VirtualTam's bookmarks

1. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management

   2024-05-27
   cryptography/certificate cryptography/certificate-authority network/http network/http-server/traefik network/reverse-proxy network/transport-layer-security programming/go

   Permalink
   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
2. The Copenhagen Book - General guidelines on implementing authentication and authorization in web applications

   2024-04-05
   cryptography/hash memory/cache network/http network/http/cookie programming/go security/authentication security/authorization security/oauth security/password

   Permalink
   • pilcrowOnPaper/copenhagen
3. SOC - System and Organization Controls

   2024-02-17
   code-review infrastructure/automation observability security security/audit security/authentication security/authorization single-sign-on source-code-management/git source-code-management/github

   Permalink
   • The SOC2 Starting Seven
   • SOC2: The Screenshots Will Continue Until Security Improves
4. LWN - Identity management for WireGuard

   2022-12-14
   network/vpn/wireguard security security/authentication security/authorization security/oauth security/openid

   Permalink
5. authentik - an open-source Identity Provider focused on flexibility and versatility

   2022-07-12
   configuration-management/terraform identity programming/go programming/python security/authentication security/authorization

   Permalink
   • https://github.com/goauthentik/authentik
   • https://github.com/goauthentik/terraform-provider-authentik
6. lldap: Light LDAP implementation

   2022-07-12
   network/ldap programming/rust security/authentication security/authorization

   Permalink
7. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean

   2022-02-24
   cryptography/certificate cryptography/certificate-authority cryptography/encryption linux network/transport-layer-security openssl

   Permalink
8. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch

   2021-11-14
   cryptography/certificate cryptography/certificate-authority network/http network/tcp network/transport-layer-security observability/elastic/elasticsearch

   Permalink
9. glauth - a lightweight LDAP server for development, home use, or CI

   2021-10-19
   network/ldap programming/go security/authentication security/authorization

   Permalink
   • https://github.com/sonicnkt/glauth-ui
10. 389ds in containers

    2021-01-20
    linux/container/docker network/ldap security/authentication security/authorization

    Permalink
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_1_foundations.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_2_searching.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_3_filters.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_4_schema_and_objects.html
    • https://github.com/389ds/389-ds-base/blob/master/docker/389-ds-fedora/Dockerfile
11. FusionDirectory — a solution to daily management of data stored in an LDAP directory

    2021-01-20
    linux/container/docker network/ldap security/authentication security/authorization

    Permalink
    • https://github.com/tiredofit/docker-fusiondirectory
    • https://hub.docker.com/r/tiredofit/fusiondirectory
12. Open Distro for Elasticsearch | Open Distro

    2020-12-20
    cloud-computing cloud-computing/aws machine-learning observability/elastic/elasticsearch observability/logging observability/tracing programming/java security/authentication security/authorization

    Permalink
    • https://github.com/opendistro-for-elasticsearch
    • https://aws.amazon.com/blogs/aws/new-open-distro-for-elasticsearch/
    • https://opendistro.github.io/for-elasticsearch/blog/releases/2020/12/announcing-trace-analytics/
    • https://logz.io/blog/open-distro-for-elasticsearch/
13. CFSSL: Cloudflare's PKI and TLS toolkit

    2020-02-05
    cloud-computing/cloudflare cryptography cryptography/certificate cryptography/certificate-authority security

    Permalink
    • https://blog.cloudflare.com/introducing-cfssl/
14. GitLab Container Registry | GitLab

    2019-10-21
    continuous-integration continuous-integration/continuous-delivery linux/container/docker registry security/authentication security/authorization source-code-management/git source-code-management/gitlab

    Permalink
    • https://docs.gitlab.com/ce/administration/packages/container_registry.html
    • https://docs.docker.com/registry/deploying/
15. Pomerium, a standardized interface to add access control whether an application itself has authorization or authentication baked-in

    2019-09-16
    network/http network/proxy programming/api security security/authentication user web

    Permalink
    • https://github.com/pomerium/pomerium
16. ubuntu - Is it possible to use Ansible authorized_key exclusive with multiple keys? - Stack Overflow

    2019-09-08
    configuration-management/ansible cryptography/public-key-infrastructure network/ssh security security/authentication

    Permalink
    • https://docs.ansible.com/ansible/latest/modules/authorized_key_module.html
    • https://github.com/ansible/ansible-modules-core/commit/6f6d7f5c18296e3fe84fa5aef674948753ff52ae
    • https://github.com/ansible/ansible/issues/11347
17. AWS Tutorial: Enable Your Users to Configure Their Own Credentials and MFA Settings - Identity and Access Management

    2019-08-08
    cloud-computing/aws programming/api security security/authentication security/authorization user

    Permalink
    • https://aws.amazon.com/blogs/security/how-to-delegate-management-of-multi-factor-authentication-to-aws-iam-users/
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_aws_my-sec-creds-self-manage.html
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
18. FreeIPA Installation du serveur et de son réplica | Worteks

    2019-07-25
    kerberos network/ldap samba security/authentication security/authorization user

    Permalink
    • https://www.worteks.com/fr/2018/03/29/freeipa-part1/
    • https://www.worteks.com/fr/2018/04/16/freeipa-partie-2-clients-hbac-sudo-mots-de-passe/
    • https://www.worteks.com/fr/2018/05/07/freeipa-partie-3-haute-disponibilite-automount/
    • https://www.worteks.com/fr/2019/05/23/freeipa-partie-4-seconds-facteurs-dauthentification/
19. How do you achieve fully centralized, unified user management with true SSO? : selfhosted

    2019-07-22
    network/ldap security/authentication security/authorization self-hosting single-sign-on user

    Permalink
20. Federation with Keycloak and FreeIPA - Red Hat Customer Portal

    2019-07-22
    network/ldap red-hat security/authentication security/authorization single-sign-on user

    Permalink