CATEGORY / SECURITY

Security

19 posts

Apr 27, 2013 • 1 min read

StrongSwan and Android configs

root@six #cat ipsec.conf conn tugriceri.com leftsubnet=0.0.0.0/0 left=209.208.63.204 leftcert=/cert/strongswan.pem leftauth=pubkey leftsendcert=yes leftid=six.tugriceri.com right=%any rightid=%any rightsourceip=10.0.5.0/24 …

Oct 07, 2011 • 1 min read

SELinux FTP Home dir write permission

Connected to 127.0.0.1.220 (vsFTPd 2.2.2)530 Please login with USER and PASS.530 Please login with USER and PASS.KERBEROS_V4 rejected as an authentication typeName (127.0.0.1:root): test1331 Please specify the password.Password:500 OOPS: …

Jan 22, 2011 • 1 min read

SSL Weak Cipher and SSLv2 tests

echo 'GET HTTP/1.0' | openssl s_client -ssl3 -cipher LOW -connect www.tugriceri.com:443echo 'GET HTTP/1.0' | openssl s_client -ssl2 -cipher LOW -connect www.tugriceri.com:443echo 'GET HTTP/1.0' | openssl s_client -ssl2 -connect …

Nov 26, 2010 • 1 min read

uvscan process is too slow

# time uvscan --versionMcAfee VirusScan Command Line for Linux64 Version: 6.0.3.356Copyright (C) 2010 McAfee, Inc.(408) 988-3832 LICENSED COPY - November 26 2010AV Engine version: 5400.1158 for Linux64.Dat set version: 5985 created May 17 …

Apr 30, 2010 • 1 min read

crt to der

openssl x509 -in auth_tugriceri_com.crt -out auth_tugriceri_com.der -outform DERopenssl rsa -in www_tugriceri_com.key -outform DER -out www_tugriceri_com-der.key

Oct 17, 2009 • 1 min read

Sftp chroot settings

cat /etc/ssh/sshd_configSubsystem sftp internal-sftpMatch group sftponlyChrootDirectory /chrootX11Forwarding noAllowTcpForwarding noForceCommand internal-sftpcat /etc/passwdtestuser:x:500:504::/:/bin/bashsftponly:x:504:testuser

Mar 18, 2009 • 1 min read

other ssl issue with my own ca

/root/tugriceri.com_CA/ca/cat ca.conf[ ca ]default_ca = ca_default[ ca_default ]dir = /root/tugriceri.com_CA/ca/certs = /root/tugriceri.com_CA/ca/new_certs_dir = /root/tugriceri.com_CA/ca/ca.db.certsdatabase = …

Feb 03, 2009 • 1 min read

pfx to key

openssl pkcs12 -export -in my.pem -nodes -out my.pfx openssl pkcs12 -in my.pfx -out my-nodes.key -nodes -nocerts