security

Octopus Deploy 3.11 upwards has a nice new feature to manage SSL certificates that makes it simple to deploy a web app with its x509 SSL certificate in a secure manner. Once it’s setup the developer and deployer don’t even need access to the certificate or admin rights of the web server – all of it is managed and secured by the Octopus server itself. Load the certificate into Octopus Whether they are internal of public someone needs to load the PFX certificate file into the Octopus Certificate Library....

Some stuff I have read in the last couple of weeks that I think are worth checking out, mostly new but some old stuff too. All worth subscribing to. The command line tooling shipped with git for windows is pretty useful, even if you are not using git itself. I often find myself dropping into the bash shell for ls, touch, less, and grep and Matt Wrock gives another useful tip....

Assuming you are running your asp.net website on windows and IIS it is possible to encrypt your web.config file with a little bit of scripting during your website deployment. However I would always ask why do you want to do this? IIS will not serve this file by default and if you are sensible your production websites file system should be well secured already. But assuming you have a good reason, here is how....