Learn how to prepare for emergency access to your SSH hosts, using security keys and offline SSH Certificate Authorities.
Ghostunnel supports two modes, client mode and server mode. Ghostunnel in server mode runs in front of a backend server and accepts TLS-secured connections, which are then proxied to the (insecure) backend. A backend can be a TCP domain/port or a UNIX domain socket. Ghostunnel in client mode accepts (insecure) connections through a TCP or UNIX domain socket and proxies them to a TLS-secured service. In other words, ghostunnel is a replacement for stunnel.
Some of our users have received reports that their AddTrust External CA Root certificate is about to expire in less than 14 days. Here's how you can fix that.
This is an SSL certificate that is valid for all domains.
Certificates and CA
It's a very simple bash script that solves an annoying problem for me. If I want to diff 2 certificate files, I can't just run the diff tool