Ssl

Quick openssl commands to inspect a Certificate Signing Request and an issued X.509 certificate in human-readable form.

A quick Apache mod_rewrite snippet that forces all HTTP traffic to HTTPS, plus context on where to place it and what to watch for.

A step-by-step guide to deploying a CFSSL-backed certificate authority with PostgreSQL storage, OCSP responder, and CRL distribution. Covers installation, CA initialization, service configuration, and Nginx reverse proxy setup.

LDAPS is a hard requirement when setting passwords via unicodePwd on Active Directory. Non-TLS connections are rejected by AD itself, and SASL is not a supported alternative.

The version field in a TLS ClientHello message tells the server the highest protocol version the client supports, but it appears in three distinct places with different roles. Understanding where and how each version field is used helps troubleshoot handshake failures and interoperability issues with legacy implementations.

Lose track of which private key pairs with which certificate? Use OpenSSL to compare public key hashes and confirm the match in seconds.