VirtualTam's bookmarks

1. CPython - Sigstore Information 2024-12-30

   tags: cryptography/certificate, cryptography/signature, programming/python, programming/python/pypi

   [ permalink ]

   • Python and Sigstore
   • PyPI now supports digital attestations
2. Sigstore - sign. verify. protect. Making sure your software is what it claims to be. 2024-12-30

   tags: cryptography/certificate-authority, cryptography/public-key-infrastructure, cryptography/signature, linux/container

   [ permalink ]

   • sigstore/cosign - Code signing and transparency for containers and binaries
   • sigstore/fulcio - Sigstore OIDC PKI
   • sigstore/rekor - Software Supply Chain Transparency Log
3. Building a Kubernetes Home Lab on the Raspberry Pi 2024-05-28

   tags: cryptography/certificate-authority, distributed-system, linux/container, linux/container/kubernetes, network/dns, raspberry-pi, self-hosting

   [ permalink ]

   1. Architecture & Roadmap
   2. Setup Kubernetes Management Node and Private Certificate Authority
   3. Configuring a Multi-Architecture Build Process
   4. Local DNS Services
4. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
5. The Sunlight Certificate Transparency Log 2024-03-16

   tags: cryptography/certificate, cryptography/certificate-authority, data-structure/tree, data-structure/tree/merkle-tree, letsencrypt, programming/go

   [ permalink ]

   • Introducing Sunlight, a CT implementation built for scalability, ease of operation, and reduced cost
   • Transparent Logs for Skeptical Clients
   • C2SP/C2SP - Community Cryptography Specification Project
   • FiloSottile/sunlight
   • transparency-dev/serverless-log
6. We build X.509 chains so you don’t have to 2024-01-26

   tags: cryptography/certificate, programming/go, programming/python, programming/rust

   [ permalink ]

   • pyca/cryptography - src/rust/cryptography-x509-verification
   • C2SP/x509-limbo - A suite of testvectors for X.509 certificate path validation and tools for building them
7. OpenSSL Cookbook 2023-05-31

   tags: cryptography/certificate, network/http, network/transport-layer-security, openssl

   [ permalink ]

   The definitive guide to using the OpenSSL command line for configuration and testing.

   Topics covered in this book include:

   • key and certificate management,
   • server configuration,
   • a step by step guide to creating a private CA,
   • testing of online services.
8. Debugging Certificate Errors 2023-02-18

   tags: cryptography/certificate, curl, network/http, network/transport-layer-security, openssl

   [ permalink ]

   • https://www.netmeister.org/whatsthatcert/
9. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

   tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

   [ permalink ]

   • https://github.com/chromium/badssl.com
10. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
11. mkcert: A simple zero-config tool to make locally trusted development certificates with any names you'd like. 2021-12-26

    tags: cryptography/certificate, cryptography/certificate-authority, programming/go

    [ permalink ]

    • https://blog.filippo.io/mkcert-valid-https-certificates-for-localhost/
12. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
13. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

    tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

    [ permalink ]
14. CFSSL: Cloudflare's PKI and TLS toolkit 2020-02-05

    tags: cloud-computing/cloudflare, cryptography, cryptography/certificate, cryptography/certificate-authority, security

    [ permalink ]

    • https://blog.cloudflare.com/introducing-cfssl/
15. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

    [ permalink ]
16. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
17. Acme-dns on CentOS 7 | jaletzki.de 2019-01-23

    tags: cryptography/certificate, letsencrypt, network/dns, network/http, network/transport-layer-security, security

    [ permalink ]

    • https://github.com/joohoi/acme-dns
    • https://github.com/Neilpang/acme.sh
18. docker-openvpn: OpenVPN server in a Docker container complete with an EasyRSA PKI CA 2019-01-07

    tags: cryptography/certificate, linux/container/docker, network, network/vpn, openssl

    [ permalink ]
19. Why is `--duplicate-cn` not recommended in OpenVPN? - Server Fault 2018-12-26

    tags: cryptography/certificate, network, network/vpn, security

    [ permalink ]
20. crt.sh | Certificate Search 2018-11-21

    tags: cryptography/certificate, letsencrypt, network/http, network/transport-layer-security, security

    [ permalink ]

    • https://transparencyreport.google.com