Internet security

lineamovil

Hello, recently I had to take a course on security, because a client requested that, so I could help him get a certification he needed.

http://www.cbtnuggets.com/it-training-videos/course/penetration-testing-with-linux-tools[url]

Then I took it and found a lot of potentail problems that this and other clients could be facing using any software over the internet. Well to make things short. I think that the conexion to AwareIm should be Encripted. I saw an old post from 2009 in how to set up AwareIM in SSL, I would like to know if there is a newer, faster way to set this up.

https://forum.awareim.com/d/3554>

I post this, because I found that there is a Linux version called Kali Linux, that has a bunch of tools preintalled, and that a newbie could use relatively easy to get the logon passwords, and access any Logon that is not encrypted.

If you have any recomendation in how to secure in any other way I would really appreciate it. Thank you!!

weblike

Security, this is a must have in our days.
We are interested too in this problem.
Anyone who knows any ways and better ways of securing AWIM please advice the rest of us.
Thank you.

hpl123

Updated security guides e.g. SSL would be great so if anyone feel the urge, please share 🙂.

kklosson

I run a Windows server with SSL. I have a guy who set it up for me. The hardest part is generating the keystore. Once you have the keystore and the cert, the Tomcat config is easy. I have it all documented. PM me if interested in this configuration.

Rennur

I run a Windows server with SSL.

Hi kklosson,

Are you using OpenSSL?

kklosson

No. I use an extended validation cert from Entrust.

lineamovil

I found this:

http://www.hiden.org/awareim/setting-up-awareim-with-ssl/#more-42

Has anyone tryed it? Im doing it, but my server.xml file is diferent from the sample provided.

Im using version 5.9

lineamovil

Hello kklosson!

Could you share your experience in how to manage the server.xml

thank you!