Collaborate Disseminate
1Password launched Secrets Automation, a new way to easily secure, manage and orchestrate the rapidly expanding infrastructure secrets required in a modern enterprise. Secrets such as corporate credentials, API tokens, keys and certificates can number … Continue reading 1Password Secrets Automation helps businesses secure and manage secrets
I’m keeping it vague on purpose so that it can help other cases as well.
Goal
The goal is to store information that is encrypted on client side and then delivered to the database.
Server should never receive nor handle unencrypted data.
U… Continue reading Seamless Key Management with Key Management Systems?
This could be basic question as I’m new to this area. I have an apache web server which load balances to a set of servers to provide a web site. The apache server has SSL enabled and we terminate TLS on load balancer level. The TLS certifi… Continue reading Storing Apache web server’s SSL certificate in HashiCorp Vault
I have a bunch of micro-services set up which interact with each other. I want to set up authentication and authorization within these services so if a user has access to only one service, then it can only perform actions aut… Continue reading Endpoint authorization using Vault
Sectigo, the world’s largest commercial Certificate Authority (CA) and a provider of purpose-built and automated PKI management solutions, released integrations with five of the most popular DevOps configuration management and container orchestration p… Continue reading Sectigo integrates with five DevOps configuration management and container orchestration platforms
Assuming I have certA with public key puA. Assume that certA has expired and I want a new certificate, certB, still with puA as the cert’s public key is pinned in an application.
How can I get a new cert, with the same publi… Continue reading Renewed certificates and public key pinning using Vault CA
I have a web application. The application needs to connect to the database to read/write information. The database can be accessed with username/password or certificate.
Is it possible, somehow, to encrypt all this communication so even t… Continue reading Can application connect to database without exposing password to anyone?
I am currently looking for an existing implementation method to generate logging of accesses and of usage of a series of MySQL databases by developers (not services) for further auditing. My current estimate is that all traff… Continue reading How can I log access and usage of a MySQL database?
I am doing a bunch of test/data scraping projects across a few different platforms that consume read-only and not really important API keys. I can only foresee minimal damage if they were to get out.
With that said, I cant see any glarin… Continue reading Considerations for having Hashicorps vault on the open net
I have PCF spring boot application which needs to access the vault server to get the credentials to create datasource during startup. Right now we are hard coding the app role id and secret id in the spring boot application . Is there a b… Continue reading Storing vault read token securely