Tag: SSL

Security Advisory: Heartbeat overflow issue (CVE-2014-0160)

OpenSSL Security Advisory [07 Apr 2014] TLS heartbeat read overrun (CVE-2014-0160) A missing bounds check in the handling of the TLS heartbeat extension can be used to reveal up to 64k of memory to a connected client or server.

Continue reading

Re-installing SSL Certificate for QNAP (via SSH) if unable to access admin web interface

Get WinSCP or any ssh client and to be able to access the NAS via SSH. Start the ssh client, you now should enter your NAS and you will see it is in a sub-folder Root. Open the “/ ; ” folder above it. You will see a whole list of other folders. Browse to …

Continue reading

Installing an SSL Certificate in Apache

Transmission of your login  information over an unsecured connection can be intercepted and hacked. SSL certificates  encrypt the login data before transmitting them to your ISP/server  making it harder for eavesdroppers to break in. That’s exactly why banks,  financial institutions, ecommerce sites etc. use SSL for securing login  information, user identity information and credit card …

Continue reading