VirtualTam's bookmarks

1. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
2. gittuf - A security layer for Git, with key management and permissions for branches and tags 2024-05-13

   tags: automotive, embedded, security, source-code-management/git, trust

   [ permalink ]

   • gittuf/gittuf
   • ossf/wg-supply-chain-integrity
   • OpenSSF - Introducing gittuf: A Security Layer for Git Repositories
   • LWN - Securing Git repositories with gittuf
   • TUF - The Update Framework
   • Uptane - A Secure Software Update Framework for Automobiles
3. facebookexperimental/kperf - TCP and TLS performance testing tool 2024-03-31

   tags: network/tcp, network/transport-layer-security, performance/benchmark, programming/c

   [ permalink ]
4. ANGLE - Almost Native Graphics Layer Engine 2023-12-05

   tags: graphics/opengl, graphics/webgl, internet/browser

   [ permalink ]

   Allow users of multiple operating systems to seamlessly run WebGL and other OpenGL ES content by translating OpenGL ES API calls to one of the hardware-supported APIs available for that platform

5. HAProxy - TLS Termination Setup 2023-07-24

   tags: cryptography/encryption, network/http, network/http-server/haproxy, network/reverse-proxy, network/transport-layer-security, security

   [ permalink ]

   • Traffic Routing - Rewrite Requests
   • Client IP Preservation - X-Forwarded-For
   • HAProxy & HTTP Strict Transport Security (HSTS)
   • Secure Cookies Using HAProxy Enterprise
6. Web Security Cheat Sheet | Mozilla Infosec 2023-07-23

   tags: network/http, network/http/cookie, network/transport-layer-security, programming/html, programming/javascript, security, web

   [ permalink ]
7. OpenSSL Cookbook 2023-05-31

   tags: cryptography/certificate, network/http, network/transport-layer-security, openssl

   [ permalink ]

   The definitive guide to using the OpenSSL command line for configuration and testing.

   Topics covered in this book include:

   • key and certificate management,
   • server configuration,
   • a step by step guide to creating a private CA,
   • testing of online services.
8. Debugging Certificate Errors 2023-02-18

   tags: cryptography/certificate, curl, network/http, network/transport-layer-security, openssl

   [ permalink ]

   • https://www.netmeister.org/whatsthatcert/
9. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

   tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

   [ permalink ]

   • https://github.com/chromium/badssl.com
10. Mitogen for Ansible | A redesigned UNIX connection layer and module runtime for Ansible 2023-01-28

    tags: configuration-management/ansible, network/ssh, programming/python

    [ permalink ]

    • https://github.com/mitogen-hq/mitogen
    • https://mitogen.networkgenomics.com/howitworks.html
    • https://news.ycombinator.com/item?id=15355144
11. TLS Expiry and Uptime Monitor for URLs - Prometheus Blackbox | Grafana 2022-05-01

    tags: network/transport-layer-security, observability/grafana, observability/time-series/prometheus

    [ permalink ]

    • https://prometheus.io/docs/guides/multi-target-exporter/
    • https://github.com/prometheus/blackbox_exporter/blob/master/example.yml
12. embiggen-disk: live-resize a filesystem after first live-resizing any necessary layers below it: an optional LVM LV and PV, and an MBR or GPT partition table 2022-03-05

    tags: filesystem/lvm, linux, programming/go, virtualization, virtualization/qemu

    [ permalink ]

    • https://www.youtube.com/watch?v=69Zy77O-BUM
13. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
14. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
15. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies 2020-12-11

    tags: network/dns, network/http-server/haproxy, network/reverse-proxy, network/server-name-indication, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
    • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19
16. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

    tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

    [ permalink ]
17. RFC 2222 - Simple Authentication and Security Layer (SASL) 2019-10-21

    tags: email, linux, network/ldap, network/smtp, security, security/authentication, unix

    [ permalink ]

    • https://en.wikipedia.org/wiki/Simple_Authentication_and_Security_Layer
    • https://tools.ietf.org/html/rfc2444
    • https://tools.ietf.org/html/rfc4422
    • https://tools.ietf.org/html/rfc4752
18. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

    [ permalink ]
19. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
20. Network Automation and Programmability Abstraction Layer with Multivendor support 2019-07-15

    tags: automation, ddos, hardware, linux/kernel/ebpf, network, network/router

    [ permalink ]

    • https://github.com/napalm-automation/napalm
    • https://pynet.twb-tech.com/blog/automation/napalm-ios.html
    • https://blog.cloudflare.com/the-internet-is-hostile-building-a-more-resilient-network/
    • https://blog.ipspace.net/2015/06/napalm-integrating-ansible-with-network.html