domingo, 26 de octubre de 2008

Instalar multiples versiones de Internet Explorer

A muchos desarrolladores esto les puede interesar, ya que en ocasiones necesitan ver la página tal y como se vería en el PC del usuario, para ello necesitan tener varias máquinas (físicas o virtuales) con diferentes versiones de Internet Explorer. Con este programa se pueden tener todas las versiones en un sólo PC:

http://tredosoft.com/Multiple_IE

El instalador contiene: IE3 IE4.01 IE5 IE5.5 e IE6

miércoles, 1 de octubre de 2008

Controlar PDA o Smartphone desde el PC

Con este sencillo programa puedes controlar desde el PC tu PDA / teléfono móvil siempre que sea accesible por ActiveSync:

http://www.mymobiler.com/

Para ver la pantalla de tu movil en tu PC.
Copiar y pegar texto entre el movil y el PC
Capturar la pantalla del móvil, etc...

Aquí dejo todas las funcionalidades en inglés:
MY MOBILER v1.23 (06/15/2008) - FREEWARE
View your mobile screen on your desktop.
Control your mobile by using desktop keyboard and mouse.
Copy/Cut/Paste text between mobile and desktop.
Capture mobile screen.
Drag and drop files to your mobile.
Support ActiveSync / IP Connection
Support Mobile Explorer (File Browse)
DOWNLOAD
Download MyMobiler v1.23 (PC Install)
Download MyMobiler v1.23 (ZIP file)
Support Windows Mobile 2003
Support Windows Mobile 5.0 / 6.0
MyMobiler Forum ...

sábado, 9 de febrero de 2008

Ayuda para usar OpenSSL

Obtener versión del OpenSSL
openssl version

Nos devuelve la versión del producto (todos los ejemplo están hechos con esta versión)
OpenSSL 0.9.6g 9 Aug 2002

Generar clave simétrica aleatoria
Clave simétrica en 128bits.key [salida]
openssl rand 128 >128bits.key

Generar claves pública y privada
Ejemplo de cómo generar además de las claves la solicitud de un certificado para un Concurso (en formato PKCS#10)

Crear el fichero de texto (con notepad) llamado UserConf.txt con el siguiente contenido:
=============================== Inicio del fichero =================
[ req ]
default_bits = 1024
distinguished_name = req_distinguished_name
encrypt_rsa_key = no
default_md = sha1

[ req_distinguished_name ]

countryName = Pais (codigo de 2 letras)
countryName_default = ES
organizationName = Organization Name (eg, company)
organizationName_default = FNMT - Pruebas
commonName = Common Name (eg, YOUR name)
emailAddress = Email Address
================================ Fin del fichero =================

Después lanzamos este comando:

openssl req -new -keyout newkey.pem -out newreq.pem -days 365 -config UserConf.txt

Esta será la salida:

Generating a 1024 bit RSA private key
.......................++++++
...................................++++++
writing new private key to 'newkey.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Pais (codigo de 2 letras) [ES]: [intro]
Organization Name (eg, company) [FNMT – Pruebas] : [intro]
Common Name (eg, YOUR name) []:Concurso 02

Cifrar clave privada con clave simétrica
Clave privada en: newkey.pem [entrada]
Clave simétrica en 128bits.key [entrada]
Clave privada cifrada en: KpvCifrada.3des [salida]

openssl des3 -in newkey.pem -out KpvCifrada.3des -kfile 128bits.key

Descifrar clave privada con clave simétrica
Clave privada cifrada en: KpvCifrada.3des [entrada]
Clave simétrica en 128bits.key [entrada]
Clave privada sin cifrar en: Kpv.pem [salida]

openssl des3 -d -in KpvCifrada.3des -out Kpv.pem -kfile 128bits.key

Convertir un certificado DER a PEM
Certificado en: concurso2.crt [entrada]
Certificado en: concurso2.pem [salida]

openssl x509 -in concurso2.crt -inform DER -out concurso2.pem -outform PEM

Cifrar un fichero usando RSA
Certificado en: concurso2.pem [entrada]
Fichero en claro en: ParaCifar.zip [entrada]
Fichero cifrado en: Cifrado.RSA [salida]

openssl rsautl -in 128bits.key -out 128bits.RSA -inkey concurso2.crt -certin –encrypt –raw

Nota: Esta función sólo cifra ficheros de 0 a 128bits de tamaño, si es de menos de 128 hay que sustituir “–raw” por “-pkcs” (relleno o “padding” para completar los 128 bits)

Descifrar un fichero usando RSA
Clave privada en: newkey.pem [entrada]
Fichero cifrado en: Cifrado.RSA [entrada]
Fichero en claro en: Descifrado.zip [salida]

openssl rsautl -in 128bits.RSA -out 128bits.k2 -inkey newkey.pem -decrypt –raw

Construir un Pkcs#12 a partir del certificado y de la clave privada
Clave privada en: newkey.pem [entrada]
Certificado en: concurso2.pem [entrada]
Fichero en claro en: concurso2.p12 [salida]

openssl pkcs12 -export -inkey newkey.pem -in concurso2.pem -out concurso2.p12 –descert

La salida del comando será:
Loading 'screen' into random state - done
Enter Export Password: [Teclear aquí la password del Pkcs#12]
Verifying password - Enter Export Password: [Repetir la password del Pkcs#12]

Construcción de un PKCS#7 a partir del fichero cifrado con la clave simétrica y la clave simétrica cifrada con la clave pública
Clave simétrica cifrada con Kpv: SimetricaCifrada.rsa [entrada]
Fichero cifrado con clave simétrica: Cifrado.3des [entrada]
Pkcs7: CifradoRSA.p7 [salida]

- Parece ser que con OpenSSL no se puede -

Sacar de un PKCS#7 el fichero cifrado con la clave simétrica y la clave simétrica cifrada con la clave pública
Pkcs7: CifradoRSA.p7 [entrada]
Clave simétrica cifrada con Kpv: SimetricaCifrada.rsa [salida]
Fichero cifrado con clave simétrica: Cifrado.3des [salida]

- Parece ser que con OpenSSL no se puede -

miércoles, 9 de enero de 2008

Puertos por defecto en Windows 2000/2003

SUMMARY
This article describes the most common ports, protocols, and services that are opened on a Windows 2000-based server that is running Active Directory. The purpose of this article is to list the different services and their respective ports, not to explain how to configure the ports for either a firewall or a proxy.

21/TCP (Transmission Control Protocol) -- FTP This File Transfer Protocol (FTP) server is part of Internet Information Services (IIS) and is administered from the IIS administration tool. FTP is a common method to transfer files between two networked computers and to enable the convenient use of remote file storage capabilities.
25/TCP -- SMTP This Simple Mail Transfer Protocol (SMTP) service is administered from the IIS administration tool. SMTP is the protocol that is used to send e-mail messages by means of the Internet.
80/TCP -- HTTP Hypertext Transfer Protocol (HTTP) is the set of rules for exchanging files (for example, text, graphic images, sound, video, and other multimedia files) on the World Wide Web (WWW). In comparison to the Transmission Control Protocol/Internet Protocol (TCP/IP) suite of protocols (that are the basis for information exchange on the Internet), HTTP is a program protocol.
88/UDP (User Datagram Protocol) -- Kerberos Kerberos protocol is a network authentication method that is based on the key distribution model. This protocol enables entities that are communicating over networks to prove their identity to each other and at the same time this protocol can prevent eavesdropping or replay attacks. The Kerberos Key Distribution Center (KDC) listens on this port for ticket requests. Port 88 for the Kerberos protocol can also be TCP/UDP.
119/TCP -- NNTP Network News Transfer Protocol (NNTP) is the predominant protocol that is used by computers for managing the notes that are posted on Usenet newsgroups. NNTP servers manage the global network of collected Usenet newsgroups.
135/TCP -- RPC Remote procedure call (RPC) is a facility that enables a program on one Windows-based computer (the client computer) to invoke the services of another program that is running on a separate Windows-based computer (the server) in a distributed network. RPC is a program-level protocol that can use the communications services of any of the Windows networking protocols, which includes TCP/IP.
137/UDP -- NetBIOS Name Server The network basic input/output system (NetBIOS) Name Server (NBNS) protocol, which is part of the NetBIOS over TCP/IP (NetBT) family of protocols, provides a means for hostname and address mapping on a NetBIOS-aware network.
139/TCP -- NetBIOS Session Services NetBIOS Session Services are part of the NetBIOS over TCP/IP (NetBT) family of protocols and is used for server message block (SMB), file sharing, and printing.
389/UDP -- LDAP LDAP is the Lightweight Directory Access Protocol. LDAP is designed to be a standard way of providing access to directory services. In Windows 2000, LDAP is the primary way that the operating system accesses the Active Directory database.
443/TCP -- HTTPS Secure Hypertext Transfer Protocol (HTTPS) is a variant of HTTP that is used for handling secure transactions. HTTPS is a unique protocol that is Secure Sockets Layer (SSL) underneath HTTP.
445/TCP -- SMB The SMB protocol is used for file sharing in Microsoft Windows NT and Windows 2000. Windows 2000 enables you to run SMB directly over TCP/IP, without the extra layer of NetBT.
464/TCP -- Kerberos Password V5 The Kerberos change password protocol is used to deny an administrator from setting a password for a new user. This functionality is useful in some environments, and this proposal can be used to enable password setting. This protocol is used when users changes their passwords.
500/TCP -- ISAKMP Internet Security Association and Key Management Protocol (ISAKMP) or IKE (for Windows 2000) is the key exchange mechanism for a virtual private network (VPN). ISAKMP manages the exchange of cryptographic keys and employs a two-phase process for establishing the Internet Protocol security (IPSec) connection between two gateways.
563/TCP -- SNEWS SNEWS is secure NNTP.
593/TCP -- RPC over HTTP RPC over HTTP is used for COM+ Internet Services and requires IIS to operate.
636/TCP -- LDAP over SSL When SSL is enabled, LDAP data that is transmitted and received is encrypted.
1025/TCP -- Listen The first port assigned to be used by any application..
1067/TCP -- Installation Bootstrap Service The installation bootstrap protocol server.
1068/TCP -- Installation Bootstrap Service The installation bootstrap protocol client.
1645/UDP -- IAS: Internet Authentication Service This service is used for processing Remote Authentication Dial-In User Service (RADIUS) authentication messages and is supported by IAS to provide backward compatibility with earlier RADIUS servers.
1646/UDP -- IAS: Internet Authentication Service This service is used for processing RADIUS accounting messages and is supported by IAS to provide backward compatibility with earlier RADIUS servers.
1701/UDP -- L2TP Layer 2 Tunneling Protocol (L2TP) is a method for encapsulating standard Point-to-Point Protocol (PPP) by means of a variety of media. The protocol also enables encapsulation of PPP by using UDP packets.
1723/UDP -- PPTP PPTP is an abbreviation for Point-to-Point Tunneling Protocol. It is an Internet protocol that is commonly used in VPN products. Windows NT supports PPTP server, and both Windows NT and Microsoft Windows 95 support PPTP client.
1812/UDP -- IAS Internet Authentication Service This service is used for processing RADIUS authentication messages.
1813/UDP -- IAS Internet Authentication Service This service is used for processing RADIUS authentication messages.
3268/TCP -- Microsoft Global Catalog Active Directory global catalogs listen on this port.
3269/TCP -- Microsoft Global Catalog with LDAP/SSL Microsoft global catalog SSL connections listen on this port.
3389/TCP -- RDP Remote Desktop Protocol (RDP) is the protocol that enables a thin client to communicate with the Terminal server over the network. This protocol is based on the International Telecommunication Union (ITU) T.120 protocol, an international, standard multiple-channel conferencing protocol that is currently being used in the Microsoft NetMeeting conferencing software product.