Using OpenSSL to generate CSR’s with Subject Alternative Name

Friday, 19 May 2017 / Published in Security
This post details how I’ve been using OpenSSL to generate CSR’s with Subject Alternative Name Extensions. You may have noticed that since Chrome 58, certificates that do not have Subject Alternative name extensions will show as invalid. Amazing, I must have missed the memo on that. Most of the certificates I use in my home

Packets Don’t Lie

Wednesday, 21 October 2015 / Published in Networking
I recently installed a new UPS in my home lab which required a power down all of all my kit.  This always makes me nervous as its not often I shutdown everything and there’s always a possibility It might not all come back online. At least not without a bit of tinkering here and there, this

Net Assured Moves to HTTPS

Tuesday, 28 July 2015 / Published in Security
This week I migrated the web site over to https.  I opted for an extended validation certificate which means we get the shiny green box with “Net Assured Limited” in the browsers URL bar.  The process to obtain an EV certificate is lengthy and in some cases can take weeks to be validated and certificate

News / Articles Week Ending 21/03/2015

Friday, 20 March 2015 / Published in Security
SSL Interception Interesting article regarding SSL interception deployments and associated risks. It would certainly be advisable to check your own deployments. http://www.cert.org/blogs/certcc/post.cfm?EntryID=221 SSL Troubleshooting While we are on the subject of SS, here’s a useful article regarding troubleshooting SSL connections using openssl.  The article covers the following: 1. Check the Connection 2. Decoding a Base64 Certificate