Chris M. posted an article on allsorts and notions - Jul 22, 2009, 8:00 pm
Normally, in an SSL conversation, the client presents its preferred cipher to use and as long as the server that the client is negotiating a connection with supports it, that cipher will be used. &nbs...
Comment - Like

Chris M. posted an article on blogging techstacks - Jul 22, 2009, 8:00 pm
Normally, in an SSL conversation, the client presents its preferred cipher to use and as long as the server that the client is negotiating a connection with supports it, that cipher will be used. &nbs...
Comment - Like

Chris M. posted an article on blogging techstacks - Jul 16, 2009, 8:00 am
I have posted before that sslthing.sh is a pretty useful tool for scanning and reporting on all available ciphers that a remote host supports.  Since it hasn't been updated, as far as I know,...
Comment - Like

Chris M. posted an article on allsorts and notions - Jul 16, 2009, 8:00 am
I have posted before that sslthing.sh is a pretty useful tool for scanning and reporting on all available ciphers that a remote host supports.  Since it hasn't been updated, as far as I know,...
Comment - Like

Chris M. posted an article on blogging techstacks - Jul 9, 2009, 11:15 pm
One of the really cool things about mod_ssl in apache is that you can configure your apache logs to record the SSL protocol version and cipher used per connection. This provides some of the more arro...
Comment - Like

Chris M. posted an article on allsorts and notions - Jul 9, 2009, 11:15 pm
One of the really cool things about mod_ssl in apache is that you can configure your apache logs to record the SSL protocol version and cipher used per connection. This provides some of the more arro...
Comment - Like

Chris M. posted an article on allsorts and notions - Jul 5, 2009, 9:15 am
The folks at JBoss have fired another salvo in my make-believe war between JBoss and SpringSource, which will surely have the folks over at SpringSource responding in kind! The JBoss Enterprise Web S...
Comment - Like

Chris M. posted an article on blogging techstacks - Jul 5, 2009, 9:15 am
The folks at JBoss have fired another salvo in my make-believe war between JBoss and SpringSource, which will surely have the folks over at SpringSource responding in kind! The JBoss Enterprise Web S...
Comment - Like

Chris M. posted an article on blogging techstacks - Jul 1, 2009, 9:00 pm
The script below reports back the SSL Cipher used when negotiating the channel between openssl client and ssl server. It's interesting in that it reports back different values depending upon the h...
Comment - Like

Chris M. posted an article on allsorts and notions - Jul 1, 2009, 9:00 pm
The script below reports back the SSL Cipher used when negotiating the channel between openssl client and ssl server. It's interesting in that it reports back different values depending upon the h...
Comment - Like

Chris M. posted an article on blogging techstacks - Jun 29, 2009, 10:30 am
JavaScript framekillers (aka framebusters) are simple scripts that you can add to web pages that prevent your site's pages from being framed by another site. Clickjacking extends this framing tec...
Comment - Like

Chris M. posted an article on blogging techstacks - Jun 26, 2009, 8:00 pm
One common, but minor, bit of frustration after setting an SSL Quality-of-Protection (QOP) ACL on a webseal junction is that it is not second-nature for an end-user to enter 'https' in the bro...
Comment - Like

Chris M. posted an article on blogging techstacks - Jun 26, 2009, 11:42 am
SpringSource, err..I mean, the Apache Tomcat team has released what could very well be the last version of tomcat in the 4.1 release tree. Tomcat 4.1.40 was released, addressing two important and thr...
Comment - Like

Chris M. posted an article on blogging techstacks - Jun 24, 2009, 8:00 pm
While working with a colleague today on one of his personal sites, we came across an issue with a Drupal-managed RSS feed where some RSS Aggregators were receiving 403-Forbidden status codes. After Q...
Comment - Like

Chris M. posted an article on blogging techstacks - Jun 17, 2009, 8:55 pm
As far as I can tell, JBoss clustering is based on functionality provided by another JBoss project called JGroups. We recently ran into an issue where half of our six identically configured applicati...
Comment - Like