Posts

Showing posts with the label SSL

IIS Setup let text file without extension

Enable go to the URL of the text file without extension Last week I was trying to install the SSL certificate using Let's Encrypt open source SSL. Using the ZeroSSL . Inside the progress, there is one part require the user to verify the website is own by the users. To get to verify, it needs the specific link with specific content. So in order to create the link follow the step below: 1) Create a virtual directory in IIS (Assume you know how to do it) =| 2) Setup the web config on the virtual directory by pasting the config into webconfig. <?xml version="1.0" encoding="UTF-8"?> <configuration>     <system.webServer>         <directoryBrowse enabled="true" />                                     <staticConte...

HeartBleed OpenSSL Bug

The OpenSSL cryptographic software library have a serious vulnerability called HeartBleed. This vulnerability cause the internet connection insecure because it was using the SSL/TLS encryption, the information can be easily stoled by thirds party. Almost all internet application of the security communication and privacy over the internet is using SSL/TLS. This weakeness will cause the application like web, email, instant messaging,and some Virtual Private networks being compromise. Heartbleed bug is allows anyone on the internet to read the memory of the systems protected by the vulnerable version of the OpenSSL software. This cause the secret keys that identify the services providers and to encrypt the traffic, important information like names, passwords of the users and it content being compromises. Hackers able to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users. What leaks in practice? We have tested some of...