TLS passthrough on a layer 7 load balancer
John asked: Trying to understand some fundamentals. If I want a load balancer for the benefits of caching and more intelligent load balancing, I see that I should probably consider …
On a single machine, re-use SSL certificate between services, or generate multiple certificates?
wzzrd asked: Assume a machine has multiple management UIs, like for example Cockpit and Monit. Both can do SSL. Do best practices dictate using distinct certificates for either service? Or …
How does nginx verify certificates (proxy_ssl_verify)?
fiedl asked: Consider nginx’s parameters proxy_ssl_verify and proxy_ssl_trusted_certificate that are used to secure the communication to an upstream server. # downstream server: nginx.conf stream { server { # … proxy_ssl …
NGINX SSL Certificate based on URI
zackchadwick asked: I have multiple domain names, currently all of them are on a single SSL certificate through Lets Encrypt. However I would like to break them off and get …
My app became unreachable after some time
idi begaj asked: I have an Vue.js app running on Linode at strks.rs using Nginx I am running it with nginx and I can not find any erros, nginx synatax …
TLS Cert for unknown IP (shippable software)
Stephen Collins asked: I am writing a distributed application that will be sold to multiple customers and hosted on premise. This application operates as a distributed system where many of …
Setup in nginx will lead to security warning in Google Chrome
Data Mastery asked: Since 2 days, our users get the following warning when trying to login on our service: English version: The information you’re about to submit is not secure …
Disable Postfix server TLS for specific clients
Adrien Clerc asked: I encountered troubles with some bad server trying to send me some emails that I desesparetely need. I can disable TLS globally using smtpd_tls_security_level, but it’s really …
Getting postfix to relay SMTP/SSL/TLS to Charter/Spectrum
Nstevens asked: I’m running Postfix on Debian as an MX for a small LAN and trying to get SMTPS working with mobile.charter.net over port 587. I followed a few links …
Why does Apache return a 400 "bad request" error when connecting to it with "openssl s_client" even though it sends TLS SNI
Lionel Elie Mamane asked: I have a website, accessible with HTTP over TLS. It is multi-homed, so there are several A DNS entries for the hostname. Additionally, there are several …