WoTT Security BlogMusings, thoughts, ideas, releases on security
open-sourceConfiguring Nginx with client certificate authentication (mTLS)By Viktor Petersson on July 15, 2019
Configuring Nginx with client certificate authentication (mTLS) Required Skill Level: Medium to Expert Time to complete: 15-20 min In this post we will walk through how to configure Nginx to support mutual TLS to authenticate a client request in 3 steps: Install certificate on client Set up a server Whitelist client One... Continue reading
Using WoTT credentials to manage access to Adafruit IO feedsBy Fiona McAllister on June 27, 2019
Using Adafruit IO with WoTT Credentials Introduction Adafruit IO is a free cloud service interested in making IoT accessible to everyone through presenting data in a useful and user-friendly way. Services that they provide include linking your IoT devices to Twitter and weather services. You can also use Adafruit IO to monitor... Continue reading
Using WoTT credentials to manage access to Screenly OSEBy Fiona McAllister on June 25, 2019
Using WoTT to secure access to Screenly Introduction Screenly is a service that provides digital signage and acts as an OS on the host device. Essentially it treats your host device as a streaming service that projects visual media (such as images and webpages) onto a monitor from multiple different sources. Think... Continue reading
Using WoTT credentials to manage access to a Python 3 WebAppBy Fiona McAllister on June 18, 2019
Another simple WebApp example Introduction In a previous example we introduced you to setting up a Simple WebApp using mTLS to provide security. This is one of a few ways to secure connection between a client and a server. In this example, we’ll be using another simple WebApp that instead uses HTTP... Continue reading
Using WoTT to secure a simple Python 3 WebAppBy Fiona McAllister on June 16, 2019
A simple WebApp example Introduction In the following example, we’ll walk you through how to secure a simple WebApp using WoTT. Before you begin, you need two devices with the WoTT Agent installed. This can be a combination of devices that are either a Raspberry Pi or a desktop running a Debian... Continue reading
Using WoTT to secure access to Google Core IoTBy Fiona McAllister on June 14, 2019
Using WoTT with Google Core IoT Introduction Before we get started, you will need to install the gcloud tool. This is used to interact with Google’s services. You can find installation instructions here. Follow the instructions for your specific distribution. You will also need to have at least one device with the... Continue reading