Enable HTTP Public Key Fixed Extensions (HPKP) on Apache, NGINX, and Lighttpd

Public Key Pinning means that a certificate chain must contain a public key in the white list, that is, only the certificate issuing authority (CA) listed in the white list can issue a certificate for a domain name *. example.com, instead of any CA stored in your browser. This article describes the background of this mechanism and provides configuration examples on Apache, Lighttpd and NGINX. The HTTP public key fixed extension uses the bank you use as an example. It is always used

-Read the full text-

About Typecho friend chain plug-in patching vulnerability and error reporting

Error 1: Disable the plug-in after it is enabled. When it is enabled again, 42S01 error will appear. It can only be enabled after deleting the database. The solution is as follows: if ('MySQL'==$type&&1050==$code) at line 115 in Plugin.php file The&&in this code should be changed to | |. The MySQL error number 1050 indicates that the table has been created. There is a problem in the judgment here. It should be the relationship between or rather than between and

-Read the full text-

About the use of friend chain plug-in Typecho

If 42S01 needs to be entered into the database when the friend chain is enabled, delete the corresponding data table and add code to header.php according to your needs<div class="widget"> <h3><? Php_e ('link '); ?></h3> <ul>

-Read the full text-

Set OCSP Staging on in Apache and Nginx

What is OCSP Staging?? OCSP (Online Certificate Status Protocol) is usually provided by the CA, which is used to verify the validity of the certificate online in real time, so that the client can send a query request to the CA's verification address according to the OCSP information in the certificate to check whether the certificate is valid. However, these default query OCSP clients get the query

-Read the full text-

How does Apache set the automatic jump from http to https

In the Apache environment, after configuring https, you need to set the url redirection rules so that all http access to the website page automatically goes to https. 1. First open url redirection support 1) Open/etc/httpd/conf/httpd.conf, find # LoadModule rewrite_module modules/mod_rewrite.so and remove the # number. (If not, add it manually) 2) Find the segment of your website directory. For example, my website directory is/var/w

-Read the full text-

Apache 2.4.6 Add HSTS Implementation Certificate A+

The HSTS302 jump is triggered by the browser and cannot be completely controlled by the server. This requirement led to the birth of HSTS (HTTP Strict Transport Security). HTSP is to add a header header (add_header Strict Transport Security max age=15768000; includeSubDomains) and tell the browser website

-Read the full text-

Centos7 firewall open port

Method 1: 1: View the firewall status firewall cmd -- state Or systemctl status firewalld 2: Open the firewall systemctl start fir

-Read the full text-

Latest articles

Recent replies

other

Friendly chain