| http://timestamp.digicert.com | |
| http://timestamp.globalsign.com/tsa/r6advanced1 | |
| http://rfc3161timestamp.globalsign.com/advanced | |
| http://timestamp.sectigo.com | |
| http://timestamp.apple.com/ts01 | |
| http://tsa.mesign.com | |
| http://time.certum.pl | |
| https://freetsa.org | |
| http://timestamp.globalsign.com/scripts/timstamp.dll | |
| http://timestamp.globalsign.com/?signature=sha2 |
(Items in bold indicate possible concerns)
| Keycloak | WSO2 Identity Server | Gluu | CAS | OpenAM | Shibboleth IdP | LemonLDAP::NG | |
|---|---|---|---|---|---|---|---|
| OpenID Connect/OAuth support | yes | yes | yes | yes | yes | third-party | yes |
| Multi-factor authentication | yes | yes | yes | yes | yes | yes | yes |
| Admin UI | yes | yes | yes | yes | yes | no | yes |
| OpenJDK support | yes | yes | no³ | yes | yes | **[partial](https://wiki.shibboleth.net/confluence/display/IDP30/SystemRequ |
See https://www.nginx.com/resources/wiki/start/topics/tutorials/install/#official-debian-ubuntu-packages on how to install the lastest version of nginx.
Most settings are sourced from https://bettercrypto.org/static/applied-crypto-hardening.pdf#subsection.2.1.3, https://danpalmer.me/blog/ssl-labs-grade-a, https://gist.github.com/plentz/6737338 and https://scotthelme.co.uk/
See https://www.nginx.com/resources/wiki/start/topics/tutorials/install/#official-debian-ubuntu-packages on how to install the lastest version of nginx.
Most settings are sourced from https://bettercrypto.org/static/applied-crypto-hardening.pdf#subsection.2.1.3, https://danpalmer.me/blog/ssl-labs-grade-a, https://gist.github.com/plentz/6737338 and https://scotthelme.co.uk/
| ~# uname -a | |
| ~# lsb_release -a | |
| ~# locale-gen en_US | |
| ~# locale-gen en_US.UTF-8 | |
| ~# apt-get -y --force-yes remove ntpdate | |
| ~# apt-get -y --force-yes install ntp | |
| ~# /etc/init.d/ntp restart | |
| ~# dpkg-reconfigure tzdata |
