Configuring HTTPS Certificates for Nginx

Principles and Benefits of HTTPS Reasons for Using HTTPS HTTP lacks security measures: Data can be intercepted and read by third parties Content may be altered or hijacked during transmission How HTTPS Works HTTPS secures data through encryption and authentication: Symmetric encrypsion uses identical keys for encryption and decryption Asymme ...

Posted on Wed, 09 Sep 2026 16:39:30 +0000 by chrisleon

Generating Self-Signed Certificates on Windows: Seven Practical Approaches

When setting up search infrastructure like Easysearch on Windows, developers often need TLS certificates for secure inter-node communication or HTTPS endpoints—even in non-production environments. Since public CAs (e.g., Let’s Encrypt) require domain control and internet-facing validation, self-signed certificates are ideal for local developmen ...

Posted on Fri, 04 Sep 2026 16:43:15 +0000 by tenaki

Generating Self-Signed SSL Certificates and Private Keys with OpenSSL on Linux

Core Cryptographic File Types TLS/SSL deployments rely on three distinct artifact categories: Private Key: Typically RSA-encoded binary data used for asymmetric decryption and handshake authentication. Certificate Signing Request (CSR): A structured payload bundling your public key with identity attributes, prepared for third-party validation. ...

Posted on Thu, 03 Sep 2026 16:18:37 +0000 by rayner75

Rotating Expired etcd TLS Certificates in a Kubernetes Cluster

When etcd TLS certificates expire, the Kubernetes control plane becomes unstable—API server failures, kubelet connection drops, and cluster-wide unresponsiveness commonly follow. This guide outlines a safe, coordinated procedure to renew etcd’s certificate authority (CA) and member certificates across a multi-node etcd cluster without data loss ...

Posted on Fri, 21 Aug 2026 16:43:17 +0000 by TimUSA

Example of a Cross-Platform CMake Project Structure

Directory Structure MyApp/ ├── CMakeLists.txt ├── cmake/ │ ├── openssl.cmake │ ├── zlib.cmake │ └── utils.cmake └── src/ ├── CMakeLists.txt └── main.cpp Top-Level CMakeLists.txt The main CMake file includes modular scripts and sets up imported targets for third-party dependencies. cmake_minimum_required(VERSION 3.20) pro ...

Posted on Fri, 21 Aug 2026 16:10:15 +0000 by nawal

Implementing TCP Mutual Authentication with OpenSSL

How OpenSSL Enables Secure TCP Communication Secure communication over TCP using OpenSSL involves augmenting the standard TCP handshake with a cryptographic authentication process. The standard TCP three-way handshake establishes the basic connection, while OpenSSL's TLS/SSL protocol adds a mutual authentication handshake to exchange encryption ...

Posted on Wed, 12 Aug 2026 16:03:35 +0000 by holly30

Building a Custom Public Key Infrastructure with OpenSSL

PKI Architecture Fundamentals A self-managed Public Key Infrastructure relies on a hierarchical trust model consisting of three primary tiers: Root Certificate Authority: The anchor of trust. Its private key never leaves the secure hardware store and is used exclusively to sign intermediate certificates. Intermediate Certificate Authority: A d ...

Posted on Tue, 30 Jun 2026 17:33:41 +0000 by ldb358

Resolving OpenSSL Configuration Errors in PHP on Windows

Identifying the OpenSSL Extension Failure Developers utilizing the PHP OpenSSL extension on Windows platforms often encounter runtime failures when attempting to generate Certificate Signing Requests (CSRs) or export X.509 certificates. These exceptions typically manifest as follows: openssl_csr_sign(): cannot get CSR from parameter 1 in opens ...

Posted on Fri, 15 May 2026 01:51:14 +0000 by nishith82

OpenSSL Command Reference: Common Operations and Examples

Frequently Encountered Issues Listing Supported Cipher Suites # View all ciphers supported by OpenSSL openssl ciphers -V | column -t Certificate Chain Strutcure -----BEGIN CERTIFICATE----- Website certificate -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- Intermediate CA certificate -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- ...

Posted on Tue, 12 May 2026 16:36:46 +0000 by digitalgod

Implementing Mutual TLS Authentication with Nginx

Generating Certificates To establish mutual authentication, you must first create a Certificate Authority (CA) and sign your server and client certificates. Use the following commands to generate the necessary keys and certifictaes: # Generate the root CA private key openssl genrsa -out root_authority.key 4096 # Generate the root CA self-signed ...

Posted on Thu, 07 May 2026 10:53:29 +0000 by jrodd32