Shanes-Lab: Home lab for server testing...

Join me as I publish my test findings, thoughts about cybersecurity and PKI.

Shane Cooper

ACME & Non-standard name space

While working with a customer recently who wanted to issue TLS certificates to an internal IIS server with .LOCAL name space, I assumed it wouldn't work. During the initial test, TLM -> DigiCert Agent (on Windows) -> IIS, it did fail. It stopped after CSR…

Continue reading...
Shane Cooper

SNI - NGINX and TLM Agent

I've been testing more TLM agent discovery and processing as it relates to multiple domains bound to one IP address, or SNI. Environment: I have a server with services I'd like to expose using a public facing domain (FQDN) with several layers of authentication to…

Continue reading...
Shane Cooper

YubiKey - experiment 1

First foray into installing and testing a Yubikey with 1Password = FAIL! I've acquired (2) Yubikeys - one for primary use and another for backup in case the first one is lost, gets damaged or just stops working. What is a Yubikey? -> It's a…

Continue reading...
Shane Cooper

Home Lab

Having a home lab or server to handle both home server and test lab needs is both a luxury and a curse. It's a luxury as I can host just about anything I think I'm capable, which usually means a complex set of Ubuntu linux…

Continue reading...