MeshCentral2 - Let's Encrypt & Security Improvements

As MeshCentral is being used by some as an internet facing server, it's important that as many industry standard security features be implemented. In the past weeks, MeshCentral and MeshCommander got more releases to continue to move security forward. From improved Let's Encrypt support to MeshCommander support for two-factor authentication, a lot of improvements have been made. Here is a list of the big ones:
  • GreenLockv3 support. MeshCentral has built-in support for getting and auto-renewing TLS certificates using Let's Encrypt which is a free CA service for web servers. Let's Encrypt updated it's validation protocol and is dropping support for the old protocol on December 1st requiring that everyone move to the new version. In the last week MeshCentral switched to using GreenLock v3 and made improvements. For example, MeshCentral will first try to get a Let's Encrypt staging certificate to test that everything is working before getting a production one.
  • Invalid Login Rate Throttling. When exposed to the Internet, attackers can spam a server with login requests, to guard against this, MeshCentral now implements a system where if many bad login attempts are made, the source IP address will be banned for a period of time, blocking any login attempts. The extra values are configurable.
  • Invalid Login Events & Notification. Bad login attempts are now logged and when a user logs in the next time, they will get a notification of how many invalid login attempts where made against their account. This includes login using a bad password or bad 2nd-factor attempts.
  • MeshCommander Support for 2nd Factor Auth. When MeshCommander connects to a MeshCentral server, the latest version will now prompt for the 2nd factor token if required by the server. This allows MeshCommander to correctly login to accounts with two-factor authentication enabled.
  • Improved MeshCentral Tracing Support. In order to help the community debug issues, there is now an improved tracing system that can be used to select what events you are interested in looking at and where you want to see them. You can now log select events to file in addition to looking at events in real-time on the web interface.
In addition to this, MeshCommander v0.8.0 was released last week with many more bug fixes and feature improvements. They include support for OS power states on Intel AMT 10+, drag & drop fixes, user interface fixes and much more. There are a bunch of people from the community that have helped a lot in the last two weeks, especially with testing and debugging GreenLockv3 & Let's Encrypt. Really super amazing that some are going above and beyond to help out. Thank you.


Popular posts from this blog

MeshCentral2 - MeshCtrl, Windows Services, Events, Remote Typing, Time Localization

MeshCentral2 - Next Generation Mesh Agent

MeshCentral2 - OS support, Browser Tabs, Location & Security