Security Archives - Page 2 of 6

What to Do if OpenSSL Does Not Find Your Private Key

2022-07-26 by Johnny Graber

As we were trying to combine a private key with a certificate into a pkcs12 file, we got this OpenSSL error:

openssl pkcs12 -export -name "Domain" -out Domain.pfx -inkey private.key -in Domain.crt

1	openssl pkcs12 -export -name "Domain" -out Domain.pfx -inkey private.key -in Domain.crt

unable to load private key 11528:error:0909006C:PEM routines:get_name:no start line:crypto\pem\pem_lib.c:745:Expecting: ANY PRIVATE KEY The file for the private key contained a private key, but OpenSSL could somehow not find it. As it turns out, …

Free App Service Managed Certificates in Azure

2022-07-19 by Johnny Graber

For the last 3 years we used Let’s Encrypt certificates for our user group site. Since there is no direct and easy-to-use solution in Azure, we needed the sjkp plug-in. Unfortunately, that no longer works after we moved from Windows to Linux as the hosting platform and we needed to fall back to a manual …

How to Add a .well-known Folder to Your ASP.Net Application

2022-06-21 by Johnny Graber

Since a few people had troubles with creating the .well-known folder for the security.txt in ASP.Net, I will explain in this post how you can do it in .Net 4.8 and .Net 6. .Net 4.8 In .Net 4.8 it is almost too easy to figure out how to do it. You create the .well-known …

Add a security.txt to Your Web Applications

2022-06-14 by Johnny Graber

Your web application is under the constant thread of hackers. It does not matter if you have a small pet project application on the internet or a big commercial site. As soon as it is accessible from the internet, someone will attack it. Sometimes we get lucky, and someone finds a security issue and wants …

Octopus Deploy & SSIS: Grant Permissions to the Correct User

2022-02-15 by Johnny Graber

I am a big fan of Octopus Deploy. This tool helps us to deploy our applications with ease and in a reliable way. In fact, it is so easy that I always forget the few important settings you need to have in place so that Octopus can do its magic. We use SSIS to synchronise …

SQL Server and Microsoft Defender: A Slow Combination

2022-02-08 by Johnny Graber

We are currently migrating our larger databases to SQL Server 2019. While the migration went smoothly for the small databases, there was an unexpected problem with the last server: the backup was incredibly slow. The first larger database we moved to the new server took 10 times longer to back up than on the old …

Python Friday #108: Getting Input From the Command Line

2022-02-04 by Johnny Graber

When you write scripts you often need to ask the user for an input. Let’s look how we can do that in Python. This post is part of my journey to learn Python. You can find the other parts of this series here. You find the code for this post in my PythonFriday repository on …

ASP.NET Core Identity: Use IEmailSender without SendGrid

2021-04-13 by Johnny Graber

ASP.NET Core Identity offers you a little interface called IEmailSender to wire up your own logic to send emails for account confirmation and password recovery. The official tutorial at Microsoft uses SendGrid for those emails. While this service has certainly its place, we do not want to change our email infrastructure just because we only …

A Simple Way to Fix ssl_error_rx_record_too_long in IIS Express

2021-01-05 by Johnny Graber

After deleting the developer certificate in IIS Express I could recreate a new one as described in this post. This approach worked, even when I needed to run the IisExpressAdminCmd for every port I use. At least, that was how I could fix all problems with SSL and IIS Express on my machine until a …

How to Extend a Personal Access Token for Azure DevOps

2020-11-24 by Johnny Graber

Personal Access Tokens (PAT) for Azure DevOps have an expiration date. They can be valid for a year at most. If this expiration date comes closer, Azure DevOps sends you an email with this subject: Azure DevOps personal access token nearing expiration We use PAT to allow our build servers to access our code in …