Unable to make https request from k8s pod
John asked: I have a fresh kubernetes cluster (version 1.18) deployed using Rancher on a fresh Ubuntu Server 20.04. The problem I’m facing is that each https request made from …
Prompt user for TLS client certificate after already visiting the site?
Cigarette Smoking Man asked: Is there a way to re-ask for a client TLS certificate after the user has already (recently) been on the site – without needing to clear …
SSL handshake fails on Mac
Roger Johansson asked: Some background. I’m trying to connect to Confluents Kafka Clound using the .NET driver, internally that uses the native RdKafka machinery. From my machine, the connection fails …
Keeping SSL connection active between reverse proxy and backend server
Bruno F. Fontes asked: I have a back-end server (Apache) that is too far from most of our users, so our idea is to implement a closer reverse proxy that …
Some pages return "502 Bad Gateway" error
SoftTimur asked: I just realized that certain links of my website lead to "502 Bad Gateway" error. For example, https://v2a.10studio.tech/10studio/auth/google, https://v2a.10studio.tech/auth/google, https://v2a.10studio.tech/10studio/auth/microsoft, https://v2a.10studio.tech/auth/microsoft. I’m pretty sure that those links worked …
Nginx post-ssl-termination debug mirror
Michael Altfield asked: How can I tell nginx to output all incoming traffic for a given server{} to a specific/additional/redundant location after decrypting it (like port mirroring on routers) so …
Does smtpd_tls_CApath have precedence over smtpd_tls_CAfile or vice versa in postfix?
Bruno asked: I am configuring a postfix server (Version 3.3.1 on CentOS 8) If I configure both, smtpd_tls_CAfile and smtpd_tls_CApath, will postfix load all the certificates or will it choose …
vsftp has a bug with Fedora 32 – how do I report it: 500 OOPS: SSL: cannot load RSA private key vsftpd
Richard T asked: Just to be clear, this is as of Fedora 32, and vsftpd-3.0.3-36.fc32.x86_64 for vsftpd. This is NOT the same problem as previously was reported here, but it …
NGINX enable only TLS v1.2
timbo asked: I’m running NGINX 1.14.0 on an Ubuntu 18.04.02 LTS system with OpenSSL 1.1.1. To date, we’ve used TLSv1.3 only for our browser support, but we now have a …
TLS keys out of sync? Why does my VPN connection timeout after exactly an hour?
Bob Ortiz asked: The setup is quite simple. For my home server I use: A server with Pfsense 2.3.4-RELEASE (latest) as OS / firewall An OpenVPN setup (the integrated Pfsense …