How to get SSL certificate fingerprint and serial number using openssl command?
Fingerprint Serial
SSL
How to ensure Sitecore all traffic is serverd over SSL/TLS.
Update Web.config add following configuration: This configuration: Ensures that cookies are secure across your site Ensures that a client-side script cannot read the cookies Prevents any additional configuration from overriding these settings.
Get SSL certificate details with curl command
curl –insecure -v https://www.google.com 2>&1 | awk ‘BEGIN { cert=0 } /^* SSL connection/ { cert=1 } /^*/ { if (cert) print }’
Validate SSL certificate using OpenSSL command
Check a Certificate Signing Request (CSR) $openssl req -text -noout -verify -in CSR.csr Check a private key $openssl rsa -in privateKey.key -check Check a certificate $openssl x509 -in certificate.crt -text -noout Check a PKCS#12 file (.pfx or .p12) $openssl pkcs12 -info -in keyStore.p12
List all supported ciphers using nmap command
nmap –script ssl-enum-ciphers -p 443 www.example.com
Generate Certificate Request CSR with SANs using OpenSSL command
Create: san.cfg [ req ] default_bits = 2048 distinguished_name = req_distinguished_name req_extensions = req_ext prompt = no [ req_distinguished_name ] countryName = Country Name (2 letter code) stateOrProvinceName = State or Province Name (full name) localityName = Locality Name (eg, city) organizationName = Organization Name (eg, company) commonName = Common Name (e.g. server FQDN or YOUR name)…
WebSphere Threads servicing SSL connections might be blocked by the closing handshake write
http://www-01.ibm.com/support/docview.wss?uid=swg1PI70332 Exception: [9/4/17 19:58:14:215 AEST] 0000010f ThreadMonitor W CWWSR0605W: Thread “WebContainer : 5” (000001c0) has been active for 645241 milliseconds and may be hung. There is/are 1 thread(s) in total in the server that may be hung. at java.lang.Thread.yield(Native Method) at com.ibm.ws.ssl.channel.impl.SSLUtils.flushCloseDown(SSLUtils.java:243) at com.ibm.ws.ssl.channel.impl.SSLUtils.shutDownSSLEngine(SSLUtils.java:123) at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.cleanup(SSLConnectionLink.java:225) at com.ibm.ws.ssl.channel.impl.SSLConnectionLink.close(SSLConnectionLink.java:169) at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.close(HttpInboundLink.java:884) at com.ibm.wsspi.channel.base.InboundApplicationLink.close(InboundApplicationLink.java:58) at com.ibm.ws.webcontainer.channel.WCChannelLink.close(WCChannelLink.java:169) at…