CloudInsidr

Cyber security, infotech

  • Subscribe!
  • Privacy Policy
  • Legal
  • Contact Us

Join us on Twitter: @CloudInsidr

Follow us on Twitter: @cloudinsidr
  • news & alerts
    • events
    • industry analysis
    • industry gossip
    • people
  • cloud, edge & co.
    • AWS
    • administration & orchestration
      • web servers in the cloud
      • mail servers
      • databases
  • cybersec & warfare
    • encryption
  • blockchain
Home Archives for 2024

Archives for 2024

How To Figure Out Who is Signing In To Dovecot to Send or Retrieve Email

Cloud Insidr 2024-11-07 Leave a Comment

How To Figure Out Who is Signing In To Dovecot to Send or Retrieve Email

To see which Dovecot users sign in to retrieve or send emails, you can use the doveadm command to query the logs. Here’s a step-by-step guide:

Step 1. Enable Logging

Ensure that Dovecot is configured to log authentication attempts. You can do this by editing the dovecot.conf file:

log_path = /var/log/dovecot.log
auth_verbose = yes

Step 2. Check the Logs

You can use the grep command to filter the logs for login attempts. For example:

grep 'Login:' /var/log/dovecot.log

Alternatively, you can use the doveadm command to query user information. For example, to check user logins:

doveadm log find

If you want to monitor user log-ins to Dovecot in real-time, you can use the tail command:

tail -f /var/log/dovecot.log | grep 'Login:'

These steps will help you track which users are signing in to retrieve or send emails through Dovecot.

Filed Under: mail servers Tagged With: Dovecot

OpenSSH 9.9 Introduces Enhanced Quantum-Resistant Algorithms

Cloud Insidr 2024-10-04 Leave a Comment

OpenSSH 9.9 Introduces Enhanced Quantum-Resistant Algorithms

OpenSSH 9.9 is now available for download on the official mirrors of the OpenBSD Project. This update introduces a range of significant enhancements, such as the support for post-quantum key exchange, improved security controls, and various performance enhancements.

Key Features in OpenSSH 9.9

One of the most notable advancements in OpenSSH 9.9 is the introduction of a hybrid post-quantum key exchange method. It combines the FIPS 203 Module-Lattice Key Encapsulation Mechanism (ML-KEM) with X25519 Elliptic Curve Diffie-Hellman (ECDH). This hybridization is believed to boost security against future quantum computing threats. The algorithm, known as mlkem768x25519-sha256, is enabled by default.

Post-quantum cryptographic standards could be around the corner.

[Read more…]

Filed Under: administration and orchestration, cybersecurity and cyber warfare, news Tagged With: cryptography, OpenSSH

Cloud Insidr 2024-05-01 Leave a Comment

OpenSSL 3.3 Final Release is now live!

The latest iteration of OpenSSL, version 3.3, has been officially rolled out, marking a significant milestone as the inaugural release under OpenSSL’s biannual time-based release strategy. The OpenSSL team extends its heartfelt gratitude to all contributors whose efforts have been instrumental in bringing OpenSSL 3.3 to fruition.

Key enhancements introduced in OpenSSL 3.3 include:

  • Provision of QUIC qlog diagnostic logging support
  • Facilitation of non-blocking polling for multiple QUIC connections or stream objects
  • Streamlined generation of end-of-stream frames for QUIC connections
  • Option to disable QUIC event processing during API calls
  • Customizable configuration for QUIC idle timeout durations
  • Enhanced capability to ascertain the size and utilization of a QUIC stream’s write buffer
  • Incorporation of RFC 9480 and RFC 9483 extensions to CMP
  • Flexibility to deactivate OpenSSL usage of atexit(3) during build time
  • Integration of SSL_SESSION APIs compatible with the year 2038
  • Automated derivation of Chinese Remainder Theorem (CRT) parameters upon request
  • Adaptability to accommodate unknown algorithm names in TLS signature algorithm and group configuration strings
  • Configuration option for TLS 1.3 servers to prioritize PSK-only key exchange during session resumption
  • Introduction of the EVP_DigestSqueeze() API, facilitating multiple squeezes with varied output sizes for SHAKE
  • Inclusion of exporters for CMake on Unix and Windows platforms, alongside the pkg-config exporter

For a comprehensive overview of all modifications between OpenSSL 3.2 and OpenSSL 3.3, please refer to the CHANGES.md file.

OpenSSL 3.3 marks the commencement of a standard release cycle, initiating a one-year Full Support phase. During this period, our team diligently addresses bugs and security concerns in accordance with our Stable Release Updates Policy. Following the conclusion of the Full Support phase, the Maintenance Support phase commences, lasting another year, with a primary focus on rectifying security issues while addressing other pertinent bugs at our discretion.

OpenSSL 3.3 Download Pages for Fedora Linux

Fedora Rawhide – 3.2.1-6.fc41

Fedora 40 – 3.2.1-2.fc40

Fedora 39 3.1.1-4.fc39

Fedora 38 3.0.9-2.fc38

Looking Ahead to OpenSSL 3.4

Looking ahead, the forthcoming release, OpenSSL 3.4, is currently under the stewardship of Neil Horman (@nhorman). Detailed information regarding the release schedule can be accessed via the new OpenSSL Release Schedule board on GitHub.

For any bug reports or issues concerning OpenSSL, we encourage users to utilize our issue tracker, while queries pertaining to the utilization of OpenSSL 3.3 can be directed to GitHub Discussions.

Filed Under: encryption, homeland security, Linux, Uncategorized

Subscribe

SSL/TLS Certificate Square (250 x 250)

Pearson Education (InformIT)

SSL/TLS Certificate Medium Rectangle (300 x 250)

Recent Posts

  • Upgrading from CentOS 6 to CentOS 7 and Beyond?
  • How To Figure Out Who is Signing In To Dovecot to Send or Retrieve Email
  • OpenSSH 9.9 Introduces Enhanced Quantum-Resistant Algorithms
  • OpenSSL 3.3 Final Release is now live!
  • How to Activate HTTP/2 with TLS 1.3 Encryption in NGINX for Secure Connections without a Performance Penalty
  • Is AWS sucking your budget dry? Strip it down to the nitty-gritty (without breaking stuff)
  • How to attach and mount an NVMe EBS volume on EC2
  • SELinux security contexts: correcting SELinux labels on a file system
  • Intel gobbling up Israeli Tower Semiconductor, Stock Goes Through The Roof
  • NGINX on AWS EC2: setting up a web server from scratch on a domain of your choice
  • Log4j RCE and mitigation techniques
  • Set up logrotate for Postfix

Symantec

Categories

  • administration and orchestration
  • alerts
  • AWS
  • Bitcoin
  • cloud, edge and everything in between
  • cryptocurrencies
  • cybersecurity and cyber warfare
  • databases
  • DNS
  • encryption
  • events
  • FinTech and InsurTech
  • homeland security
  • HTTP Security Headers
  • industries
  • industry analysis
  • industry gossip
  • Java
  • Linux
  • mail servers
  • networking
  • news
  • NGINX
  • people
  • php-fpm
  • reviews
  • SELinux
  • tips and tricks
  • Uncategorized
  • web servers in the cloud

Tags

AMI AWS AWS EBS Azure certificate cipher suites cryptography cyber defense cybersecurity cyber security Diffie-Hellman DNS DNS over HTTPS Dovecot EBS EC2 email encryption Fedora HTTP/2 HTTPS IBM letsencrypt Linux logs MariaDB MFA MySQL NGINX OpenSSL permissions php-fpm PHP 7 postfix RegEx Route 53 RSA SELinux SQL SSH SSL TLS TLS 1.3 TLS vulnerabilities WordPress

Archives

  • January 2025
  • November 2024
  • October 2024
  • May 2024
  • January 2023
  • March 2022
  • February 2022
  • December 2021
  • December 2020
  • November 2020
  • September 2020
  • January 2020
  • November 2019
  • August 2019
  • July 2019
  • April 2019
  • December 2018
  • October 2018
  • September 2018
  • August 2018
  • June 2018
  • May 2018
  • April 2018
  • February 2018
  • December 2017
  • November 2017
  • October 2017
  • August 2017
  • April 2017
  • February 2017
  • January 2017
  • November 2016
  • September 2016
  • August 2016
  • July 2016
  • March 2016
  • February 2016
  • January 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • July 2015
  • February 2015

Recent Comments

    Wicked fast Networking (With a Government Clearance to Boot)

    ©2022 CybrAnalytiqa OÜ

    • Content purchasing and syndication