#ocsp

I have multiple test environment to test all kinds of things, but one of those I use quite a lot to do the funky stuff. I wanted to test multiple things regarding Windows Server 2025 DCs and AD, so I decided to upgrade my ADTEC.NET AD forest from W2K22 to W2K25. As a side note, remember this is a testlab and because of that I had multiple roles running on 1 server. R0FSRWDC1 (a RWDC) is running…

Já reparou quando está a navegar (a fazer browsing) na Internet e clica num site, ou digita o endereço do site (URL) verifica que existe um pequeno ícone com um cadeado (aberto ou fechado) se estiver num computador, ou um pequeno ícone com um padrão se estiver a navegar num smartphone e antes do endereço do site. Saiba que esse pequeno ícone representa um certificado digital, uma forma de…

La importancia de mantener correctamente, la fecha y hora del sistema, es que cuando vamos a navegar en Internet; las principales páginas como: Google o Wikipedia, entre otros, cuentan con una especia de identificación. Certificados o firmas con fechas y por cuestiones de programación, nos van a dar errores -NO CARGA LA PÁGINA-. Si lo vemos hipotéticamente, tiene sentido, pues no parece posible que alguien esté navegando el día "9/9/11" a las 11:11... por poner un ejemplo. Otro problema, relacionado con esto y ajeno al control de la mayoría de personas, es, que la batería de la "BIOS"; ubicada en la placa/tarjeta interior del computador, está baja, hay que cambiarla. Entonces, cada vez que se apaga el computador, no guarda la fecha y hora actual.

How to: How do I check if my SSL certificates have been revoked #it #fix #computers

How do I check if my SSL certificates have been revoked

The recent discovery of the heartbleed vulnerability has prompted certificate authorities to re-issue certificates.

I have two certificates that were generated before the heartbleed vulnerability was discovered. After the SSL issuer told me to regenerate the certificate I have updated both my servers/domains with the new certificates.

If my…

Solution: Free OCSP server for testing purposes? #fix #computers #development

Free OCSP server for testing purposes?

Can anyone recommend a free and simple OCSP server for Windows or Linux?

Answer [by Rook]: Free OCSP server for testing purposes?

The best free OCSP server is in the OpenCA package. Here is an example of creating a custom OCSP message. If you like java then you should use EJBCA.

I think windows has an OCSP server in the windows 2008 enterprise edition. I…

換到 nginx 1.6 後把 OCSP stapling 與 SPDY 打開…

剛剛把 nginx 換到 ppa 的版本 (目前是 1.6)，然後打開 OCSP stapling 與 SPDY，速度明顯有感覺提昇…

OCSP stapling：

SPDY：

目前有想到而且能處理的都做的差不多了 :p