Skip to content

Instantly share code, notes, and snippets.

@ennisa-ire

ennisa-ire/00-toc.md

Last active August 23, 2018 21:23
Show Gist options
  • Save ennisa-ire/dcde64f3ab8bcfb75e433eb2cfd226f3 to your computer and use it in GitHub Desktop.
Save ennisa-ire/dcde64f3ab8bcfb75e433eb2cfd226f3 to your computer and use it in GitHub Desktop.
Download ZIP
01 - IoT Tech Security/Compliance Corner
Raw
citrix-install.md

The installation of the client

  • First you need to down load your certs. For me this meant loggin into the secure gateway. (vpn gateway).
https://remoteaccess.aib.ie
  • Right clicking on the "green lock" icon from the browser, and exporting all three certiicates. I saved them in a tmp folder.
ae@ae-Unknow:~/ICAClient/linuxx86/util$ sudo cp ~/tmp/*.crt  /opt/Citrix/ICAClient/keystore/cacerts/
ae@ae-Unknow:~/ICAClient/linuxx86/util$ sudo cp ~/tmp/*.crt  ~/ICAClient/linuxx86/keystore/cacerts/
  • link the mozilla folder to
sudo ln -s /usr/share/ca-certificates/mozilla /opt/Citrix/ICAClient/keystore/cacerts
  • then rehash both folders
sudo c_rehash /usr/share/ca-certificates/mozilla/  ~/ICAClient/linuxx86/keystore/cacerts/

Notes

wget http://www.symantec.com/content/en/us/enterprise/verisign/roots/roots.zip

Instead of exporting from browser, you could get the certs here? and copy them over to /opt/Citrix/ICAClient/keystore/cacerts/

Raw
ssl-certs.md

Backbround

There are many SSL provides.

  • Let’s Encrypt

Idea is that the provider will provide a client that you install on the server, pi in this case, and the client will then retrieve the certs for you, via the browser.

Theres two kinds, the self signed , and the trusted authority kind.

Ingredients :

https://www.youtube.com/watch?v=yjZOyANmKWU Excellent Turoiral

  1. Domain Name : iot-tech.ie
  2. IP Address or web server:
  3. Public key : local.crt
  4. Private key : local.key

Steps

Browser: Get Certs from provider

Prerequiste

  • domain name already set up! AND it is pointing at your IP address

Note

  • IP Address cannot have a certified SSL Certificate.

Providers

What If

  1. Before you start what ports is your server listing on netstat -tupan
  2. mod_ssl is not installed? then do and restart htppd. yum install mod_ssl
  3. Is 433 open on your router.
Raw
virtualise-windows.md
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment