#security

4 posts in this collection

Using Let’s Encrypt and Certbot to automate the creation of certificates for OpenVPN

Recently at Planet 9 Energy , I had to setup a VPN access to secure some of our internal services. One of the requirements was to make the provisioning easy to reproduce over multiple environments, so we ended up playing a bit with Terraform, while obviously adopting OpenVPN for the VPN server. Another important requirement was to expose the OpenVPN web interface (also called Access Server) using an SSL, which I was expecting to be one of the most challenging things to automate, instead, it turned out to…

8 invitations to try Keybase.io

Hello dear developers, today I finally got my invitation to access the private beta of Keybase.io ! 😎 🎉 For those who are not aware of this new service, Keybase.io is a website and a command line application that makes easier to adopt asymmetric cryptography to encrypt and authenticate messages. But it’s not just this, it’s also a “directory of people” , as they like to say. It’s like a social network, where everyone can easily share its public key and attach it to its social profiles (like Twitter…

Reset your MySql server password

Few days ago I learned an interesting trick that allows you to reset the password on a MySql server. This trick is pretty useful in case you have lost (or you haven’t ever had) the password of your MySql root user. You just need to throw some commands at the console. Note that I am assuming you are using Ubuntu or some other Debian derivate. Otherwise the commands may change a bit (but not to much I believe). 1. Stop the mysql daemon 2. Disable the security checks The mysqld_safe command will essentially…

Symfony security: authentication made simple (well, maybe!)

The Symfony2 security component has the fame of being one of the most complex in the framework. I tend to believe that’s partially true, not because the component is really that complex, but because there are (really) a lot of concepts involved and it may be difficult to understand them all at once and have a clear vision as a whole. I am in the process of writing an OAuth bundle and I faced the need to deeply understand how the authentication process work in Symfony2 to being able to integrate the…