Archive for the ‘Security’ Category

WordPress upgrade

In: Security|Web

30 Sep 2007

Today I upgraded WordPress, the system I use to host this blog. The current version is 2.3 – the upgrade was nice and smooth, just as described . Nothing more to say than: I am happy to have some security issues fixed.

Ten days ago I installed my new Linksys Router WRT45G router and set up a wireless bridge for my home network. I had some problems with getting everything working like I wanted it to – see my post. Today I took another attempt and was successful. Now I got a secure wireless connection in bridge [...]

While installing the MySQL database for my blog I found out that securing a MySQL installation got much easier. I remember setting the password for root and removing the anonymous login manually but there is a script to do this, just call mysql_secure_installation answer some questions. See MySQL documentation for more.

Lately I experienced problems with some bugzilla installations. For example when users tried to receive their password they got the error message Insecure dependency in exec while running with -T switch at /usr/lib/perl5/site_perl/5.8.3/Mail/Mailer/sendmail.pm line 17. It seems that this problem has something to do with conversation between different encodings used in special language templates (german, [...]

If you want to secure your web site you can configure your apache2 server to require a client certificate. You do this by adding the following to options to the ssl host configuration: SSLCACertificateFile /etc/ssl/private/CAcert.pem SSLVerifyClient require SSLVerifyDepth 10 To create a client certificate use the following commands openssl genrsa -out client.key 1024 openssl req [...]

I got so much response on my post about the certificate problems with apache2 and Firefox that I decided to post a howto about creating valid certificates with openssl. I am using an Ubuntu 6.10 server but there is no big difference to other distros except the directory structures. First you have to install openssl [...]

secure wireless lan

In: Security

2 Nov 2005

On saturday I had to install another wireless lan and I used a D-Link DI-624+ router.When I searched for a method to generate a WEP or WPA password I found a very good page about the configuration of this router (its in german). It contains a link to software from a ct’ article that allows [...]


Follow Me!

Photostream

    Evo RallyeP8282248P8282246P8282235P8282234P8282233

RSStOMPSON's tweets