I accidentally started a rekey for an SSL certificate, and the previous certificate is scheduled to be revoked after the 72-hour replacement window. We have too many systems…
I'm configuring Traefik through Docker Compose. The main domain is recognized, but the wildcard SAN is not. I've tried quoting the command values in several ways without success:…
I'm configuring Traefik through Docker Compose and can set the main TLS domain successfully, but the wildcard subject alternative name is not being recognized. I've tried different quoting…
I work for a university system with several campuses, all of which rely on an old custom backend application that has not been updated in roughly 10 years.…
I work for a university system with several campuses, all of which use an old custom backend application that has not been updated in about 10 years. The…
I'm developing on Windows 11 and can't reach the public NuGet API endpoint at https://api.nuget.org/v3/index.json. Opening it in a browser produces ERR_SSL_VERSION_OR_CIPHER_MISMATCH instead of JSON or an HTTP…
I'm developing on Windows 11 and can't reach NuGet's public API endpoint. Opening https://api.nuget.org/v3/index.json in a browser returns ERR_SSL_VERSION_OR_CIPHER_MISMATCH instead of JSON or an HTTP error. SSL Labs…
I'm configuring Cilium Gateway API to expose Argo CD over HTTPS and want encryption on both hops: the client-to-gateway connection and the gateway-to-Argo CD Service connection. TLS passthrough…
I've been working on a .NET 8 web app hosted on a Windows App Service plan, using the default configurations provided by Microsoft. Recently, it started having issues…
Hey folks! I wanted to check in on how everyone's getting ready for the upcoming deprecation of RC4 in Kerberos authentication. This change is coming in a few…
I'm new to Kubernetes and I'm encountering some issues with Traefik and OpenBao UI. I've set up self-signed certificates using cert-manager and distributed them via trust-manager. All OpenBao…
I'm deploying RabbitMQ within our AWS VPC and want to keep it private to avoid extra costs associated with public load balancers. I can set it up either…
I'm transitioning from ingress-nginx to Envoy Gateway and I'm facing a challenge. My previous setup allowed me to use fake certificates, and if I didn't specify TLS, it…
I'm currently managing a Kubernetes cluster where we use a combination of certificates from cert-manager and some manually managed TLS Secrets, including older vendor certificates. While cert-manager does…
I'm working with an AKS cluster that uses nginx ingress and cert-manager for managing TLS certificates. Currently, everything is functioning great with TLS when using ingress. However, some…
I'm a total beginner trying to set up a connection to Amazon DocumentDB and I have a question. I found this AWS document that has an example for…
Hey everyone, I recently experienced a significant downtime on my mail server, which I've been managing as a student for years. It runs Postfix for SMTP and Dovecot…
We've been managing a fleet of Lenovo Legion laptops for over 20 months without issues, but now every device has started failing. The problems include major lags in…
Hey everyone! I'm facing an issue with resetting the default cipher suites after making changes to the Group Policy Object (GPO) that controls the cipher suite order. It…
I'm trying to set up end-to-end encryption for my AWS EKS cluster. I'm considering using the AWS/k8s Gateway API Controller along with VPC Lattice to manage inbound connections,…