<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://miguelangel.torresegea.es/wiki/lib/exe/css.php?s=feed" type="text/css"?>
<rdf:RDF
    xmlns="http://purl.org/rss/1.0/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel rdf:about="https://miguelangel.torresegea.es/wiki/feed.php">
        <title>miguel angel torres egea</title>
        <description></description>
        <link>https://miguelangel.torresegea.es/wiki/</link>
        <image rdf:resource="https://miguelangel.torresegea.es/wiki/_media/wiki:dokuwiki-128.png" />
       <dc:date>2026-05-23T15:16:47+00:00</dc:date>
        <items>
            <rdf:Seq>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:security:openssl?rev=1638598409&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt?rev=1777889759&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:apache:htpasswd?rev=1730366682&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:dns?rev=1777896878&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:k0.vividumcodex.com?rev=1574897663&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:multidominio?rev=1583137311&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:apache:cli?rev=1675931719&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:apache:config?rev=1535614606&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:seedbox.torresegea.es?rev=1551221929&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:apache:certificados?rev=1640261109&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:nginx:start?rev=1540758063&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:apache:htaccess:redirects?rev=1644060584&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:wildcard?rev=1767009360&amp;do=diff"/>
                <rdf:li rdf:resource="https://miguelangel.torresegea.es/wiki/web:security:wordpress:securizar?rev=1760533105&amp;do=diff"/>
            </rdf:Seq>
        </items>
    </channel>
    <image rdf:about="https://miguelangel.torresegea.es/wiki/_media/wiki:dokuwiki-128.png">
        <title>miguel angel torres egea</title>
        <link>https://miguelangel.torresegea.es/wiki/</link>
        <url>https://miguelangel.torresegea.es/wiki/_media/wiki:dokuwiki-128.png</url>
    </image>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:security:openssl?rev=1638598409&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2021-12-04T06:13:29+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>openssl</title>
        <link>https://miguelangel.torresegea.es/wiki/web:security:openssl?rev=1638598409&amp;do=diff</link>
        <description>openssl

	*  Certificados, certificaciones, Entidades de Certificación
	*  &lt;https://www.sslshopper.com/article-most-common-openssl-commands.html&gt;

utils

	*  Remove a passphrase from a private key:
openssl rsa -in privateKey.pem -out newPrivateKey.pem



check

	*  Check a Certificate Signing Request (CSR):
openssl req -text -noout -verify -in CSR.csr


	*  Check a private key:</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt?rev=1777889759&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2026-05-04T10:15:59+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Let&#039;s Encrypt</title>
        <link>https://miguelangel.torresegea.es/wiki/web:security:letsencrypt?rev=1777889759&amp;do=diff</link>
        <description>Let&#039;s Encrypt

info

	*  User Guide
	*  &lt;https://letsencrypt.org/getting-started/&gt;
	*  certbot
		*  instalación: &lt;https://certbot.eff.org/docs/install.html&gt;
		*  método manual: &lt;https://certbot.eff.org/docs/using.html#manual&gt;
		*  renovación:
			*  &lt;https://certbot.eff.org/docs/using.html#re-creating-and-updating-existing-certificates&gt;
			*  ? &lt;https://certbot.eff.org/docs/using.html#id19&gt;

		*  cli : &lt;https://certbot.eff.org/docs/using.html#certbot-command-line-options&gt;

	*  &lt;https://www.adicto…</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:apache:htpasswd?rev=1730366682&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2024-10-31T09:24:42+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>.htpasswd</title>
        <link>https://miguelangel.torresegea.es/wiki/web:apache:htpasswd?rev=1730366682&amp;do=diff</link>
        <description>.htpasswd

es el fichero donde se ponen las relaciones de usuario y contraseña.

generar

AuthType Basic

	*  &lt;http://www.htaccesstools.com/htpasswd-generator/&gt;
	*  &lt;http://httpd.apache.org/docs/2.0/es/howto/auth.html&gt; &lt;- habría que mirar tema de grupos
	*  $ htpasswd &lt;opciones&gt; &lt;passfile&gt; &lt;user&gt; &lt;password&gt;
		*  opciones:
			*  -c crea un nuevo fichero, ojo, sobreescribe si existe uno con ese nombre</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:dns?rev=1777896878&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2026-05-04T12:14:38+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Let&#039;s Encrypt (renovación DNS)</title>
        <link>https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:dns?rev=1777896878&amp;do=diff</link>
        <description>Let&#039;s Encrypt (renovación DNS)

Para poder renovar los certificados a través DNS, hace falta usar un servicio que permita acceder a los registros DNS via API (o delegar el registro CNAME en uno que lo permita).

preparativos

	*  descargar el script encargado de modificar el registro</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:k0.vividumcodex.com?rev=1574897663&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2019-11-27T23:34:23+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>let&#039;s encrypt k0.vividumcodex.com</title>
        <link>https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:k0.vividumcodex.com?rev=1574897663&amp;do=diff</link>
        <description>let&#039;s encrypt k0.vividumcodex.com

resumen

	*  montado sobre 2 contenedores diferentes
		*  nginx
		*  certbot


scripts


docker run \
	-it \
	--name nginx \
	--rm \
	-p 80:80 \
	-v ${PWD}/data/nginx/conf.d:/etc/nginx/conf.d \
	-v ${PWD}/data/nginx/www:/var/www/html \
	-v ${PWD}/data/certbot/conf:/etc/letsencrypt \
	-v ${PWD}/data/certbot/www:/var/www/certbot \
nginx:1.15-alpine</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:multidominio?rev=1583137311&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2020-03-02T08:21:51+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Let&#039;s Encrypt multidominio</title>
        <link>https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:multidominio?rev=1583137311&amp;do=diff</link>
        <description>Let&#039;s Encrypt multidominio


#!/bin/bash

COMMON_NAME=${1:-&quot;landing.fidmag.org&quot;}
COMMON_ALT_NAME=${COMMON_NAME//./_}

[[ ! -z ${COMMON_NAME} ]] &amp;&amp; {
	echo -e &quot;Creating letsencrypt directory...\n&quot;
	mkdir -p /etc/letsencrypt/live/${COMMON_NAME}
	#openssl genrsa 4096 &gt; account.key
	echo -e &quot;Generating .key &amp; .csr for domain...\n&quot;
	openssl genrsa 4096 &gt; domain_${COMMON_ALT_NAME}.key

        openssl req -new -sha256 -key domain_${COMMON_ALT_NAME}.key -subj &quot;/&quot; -reqexts SAN -config &lt;(cat /etc/ssl/ope…</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:apache:cli?rev=1675931719&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2023-02-09T08:35:19+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Línea de Comando con Apache</title>
        <link>https://miguelangel.torresegea.es/wiki/web:apache:cli?rev=1675931719&amp;do=diff</link>
        <description>Línea de Comando con Apache

apachectl

	*  start/stop -&gt; arrancar y parar daemon (service httpd start/stop/restart)
	*  configtest -&gt; comprobar configuración (/etc/init.d/httpd configtest o apachectl configtest )
	*  graceful -&gt; recargar la configuración en caliente</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:apache:config?rev=1535614606&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2018-08-30T07:36:46+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>configuración apache</title>
        <link>https://miguelangel.torresegea.es/wiki/web:apache:config?rev=1535614606&amp;do=diff</link>
        <description>configuración apache

directivas para securizar

	*  evitar listado directorios Options -Indexes
	*  permitir .htaccess: (/etc/apache/sites-available/default)AllowOverride All
	*  evitar información del servidor (/etc/apache/conf.d/security):
		*</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:seedbox.torresegea.es?rev=1551221929&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2019-02-26T22:58:49+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>let&#039;s encrypt seedbox.torresegea.es</title>
        <link>https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:seedbox.torresegea.es?rev=1551221929&amp;do=diff</link>
        <description>let&#039;s encrypt seedbox.torresegea.es

para próximas

	*  probar método automático: certbot-auto renew
		*  OK, renueva certificados (pero no los actualiza en los directorios correspondientes) -&gt; está en CRON
		*  añadida entrada en sudo visudo para que no solicite password de sudo al ejecutarse</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:apache:certificados?rev=1640261109&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2021-12-23T12:05:09+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>certificados de seguridad (apache)</title>
        <link>https://miguelangel.torresegea.es/wiki/web:apache:certificados?rev=1640261109&amp;do=diff</link>
        <description>certificados de seguridad (apache)

conceptos

	*  .key -&gt; fichero conteniendo clave privada de un certificado
	*  .csr -&gt; fichero de petición para certificar por una entidad certificadora -&gt; Certificate Signing Request
	*  .crt -&gt; fichero firmado por la entidad certificadora, para instalar en el webserver</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:nginx:start?rev=1540758063&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2018-10-28T20:21:03+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>nginx</title>
        <link>https://miguelangel.torresegea.es/wiki/web:nginx:start?rev=1540758063&amp;do=diff</link>
        <description>nginx

alias &amp; autoindex


location /nginx-location {
    alias /path/to;
    autoindex on;
}</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:apache:htaccess:redirects?rev=1644060584&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-02-05T11:29:44+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>.htaccess rewrites (redirecciones)</title>
        <link>https://miguelangel.torresegea.es/wiki/web:apache:htaccess:redirects?rev=1644060584&amp;do=diff</link>
        <description>.htaccess rewrites (redirecciones)

/via:&lt;http://deteresa.com/redireccion-301/&gt;
hay que tener el mod_rewrite activo


Options +FollowSymlinks
RewriteEngine on



RedirectMatch permanent ^/(.*) http://&lt;url&gt;/$1


zxc.cat


RewriteEngine on
RewriteRule ^wiki.*$ https://miguelangel.torresegea.es/wiki/$1 [r=307,L]
RewriteRule ^blog.*$ https://miguelangel.torresegea.es/blog/$1 [r=307,L]
RewriteRule ^sqleditor.*$ https://miguelangel.torresegea.es/bike-9b12022-portable/ [r=307,L]
RewriteRule ^sql.*$ htt…</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:wildcard?rev=1767009360&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2025-12-29T11:56:00+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Let&#039;s Encrypt wildcard</title>
        <link>https://miguelangel.torresegea.es/wiki/web:security:letsencrypt:wildcard?rev=1767009360&amp;do=diff</link>
        <description>Let&#039;s Encrypt wildcard

info

	*  &lt;https://www.jesusamieiro.com/generar-un-certificado-ssl-wildcard-con-lets-encrypt/&gt;
		*  &lt;https://www.whatsmydns.net/&gt;
		*  &lt;https://dnschecker.org/#TXT/_acme-challenge.fidmag.org&gt; 
		*  &lt;https://mxtoolbox.com/SuperTool.aspx?action=txt%3a_acme-challenge.example.com&amp;run=toolpage#&gt;

	*  &lt;https://redeslinux.net/guia-completa-pfsense-con-ddns-de-cloudflare-certificados-lets-encrypt-y-haproxy-para-proxy-inverso-y-balanceo-de-carga-de-servicios/&gt;
	*  &lt;https://discour…</description>
    </item>
    <item rdf:about="https://miguelangel.torresegea.es/wiki/web:security:wordpress:securizar?rev=1760533105&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2025-10-15T12:58:25+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>Wordpress securizar</title>
        <link>https://miguelangel.torresegea.es/wiki/web:security:wordpress:securizar?rev=1760533105&amp;do=diff</link>
        <description>Wordpress securizar

	*  Nominalia: &lt;https://www.escueladeinternet.com/&gt;

securizar

	*  cambiar usuario «admin»
	*  tener el WP actualizado
	*  usar contraseñas fuertes
	*  aplicar el perfil correspondiente al trabajo a realizar - administrador no ha de ser el perfil por defecto para todos</description>
    </item>
</rdf:RDF>
