ssl – KutuKupret colorful website

Nginx SSL/HTTPS

HTTP is a plain text protocol and it is open to passive monitoring. You should use SSL to to encrypt your content for users. Create an SSL Certificate Type the following commands: Edit nginx.conf and update it as follows: Restart the nginx:

admin August 19, 2010https, nginx, sslNo Comments

k800i

Installing Self Signed smtp/imapd/pop3 Certificate on K800i Sony Ericsson

I own this beautiful K800i phonecell about 3 years more or less. The great things is K800i’s email client support for smtp authentication, imap, pop3, ssl, tls, port customization. I will show you how to plant my self signed smtp server certificate into K800i

First of all we need to copy the certificate to have a .cer extension. The phone uses this as the clue that the file is a certificate and will ask if it is to be installed.

Self signed cert for ougoing SMTP

# cd /etc/postfix
# cp cacert.pem smtp.cer
# more smtp.pem   
-----BEGIN CERTIFICATE-----
MIIDvzCCAyigAwIBAgIJAK6WD/vgjFZcMA0GCSqGSIb3DQEBBAUAMIGcMQswCQYD
VQQGEwJJRDEUMBIGA1UECBMLREtJIEpha2FydGExEDAOBgNVBAcTB0pha2FydGEx
---- snip ----
---- snip ----
---- snip ----
jUSsVnNPHYewsKdKRfzoivMqQgI+IIzw5NXiE78lpmAsZOdMfkR4U+dpTr87mCmE
wcBi07++mqLhDvYvcGw4ol1Yp7sX4NgMbTrZ6APpaI8l4Rx4jb2p7UXU0YGx7aPV
idZr
-----END CERTIFICATE-----

admin December 4, 2009k800i, openssl, sonnyericsson, ssl2

ssl

self-signed wildcard SSL certificate

Creating certificate change kutukupret.com to whatever your domain name is [bash] # mkdir /usr/share/ssl/certs/hostname.kutukupret.com # cd /usr/share/ssl/certs/hostname.kutukupret.com (umask 077 && touch host.key host.cert host.info host.pem) # openssl genrsa 2048 > host.key # openssl req -new -x509 -nodes -sha1 -days 3650 -key host.key > host.cert ...[enter *.kutukupret.com for the Common Name]...…

admin September 5, 2009self-signed, ssl2

apache ssl

why ssl certificate cannot be applied in apache NameVirtualHost

Due to the nature of the SSL layer in HTTPS, negotiating a secure connection happens before the HTTP protocol is initiated. That means that at the time the SSL layer is in play, the “Host” header has not been sent and, therefore, apache cannot determine which NameVirtualHost to use. If…

admin September 5, 2009apache, sslNo Comments

apache openssl ssl

Apache self signed certificate HOWTO

Generate the keys for the Certificate Authority (the key that will do the signing) Code: [bash] $ openssl genrsa -des3 -out ca.key 4096 $ openssl req -new -x509 -days 3650 -key ca.key -out ca.crt [/bash] Generate the private key for your server Code: [bash] $ openssl genrsa -des3 -out server.key…

admin July 24, 2008apache, openssl, selfsigned, sslNo Comments