Posts

Showing posts from November, 2014

PCI Compliance, SSL, TLS and Crypto

 Poodle and SSL 3.0, TLS 1.2  In order to fix the Poodle issue; SSL 3.0 needs to be disabled. You'll loose an odd ancient Browser or 2 but it's just not worth it. FYi, this also enables TLS 1.2 and 1.1. Other protocols that should not be round are PCT 1.0 and SSL 2.0 Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server] "DisabledByDefault"=dword:00000001 "Enabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client] "DisabledByDefault"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentContr

How to back up the IIS 7 Configuration

How to back up the IIS 7 Configuration Remember it used to be called a metabase? Open a command prompt with Run as Administrator then cd to %windir%\system32\inetsrv. appcmd add backup. The system will name it for you by using a date, time format and pop it in %windir%\system32\inetsrv\backup. Done.

Paypal Invoicing API

So how to get your paypal invoicing set up? Login to the Paypal Sandbox with the account associated to your Paypal Invoicing Application (Google that, to find the latest URL!!) Click My Apps, create a new APP, save as draft and you will be ready to start testing. Note that when you are testing the Sandbox App Id is always APP-80W284485P519543T and the end point is https://svcs.sandbox.paypal.com/. You'll need approval from Paypal when finished testing!