Hardening SSL IIS | How to disable SSLv3 and RC4 ciphers in IIS

Here is the link for you to test you SSL URL

https://www.ssllabs.com/ssltest

Before make any changes:

Before make any changes, please backup your registery: 

Here is the steps: 

1. From the Start menu, type regedit.exe in the search box, and then press Enter. If you are prompted for an administrator password or for confirmation, type the password or provide confirmation.
2. In Registry Editor, locate and click the registry key or subkey that you want to back up.
3. Click File > Export.
4. In the Export Registry File dialog box, select the location to which you want to save the backup copy, and then type a name for the backup file in the File name field.
5. Click Save.

After make changes: 

Here is the steps: 

1.       Disabling the SSL v3 Protocol (Poodle Attack)

a.       https://www.digicert.com/ssl-support/iis-disabling-ssl-v3.htm

2.       Weak Diffie-Hellman and the Logjam Attack

a.       https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2016/3174644

b.       https://www.admin-enclave.com/en/articles/windows/396-security-hardening-upgrade-diffie-hellman-prime-to-2048bit-on-windows-server.html

3.       RC4 in TLS is Broken

a.       https://social.technet.microsoft.com/Forums/en-US/faad7dd2-19d5-4ba0-bd3a-fc724d234d7b/how-to-diable-rc4-is-windows-2012-r2?forum=winservergen

b.       https://samrueby.com/2015/06/08/how-to-disable-sslv3-and-rc4-ciphers-in-iis/

Horrey I got A.

Update , Upgrade Freebsd / Ubuntu

Freebsd 11

# freebsd-update fetch
# freebsd-update install
#freebsd-update upgrade -r 11.1-RELEASE
# pkg update
# pkg upgrade

If Error on library :
# pkg-static upgrade  -f


Ubuntu 16 ++

#apt-get update
#apt-get upgrade
#apt-get dist-upgrade
#do-release-upgrade

Reverse Proxy

Ref:
1. https://www.techandme.se/set-up-nginx-reverse-proxy/
2. https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/
3. https://www.knthost.com/nginx/nginx-ssl-perfect-forward-secrecy
4. https://www.knthost.com/nginx/nginx-reverse-proxy-setup-freebsd
5. https://chase-seibert.github.io/blog/2011/12/21/nginx-ssl-reverse-proxy-tutorial.html
6. https://www.digitalocean.com/community/tutorials/how-to-configure-nginx-with-ssl-as-a-reverse-proxy-for-jenkins


sudo apt-get update && sudo apt-get install nginx

Resize Freebsd Space

Ref: https://www.freebsd.org/doc/handbook/disks-growing.html

Migrate MSSQL

Refference :
1. https://stackoverflow.com/questions/18866321/how-to-copy-sql-server-2008-r2-database-from-one-machine-to-another
2. https://social.technet.microsoft.com/Forums/Azure/en-US/5d5840bf-f0ec-4455-880d-7e71a367ba2c/migrate-from-2008-r2-to-2016?forum=sqlsetupandupgrade

Change root mysql maria DB

#mysqld_safe --skip-grant-tables &
#mysql -u root -p

MariaDB [(none)]> use mysql;
MariaDB [(none)]> update user set password=PASSWORD("mynewpassword") where User='root';
MariaDB [(none)]> update user set plugin="mysql_native_password";
MariaDB [(none)]> quit;

#/etc/init.d/mysql stop
#sudo kill -9 $(pgrep mysql)
#/etc/init.d/mysql start

Upgrade Ubuntu Ubuntu 16.04.1 LTS to Ubuntu 16.04.3 LTS

First of all you have to check Ubuntu end of life:
https://www.ubuntu.com/info/release-end-of-life

2. You can used this step to upgrade your ubuntu;
Ref: https://www.digitalocean.com/community/tutorials/how-to-upgrade-to-ubuntu-16-04-lts

3. But when you run apt-get upgrade
    You got error run apt-get -f install .
This maybe because of your /boot is already fully utilize 100%.

Here is the step to solve it : Ref: https://askubuntu.com/questions/345588/what-is-the-safest-way-to-clean-up-boot-partition

Or you can used Ref: http://www.mogilowski.net/lang/en-us/2014/04/14/remove-old-kernel-packages-from-ubuntu/

4. If you have problem while upgrading nginx:
EG: Errors were encountered while processing: nginx-extras

•   You have to check what web service that you use? 
• If you are using Apache, remove pkg  : apt-get remove nginx* 
• If you are using nginx, stop the apache service.
• Ref: https://askubuntu.com/posts/805283/edit

5. Check your version 

lsb_release -a