Jaharmi · @jaharmi
95 followers · 531 posts · Server fosstodon.org
Matt Knight · @matt
180 followers · 398 posts · Server mastodon.knight.fyiIs it possible to install a client TLS client certificate on an iPhone running iOS 16?
I'm trying to do it but can't get it to show the certificate as verified (even though the Root and Intermediate CAs are both installed, verified and fully trusted).
Really want to leverage mTLS. I've had it working on an iPhone before (a couple of years ago, I think), but not sure if it's possible any longer.
#tls #https #smallstep #stepca #mtls #https #iphone #ios #apple #infosec
#tls #https #smallstep #stepca #mtls #iphone #ios #apple #infosec
Seth Grover :heart_cyber: :terminal: :d20: · @mmguero
86 followers · 117 posts · Server infosec.exchangeSetting up an internal CA server with step-ca and using it to set up SSH certificates with SSO has been such a game changer for my #homelab. Way more convenient than using keypairs.
Here's my (#Docker-based) notes on #GitHub for setting it up if that's interesting to you. #StepCA #ssh #sso
edit: sounds like I'm shilling pretty hard, I don't work for smallstep or anything, I just think it's neat.
#homelab #docker #github #stepca #ssh #sso
Seth Grover :heart_cyber: :terminal: :d20: · @mmguero
86 followers · 117 posts · Server infosec.exchangeI've seen some pretty nifty #homelab network maps on here, I need to get around to making something like that.
I'm kind of addicted to spinning up and hosting cool and useful services in #Docker at home (and/or on a #VPS).
Here are a few of them I use on a regular basis:
- #AudioBookshelf (audiobook server)
- #BoringProxy (reverse proxy and tunnel manager)
- #CalibreWeb (ebook server)
- #croc relay (file transfer utility)
- #EternalJukebox (your favorite song ∞)
- #glauth (LDAP server with 2FA)
- #MIMIC3 (TTS engine)
- #mirotalk (WebRTC video conferencing)
- #nitter (Twitter frontend/proxy)
- #Photoprism (photo gallery)
- #pihole with #dnscrypt (DNS-based adblocker)
- #Plex (media server)
- #PodGrab (podcast server)
- #PretendYoureXyzzy (Cards Against Humanity clone)
- #StepCA (certificate authority)
- #TransmissionOpenVPN (Transmission torrent client and OpenVPN in Docker)
- #UptimeKuma (service monitoring tool)
- #VaultWarden (BitWarden-compatible server)
- #WireGuard (VPN)
Anything super nifty y'all think I'm missing?
#homelab #docker #vps #Audiobookshelf #boringproxy #CalibreWeb #croc #EternalJukebox #glauth #Mimic3 #MiroTalk #nitter #photoprism #pihole #dnscrypt #plex #Podgrab #pretendyourexyzzy #stepca #transmissionopenvpn #uptimekuma #vaultwarden #wireguard