Configuring HTTPS Certificates for Nginx
Principles and Benefits of HTTPS
Reasons for Using HTTPS
HTTP lacks security measures:
Data can be intercepted and read by third parties
Content may be altered or hijacked during transmission
How HTTPS Works
HTTPS secures data through encryption and authentication:
Symmetric encrypsion uses identical keys for encryption and decryption
Asymme ...
Posted on Wed, 09 Sep 2026 16:39:30 +0000 by chrisleon
Generating Self-Signed Certificates on Windows: Seven Practical Approaches
When setting up search infrastructure like Easysearch on Windows, developers often need TLS certificates for secure inter-node communication or HTTPS endpoints—even in non-production environments. Since public CAs (e.g., Let’s Encrypt) require domain control and internet-facing validation, self-signed certificates are ideal for local developmen ...
Posted on Fri, 04 Sep 2026 16:43:15 +0000 by tenaki
Generating Self-Signed SSL Certificates and Private Keys with OpenSSL on Linux
Core Cryptographic File Types
TLS/SSL deployments rely on three distinct artifact categories:
Private Key: Typically RSA-encoded binary data used for asymmetric decryption and handshake authentication.
Certificate Signing Request (CSR): A structured payload bundling your public key with identity attributes, prepared for third-party validation. ...
Posted on Thu, 03 Sep 2026 16:18:37 +0000 by rayner75
Rotating Expired etcd TLS Certificates in a Kubernetes Cluster
When etcd TLS certificates expire, the Kubernetes control plane becomes unstable—API server failures, kubelet connection drops, and cluster-wide unresponsiveness commonly follow. This guide outlines a safe, coordinated procedure to renew etcd’s certificate authority (CA) and member certificates across a multi-node etcd cluster without data loss ...
Posted on Fri, 21 Aug 2026 16:43:17 +0000 by TimUSA
Example of a Cross-Platform CMake Project Structure
Directory Structure
MyApp/
├── CMakeLists.txt
├── cmake/
│ ├── openssl.cmake
│ ├── zlib.cmake
│ └── utils.cmake
└── src/
├── CMakeLists.txt
└── main.cpp
Top-Level CMakeLists.txt
The main CMake file includes modular scripts and sets up imported targets for third-party dependencies.
cmake_minimum_required(VERSION 3.20)
pro ...
Posted on Fri, 21 Aug 2026 16:10:15 +0000 by nawal
Implementing TCP Mutual Authentication with OpenSSL
How OpenSSL Enables Secure TCP Communication
Secure communication over TCP using OpenSSL involves augmenting the standard TCP handshake with a cryptographic authentication process. The standard TCP three-way handshake establishes the basic connection, while OpenSSL's TLS/SSL protocol adds a mutual authentication handshake to exchange encryption ...
Posted on Wed, 12 Aug 2026 16:03:35 +0000 by holly30
Building a Custom Public Key Infrastructure with OpenSSL
PKI Architecture Fundamentals
A self-managed Public Key Infrastructure relies on a hierarchical trust model consisting of three primary tiers:
Root Certificate Authority: The anchor of trust. Its private key never leaves the secure hardware store and is used exclusively to sign intermediate certificates.
Intermediate Certificate Authority: A d ...
Posted on Tue, 30 Jun 2026 17:33:41 +0000 by ldb358
Resolving OpenSSL Configuration Errors in PHP on Windows
Identifying the OpenSSL Extension Failure
Developers utilizing the PHP OpenSSL extension on Windows platforms often encounter runtime failures when attempting to generate Certificate Signing Requests (CSRs) or export X.509 certificates. These exceptions typically manifest as follows:
openssl_csr_sign(): cannot get CSR from parameter 1 in
opens ...
Posted on Fri, 15 May 2026 01:51:14 +0000 by nishith82
OpenSSL Command Reference: Common Operations and Examples
Frequently Encountered Issues
Listing Supported Cipher Suites
# View all ciphers supported by OpenSSL
openssl ciphers -V | column -t
Certificate Chain Strutcure
-----BEGIN CERTIFICATE-----
Website certificate
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Intermediate CA certificate
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE----- ...
Posted on Tue, 12 May 2026 16:36:46 +0000 by digitalgod
Implementing Mutual TLS Authentication with Nginx
Generating Certificates
To establish mutual authentication, you must first create a Certificate Authority (CA) and sign your server and client certificates. Use the following commands to generate the necessary keys and certifictaes:
# Generate the root CA private key
openssl genrsa -out root_authority.key 4096
# Generate the root CA self-signed ...
Posted on Thu, 07 May 2026 10:53:29 +0000 by jrodd32