Musings on Information Technology - A view from the trenches

In a previous post , I described  how to configure SSL client Authentication in IIS 7.5 using a One-to-One Mapping. In this post I descri...

In my last post , I described a rather tedious and error prone method for configuring One To One client certificate mappings in IIS 7.5, so...

I do know that it's not possible to have SSL mutual authentication without using client certificates, but I thought that I'd thro...

Following on from Sunday's post on how to set up phpMyAdmin on CentOS 6.2, I thought it would be a good idea to set up phpMyAdmin as a...

It turns out that it is indeed easy peasy to understand how CRLs work in IIS 6. If the certificate contains a CRL Distribution Point (CDP...

It's been a bit of nightmare today, we've had quite a number of issues, ranging from missing CA certs to firewall issues, with routi...

In these posts ( 1 , 2 ), I discussed using OpenSSL as a simple SSL client to help troubleshoot SSL connections. I did not make any mention ...

In this post , I stated that the errors, see below in red , were due to the linux server not trusting the TESTAuthority CA, which is true an...

I discussed yesterday that we had done some security hardening for our IIS 6.0 servers. In essence, we have disabled Low ciphers, i.e. thos...

A few weeks ago we were tasked with ensuring that our IIS 6.0 server only allowed Medium and High ciphers, so in order to test what ciphers ...

We get some strange requests at work form time to time, the last one? Can you use null ciphers for SSL traffic in IIS? If you are wonderin...