HTTP Strict Transport Security (HSTS) is a web security policy mechanism which helps to protect websites against protocol downgrade attacks and cookie hijacking.
Here is how to enable it on Apache2
1. Enable mod_headers
2. Add the additional header to the HTTPS VirtualHost directive. Max-age is measured in seconds. Put this into your VirtualHost *:443 section
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
If you need R to connect to MySQL or getting the error below from your script:
Error in dyn.load(file, DLLpath = DLLpath, ...) :
unable to load shared object '/usr/local/lib/R/site-library/RMySQL/libs/RMySQL.so':
libmysqlclient.so.18: cannot open shared object file: No such file or directory
Then it can be solved by these commands
You will get a question about choosing a mirror to get the package from, just choose the one nearest to you.
It can be a challange to get an A+ rating on a SSLLabs test, but i have done a configuration below that you are welcome to steal.
add_header Strict-Transport-Security "max-age=31536000";
ssl_protocols TLSv1.1 TLSv1.2;
My pem file is just a text file containing the signed certificate and a SSL bundle.
To generate your dhparam.pem file, run in the terminal
openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048
If you need to check what TLS version and SSL ciphers that a site supports, then it can be done by the nmap command below… replace the domain with your own 😉
nmap --script ssl-enum-ciphers -p 443 www.pvangsgaard.com
The output could look like
If you are using Hipchat from Atlassain for work or projec chat then the install guide for Linux is made for Ubuntu.
Only problem if you are using another distribution based on Ubuntu like Linux Mint 18.3 Cinnamon then it will fail to install.
The original guide looks like this
The problem is that the repository that the install guide will generate is wrong and not existing.
Just replace $(lsb_release -c -s) with xenial like this
sudo sh -c 'echo "deb https://atlassian.artifactoryonline.com/atlassian/hipchat-apt-client xenial main" > /etc/apt/sources.list.d/atlassian-hipchat4.list'
wget -O - https://atlassian.artifactoryonline.com/atlassian/api/gpg/key/public | sudo apt-key add -
sudo apt-get update
sudo apt-get install hipchat4
That will match with the Ubuntu 16.04 branch that Linux Mint 18.3 is based on.
If you allready have done the damage using the guide from Atlassain then just edit the file with
sudo nano /etc/apt/sources.list.d/atlassian-hipchat4.list
And find the sylvia line, replace it with xenial so it looks like this
deb https://atlassian.artifactoryonline.com/atlassian/hipchat-apt-client xenial main
sudo apt update
sudo apt install hipchat4