New answers tagged

2 votes

Can Nginx translate TLS 1.0 to 1.3 for clients incompatible with TLS 1.3?

Short and Dirty Answer: Yes, you can, but you should retire such old equipment. Nginx doesn't care what's beyond it, even if it is a valid or invalid SSL certificate in the Default Configuration. ...
djdomi's user avatar
  • 2,007
0 votes
Accepted

ADFS - Cannot re-establish trust. Seems client certificate authentication not working. Probably cannot use TLS Client Authentication

So seems that ADFS is using something called SendTrustedIssuerList: Management of trusted issuers for client authentication and using AdfsTrustedDevices to trust adfs proxy server client ...
Janis Veinbergs's user avatar
0 votes
Accepted

Why is data exchanged between my two web apps using redirection with query parameters or auto-form-post cannot be trusted, even when using HTTPS?

You cannot trust any data passed from a client (potential attacker). Essentially, a redirect causes a client to change the server. Depending on the application, data may be carried over by the user. ...
Zac67's user avatar
  • 11.5k
0 votes

Installed SSL for domain, now getting connection reset error

In my case, I had to check the "Disable TLS 1.3 over TCP" field on the HTTPS site binding window in order to make it work. This is for Windows Server 2022. Link to the image since I don't ...
starboy98.1's user avatar
1 vote
Accepted

Cannot start SQL Server 2022 on a system with TLS 1.3 only

Accordingly, to MS - TLS 1.2 is required for starting up SQL Server satellite services. They recommend keeping enabled TLS 1.2 on your server. Please pay attention to this article: TLS 1.3 support - ...
Proxyma's user avatar
  • 36
1 vote

Nginx as reverse proxy for GitLab with SSL?

Better to follow the instructions at Configure a reverse proxy or load balancer SSL termination which are (in summmary, with additions from personal experience): Edit /etc/gitlab/gitlab.rb: ...
Orwellophile's user avatar
0 votes

Invalid response from .well-known/acme-challenge/<token>

In my case, I thought that since location/ .well-known/acme-challange/ came in the nginx.conf they were bound to the var/www/certbot, However, Certbot uses the URL http://example.com/.well-known/acme-...
Arani's user avatar
  • 338
2 votes
Accepted

Invalid response from .well-known/acme-challenge/<token> : 404 + nginx

Certbot uses the URL http://example.com/.well-known/acme-challenge/... to find its challenge/response file. Nginx uses the root directive to convert the URL into a file name by concatenating the root ...
Richard Smith's user avatar
0 votes

Local Server connection to internal Mail-Server and SSL

To be able to send mail you first need to make sure if you connect to the internal mail server on the smtp ports. Then you have either two choices: You could setup a mail server in a docker container ...
Guido's user avatar
  • 84
2 votes

How to disable ECDH key-reuse on IIS 10?

You can disable this via Registry Editor. Just go to HKLM\System\CurrentControlSet\Control\SecurityProviders\Schannel\KeyExchangeAlgorithms\ECDH create a value (DWORD (32-bit)) named EphemKeyReuseTime ...
Allum's user avatar
  • 21
1 vote

CFSSL to start with intermediate certificate

the command line should be as follows: cfssl serve -loglevel 1 -address 0.0.0.0 -port 8888 \ -ca-key intermediate_ca-key.pem -ca intermediate_ca.pem \ -config profiles.json -db-config db....
Marco's user avatar
  • 11
0 votes

MIXED CONTENT/CSP issue from (VPS) nginx reverse proxy with termination SSL and (HOME) nginx wordpress

fastcgi_cache For anyone (maybe that one guy in few years or more likely me in future) I enabled fastcgi_cache so the wordpress pages that are generated thru php are cached and fast delivered.... So ...
Va_ni_tas's user avatar

Top 50 recent answers are included