Posts

Showing posts from 2016

How to setup FREE HTTPS for your website -- including a free CA certificate

Image
**GET YOUR SETTINGS REVIEWED BY AN EXPERT BEFORE YOU GO LIVE** You will find a lot of information in bits and pieces all over the Internet, too much technical jargon peppered all over. If you do not know how https works, do not worry. It is not hard to setup https. Lets say the https setup encrypts stuff between browser and the website and move on to set up https for your website. The keys are a couple of files needed to encrypt your website and these keys need to be signed by CA or the certificate authority in order for browsers to recognise that traffic is properly encrypted. I will use nginx web server and centos7 operating system to show how https can be setup. If you use a different webserver like apache or os like ubuntu look up corresponding instructions elsewhere. So here go the steps: 1. Get a free CA signed certificate 2. Update your web server to use the certificates and enable https 3. Setup certificate renewal and optimize and secure your https website

Pageant for Mac - Using Jump Server on Mac

Image
If you use putty on windows, you probably used pageant to store multiple keys, ssh to jump server and then ssh to your work machine. If you ended up on Mac for some reason and you have a production situation, there is no reason to panic. Mac systems have Keychain - a software that manages your keys including ssh keys. There are 3 steps to use it for jumping . 1. Add your ssh keys to Keychain. 2. Create an ssh  config file to access jump terminal 3. Agent forwarding 1. Adding keys If you had ppk/putty keys you need to convert them. If you have ssh keys then you can add them without converting. I had puttygen on my mac. If you were using Windows machine, you can convert ppk keys to ssh key on Windows and then add on Mac. I had two keys - if you have only one that is fine. puttygen user_rsa.ppk -O private-openssh -o user_rsa.key puttygen jump.ppk -O private-openssh -o jump.key If a window pops up then DO NOT hit generate key.  1. Load your private ke

jstut

Image
https://github.com/raguks/jstut