Search

Tag: certificate-authority

View:
Oleg Onischuk
  • Oleg Onischuk
  • March 23, 2021

How to Replace Your Default ESXi SSL certificate With the Help of a Local Domain Certificate Authority (CA): a 101 Introduction

In the previous article, I have shared a working algorithm on replacing the ESXi SSL certificate with a self-signed one, but, as you know well, there’s always room for perfection. So, I have been practicing with a more universal scenario that could also work with a domain infrastructure and domain certificate services. That’s what I came up with.
Read more
Gary Williams
  • Gary Williams
  • May 22, 2018

Install Gitlab, HTTPS and the container registry

Many of us view Gitlab as something that only developers may use. Indeed, these guys love it, but are they the only ones who may find it handy? That’s time to dispel that myth! Gitlab is more than the cool repository for scripts of any size and shape. It is a feature-rich solution, so that won’t be fair to leave that thing on the table.
Read more
Didier Van Hoye
  • Didier Van Hoye
  • January 31, 2017

Upgrade your CA to SKP & SHA256. Part I: Setting the Stage

Many Certificate Authority servers that were installed on Windows Server 2003 never got upgraded until Microsoft ceased the support of Windows 2003. Some of those are still out there running today. A massive amount of them got set up in an era when Wi-Fi in the SME market became very popular and CA servers were deployed to easily secure access to it. To be fair, a lot of administrators didn’t wait for Windows Server 2003 support to expire and made sure their CA was more or less up to date by upgrading them in place. That alone is something to commend. However, the operating system version only introduces the capability of using modern more secure providers and algorithms. It doesn’t upgrade the ones used by the PKI automatically for you. So many of these upgrade PKI servers are still using an old cryptographic provider, the “Microsoft Strong Cryptographic Provider” (SCP) and an old hash algorithm (SHA1) that’s been deprecated (see SHA1 Deprecation: What You Need to Know) or even banned.
Read more