Questions tagged [ssl]

For questions about Secure Sockets Layer (SSL), which is a cryptographic protocol providing secure communications over the Internet.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
17 views

docker service create error: library BIO_new_file No such file or directory crypto/bio/bss_file c67 calling fopen when use certbot to create ssl cert

I use the below script to create an SSL certificate for my website which is hosted in VPS with dockerized nginx webserver. It's got the certificate from Let's Encrypt. #!/bin/bash if ! [ -x "$(...
Arani's user avatar
  • 99
-1 votes
0 answers
13 views

Access a container with http works but failed with httpS

Summary I have a cluster with a container inside a pod I can access trough http. But since I try to replace http by https, it failed. Explanations So, when I set the cluster with the config files on “...
fauve's user avatar
  • 99
0 votes
0 answers
23 views

AWS Load balancer secure listener - ignore certificate in ingress-nginx

So I have an EKS cluster with ingress-nginx running inside, the service of ingress-nginx-controller is associated with the External IP of Load balancer type Network (say 123.elb.my-region.amazonaws....
wiktor's user avatar
  • 1
0 votes
0 answers
67 views

Setup TLS Certs for Prometheus adapter in Local k3d

I am trying to setup HorizontalPodAutoscaler in K8s, for which I am setting up a custom metric to be used by HPA. I am using k3d locally to test the autoscaling feature. For this custom metric , I ...
devcodes's user avatar
  • 111
1 vote
1 answer
4k views

Unable to connect to the server: tls: failed to verify certificate: x509: certificate signed by unknown authority

I am facing issue when trying to import k8s cluster in Rancher. here are the logs of when trying to run the commands: Commnad: curl --insecure -sfL https://172.31.91.168/v3/import/...
Abdullah Manzoor's user avatar
0 votes
0 answers
10 views

What normally people use to automatic update ssl certs?

I see that FabioLB support multiple certificate stores, but unlike Caddy it doesn't have automatic https (certs doesn't renew automatically). What usually people use to automatically update SSL certs? ...
Kokizzu's user avatar
  • 113
2 votes
1 answer
452 views

Is it possible to create a tls kubernetes secret using Azure Key Vault data resources in Terraform?

I have a certificate file and a private key file that I am using to implement tls encrypted traffic for several different k8s pods running under an NGINX ingress load balancer. This works fine (i.e. ...
az2tonez's user avatar
1 vote
1 answer
6k views

"The plain HTTP request was sent to HTTPS port" issue with nginx-ingress in rancher/k8s

I'm running Rancher v2.6.3 and I have a cluster with a Django workload built all on top of AWS. The deployment has a cluster ip port set up, I have an ingress created with a prefix rule pointing at ...
cmhobbs's user avatar
  • 141
2 votes
2 answers
614 views

When do I have to renew an SSL certificate in Chef?

In the annual process of renewing SSL certificates, I have a list of infrastructure that needs updating. This usually included Chef. This is followed by an arduous and painful process of getting every ...
Muradin007's user avatar
4 votes
2 answers
1k views

Ingress vs Load Balancer

I am new to kubernetes and I am trying to expose an application publicly. I am using Scaleway as the cloud provider (if it matters). From what I understand, there are multiple ways of doing this. ...
Razvan Toader's user avatar
0 votes
1 answer
421 views

Configuration for Cloudflare endpoint using SSL to Kubernetes (load balancer & flask service)

Here is a summary of what I'm trying to do: I can get my flask app to respond without HTTPS/SSL. But am receiving a '503 Service Unavailable' when I am trying to use SSL. My understanding is since ...
echan00's user avatar
  • 101
1 vote
3 answers
6k views

How to resolve a problem "certificate signed by unknown authority" in GKE on pulling image (a private registry) when a pod is created?

I generated a CA certificate, then issued a certificate based on it for a private registry, that located in the same GKE cluster. Put the server certificates to the private registry and the CA ...
Max Koshel's user avatar
0 votes
1 answer
444 views

Can I move SSL certificate files from one server to another for the same domain?

I have a website running at https://domain.com and IP a.a.a.a, with an SSL cert issued by GoDaddy. The server is deployed with Nginx. Everything is working fine as it is. However I'm trying to deploy ...
puma91's user avatar
  • 103
1 vote
3 answers
4k views

Is SSL/HTTPS Needed Between Docker Containers on the Same Network?

As the title of the questions asks, is it important/needed to have ssl/https working between docker containers on the same network? Our setup is an Nginx container that proxies two Tomcat containers. ...
hooknc's user avatar
  • 111
0 votes
0 answers
117 views

How to use Vault generated certificates for Internal Domains in AWS

I have generated certificates for an internal domain using Hashicorp Vault. I have exported the private key, certificate body and certificate chain. I have uploaded the certificate onto AWS ...
YYashwanth's user avatar
1 vote
1 answer
226 views

TLS handshake failure

We have an ODBC Driver trying to connect through TLS , but fails. We tested using openssl with the following command and worked fine: openssl s_client -connect xxx.com:31020 the server accepts TLS 1....
Abba's user avatar
  • 121
1 vote
1 answer
2k views

Jenkins Deployment Issue - Unrecognized SSL Message, Plaintext Connection?

I've been attempting to build and deploy a local copy of a repository, whilst still providing the remote depository to Jenkins, to a Tomcat version 9 server. I have both Jenkins and Tomcat running on ...
mamajava's user avatar
2 votes
1 answer
1k views

How do I bootstrap an alpine image to work with a private repo proxy behind TLS?

I am in a corporate environment behind a gateway that does DPI and often replaces the TLS certificate of most online resources with our corporate certificate. Many of our developers use images based ...
LLlAMnYP's user avatar
  • 285
15 votes
2 answers
12k views

How can I add an additional IP / hostname to my Kubernetes certificate?

I've recently followed this guide to set up Kubernetes on my local Raspberry Pi cluster. I can access it fine on my LAN; however I'd like to be able to access it remotely as well. I've already set up ...
soapergem's user avatar
  • 181
1 vote
1 answer
2k views

How to check accepted cipher suites by an Azure App Service?

I am looking for a way to reliably check accepted cipher suites by an Azure App Service. On standard virtual machine I just remote to it and execute PowerShell command: Get-TlsCipherSuite which ...
Yoda's user avatar
  • 11
2 votes
1 answer
4k views

Unable to validate certificate chain: cert.pem in Zimbra mail server

I am trying to install let's encrypt SSL in my Zimbra mail server but getting below error when running below command. /opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem Error: *...
Jay's user avatar
  • 994
1 vote
2 answers
60 views

Issue with custom domain SSL certification

We are working on saas application which is hosted on app.example.com. Now we are trying to give the option to the users where their own domain or sub domain like dev.stack.com point to my application ...
Aravind Samala's user avatar
7 votes
1 answer
4k views

Kubernets docker registry behind nginx-ingress

I try to setup docker-registry in Kubernetes cluster behind the nginx-ingress controller. The issue is, when I try to push the image into private registry, it tells me: Get https://registry.local/...
acd's user avatar
  • 121
2 votes
0 answers
763 views

404 Not Found when obtaining new certificates for nginx [closed]

I'm trying to obtain ssl certificate for the following server: server { server_name www.nodrama.io; rewrite ^(.*) http://nodrama.io$1 permanent; } server { server_name nodrama.io; listen ...
fbielejec's user avatar
  • 183
3 votes
1 answer
952 views

certbot renewal fails over ipv6

I'm using LetsEncrypt CA for SSL certificates with a cron job that renews them. Recently moved one of our domains to dual ipv4/ipv6 stack and now the certificate renewal fails for that domain: ...
fbielejec's user avatar
  • 183
35 votes
9 answers
38k views

How to install Certbot plugins?

I installed Certbot by following this tutorial: sudo add-apt-repository ppa:certbot/certbot sudo apt-get update sudo apt-get install python-certbot-nginx And now I want to set up my cert, but I need ...
mpen's user avatar
  • 601
2 votes
3 answers
118 views

What are trusted providers that offer wildcard certificates and associated costs to be used in an Orchestration Platform like Kubernetes?

Currently, certbot and nginx are used to create a trusted webpage. Recently, an attempt was made to move the images to a kubernetes cluster on google cloud platform. A guide was found to configure an ...
030's user avatar
  • 13.2k
-4 votes
1 answer
188 views

Conditionally run certbot

I am running an ansible task that will among others install a let's encrypt certificate. I want the task to only run if the certificate has not been installed. What is the best way to check (via cmd)...
pkaramol's user avatar
  • 987
1 vote
1 answer
1k views

Is it possible to load balance TLS/SSL based logstash communication to elasticsearch?

if i have filebeat -> logstash -> elasticsearch pipeline with TLS or HTTPS encryption , is it possible to load balance between 2 destination elasticsearch clusters in active-standby ? what i mean is, ...
Saar Grin's user avatar
1 vote
1 answer
3k views

terraform chef provisioning - cannot validate certificate for 10.90.239.223 because it doesn't contain any IP SANs

While configuring the chef provisioner I am running into the following error after running 'terraform apply' chef_environment.terraform_01: Post https://10.90.239.223/organizations/mykitchen/...
scott's user avatar
  • 466
5 votes
3 answers
4k views

Validating certificates with get_url or yum on CentOS 7 using Ansible

I'm pretty new to Ansible, but it seemed a better tool than a bash script for installing programs from source on remote servers... Starting from my working-but-fragile bash script, I made an Ansible ...
TheAtomicOption's user avatar
3 votes
2 answers
605 views

What are best practices for implementing SSL on Jenkins?

One of the options is to configure SSL in NGinx and to put this in front of Jenkins. Are there any other options for securing Jenkins? I am looking for an answer that is focused on best practices that ...
030's user avatar
  • 13.2k
10 votes
2 answers
9k views

Git seems to recognize http.sslcainfo property from .gitconfig but ignores it on execution? SEC_E_UNTRUSTED_ROOT

all, I have a working certificates chain (testable with OpenSSL) but somehow I cannot manage to tell Git to load these certificates. I get the same "untrusted root authority" error (...
Ta Mu's user avatar
  • 6,772
18 votes
2 answers
6k views

How do I include my internal CA certificate to validate SSL exchanges in Chef?

We do use an internal Certificate Authority to create server certificates in my company. We also have to deal with a transparent proxy doing SSL interception (MITM). I regularly encounter SSL ...
Tensibai's user avatar
  • 11.4k