Sole's Blog

Why you can no longer just have one SSL certificate with all the servernames included.

Sole — Wed, 09 May 2012 01:39:11 +0000

The CA / Browser forum has decided to implement changes to SSL requirements, that will phase out all use of internal server names in public SSL certificates. The CA / Browser forum includes all the major certificate authorities and browser developers, so the change will be forced upon everyone. The reasoning behind this phase out is to secure against Man-in-The-Middle (MTM) attacks, where it is possible to pretend to be an internal server via a publicly recognized SSL certificate. Even thou it is a highly unlikely way to attack most systems, the theoretical possibility is enough to spark the change. I just wish they had been a little more giving on the deadlines. My personal recommendation to my customers with SSL certificates containing internal server names....

The difficulties of installing an SSL certificate on a ZyXEL ZyWall USG 300 firewall (if even possible!)

Sole — Thu, 27 Oct 2011 22:25:51 +0000

Having spent some time trying to install an SSL certificate from a trusted certification authority on this product, I felt I should share my findings as they might save someone else the headaches and time I had to spend on this. For reference I used a ZyXEL ZyWall USG 300 with Firmware version: 2.20(AOE.6) / [...]

How to get rid of the anoying syntax error popup message when using Internet Explorer with Java so your mother-in-law will stop buggin’ you about it

Sole — Mon, 06 Jun 2011 22:50:19 +0000

Quite some time ago I encountered this error the first time, to be honest i can not even remember when it was. But I do know it was Windows 7 and Internet Explorer fully updated, together with the current Java runtime environment that gave me the problem, but I am getting ahead of myself. Problem [...]

Finding out what clients work with different SSL certificates, building a SSL comparison database

Sole — Tue, 28 Dec 2010 00:51:42 +0000

I always wanted the ability to compare different SSL certificates with the clients that do or do not support them. But at best you can download the roots that a mobile client, browser or operating system uses and compare them with the certificates issued by thoose roots. A cumbersome and extremely tedious task, that still [...]

VBScript to show current Teamviewer ID and save to text file

Sole — Sun, 12 Dec 2010 16:20:52 +0000

Since TeamViewer can be rolled out in an organization with the MSI package and sample vbs scripts from TeamViewer, I was asked if it would be hard to do a small VBScript to fetch the TeamViewer ID from theese machines and save it somewhere for the support staff to look up in. This script is [...]

Active Directory Shadow Group Script – will let you spend less time on updating group memberships

Sole — Sat, 25 Sep 2010 01:24:34 +0000

Introduction If you are just looking for a free shadow group script, either click here for a nice simple one or go to the bottom of this post for the full AD administrated script. I was looking into Shadow Groups, inspired by a customer migrating from Novell to Active Directory. Apparently in Novell you can use Organizational Units [...]

How to configure your virtual Domain Controllers and avoid simple mistakes with resulting big problems

Sole — Thu, 12 Aug 2010 23:56:52 +0000

So You went ahead and used virtualized Domain Controllers for Your Active Directory domain, congratulations! I am sure You will be happy with the decission, as long as You have a decent virtualizing environment, this will give You both peace of mind, faster recovery and cheaper redundancy. There is however some special considerations You must [...]

Debugging an OCS installation just got easier

Sole — Fri, 25 Jun 2010 12:02:39 +0000

I might be realy slow in discovering this, after all it has been some months since I last touched an OCS installation. I seriusly wished I had this tool when I was last time thou. This tool just like the Exchange testing tool, will show all the steps involved in connecting to an OCS system [...]

VBScript to join computers to domain, with specific user and avoid having to manually place them in AD

Sole — Tue, 22 Jun 2010 19:28:49 +0000

The following script was used for automatically joining alot of computers to an Active Directory domain, it was required to place the computer in a specific Organizational Unit and also to run with a specified user with only permissions to add machines in this OU and the default new computers OU (giving it unlimited join [...]

How to silently install ZenWorks 10 with vbScript without having to watch the screen during installation

Sole — Tue, 22 Jun 2010 11:35:41 +0000

So You want to install ZenWorks 10.x.x.x silently on a machine, sounds easy enough right? Well ZenWorks is making it slightly harder, if You just run the installer with a stay quiet parameter, when it finishes and You or the installer reboots, it was not actually finished. After the installation ZenWorks sits and runs msi [...]