Archive for the 'openssl' Category

SHFS — “Mount ANY dir from ANY host in a SECURE way”

# shfs is a very nice way to circumvent the insecurities of nfs. It can mount a remote directory on your local machine, just as one would do with nfs (shfsmount and shfsumount understand the same syntax as the normal nfs mount and umount commands, but in stead of sending the files in the clear, [...]

SSHD to only accept public-key auth!

If you need to configure the ssh daemon to only accept public-key auth, not password-auth.
edit /etc/ssh/sshd_config
and change following
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
PermitEmptyPasswords no
RSAAuthentication yes
PubkeyAuthentication yes
UsePAM no
and reload sshd
Thats it!

Generating an SSL Certificate with Apache+mod_ssl

This document is intended to be a quick guide to generating and installing an SSL certificate on an Apache web server with the mod_ssl module. While this is not an overly difficult process, it does involve running several long commands with numerous options. This document should be all that you need to walk you through [...]

Sendmail to use SSL encryption for sending/receiving email

Sendmail can be configured to encrypt email via the secure socket layer (SSL) when sending and receiving messages. This requires the following configuration changes to Sendmail. Frst, SSL requires a valid certificate on the server. This can be obtained from a company which digitally signs the certificate or it can be created locally.