Questions tagged [ssl]
For questions about Secure Sockets Layer (SSL), which is a cryptographic protocol providing secure communications over the Internet.
0
votes
0answers
4 views
How to create a load balancer for a one click deployment vm instance (e.g. LAMP stack)
I used the one click deployment option to create a vm instance with a LAMP stack. How can I create a load balancer to secure the instance with SSL/HTTPS as I can only start new instance groups by ...
1
vote
1answer
18 views
Unable to validate certificate chain: cert.pem in Zimbra mail server
I am trying to install let's encrypt SSL in my Zimbra mail server but getting below error when running below command.
/opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem
Error:
*...
0
votes
2answers
32 views
Issue with custom domain SSL certification
We are working on saas application which is hosted on app.example.com. Now we are trying to give the option to the users where their own domain or sub domain like dev.stack.com point to my application ...
1
vote
0answers
16 views
How to confugure proxy for Python Apache Cloud Stack client?
For example in the requests library you can set proxy explicitely.
With exoscale/cs (a Python client for Apache Cloud Stack) it does not work for me.
Environment variables are set correctly to ...
3
votes
0answers
508 views
Kubernets docker registry behind nginx-ingress
I try to setup docker-registry in Kubernetes cluster behind the nginx-ingress controller.
The issue is, when I try to push the image into private registry, it tells me:
Get https://registry.local/...
0
votes
0answers
1k views
How to debug a docker on web app for containers in Azure which does not start
I am able to run my containers locally. I published them to container registry. And the deployment from container registry to web apps for containers is successful.
But the service does not turn ...
0
votes
0answers
98 views
ACM SSL certificate with Elastic Beanstalk
We switched from Comodo wild-card SSL CA to a free version from AWS through the Certificate Manager. The domain is registered on Namecheap and the only way we could get the website to route traffic ...
2
votes
0answers
219 views
404 Not Found when obtaining new certificates for nginx
I'm trying to obtain ssl certificate for the following server:
server {
server_name www.nodrama.io;
rewrite ^(.*) http://nodrama.io$1 permanent;
}
server {
server_name nodrama.io;
listen ...
1
vote
1answer
272 views
certbot renewal fails over ipv6
I'm using LetsEncrypt CA for SSL certificates with a cron job that renews them. Recently moved one of our domains to dual ipv4/ipv6 stack and now the certificate renewal fails for that domain:
...
0
votes
1answer
540 views
cannot validate certificate for 127.0.0.1 because it doesn't contain any IP SANs | Vault
I am getting the below error when I go to read or do anything with a Hashicorp Vault. It doesn't want to work at all. I had it working locally last week and nothing I know of has changed other than ...
0
votes
0answers
34 views
This server's certificate chain is incomplete
I tested my server on ssllabs. (results: https://www.ssllabs.com/ssltest/analyze.html?d=nutsfashion.pl).
And I got "This server's certificate chain is incomplete.".
I think what do I wrong beacuse ...
12
votes
5answers
12k views
How to install Certbot plugins?
I installed Certbot by following this tutorial:
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install python-certbot-nginx
And now I want to set up my cert, but I need ...
1
vote
2answers
74 views
What are trusted providers that offer wildcard certificates and associated costs to be used in an Orchestration Platform like Kubernetes?
Currently, certbot and nginx are used to create a trusted webpage. Recently, an attempt was made to move the images to a kubernetes cluster on google cloud platform. A guide was found to configure an ...
-3
votes
1answer
46 views
Conditionally run certbot
I am running an ansible task that will among others install a let's encrypt certificate.
I want the task to only run if the certificate has not been installed.
What is the best way to check (via cmd)...
1
vote
1answer
379 views
Is it possible to load balance TLS/SSL based logstash communication to elasticsearch?
if i have filebeat -> logstash -> elasticsearch pipeline with TLS or HTTPS encryption , is it possible to load balance between 2 destination elasticsearch clusters in active-standby ?
what i mean is, ...
1
vote
1answer
426 views
terraform chef provisioning - cannot validate certificate for 10.90.239.223 because it doesn't contain any IP SANs
While configuring the chef provisioner I am running into the following error after running 'terraform apply'
chef_environment.terraform_01: Post https://10.90.239.223/organizations/mykitchen/...
5
votes
2answers
739 views
Validating certificates with get_url or yum on CentOS 7 using Ansible
I'm pretty new to Ansible, but it seemed a better tool than a bash script for installing programs from source on remote servers...
Starting from my working-but-fragile bash script, I made an Ansible ...
3
votes
2answers
366 views
What are best practices for implementing SSL on Jenkins?
One of the options is to configure SSL in NGinx and to put this in front of Jenkins. Are there any other options for securing Jenkins? I am looking for an answer that is focused on best practices that ...
10
votes
2answers
3k views
Git seems to recognize http.sslcainfo property from .gitconfig but ignores it on execution? SEC_E_UNTRUSTED_ROOT
all, I have a working certificates chain (testable with OpenSSL) but somehow I cannot manage to tell Git to load these certificates.
I get the same "untrusted root authority" error (...
15
votes
1answer
924 views
How do I include my internal CA certificate to validate SSL exchanges in Chef?
We do use an internal Certificate Authority to create server certificates in my company.
We also have to deal with a transparent proxy doing SSL interception (MITM).
I regularly encounter SSL ...
