Analysis of JavaCard open-source ecosystem

Programmable smartcards are not just a piece of plastic for your headshot or a dumb portable store for cryptographic keys. Instead, they can perform on-card key generation, digital signatures combined with one-time passwords or even run relatively complex…

Creating MySQL8 Cluster from Existing Database

Some time ago, we decided to run KeyChest on a database cluster. Once we…

Amazon AWS — we got caught out by CPU credits

Amazon is pretty good at providing a cloud platform with all the tools and infrastructure you may possibly need without looking into the small print. CPU credits are an exception.

Getting Let’s Encrypt to app servers / firewalled networks

Does Let’s Encrypt (LE) support installation on servers with “random domain names”? The first impulse is to simply answer NO, you can’t do it, that’s the point of HTTPS, it makes sure you always talk to the right server. However…

Let’s Encrypt uptime is 99.9% — or 98.8% without defects in 2017

Automate certificate monitoring with free API — KeyChest

Our certificate monitoring KeyChest has an initial RESTful API for remote enrolment of new certificates and for checking certificate expiry. Its design supports automation without any initial security/authorization setup.

ROCA vulnerability, Gemalto, eID cards, and UK passports

I almost thought this news is not new any more, only to get a call from Daily Mail — a UK tabloid.

MySQL8 Cluster and Networking Problems

This is my second post on the topic of reliable MySQL8 cluster. Hopefully the last one as…

Track Letsencrypt certificates with KeyChest of Enigma