Tag: ReadyNas

  • Making ReadyNAS more secure

    By default Readynas uses a weak SSH key and apache configurations.

    Regenerate SSH keys by running the follow:

    [code]
    # ssh-keygen -t rsa1 -f "/etc/ssh/ssh_host_key" -N ”
    # ssh-keygen -t rsa -f "/etc/ssh/ssh_host_rsa_key" -N ”
    # ssh-keygen -t dsa -f "/etc/ssh/ssh_host_dsa_key" -N ”
    [/code]

    Securing apache running the follow:

    [code]
    vi /etc/frontview/apache/httpd.conf
    [/code]

    Add the following

    [code]
    SSLProtocol all -SSLv2
    SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
    TraceEnable off
    [/code]

    run the follow to restart the apache server

    [code]
    # killall apache-ssl
    # /usr/sbin/apache-ssl -f /etc/frontview/apache/httpd.conf
    [/code]