Questions tagged [ssl]
For questions about Secure Sockets Layer (SSL), which is a cryptographic protocol providing secure communications over the Internet.
28
questions
1
vote
2answers
34 views
How to resolve a problem “certificate signed by unknown authority” in GKE on pulling image (a private registry) when a pod is created?
I generated a CA certificate, then issued a certificate based on it for a private registry, that located in the same GKE cluster. Put the server certificates to the private registry and the CA ...
0
votes
0answers
11 views
ssl on wordpress docker image
When using https links for siteurl and home my docker wordpress stops responding (getting connection refused errors).
Its a known issue (https://github.com/docker-library/wordpress/issues/46) and the ...
-1
votes
0answers
23 views
Missing SSL settings on LoadBalancer using EKS
I've a stranger situation using EKS, follows my environment:
EKS - kubernetes version v1.18.9-eks-d1db3c
Ingress - Traefik:v2.3, and we have 2 load balancers
internal - load balancer
external - load ...
0
votes
1answer
58 views
Can I move SSL certificate files from one server to another for the same domain?
I have a website running at https://domain.com and IP a.a.a.a, with an SSL cert issued by GoDaddy. The server is deployed with Nginx. Everything is working fine as it is.
However I'm trying to deploy ...
0
votes
2answers
179 views
Is SSL/HTTPS Needed Between Docker Containers on the Same Network?
As the title of the questions asks, is it important/needed to have ssl/https working between docker containers on the same network?
Our setup is an Nginx container that proxies two Tomcat containers.
...
-1
votes
0answers
79 views
Containerized NGINX and SSL cert/key from the secret
I'm trying to load SSL cert/key from the Docker secrets in NGINX configuration (based on that post) as follow
# TLS config
ssl_certificate /run/secrets/localhost.crt;
...
1
vote
0answers
26 views
How to use Vault generated certificates for Internal Domains in AWS
I have generated certificates for an internal domain using Hashicorp Vault. I have exported the private key, certificate body and certificate chain.
I have uploaded the certificate onto AWS ...
-1
votes
0answers
10 views
Am I supposed to use self-signed certs if I am using a private CA in a private network?
I am using AWS ACMPCA to create a private CA to generate ssl certs for use in my private subnet. The certs that are created are self-signed by default. But now things like curl and python's request ...
1
vote
1answer
62 views
TLS handshake failure
We have an ODBC Driver trying to connect through TLS , but fails.
We tested using openssl with the following command and worked fine:
openssl s_client -connect xxx.com:31020
the server accepts TLS 1....
1
vote
1answer
911 views
Jenkins Deployment Issue - Unrecognized SSL Message, Plaintext Connection?
I've been attempting to build and deploy a local copy of a repository, whilst still providing the remote depository to Jenkins, to a Tomcat version 9 server.
I have both Jenkins and Tomcat running on ...
1
vote
1answer
297 views
How do I bootstrap an alpine image to work with a private repo proxy behind TLS?
I am in a corporate environment behind a gateway that does DPI and often replaces the TLS certificate of most online resources with our corporate certificate. Many of our developers use images based ...
6
votes
2answers
2k views
How can I add an additional IP / hostname to my Kubernetes certificate?
I've recently followed this guide to set up Kubernetes on my local Raspberry Pi cluster. I can access it fine on my LAN; however I'd like to be able to access it remotely as well. I've already set up ...
1
vote
1answer
1k views
How to check accepted cipher suites by an Azure App Service?
I am looking for a way to reliably check accepted cipher suites by an Azure App Service. On standard virtual machine I just remote to it and execute PowerShell command: Get-TlsCipherSuite which ...
2
votes
1answer
2k views
Unable to validate certificate chain: cert.pem in Zimbra mail server
I am trying to install let's encrypt SSL in my Zimbra mail server but getting below error when running below command.
/opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem
Error:
*...
1
vote
2answers
51 views
Issue with custom domain SSL certification
We are working on saas application which is hosted on app.example.com. Now we are trying to give the option to the users where their own domain or sub domain like dev.stack.com point to my application ...
1
vote
0answers
30 views
How to confugure proxy for Python Apache Cloud Stack client? [closed]
For example in the requests library you can set proxy explicitely.
With exoscale/cs (a Python client for Apache Cloud Stack) it does not work for me.
Environment variables are set correctly to ...
6
votes
1answer
3k views
Kubernets docker registry behind nginx-ingress
I try to setup docker-registry in Kubernetes cluster behind the nginx-ingress controller.
The issue is, when I try to push the image into private registry, it tells me:
Get https://registry.local/...
2
votes
0answers
420 views
404 Not Found when obtaining new certificates for nginx [closed]
I'm trying to obtain ssl certificate for the following server:
server {
server_name www.nodrama.io;
rewrite ^(.*) http://nodrama.io$1 permanent;
}
server {
server_name nodrama.io;
listen ...
3
votes
1answer
698 views
certbot renewal fails over ipv6
I'm using LetsEncrypt CA for SSL certificates with a cron job that renews them. Recently moved one of our domains to dual ipv4/ipv6 stack and now the certificate renewal fails for that domain:
...
28
votes
9answers
27k views
How to install Certbot plugins?
I installed Certbot by following this tutorial:
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install python-certbot-nginx
And now I want to set up my cert, but I need ...
2
votes
3answers
99 views
What are trusted providers that offer wildcard certificates and associated costs to be used in an Orchestration Platform like Kubernetes?
Currently, certbot and nginx are used to create a trusted webpage. Recently, an attempt was made to move the images to a kubernetes cluster on google cloud platform. A guide was found to configure an ...
-4
votes
1answer
75 views
Conditionally run certbot
I am running an ansible task that will among others install a let's encrypt certificate.
I want the task to only run if the certificate has not been installed.
What is the best way to check (via cmd)...
1
vote
1answer
1k views
Is it possible to load balance TLS/SSL based logstash communication to elasticsearch?
if i have filebeat -> logstash -> elasticsearch pipeline with TLS or HTTPS encryption , is it possible to load balance between 2 destination elasticsearch clusters in active-standby ?
what i mean is, ...
1
vote
1answer
2k views
terraform chef provisioning - cannot validate certificate for 10.90.239.223 because it doesn't contain any IP SANs
While configuring the chef provisioner I am running into the following error after running 'terraform apply'
chef_environment.terraform_01: Post https://10.90.239.223/organizations/mykitchen/...
5
votes
3answers
2k views
Validating certificates with get_url or yum on CentOS 7 using Ansible
I'm pretty new to Ansible, but it seemed a better tool than a bash script for installing programs from source on remote servers...
Starting from my working-but-fragile bash script, I made an Ansible ...
3
votes
2answers
492 views
What are best practices for implementing SSL on Jenkins?
One of the options is to configure SSL in NGinx and to put this in front of Jenkins. Are there any other options for securing Jenkins? I am looking for an answer that is focused on best practices that ...
10
votes
2answers
7k views
Git seems to recognize http.sslcainfo property from .gitconfig but ignores it on execution? SEC_E_UNTRUSTED_ROOT
all, I have a working certificates chain (testable with OpenSSL) but somehow I cannot manage to tell Git to load these certificates.
I get the same "untrusted root authority" error (...
17
votes
2answers
3k views
How do I include my internal CA certificate to validate SSL exchanges in Chef?
We do use an internal Certificate Authority to create server certificates in my company.
We also have to deal with a transparent proxy doing SSL interception (MITM).
I regularly encounter SSL ...
