My OpenSource
categories
Keep up with the latest news
Configuring FreeRadius for 802.1x
Guide to installing an alternative Radius service, for those who may have implemented Windows NPS Server - License Free and Open Source, Enterprise Ready
In a pervious post, I covered the steps to deploy the current stable release of FreeRadius, by installing the packages from the NetworkRadius organizations repository. We will now, focus on configuring the FreeRadius server so that it can authenticate 802.1x requests. Why? Why would we go to this trouble, especially given the fact that Windows has shipped with its own NPS service, for the past 20 years? Simple really, In the world of Cloud First, many customers are now selecting the option of Azure AD Joined only, for their machines in preference to AD Joined, or even Hybrid Joined.
Read moreExtracting Public and Private Certificates from a PFX
PFX files enable to transportation of certificates between systems, however many services require separate files for both public and private certificates
Using OpenSSL, we can extract the private key, and the certificate into independent file’s, which is required for most networking devices, and linux services. You will need to install the OpenSSL package, either on your Windows or Linux system (I have covered how to update the current version on Linux here) Export the private key from the PFX file We begin, by passing in the PFX and requesting the Private key to be placed into its own file.
Read moreCreating a PFX from a certificate in Windows
Windows stores certificates in a special logical store, in this post we check out two methods to export certificates with their private key to PFX files
A .pfx file is in essence an archive which can contain multiple objects, and can also be password protected; The format of this file is known as PKCS#12 Typically, a .pfx usually contains one or more certificate, typically the chain of upstream authorities, and the corresponding private key. The most common usage of a PFX file is simplify certificate distribution to alternate systems or deployed to services. Logical stores Within Windows, all certificates exist in logical storage locations referred to as certificate stores.
Read moreCreate PKI Certificate for Linux Server
Using OpenSSL we learn how to create a Certificate Request from Linux node, to issue a certificate from a Windows PKI Server
At some point, you will have the requirement of creating a certificate request, and submitting this to an online certificate authority, which will process the request and issue you a certificate with both a Public and Private Key. In this post, we will use the ‘OpenSSL’ utility to create such a request file, and walk trough the steps of issuing a certificate from a Windows PKI Server. Creating our Certificate Request We will create a Certificate Request template file which defines the settings which are necessary to also include Subject Alternate Name in the issued certificate.
Read moreOpenSSL 1.1.1k on Ubuntu
A simple guide to installing the current version of the OpenSSL utility on Ubuntu Linux
Being over 25 years old, OpenSSL can be found on just about any system you work with today; but this does not imply that the version installed is current (or even close). During its life, there have been many instances where OpenSSL has been in the news, where some new vulnerability has being discovered, and quickly after, patched. The Swiss Army Knive of SSL Certificate’s, this is a tool that everyone should have at least used once in their administrative duties.
Read moreInstalling FreeRadius
Guide to installing an alternative Radius service, for those who may have implemented Windows NPS Server - License Free and Open Source, Enterprise Ready
FreeRADIUS is an open source, high-performance, modular, scalable and feature-rich RADIUS server. It ships with both server and radius client, development libraries and numerous additional RADIUS related utilities, for Linux FreeRADIUS supports request proxying, with fail-over and load balancing, as well as the ability to access many types of back-end databases. RADIUS, which stands for Remote Authentication Dial-In User Service, is a network protocol used for remote user authentication and accounting.
Read moreStatic Comments
Implementing Comments on a Static Site
At this point we are almost ready to go live with our site, however, one of the cornerstones to growing and sharing is communication. Wordpress In the world of Wordpress, this was a standard core feature, which leveraged the fact that the pages were rendered on demand from a backend database. In this scenario, the same approach is offered to maintain a commenting platform. However, as I noted earlier; given that Wordpress powers a very large portion of the blogging surface of the internet; it is an obvious target for hacking, just refer to the CVS database for a glimpse of what this looks like in reality.
Read moreAdding Content Flow
Using pipelines for flow static site content between markdown and foundation
With the heavy lifting done in creating the site building mechanics and a solid foundation to build and share upon; our final objective is to automate the process of connecting these two stages. Release Pipeline Technically the goal we are speaking about is the Release Pipeline which will take the artefact (our site .ZIP file) that we created in the Build Pipeline in our previous topic Constructing a new Home with Jekyll and Azure DevOps; and publish this to our storage account.
Read moreLaying Foundations in Azure
Laying the foundation in Azure for a Static Site
Hosting my site on Wordpress was not super complex; I leveraged the Azure PaaS Services for Web Apps, and orginally the 3rd party support for hosted MySQL database’s. Once I was up and running I quickly realised that all media hosted on the site were landing on the webserver, so a plugin from its marketplace offered the ability to relocate the media to an Azure Blob; offloading some of the challanges.
Read moreConstructing a new Home with Jekyll and Azure DevOps
Building a new Static Site in Markdown, using Jekyll, GIT Flow and Azure DevOps
One of the unspoken truths behind the lack of posts in recent history was due to a few bugs, which in the end resulted in an experience where from home it appeared that any new content was published and working; but outside this fortress in the real world, there was a large silence echoing. I really only discovered this issue in May of this year, and was, to say the least, a little agitated with the situation and decided then to change the approach to how I save my notes and share my thoughts.
Read more01. About Author
Damian Flynn
I define myself as an evangelist; an entrepreneur & author with an ideology rooted in business insights, technology exploration, pattern analysis and high energy. I envision, theorize and develop system architecture and strategic business platforms, soaked in storytelling and innovative technology.
02. Last Posts
- Page 1 of 1