man-in-the-middle – Tarik Billa

How to add trusted root CA to Docker alpine

July 14, 2023 by Tarik

Append your self-signed cert to /etc/ssl/certs/ca-certificates.crt manually. Assuming you have the self-signed certificate in a file in your build directory called my-cert.pem: FROM alpine:latest COPY my-cert.pem /usr/local/share/ca-certificates/my-cert.crt RUN cat /usr/local/share/ca-certificates/my-cert.crt >> /etc/ssl/certs/ca-certificates.crt && \ apk –no-cache add \ curl Note: When you’re using update-ca-certificates, you need to place your cert file into /usr/local/share/ca-certificates/ first. Otherwise … Read more

SSL and man-in-the-middle misunderstanding

January 4, 2023 by Tarik

Man-in-the-middle attacks on SSL are really only possible if one of SSL’s preconditions is broken, here are some examples; The server key has been stolen – means the attacker can appear to be the server, and there is no way for the client to know. The client trusts an untrustworthy CA (or one that has … Read more

ssh remote host identification has changed

September 6, 2022 by Tarik

Here is the simplest solution ssh-keygen -R <host> For example, ssh-keygen -R 192.168.3.10 From ssh-keygen man page: -R hostname Removes all keys belonging to hostname from a known_hosts file. This option is useful to delete hashed hosts (see the -H option above).