption, and I found this article: https://surfshark.com/blog/vpn-vs-https According to this blog, HTTPS ...
1
vote
2answers
144 views
Possibilities to protect network traffic in datacenter without adding much latency
I am looking for possibilities (and their pros and cons) for protecting network traffic of the components of a a time-critical application in a data center. The aim is minimizing the damage an ...
1
vote
1answer
292 views
nginx server that only proxies to my game servers
I have clients connecting to my WebSockets game server for an online browser game. Game servers are created and destroyed when players start games, and so each server can have a different IP address ...
0
votes
1answer
24 views
What would basic encryption key management do's and don'ts look like for an organization that has a low amount of keys?
The company I work at, just had a need for encryption to be utilized. What would be the best practice for taking care of this key, during its lifecycle? Where should I keep it?
0
votes
1answer
51 views
Decrypt file for specific session in CentOS 7
I am looking for a way to encrypt my file that can be decrypted for the current terminal session. The moment we exit the session, it gets encrypted again.
A use case for this scenario would be: Let's ...
-1
votes
1answer
205 views
win10 bitlocker enrypts partition after update
one of my clients has an laptop with Win 10.
After the client run the latest Updates apparently BitLocker started to encrypt the files/Partition WITHOUT CONSENT and WITHOUT PROVIDING ANY RECOVERY KEYS....
0
votes
1answer
186 views
Might “Require TLS Encryption” in Exchange mail-flow rules cause compatibility issues for e-mail?
Picture of how I'm forcing TLS.
This is essentially forced TLS.
Should "Require TLS Encryption" be required for microsoft exchange mailflow rules?
I'm worried about compatibility issues, e-...
0
votes
0answers
22 views
Start samba service n boot before entering the passphrase on an encrypted hard drive
I choose to encrypt the entire hard drive on Ubuntu 18.04 installation that I am using as a samba share. The samba service will start on boot. The Ubuntu will auto start after power loss but not ...
0
votes
0answers
22 views
Read files from an encrypted disk?
Is it possible to read from an LUKS-encrypted disk via the terminal, e.g. by booting from a live Linux system on a USB flash drive and accessing the encrypted host computer's hard drive?
0
votes
0answers
21 views
How can I generate a new admin password for phpBB 3.3 from the MariaDB command line?
There are multiple search results that don't work for me now, for a line of SQL to create a temporary admin user in phpBB.
As far as I can tell, the encrypted password fits a different profile from ...
0
votes
0answers
22 views
How to create a local email relay for encrypt mails
We have a Ubuntu 20.04 server with redmine installed. Redmine send automated mails through an external smtp provider. We have also other services that do the same thing (teamcity etc)
Everything works ...
0
votes
0answers
16 views
What are the padding procedures in Tomcat AES_128 and AES_256 ciphers?
We are trying to verify that our Tomcat 8.5 servers use strong enough encryption. We used ssllabs.com to get the list of enabled ciphers. We have to be sure that all of the enabled CBC ciphers use ...
0
votes
0answers
36 views
How to set up IPsec between two instances within the same VPC assuming that the traffic between them isn't secure?
I want to set up a secure transit of data between services running is different instances.
First , I thought about setting up an EFS but I don't really like that an instance could have an access to ...
0
votes
1answer
635 views
OpenVPN faster with encryption than without it
I would've expected OpenVPN to achieve higher speeds when encryption is disabled, but the opposite is true.
When setting the cipher to AES-128-GCM, the speed between two of my computers is 580 to 613 ...
0
votes
1answer
23 views
Is it possible to umount a drive from where a program is running?
I want to run some confidential program on a cloud server. In order to protect it from being copied, I can encrypt it into a drive and mount the decrypted drive to run it. However I want to umount the ...
0
votes
0answers
27 views
How to encrypt nfs which is mounted on AWS ec2
We have netapp volumes attached to EC2 instance. these are nfs , which are sync with on premise and make sure data in on premise and that of NFS which is mounted on EC2 are in sync.
even though ...
3
votes
1answer
159 views
What filesystem and RAID for a server syncing linux windows macOS android and iOS machines
I plan to have one master server including several HDDs (for RAID5, probably all homogeneous with 4TB each), and one remote slave server containing only one big capacity HDD, or a bunch of disks not ...
0
votes
0answers
271 views
smbd process 100% for specific user when puling files/mount
Need help tracking down this issue (high cpu usage) or is this normal...
Whenever our users access or sync files, the CPU spikes under their name, accessing via another linux box over mounted smb w/...
0
votes
1answer
194 views
RDP Connection closes due to Encryption error
My azure windows VM has been working fine for 3 months since it was set up. I tried to reconnect today via RDP and it came up with Remote Desktop Application - because of an error in data encrption ...
2
votes
2answers
329 views
Set default data encryption policy in exchange online
I have recently enabled the customer key on my o365 tennant.
I have been able to set my mailboxes DEP with the following :
Get-Mailbox | Set-Mailbox -DataEncryptionPolicy "MyDEPPolicyNmae"
Now I'm ...
0
votes
1answer
518 views
Generate PFX file using P7B file with private key data in text format
I have the certificate in P7B format and along with I have private key data in text file format as below. Can anyone please help how can I generate the PFX certificate using this data?
-----BEGIN ...
0
votes
0answers
45 views
Modify OpenLDAP hashing algorithm [duplicate]
I have a CentOS7 Server running slapd 2.4.44 and I'd like to modify the default hashing algorithm being used. Instead of using SSHA, i'd like to use SHA-256 or SHA-512.
I've been having trouble ...
-1
votes
1answer
53 views
When was LUKS first released?
When was Linux Unified Key Setup (LUKS) first released--both as an open standard and later made available as an implementation with cryptsetup?
0
votes
1answer
2k views
How to renew an expired certificate for PCs that must connect via VPN to a server in Azure?
I created my self-signed certificates using PowerShell per https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site#clientexport a year ago and it's time to renew them....
0
votes
1answer
112 views
Openldap re-hashes already hashed password
I have an openldap with ppolicy on SSHA-512. When clear text password is sent from client, the password will be stored as SSHA-512, fine.
My problem appears, once already hashed password is send e.g ...
1
vote
2answers
227 views
Why AWS encryption for EBS and S3 is disabled by default? [closed]
For EBS and S3 encryption (even via the default key from KMS) is disabled by default, as I understood from the documentation, there is no difference to the user if volume/objects is/are encrypted ...
2
votes
2answers
397 views
Encrypt at rest existing AWS EFS instances - is it possible?
Based on my understanding of AWS documentation it appears that the only way to encrypt at rest existing EFS instances with some data is to create new EFS instances with encryption enabled and copy the ...
0
votes
0answers
882 views
Encryption of network shared folder | Server 2016 with Windows 10 Pro desktops
Getting confused on encryption options.
I have EFS (encrypted file system) setup for W10 workstations for local drives using the 2016 server as the recovery agent
Apparently EFS should not be used ...
1
vote
1answer
62 views
Writing encrypted syslogs
I have a request to find out if there is a way to store syslog messages encrypted. I don't have a problem with making logrotate (or a bash script) encrypt messages nightly, but is there a way that I ...
0
votes
1answer
130 views
How to install a certificate and encryption on SQL Server without downtime?
So I have a SQL Server 2016 instance running a mission critical workload. I want to install an SSL/TLS (publicly signed) certificate into the server, and enable encryption.
But I don't want to incur ...
2
votes
1answer
540 views
How to access mysql console on Docker container using secrets
I've been able to access Mysql console on a Mariadb Docker container.
From my local machine I can run this command to access the console (I have mariadb installed locally):
mysql -h localhost -P ...
2
votes
1answer
148 views
Why can't I manually seed the FreeBSD random number generator?
Years ago, I could manually seed the random number generator in FreeBSD by setting:
sysctl -w kern.random.sys.seeded=0
... and then if I deleted my SSH keys (on purpose) and restarted sshd, I would ...
0
votes
1answer
691 views
How to configure OpenVpn server with multiple clients using asymethric key
Introduction
I want to configure OpenVpn with 2 clients and 1 server but i only mannage to use it with 1 server and 1 client.
Setup
Server ip: 10.10.102.146
Client ips: 10.10.102.138
Server ...
4
votes
0answers
105 views
Bitlocker - mainboard exchange won't require recovery password - why?
A mainboard died. It was exchanged for the same board type (same bios and config, as well, also a new CPU but of the same type).
The hard drive is encrypted with bitlocker (on Win10 Pro v1903) and I ...
0
votes
0answers
49 views
How do I get a certificate to sign a file and make it trusted?
I may not be using the correct words to describe what I'm trying to do, but I'd like to have my own certificate to digitally sign files so they can be "trusted". I'm very technical, but have little ...
2
votes
1answer
8k views
How can I disable TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 cipher in Apache2?
In SSL labs, I got that I'm using this "weak cipher":
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
Now in Apache, this is the set of suites I have enabled:
SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:...
0
votes
1answer
337 views
NextCloud encryption key backup
I’m looking into setting up a self-hosted NextCloud, and back it up to an external storage (Dropbox, S3...). I want this backup to be encrypted.
Fortunately, that is supported natively by NextCloud. ...
0
votes
1answer
97 views
Forcing encryption for outgoing SMTP with Postfix *per User*
I'm trying to configure postifx smtp_tls_policy_maps so that i can set per user outgoing emails must be encrypted.
One example is the email provider mailbox.org. As one can infer from the job ...
1
vote
0answers
874 views
making HTTPS work on LAN with self signed certificate
This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's.
I have a linux server running third party software to ...
