I searched a half hour for a how-to for Let’s Encrypt Wildcard certificates with automatic renewal. All sites I’ve found just promoted the manual method, where I would have to manually add dns entries every 3 months – neeeeeever! Then I stumbled upon acme.sh. This acme client tool for Let’s Encrypt even has plugins for […]
Yes, I’ve got it back! After my ssl certificate provider startssl.com upgraded the root certificates with the power of SHA256withRSA instead of SHA1, I’ve got my A+ rating for SSL secured websites back. Here the link for verification: https://www.ssllabs.com/ssltest/analyze.html?d=mmo.to With the upgrade of my account at startSSL on May, 28 I could create a new […]
Today I tried to just chose a elliptic curve for my TLS certifcate which I thought to be suitable, but was very disappointed about the browser support for those curves. I generated a key with a 521 bit curve but realized afterwards that browsers like M$ ones and chromium (wtf?) only support two curves recommended […]
First Heartbleed, now Shellshock. The new big bugs in important libraries/software have their own ‘brand’ name now. A bit crazy and a bit overkill in my opinion, but at least now such bad security holes are getting enough attention to be fixed FAST, hopefully. I’ve updated my server immediately after good patches were available, so […]