2
votes
Extracting openssl pre-master secret from nginx
The answer above seems to be incorrect. nginx doesn't execve() its children, those are just forks of the parent process, so setenv() of LD_PRELOAD doesn't have any effect, it needs to be set before ...
- 131
1
vote
Nginx: How to block IP by hostname regex
You can use reverse DNS module: https://www.nginx.com/resources/wiki/modules/rdns/
In nginx.conf just add check for regexp for domain and subdomains:
rdns_deny static\.spheral\.ru;
or subdomains only:...
1
vote
Automatically check if a certificate matches specific ciphers
Update your ciphersuites, instead
It seems you are facing a problem that you have caused by yourself by not supporting ECDSA for TLS 1.2. Instead of trying to figure out how to validate the ...
- 19k
1
vote
Automatically check if a certificate matches specific ciphers
See my comment above on why this may be a non-issue if you are using TLS 1.3.
If you still feel you need an automated way to analyze a certificate, this short python script might help:
from ...
- 23.4k
1
vote
Accepted
How do you verify if a request is from a genuine user or from a malicious user?
To distinguish a genuine user is often simple: is the request one that the client app (be that mobile, web, embedded device, whatever) would realistically make? For example, if the request wouldn't ...
- 48.4k
1
vote
Does using Apache/nginx actually improve security of a webapp?
Just putting a simple load balancing reverse proxy in front of a broken web application does not fix it. It will implicitly some kind of sanitize HTTP requests at the protocol level, but it will not ...
- 201k
Only top scored, non community-wiki answers of a minimum length are eligible