pajus @published 2026-10-20 · 12 min read DNS Hijack to Rogue TLS Certs: CAA, CT, DNSSEC How a DNS hijack lets attackers pass ACME validation and get rogue TLS certificates, and how to limit it with CAA accounturi, CT diffs and DNSSEC. Tags TLS DNS Web Security Server Hardening
pajus @published 2026-10-17 · 10 min read curl (60) Unable to Get Local Issuer: Debian 13 Fix curl (60) unable to get local issuer certificate on Debian 13: find out if the server chain, client trust store, clock or a proxy is at fault. Tags TLS OpenSSL Troubleshooting Debian Server Administration
pajus @published 2026-10-09 · 10 min read OpenSSL DSA-6531-1: Patch 13 CVEs on Debian 13 OpenSSL DSA-6531-1 fixes 13 CVEs on Debian 13. Check libssl3t64 against 3.5.7-1~deb13u3, restart daemons using the old library and verify the fix. Tags OpenSSL Debian Security Updates TLS
pajus @published 2026-10-02 · 11 min read Certbot on Debian 13: Renewals for 45-Day Certs Automate Let's Encrypt on Debian 13 with certbot: timer, nginx deploy hook, OnFailure alerts, expiry checks and prep for 64- and 45-day certificates. Tags Nginx systemd Debian Server Administration TLS