VirtualTam's bookmarks

1. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
2. The Copenhagen Book - General guidelines on implementing authentication and authorization in web applications 2024-04-05

   tags: cryptography/hash, memory/cache, network/http, network/http/cookie, programming/go, security/authentication, security/authorization, security/oauth, security/password

   [ permalink ]

   • pilcrowOnPaper/copenhagen
3. SOC - System and Organization Controls 2024-02-17

   tags: code-review, infrastructure/automation, observability, security, security/audit, security/authentication, security/authorization, single-sign-on, source-code-management/git, source-code-management/github

   [ permalink ]

   • The SOC2 Starting Seven
   • SOC2: The Screenshots Will Continue Until Security Improves
4. LWN - Identity management for WireGuard 2022-12-14

   tags: network/vpn/wireguard, security, security/authentication, security/authorization, security/oauth, security/openid

   [ permalink ]
5. authentik - an open-source Identity Provider focused on flexibility and versatility 2022-07-12

   tags: configuration-management/terraform, identity, programming/go, programming/python, security/authentication, security/authorization

   [ permalink ]

   • https://github.com/goauthentik/authentik
   • https://github.com/goauthentik/terraform-provider-authentik
6. lldap: Light LDAP implementation 2022-07-12

   tags: network/ldap, programming/rust, security/authentication, security/authorization

   [ permalink ]
7. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

   tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

   [ permalink ]
8. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

   [ permalink ]
9. glauth - a lightweight LDAP server for development, home use, or CI 2021-10-19

   tags: network/ldap, programming/go, security/authentication, security/authorization

   [ permalink ]

   • https://github.com/sonicnkt/glauth-ui
10. 389ds in containers 2021-01-20

    tags: linux/container/docker, network/ldap, security/authentication, security/authorization

    [ permalink ]

    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_1_foundations.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_2_searching.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_3_filters.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_4_schema_and_objects.html
    • https://github.com/389ds/389-ds-base/blob/master/docker/389-ds-fedora/Dockerfile
11. FusionDirectory — a solution to daily management of data stored in an LDAP directory 2021-01-20

    tags: linux/container/docker, network/ldap, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/tiredofit/docker-fusiondirectory
    • https://hub.docker.com/r/tiredofit/fusiondirectory
12. Open Distro for Elasticsearch | Open Distro 2020-12-20

    tags: cloud, cloud/aws, machine-learning, observability/elastic/elasticsearch, observability/logging, observability/tracing, programming/java, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/opendistro-for-elasticsearch
    • https://aws.amazon.com/blogs/aws/new-open-distro-for-elasticsearch/
    • https://opendistro.github.io/for-elasticsearch/blog/releases/2020/12/announcing-trace-analytics/
    • https://logz.io/blog/open-distro-for-elasticsearch/
13. CFSSL: Cloudflare's PKI and TLS toolkit 2020-02-05

    tags: cryptography, cryptography/certificate, cryptography/certificate-authority, security

    [ permalink ]

    • https://blog.cloudflare.com/introducing-cfssl/
14. GitLab Container Registry | GitLab 2019-10-21

    tags: continuous-integration, continuous-integration/continuous-delivery, linux/container/docker, registry, security/authentication, security/authorization, source-code-management/git, source-code-management/gitlab

    [ permalink ]

    • https://docs.gitlab.com/ce/administration/packages/container_registry.html
    • https://docs.docker.com/registry/deploying/
15. Pomerium, a standardized interface to add access control whether an application itself has authorization or authentication baked-in 2019-09-16

    tags: network/http, network/proxy, programming/api, security, security/authentication, user, web

    [ permalink ]

    • https://github.com/pomerium/pomerium
16. ubuntu - Is it possible to use Ansible authorized_key exclusive with multiple keys? - Stack Overflow 2019-09-08

    tags: configuration-management/ansible, cryptography/public-key-infrastructure, network/ssh, security, security/authentication

    [ permalink ]

    • https://docs.ansible.com/ansible/latest/modules/authorized_key_module.html
    • https://github.com/ansible/ansible-modules-core/commit/6f6d7f5c18296e3fe84fa5aef674948753ff52ae
    • https://github.com/ansible/ansible/issues/11347
17. AWS Tutorial: Enable Your Users to Configure Their Own Credentials and MFA Settings - Identity and Access Management 2019-08-08

    tags: cloud/aws, programming/api, security, security/authentication, security/authorization, user

    [ permalink ]

    • https://aws.amazon.com/blogs/security/how-to-delegate-management-of-multi-factor-authentication-to-aws-iam-users/
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_aws_my-sec-creds-self-manage.html
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
18. FreeIPA Installation du serveur et de son réplica | Worteks 2019-07-25

    tags: kerberos, network/ldap, samba, security/authentication, security/authorization, user

    [ permalink ]

    • https://www.worteks.com/fr/2018/03/29/freeipa-part1/
    • https://www.worteks.com/fr/2018/04/16/freeipa-partie-2-clients-hbac-sudo-mots-de-passe/
    • https://www.worteks.com/fr/2018/05/07/freeipa-partie-3-haute-disponibilite-automount/
    • https://www.worteks.com/fr/2019/05/23/freeipa-partie-4-seconds-facteurs-dauthentification/
19. How do you achieve fully centralized, unified user management with true SSO? : selfhosted 2019-07-22

    tags: network/ldap, security/authentication, security/authorization, self-hosting, single-sign-on, user

    [ permalink ]
20. Federation with Keycloak and FreeIPA - Red Hat Customer Portal 2019-07-22

    tags: network/ldap, red-hat, security/authentication, security/authorization, single-sign-on, user

    [ permalink ]