VirtualTam's bookmarks

1. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
2. facebookexperimental/kperf - TCP and TLS performance testing tool 2024-03-31

   tags: network/tcp, network/transport-layer-security, performance/benchmark, programming/c

   [ permalink ]
3. HAProxy - TLS Termination Setup 2023-07-24

   tags: cryptography/encryption, network/http, network/http-server/haproxy, network/reverse-proxy, network/transport-layer-security, security

   [ permalink ]

   • Traffic Routing - Rewrite Requests
   • Client IP Preservation - X-Forwarded-For
   • HAProxy & HTTP Strict Transport Security (HSTS)
   • Secure Cookies Using HAProxy Enterprise
4. Web Security Cheat Sheet | Mozilla Infosec 2023-07-23

   tags: network/http, network/http/cookie, network/transport-layer-security, programming/html, programming/javascript, security, web

   [ permalink ]
5. OpenSSL Cookbook 2023-05-31

   tags: cryptography/certificate, network/http, network/transport-layer-security, openssl

   [ permalink ]

   The definitive guide to using the OpenSSL command line for configuration and testing.

   Topics covered in this book include:

   • key and certificate management,
   • server configuration,
   • a step by step guide to creating a private CA,
   • testing of online services.
6. Debugging Certificate Errors 2023-02-18

   tags: cryptography/certificate, curl, network/http, network/transport-layer-security, openssl

   [ permalink ]

   • https://www.netmeister.org/whatsthatcert/
7. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

   tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

   [ permalink ]

   • https://github.com/chromium/badssl.com
8. TLS Expiry and Uptime Monitor for URLs - Prometheus Blackbox | Grafana 2022-05-01

   tags: network/transport-layer-security, observability/grafana, observability/time-series/prometheus

   [ permalink ]

   • https://prometheus.io/docs/guides/multi-target-exporter/
   • https://github.com/prometheus/blackbox_exporter/blob/master/example.yml
9. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

   tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

   [ permalink ]
10. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
11. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies 2020-12-11

    tags: network/dns, network/http-server/haproxy, network/reverse-proxy, network/server-name-indication, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
    • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19
12. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

    tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

    [ permalink ]
13. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

    [ permalink ]
14. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
15. Kubernetes-native microservices API gateway: Ambassador 2019-07-15

    tags: envoy, linux/container/docker, linux/container/kubernetes, network, network/http, network/proxy, network/transport-layer-security

    [ permalink ]

    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
16. High Performance Browser Networking | Ilya Grigorik 2019-06-24

    tags: book, cryptography/encryption, cryptography/public-key-infrastructure, cryptography/rsa, internet/browser, mobile, network/http, network/transport-layer-security, security, web

    [ permalink ]

    • https://hpbn.co/webrtc/
    • https://hpbn.co/transport-layer-security-tls/
    • https://hpbn.co/webrtc/
17. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik 2019-04-19

    tags: configuration-management/ansible, distributed-system/cluster, linux/container/kubernetes, network, network/firewall, network/http, network/http-server/traefik, network/transport-layer-security

    [ permalink ]

    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/
18. nginx-quick-reference: This notes describes how to improve Nginx performance, security and other important things. 2019-02-08

    tags: cipher, cryptography/encryption, network/http, network/http-server/nginx, network/transport-layer-security, security, server

    [ permalink ]
19. server-configs: Boilerplate configurations for various web servers. 2019-01-23

    tags: apache, network/http, network/http-server/apache-httpd, network/http-server/nginx, network/transport-layer-security, server

    [ permalink ]

    • https://github.com/h5bp/server-configs-apache
    • https://github.com/h5bp/server-configs-nginx
20. Acme-dns on CentOS 7 | jaletzki.de 2019-01-23

    tags: cryptography/certificate, letsencrypt, network/dns, network/http, network/transport-layer-security, security

    [ permalink ]

    • https://github.com/joohoi/acme-dns
    • https://github.com/Neilpang/acme.sh