Answer from John Hanley is perfect and recommended for GCE VM instance.
However, since the OP is mentioning about connecting to a Cloud SQL instance from QGIS software, I would say we could not do it that way.
I would recommend a solution that I haven't try but fairly possible.
We will only allow private IP connection to the Cloud SQL instance from the ...
Install the Google Cloud SDK. The CLI gcloud can set up an IAP TCP tunnel that uses the instance name. Then you can connect with any software that uses TCP/IP addressing.
gcloud compute start-iap-tunnel INSTANCE_NAME INSTANCE_PORT --local-host-port=localhost:LOCAL_PORT
For more information consult this document:
Using Cloud IAP for TCP forwarding
Had to panic before finding the answer. 5 days of searching and here's my findings in case anyone else finds this question and needs help.
Generate your private key (the below uses PowerShell)
Generate your Public certificate
Convert your public cert and private key in to a PEM format
Upload your public certificate in to the application ...
SSL keys infrastructure is meant to prevent man-in-the-middle (MITM) attacks. Suppose you're a bank. A MITM can intercept traffic between you and your customer, impersonate you for your customer and impersonate your customer for you.
To do this, this man-in-the-middle will have to generate a secret key and encrypt the traffic between your customer and you ...
After given permission as sudo chmod -R 777 still if you are getting above error then run nginx -t as root user,if you didn't get any error then run sudo nginx -t as any user in server(the user who have sudo privilages) this trick worked for me
If you just want to see the SANs, grep DNS: is the obvious solution.
If you want to have a cleaner list to process further, you can use this Perl regex to extract just the names : @names=/\sDNS:([^\s,]+)/g
true | openssl s_client -connect example.com:443 2>/dev/null \
| openssl x509 -noout -text \
| perl -l -0777 -ne '@names=/\bDNS:([^\s,]+...