Some websites require to obtain the time-zone from the client browser in order to correctly display some information. This is not always critical but in case you are using some web hosted e-mail or calendar account this is important. One day I noticed that suddenly all my tutanota.com mail calendar events were completely off by… Read More »
Strong Customer Authentication (SCA) is a new European regulatory requirement as part of the second Payment Services Directive (PSD2) for authenticating online payments and make them more secure. There are some actions such as funding a transfer from your balance or viewing the statement that require SCA within the UK and EEA. SCA builds additional… Read More »
After some updates suddenly all the post I shared from Jetpack for WordPress had no valid Twitter card. After some mail exchanges with Jetpack support they assured me that all is good from their part. As instructed by them I was able to see that indeed Jetpack was correctly generating the Twitter Card. Still checking… Read More »
SSL connection failure: A packet with illegal or unsupported version was received.
Computer security is a topic that needs constant work. Every day new threats and new security recommendation pop up on the technology radar. I already wrote several posts on this topic. The current post can be seen as a continuation of Security: Maintaining a secure WordPress blog So bellow are some updates to the configuration… Read More »
Starting from openssh 7.8 the default format for private keys has changed from PEM to OpenSSH: That means that private keys generated with the referenced command: (ssh-keygen -t rsa -b 4096) are no longer generated as PEM format. Lot’s of online services do not accept this format yet CircleCI, GitHub are some of the services… Read More »
A name registrar is that sort of service provider everybody needs at some point when they get serious about their online presence and want to have their own identity thus domain. Basically from the times when Internet was young their main function is to keep that record of who owns a name and to broadcast… Read More »
I am an old user of letsencrypt that just found out that my old way of renewing my set of certificated is no longer supported. When running the usual “certbot renew” command, that was manually renewing my certificates, resulted in the error: 2019-04-06 17:38:19,072:WARNING:certbot.renewal:Attempting to renew cert (blog.voina.org) from /etc/letsencrypt/renewal/blog.voina.org.conf produced an unexpected error: Client… Read More »
The following is a very quick guide on how to set up a EasyRSA certificate based authentication of SoapUI API client to connect to a WebService based API that runs on JBoss or WildFly. Generate a local CA with EasyRSA Download and install easy-rsa – https://github.com/OpenVPN/easy-rsa Go to the installation folder and change the following… Read More »
From time to time is good to perform a security audit to your Internet exposed services. Things change fast online so you have to keep up with the security reports to be able to maintain secure services online. My favorite tool for SSL related security audit is the great resource at www.ssllabs.com. The audit performed… Read More »