Last change: 2025-01-06
OCSP stapling is a logical follow-up on Online Certificate Status Protocol. With newer versions of Nginx we can enable OCSP stapling and enable testing.
Commands:
- nginx
- systemctl
Tls articles
Last change: 2025-01-06
The Poodle vulnerability was discovered in October 2014, putting all systems using SSL 3.0 at risk. Here is what to do to protect against it.
Commands:
- grep
- openssl
Last change: 2025-01-06
The BEAST attack showed up in 2011 and some servers are still vulnerable to it. With the right protocols, ciphers and preference, we can keep the BEAST out.