Collaborate Disseminate
In Jenkins there is a way to see secrets in plaintext by using Manage Jenkins > Script Console feature as described here. The access to this console is limited to Jenkins administrator only but still I don’t want them to be able to see … Continue reading Can master secret to Hashicorp Vault can be retrieved from Jenkins?
Red Hat announced Red Hat OpenShift 4.8, the latest version of the enterprise Kubernetes platform. Providing a powerful foundation to develop and connect diverse workloads across the hybrid cloud, Red Hat OpenShift 4.8 helps organizations accelerate th… Continue reading Red Hat OpenShift 4.8 helps organizations accelerate the creation of new cloud-native applications
1Password launched Secrets Automation, a new way to easily secure, manage and orchestrate the rapidly expanding infrastructure secrets required in a modern enterprise. Secrets such as corporate credentials, API tokens, keys and certificates can number … Continue reading 1Password Secrets Automation helps businesses secure and manage secrets
I’m keeping it vague on purpose so that it can help other cases as well.
Goal
The goal is to store information that is encrypted on client side and then delivered to the database.
Server should never receive nor handle unencrypted data.
U… Continue reading Seamless Key Management with Key Management Systems?
This could be basic question as I’m new to this area. I have an apache web server which load balances to a set of servers to provide a web site. The apache server has SSL enabled and we terminate TLS on load balancer level. The TLS certifi… Continue reading Storing Apache web server’s SSL certificate in HashiCorp Vault
I have a bunch of micro-services set up which interact with each other. I want to set up authentication and authorization within these services so if a user has access to only one service, then it can only perform actions aut… Continue reading Endpoint authorization using Vault
Sectigo, the world’s largest commercial Certificate Authority (CA) and a provider of purpose-built and automated PKI management solutions, released integrations with five of the most popular DevOps configuration management and container orchestration p… Continue reading Sectigo integrates with five DevOps configuration management and container orchestration platforms
Assuming I have certA with public key puA. Assume that certA has expired and I want a new certificate, certB, still with puA as the cert’s public key is pinned in an application.
How can I get a new cert, with the same publi… Continue reading Renewed certificates and public key pinning using Vault CA
I have a web application. The application needs to connect to the database to read/write information. The database can be accessed with username/password or certificate.
Is it possible, somehow, to encrypt all this communication so even t… Continue reading Can application connect to database without exposing password to anyone?
I am currently looking for an existing implementation method to generate logging of accesses and of usage of a series of MySQL databases by developers (not services) for further auditing. My current estimate is that all traff… Continue reading How can I log access and usage of a MySQL database?