Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [encryption]

Encryption is transforming information through a cipher to protect it from unauthorized access.

1
vote
0answers
15 views

AES-256-CBC with Sha512 and Encrypt-then-MAC Questions

I have to encrypt and decrypt csv-files with the following specifications: Cipher: AES-256-CBC MAC: SHA-512 Method: Encrypt-then-MAC I am working on an Ubuntu Bionic and I have root acceess. 1.) ...
5
votes
2answers
69 views

If you connect remotely to another Windows machine with PowerShell, is it encrypted like ssh?

Are remote PowerShell connections encrypted / secured in some form the way that SSH is?
1
vote
0answers
29 views

Should I encrypt connections within my docker network to improve security?

Setup information: My current docker setup consists of the following containers: proxy and load balanceing server (HAproxy) http server (apache) multiple websocket servers (ratchet php) database ...
0
votes
0answers
25 views

Multiple files encrypted with multiple GPG keys - how to easily add/remove/manage keys, automate key change tasks?

We have a bunch of files that contain sensitive information, that need to be accessed by several teams, but need to be unreadable to everyone else. Currently, each team member needs to generate their ...
0
votes
1answer
59 views

Details of certificate used to encrypt email received by Outlook

Is there a way of seeing the details of the certificate used to encrypt an email that was received by Outlook. I'm trying to diagnose an issue and want to see if someone has an out of date offline ...
1
vote
0answers
25 views

in pfsense,its possible to secure the the conf.cf (primary configuration file)

I want to give someone a solution based on embedded pfsense. that solution has modificatins in pfsense, which i dont want anyone to steal and use it for their own business. its proprietary solution ...
-3
votes
1answer
43 views

How can I upload an SSH key to a system that doesn't use passwords? [duplicate]

I would like to create a public/private keypair and upload the public key to a server that I want to log onto. However, that server has already been configured to allow no password authentication of ...
2
votes
2answers
98 views

Bitlocker - “Recovery information was successfully backed up to Active Directory”, but not really?

I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory. I found that the device only had a TPM ...
2
votes
0answers
22 views

Activate Tape Encryption on Windows Server

We use windows to make tape (LTO 8) backups with ltfs and now I want to use the hardware encryption. My problem is I can not find a way to activate it. For Linux I found "stenc" but is there something ...
0
votes
1answer
40 views

Updating Expiring Keys - Azure OS Disk Encryption

Whilst day dreaming at my desk this morning, something occurred to me and I have not been able to find an answer of yet. So I am hoping someone may shine some light for me or just have a good ...
1
vote
1answer
100 views

Windows encrypted software raid

Is it possible to have (preferrably with Windows-on-board tools of Windows Server 2012 R2 and Windows Server 2016) to have a software raid mirror on 2 encrypted disks? (Locally preferred.) From what ...
1
vote
1answer
48 views

How to export GPG key without user interaction?

I use GPG keys to encrypt backups with duplicity, so I would like to export the key after it is generated, so I can move it to a backup location in case the server burst into flames. Is there any way ...
1
vote
1answer
32 views

How to get only the pub part of gpg --list-public-keys?

Okay, there is probably a better way to phrase this question. I am writing a script to configure my web servers on the first boot, but I hit a snag when generating the GPG key that will be used to ...
0
votes
2answers
35 views

Horde and Dovecot's SHA512-CRYPT: Cannot connect using custom SQL query

after successfully switching the authentification mechanism in dovecot and roundcube from MD5 to SHA512-CRYPT, I struggle to get Horde to authentificate using custom SQL queries. Setting $conf['auth']...
1
vote
2answers
83 views

How to properly add a trusted SSL certificate to webpage?

I was trying to follow godaddy's instructions on how to add ssl certification for an nginx server on centos. On the last step (10) I was getting a "key mismatch" error. With some research i found ...
1
vote
0answers
117 views

How to reinstall MariaDB?

I had MariaDB 10.2 installed on Ubuntu 16.04. and I was using MariaDB encryption. I had to uninstall MariaDB so I have uninstalled with following command: apt purge mariadb-server -y That ...
0
votes
0answers
12 views

Are Oracle auto_login wallets transportable?

We have a 11g Oracle database that contains encrypted data (TDE tablespaces). Oracle wallet is used, whereby ENCYRPTION_WALLET_LOCATION in the sqlnet.ora points to the directory containing the wallet ...
0
votes
1answer
72 views

How to send encrypted message using postfix?

I have some application on ubuntu 18.4 vps. i can send mails using postfix but gmail says it is not encrypted. postfix config file is: # See /usr/share/postfix/main.cf.dist for a commented, more ...
0
votes
1answer
23 views

shasum returns an incorrect result

Calculating SHA256 gives me an incorrect result when I'm using "shasum": $ echo "abcd" | shasum -a 256 fc4b5fd6816f75a7c81fc8eaa9499d6a299bd803397166e8c4cf9280b801d62c - # or $ echo abcd | shasum -...
1
vote
2answers
58 views

Information needed on availability of RAID controllers that have hardware encryption capability

I am somewhat familiar with the RAID controller card offerings in Dell servers, such as PERC H730P in their PowerEdge servers. And also some of the LSI 9xxx series RAID controller cards, that allows ...
0
votes
0answers
84 views

Creating a JAVA Keystore (.jck) with a Symmetric Key

I have a need to use a common key on 2 platforms. The key was created on Linux. It was wrapped and sent to platform 1, where it was added to the local keystore. I need to create the .jck there on ...
0
votes
0answers
38 views

windows server 2016 hacked for the third time [duplicate]

hello everyone I'm using a windows server 2016 as web server that runs a WebLogic application on a specific port (7001) and I have almost done every thing I know or I read about on the internet to ...
0
votes
0answers
98 views

AWS: SES Rule: S3 Action: fails when choosing bucket that has encryption enabled

I can not create a SES rule to put emails into a S3 bucket that has encryption enabled (on the bucket). Created a bucket and enabled encryption. Add a SESPut bucket policy to allow SES. https://docs....
0
votes
1answer
57 views

AWS SES Encryption vs S3 bucket encryption

SES Configuration for a SES rule allows one to have the email be put into a S3 bucket. Under this configuration, the option "KMS Key" is available, which would have SES encrypt the email before ...
1
vote
1answer
24 views

e-mail encryption during transfer

for the sake of simplicity i want to visualize the dangers of sending an unencrypted e-mail. I'm just not sure WHO can read unencrypted e-mails. Lets say i'm using Office365 as mail provider and i ...
0
votes
1answer
15 views

operators in CipherSuite configuration for SSL

I have SSLCipherSuite configured as High:Medium:!aNULL:!eNULL:+High:+Medium Here I can understand to match or include the ciphers with triple DES (High) and 128 bit encryption (Medium) at start and ...
0
votes
1answer
89 views

LVM - Should I encrypt physical volumes or logical volume?

I have two hard drives and I'm about to build a backup system. Now I'm wondering which solution would be the best. I encrypt disk1 and disk2. After mounting these I create a volume group and logical ...
0
votes
1answer
96 views

End-End Encryption on SSH passing though 'untrusted' jump servers

I need to SSH between 2 "clients", both behind CGNATs, by using a third party server as a jump. This use case has been covered on this site already but: How do I make it so the SSH traffic is not ...
-1
votes
1answer
487 views

Enable BitLocker with PowerShell on Windows Server 2016

I have been fighting with this, previously I believe I was able to set it up using the GUI in File Explorer like you would on a Windows 10 machine. However after installing the BitLocker feature and ...
0
votes
1answer
393 views

Configuring Imported Self Signed SSL Certificate to SQL Server Express

I've created a self-signed certificate and configured with SQL Server Express. The encryption works fine on my PC. When I export the certificate to another PC I can import fine and can see the ...
0
votes
0answers
29 views

Libreswan 3.15 won't initiate opportunist encryption sessions, but 3.23 will - I need 3.15

I have two test systems - west running Libreswan 3.15 & east running Libreswan 3.23 (both are CentOS 6). Both have essentially the same configuration: east.conf (west.conf is essentially the same)...
0
votes
2answers
46 views

Is it possible to secure a VPS from its seller/provider?

I have bought a VPS hosted in the USA through an Iranian company (I live there, it's quite hard to buy one directly.), and I am wondering if it is possible to secure the system against potential ...
2
votes
3answers
2k views

Samba SMB Encryption - How safe is it?

I recently set up a Samba server on Linux that allows me to access files on this server on Win10 PCs in my local network. But I wondered if I could access this shared drive over the internet since I ...
-1
votes
1answer
652 views

How to setup logrotate with GPG to encrypt for GDPR?

As per GDPR all private data should be encrypted, so I need to encrypt all logs and retrieve them for auditing. I have chosen to perform the encryption during log rotation and to use GnuPG as my ...
1
vote
1answer
1k views

How to enable support for Authenticated encryption (AEAD) cipher suites on Windows Server

SSL lab test provides grade B for one of my websites due to AEAD issue. I was wondering how we could enable AEAD support to improve the grading to A. I am using windows server 2008 R2, TLS1.2 is ...
0
votes
1answer
322 views

Encrypting properties with “eyaml edit” without a private key?

I would like to use eyaml edit to edit my Puppet/Hiera configuration files. My configuration files are a mixture of encrypted and plain text content. I want to use eyaml edit to encrypt certain ...
1
vote
1answer
114 views

HAProxy-Apache encrypt connection

I have haproxy_server and apache_server in different datacenters, what is the best way to have encrypt connection between them? It’s working with the certbotand with the following configuration: ...
2
votes
1answer
107 views

Enable hardware encryption in Bacula with LTO-7

Does Bacula support encryption by using the AES-chip which is integrated in LTO-7 Tapedrive? Or is there a plugin like "stenc" that could be integrated in Bacula?
1
vote
1answer
324 views

Mount LUKS-encrypted drive at boot, but only if drive is present

I have a series of drives that are are all encrypted with LUKS/dm-crypt. They are not all guaranteed to be plugged in at the time the system boots, but if they are, I would like to ensure they are ...
1
vote
1answer
32 views

Securely encrypt backup for postgres DB

I do not want to encrypt my postgres DB. However, I want encryption at OS level, such that if the files(such as backups or configurations) are moved to any other system, it should be unreadable or non ...
0
votes
1answer
60 views

What is the data flow if using an HSM with an encrypted Database

How would someone implement an HSM if they wanted to encrypt all the tables of a database for example in a 3-tier environment? Does the app server query the DB, get the encrypted blob and ask the ...
0
votes
0answers
54 views

USB authentication and Encryption on Windows Environment

My boss ask me that he want to secure USB thumb drive usage on our company. He want the USB thumb drive data un-encrypted when some one authenticate to our Active Directory (AD) server whether locally ...
1
vote
0answers
21 views

“Windows does not appear to be on the drive from which it boots”. Veracrypting corporate laptops

I work on the Help Desk of an org. I have been encrypting laptops with VeraCrypt for months now, but suddenly running into the message above in the title. The laptops getting this error don't have ...
0
votes
2answers
215 views

Database encryption or drive encryption

I'm thinking about encrypting the database that contain sensitive user data. Is it better for performance to encrypt the entire drive by using something like bitlocker or is it better to just encrypt ...
1
vote
1answer
1k views

Setting “Store passwords using reversible encryption” to disabled

The setting "Store passwords using reversible encryption" is enabled in our domain and we need to revert this. What happens when this is changed? Will all passwords be encrypted? Or will all users be ...
1
vote
1answer
2k views

Encrypted or Password Protected Docker Container

I have some Docker containers. I want to login the containers with a password. Is it possible? If it is not possible then is there way to encrypt some folders in Docker? I have tried rkt as well. I ...
0
votes
2answers
746 views

Difference between SSL VPN tunneling and SSL in HTTPS [closed]

I'm a beginner, and this is probably an elementary question, but I can't figure it out through some googling. I'm learning about VPN tunneling right now, and am generally not clear on how VPN ...
1
vote
0answers
2k views

How to encrypt Samba traffic?

How would I create encrypt the traffic that Samba communicates between the server and the client? My settings without encryption look like this: /etc/samba/smb.conf: [global] workgroup = ...
0
votes
1answer
493 views

Nginx ciphers settings [duplicate]

I am trying to understand ciphers settings in nginx. ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #What TLS types that are supported ssl_prefer_server_ciphers on; #Use the type that the server prefers ...
1
vote
0answers
199 views

Bitlocker on Hyper-V server

I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD. I need: encryption key saved on TPM ...