Strong SSL Security on nginx - Raymii.org

Great article on nginx SSL\TLS hardning.

Strong SSL Security on nginx - Raymii.org:

'via Blog this'

How to protect your Debian or Ubuntu Server against the Logjam attack

How to protect your Debian or Ubuntu Server against the Logjam attack:

Good practice for Apache, NGINX, Postfix, Dovecot and Pure-ftpd.

'via Blog this'

Securing SQL Server connections with a certificate

I had an issue trying to get a SQL server to use a certificate to secure a connection with SSL.
The certificate was selected in SQL configuration manager but when the SQL service was restarted, it would fail with an EventID 26104 indicating it couldn't read find the certificate.

After a bit of googling, I found this:
http://nickstips.wordpress.com/2010/09/08/sql-ssl-and-sql-server-2008-service-doesnt-start-error-code-2146885628/

Turns out, if you run your SQL server under a non-privileged account as per best practice, the account can't read the private key of the certificate.

Altering the certificate permissions to allow your SQL server to read the certificate private key allows the SQL server to start.

SSL Error 61 on Citrix Access Gateway with Linux Client

I got the Linux client installed in the previous post, but got some SSL errors when trying to launch apps.
Our certificates are issued by Comodo, and the Linux Citrix client didn't support the root server for some reason.

• I used Firefox to view the certificate by clicking on the blue part at the start of the URL.
• Click 'More Information'
• Click 'View certificate'
• Click 'Details'
• Click the Root Certificate at the top of the heirarchy
• Click 'Export'
• Save the certificate as type 'X.509 Certificate DER'
• Save the certificate as 'RootCAName.crt' (Replace RootCAName with actual name)
• Copy the certificate to /opt/Citrix/ICAClient/keystore/cacerts.

I have read that you can copy the CACerts from Firefox, but I haven't tried that.

Thanks to http://www.itswapshop.com/tutorial/how-install-citrix-receiver-linux-120-opensuse-121 for the pointers.