- You don’t have to worry about your roommates stealing your food
- Your toilet paper spontaneously combusts after use
- You’re tired of people asking about those dried Thai peppers floating around in your breakfast cereal.
- More than half of the souvenirs from that last tropical vacation were hot sauces and spices
- You never go in to a food store without checking the price, or selection of hot peppers and hot sauces.
- The door of your refrigerator has more than ten bottles of hot sauce.
- The sissy salsa you made, accidentally, seems to set most of your coworkers on fire.
- “Ring of fire” and “burns twice” actually mean something to you.
- You have ever sent/received contraband Chile seeds from a foreign country
- you sweat, even in the middle of winter.
- You carry one of those little Tabasco bottles around with you. Just in case.
- When cooking, you often start sneezing. Just because.
Month: May 2015
Public Key Pinning php for httpd apache
Public Key Pinning Extension for HTTP (HPKP) on Apache2. HPKP tries to detect MITM attacks with valid certificates. The browser stores the hash code in the internal storage and verifies the public key against that sum.
Since it is not that easy to create a public pin under windows, here is a php script that does this
<?php // openssl x509 -in example.crt -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | base64 if(!isset($argv['1'])){ die('certificate not set'); } $certificate = $argv['1']; $public_key = openssl_get_publickey(file_get_contents($certificate)); $public_key_details = openssl_pkey_get_details($public_key); $public_key_pem = $public_key_details['key']; //Convert PEM to DER before SHA1'ing $string_start = '-----BEGIN PUBLIC KEY-----'; $string_end = '-----END PUBLIC KEY-----'; $pem_trimed = substr($public_key_pem, (strpos($public_key_pem, $string_start)+strlen($string_start)), (strlen($public_key_pem) - strpos($public_key_pem, $string_end))*(-1)); $der = base64_decode($pem_trimed); // 47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU= is an empty hash echo PHP_EOL. "Header always set Public-Key-Pins 'pin-sha256=\"" . base64_encode(openssl_digest($der,'sha256',true)) ."\"; pin-sha256=\"bZ3qT75yZLagDEADBEEF0h3KAseeheXXJ5dliOfLB2A=\"; max-age=5184000'". PHP_EOL;
Add that config statement to correct SSL vhost
C:\>php public_pinning.php example.crt
<VirtualHost *:443> ServerName example.com ServerAlias www.example.com
Header always set Public-Key-Pins "pin-sha256=\"bZ3qT75yZLagDEADBEEF0h3KAseeheXXJ5dliOfLB2A=\"; "pin-sha256=\"sef3575yZLagDEADBEEF0h3KAseeheXXJ5dliOfLdfe=\"; max-age=5184000"
Archive for May, 2015
Archives by Month:
- August 2024
- April 2024
- January 2024
- December 2023
- November 2023
- July 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- October 2022
- September 2022
- August 2022
- July 2022
- May 2022
- March 2022
- February 2022
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- February 2021
- January 2021
- August 2020
- July 2020
- June 2020
- April 2020
- January 2020
- December 2019
- November 2019
- October 2019
- May 2019
- April 2019
- March 2019
- January 2019
- October 2018
- August 2018
- June 2018
- April 2018
- March 2018
- February 2018
- November 2017
- June 2017
- April 2017
- February 2017
- January 2017
- November 2016
- September 2016
- May 2016
- February 2016
- September 2015
- August 2015
- July 2015
- May 2015
- April 2015
- March 2015
- February 2015
- January 2015
- December 2014
- November 2014
- July 2014
- June 2014
- April 2014
- January 2014
- December 2013
- August 2013
- July 2013
- June 2013
- May 2013
- April 2013
- February 2013
- January 2013
- December 2012
- November 2012
- October 2012
- August 2012
- July 2012
- June 2012
- April 2012
- March 2012
- February 2012
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- March 2011
- February 2011
- January 2011
- December 2010
- November 2010
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009