New answers tagged ssl
2
votes
Can Nginx translate TLS 1.0 to 1.3 for clients incompatible with TLS 1.3?
Short and Dirty Answer:
Yes, you can, but you should retire such old equipment. Nginx doesn't care what's beyond it, even if it is a valid or invalid SSL certificate in the Default Configuration.
...
0
votes
Accepted
ADFS - Cannot re-establish trust. Seems client certificate authentication not working. Probably cannot use TLS Client Authentication
So seems that ADFS is using something called
SendTrustedIssuerList: Management of trusted issuers for client authentication and using AdfsTrustedDevices to trust adfs proxy server client ...
0
votes
Accepted
Why is data exchanged between my two web apps using redirection with query parameters or auto-form-post cannot be trusted, even when using HTTPS?
You cannot trust any data passed from a client (potential attacker).
Essentially, a redirect causes a client to change the server. Depending on the application, data may be carried over by the user.
...
0
votes
Installed SSL for domain, now getting connection reset error
In my case, I had to check the "Disable TLS 1.3 over TCP" field on the HTTPS site binding window in order to make it work. This is for Windows Server 2022.
Link to the image since I don't ...
1
vote
Accepted
Cannot start SQL Server 2022 on a system with TLS 1.3 only
Accordingly, to MS - TLS 1.2 is required for starting up SQL Server satellite services. They recommend keeping enabled TLS 1.2 on your server.
Please pay attention to this article:
TLS 1.3 support - ...
1
vote
Nginx as reverse proxy for GitLab with SSL?
Better to follow the instructions at Configure a reverse proxy or load balancer SSL termination which are (in summmary, with additions from personal experience):
Edit /etc/gitlab/gitlab.rb:
...
0
votes
Invalid response from .well-known/acme-challenge/<token>
In my case, I thought that since location/ .well-known/acme-challange/ came in the nginx.conf they were bound to the var/www/certbot, However, Certbot uses the URL http://example.com/.well-known/acme-...
2
votes
Accepted
Invalid response from .well-known/acme-challenge/<token> : 404 + nginx
Certbot uses the URL http://example.com/.well-known/acme-challenge/... to find its challenge/response file.
Nginx uses the root directive to convert the URL into a file name by concatenating the root ...
0
votes
Local Server connection to internal Mail-Server and SSL
To be able to send mail you first need to make sure if you connect to the internal mail server on the smtp ports.
Then you have either two choices:
You could setup a mail server in a docker container ...
2
votes
How to disable ECDH key-reuse on IIS 10?
You can disable this via Registry Editor.
Just go to HKLM\System\CurrentControlSet\Control\SecurityProviders\Schannel\KeyExchangeAlgorithms\ECDH create a value (DWORD (32-bit)) named EphemKeyReuseTime ...
1
vote
CFSSL to start with intermediate certificate
the command line should be as follows:
cfssl serve -loglevel 1 -address 0.0.0.0 -port 8888 \
-ca-key intermediate_ca-key.pem -ca intermediate_ca.pem \
-config profiles.json
-db-config db....
0
votes
MIXED CONTENT/CSP issue from (VPS) nginx reverse proxy with termination SSL and (HOME) nginx wordpress
fastcgi_cache
For anyone (maybe that one guy in few years or more likely me in future) I enabled fastcgi_cache so the wordpress pages that are generated thru php are cached and fast delivered....
So ...
Top 50 recent answers are included
Related Tags
ssl × 8110ssl-certificate × 1429
nginx × 1227
apache-2.2 × 1024
https × 979
openssl × 605
apache-2.4 × 436
certificate × 404
iis × 384
linux × 335
ubuntu × 298
security × 284
lets-encrypt × 273
reverse-proxy × 242
virtualhost × 216
postfix × 201
amazon-web-services × 193
haproxy × 192
tomcat × 187
windows × 184
proxy × 169
redirect × 166
centos × 165
certificate-authority × 153
domain-name-system × 150