Accéder au contenu principal

Certificat SSL WildCard , Exchange server

Nous avons generer le CSR depuis FortiGate ( WildCard ), puis recupere la private key


Nous sommes aller sur exchange et generer le fichier pfx depuis OpenSSL via la commande openssl pkcs12 -export -in certificate.cer -inkey privatekey.key -out certificate.pfx ( https://edtechchris.com/2020/02/11/convert-cer-to-pfx-certificates-in-openssl/)

Puis installer le SSL via les commande 

Apres nous allons vérifier sur EAC ( en cas de soucis revocation check) ;Nous avons redemearer le serveur et activie le SSL depuis eac




 https://www.thesslstore.com/knowledgebase/ssl-install/how-to-install-ssl-tls-certificate-in-microsoft-exchange-2016/




https://www.rapidsslonline.com/ssl/how-to-install-a-certificate-on-exchange-2016/


private key dans le fichier

Documents and Settings\< username >\ApplicationData\Microsoft\SystemCertificates\My\Certificates

Users\< username >\ApplicationData\Microsoft\SystemCertificates\My\Certificates



creat pfx https://www.thesslstore.com/knowledgebase/ssl-support/convert-ssl-certificate-to-pfx-sslshopper/


https://certera.com/kb/how-to-install-ssl-certificate-on-microsoft-exchange-server/

Commentaires

Enregistrer un commentaire

Posts les plus consultés de ce blog

Zimbra install let's encrypt

 https://inguide.in/how-to-install-free-ssl-certificate-on-zimbra-mail-server/ Je change le domaine  ingu.pw In the article  Install Zimbra Mail Server o n CentOS 8, we learned to install Zimbra on CentOS. This article discusses the steps required to install the Let’s Encrypt free SSL certificate in Zimbra. Installing Free SSL Certificate on Zimbra: Method 1 This method is a proven one though you have to manually do all the steps. Another method discussed below is partially automatic, which might come in handy if you didn’t encounter any error during installation (working at the time of writing this article). So, let’s begin with method 1. First of all, add  epel repository  to the server 1 [root@mail ~]# yum -y install epel-release Install snapd Now, install  snapd  package with the following command 1 [root@mail ~]# sudo yum install snapd After the above step, you need to enable snapd. 1 [root@mail ~]# sudo systemctl enable --now snapd.socket Sometim...
Enregistrer un commentaire
Lire la suite

Open Media Vault NAS change password

Known Root Password Login to the OMV using the root user and the current password via SSH or Console enter the following command passwd root The new password is now active. Unknown Root Password, but Admin Access to OMV GUI is Available In this scenario we still can help ourselves with the GUI. The method we use is, that we create a cron job for the root user which then resets the password. Navigate to System -> Cron Jobs Press the +Add button UN-tick the enabled box, so that the cronjob does not run automatically. put into the command field the following line, replace newpasswd with your password: echo "root:newpasswd" | chpasswd press okay select the newly created cron job Click the run button. in the opening window click the start button. It will shortly deactivate and activate again. open ssh or console and login as root with your new password. Root and Admin Password Unknown If you do not know the root password, you need to boot with a Li...
Enregistrer un commentaire
Lire la suite

cPanel DDOS attack - Mitigate Slowloris Attacks - mod_qos

Apache mod_evasive Mod_evasive is a module available for the Apache HTTP server that can automatically block attacks by rate-limiting any IP that sends too many requests in a short time. Start by installing the module from WHM’s  EasyApache 4  interface. Select the  Currently Installed Packages  profile, search for  mod_evasive  in the  Apache Modules  section, and then install it. The default settings are good for most servers, but you can tweak them further by editing the configuration file  /etc/apache2/conf.d/300-mod_evasive.conf . You can also whitelist specific IP addresses or classes, so legitimate requests are not blocked. Configure CSF to block attacks While  mod_evasive  works very well, it only protects the Apache webserver. In order to harden other services as well, you can install the free  ConfigServer Security & Firewall  (CSF), which also includes a WHM plugin. As the  root  user, install CSF ...
Enregistrer un commentaire
Lire la suite