New answers tagged

0 votes

MIXED CONTENT/CSP issue from (VPS) nginx reverse proxy with termination SSL and (HOME) nginx wordpress

fastcgi_cache For anyone (maybe that one guy in few years or more likely me in future) I enabled fastcgi_cache so the wordpress pages that are generated thru php are cached and fast delivered.... So ...
Va_ni_tas's user avatar
0 votes

Old ssl cert still showing up in browser after installing new

This command worked for me. I was struggling from 3-4 days to resolve the issue of Old ssl cert still showing up in browser after installing new. netsh http delete sslcert ipport={server private-ip}:...
Nikhil Kumar's user avatar
0 votes

Nginx request port

@wilee wilee's answer is worked My Nginx service listens on port 80 in the Docker container. When I run the Nginx container, I map port 8000 to port 80. when i use configuration of below error_page ...
kingjh's user avatar
  • 1
1 vote

Unable to enable specific cipher suites in Nginx

Got my answer in comments and from the same user's answer on Stack Overflow to a similar question: The static-ECDH suites were partly implemented in late 0.9.x and fully in 1.0.0-2, although the ones ...
0 votes

Can Tomcat reload its SSL certificate without being restarted?

2024: You can now enable a built-in TLSCertificateReloadListener that monitors the expiration dates of TLS certificates and trigger automatic reloading of the TLS configuration a set number of days ...
schnatterer's user avatar
0 votes

When does this SSL certificate expire?

Your ssl labs output is showing the whole chain, the root certificate which was used to issue the certificate and the certificate itself. This is how the trust chain of a certificate works. So look at ...
Turdie's user avatar
  • 2,534
3 votes
Accepted

When does this SSL certificate expire?

What you have here is a certificate chain, which: starts with the server certificate continues with intermediate certificates until you reach a certificate which is recognised as an authorised CA ...
jcaron's user avatar
  • 1,095
8 votes

When does this SSL certificate expire?

What I can see here in the screenshot is an X.509 cert chain for a domain bungalowsoftware.com. Typically the server during TLS handshake will send the leaf cert and intermediate CA certs - between 1 ...
ipastusi's user avatar
  • 209
7 votes

When does this SSL certificate expire?

That certificate expires on 26 April 2024. The other certificates are the intermediate CAs E1 (Let's encrypt) and ISRG Root X2, and the root CA ISRG Root X1 trust anchor bundled in the certificate ...
Zac67's user avatar
  • 11.4k
0 votes

Cannot connect with latest Edge browser to Windows Server 2012 R2 web server

Use IIS Crypto to enable the proper cipher suites https://www.nartac.com/Products/IISCrypto It looks like these cipher suites are supported https://learn.microsoft.com/en-us/windows/win32/secauthn/tls-...
Turdie's user avatar
  • 2,534
0 votes
Accepted

Postfix TLS with Letsencrypt configuration

Try setting smtp_pix_workarounds=delay_dotcrlf. The default setting for smtp_pix_workarounds includes disable_esmtp which disables EHLO so your SMTP client won't receive STARTTLS response.
AlexD's user avatar
  • 9,849
0 votes

Postfix TLS with Letsencrypt configuration

Having smtp_tls_security_level = encrypt means that you require client cert validation so best practice is to leave it on may smtp_tls_protocols = !SSLv2, !SSLv3 smtp_tls_auth_only = yes # Enable ...
Turdie's user avatar
  • 2,534
2 votes

Old ssl cert still showing up in browser after installing new

The question actually gave me a clue to the required fixed. When using netsh http show sslcert it actually showed entries for both 0.0.0.0:443 and {machine-ip}:443. Hunting around (e.g. in Windows ...
MikeBeaton's user avatar
0 votes

How to allow requests from forwarded domain to DDNS go into sub folders?

It sounds like what you have configured at your provider is their http redirect service. What you probably should have configured is a dns CNAME record. The latter allows you to host your own website ...
MZawg's user avatar
  • 101
0 votes

Apache fails to restart after disabling SSL mod

The cause of the problem is clearly shown in the error message: Feb 06 15:04:03 user apachectl[26199]: Invalid command 'SSLCipherSuite', perhaps misspelled or defined by a module not included in the ...
Steffen Ullrich's user avatar
0 votes

VPS https and redirect for domain

Uh... I am a little rusty in Apache, but I believe this is the part that garbles up: RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L] ^ ...
Lasse Michael Mølgaard's user avatar
1 vote
Accepted

Apache says certificate not valid for 192.168.0.44, but it is valid for 192.168.0.44

Your alt names is incorrect. It should be [ alt_names ] IP.1 = your_ip_address By the way a certificate is never created for an ip adress and will never be trusted. You can create a certificate based ...
Turdie's user avatar
  • 2,534
0 votes

Unauthorized error when trying to get a ssl certificate with certbot

Your server block is incorrect, for letsencrypt it should look like this <VirtualHost *:80> ServerName mydom.tld Alias /.well-known/acme-challenge/ /var/www/letsencrypt/.well-known/acme-...
Turdie's user avatar
  • 2,534

Top 50 recent answers are included