Deploying TLS Termination via Nginx Reverse Proxy for Apache Tomcat

Environment and Nginx Installation Assume a CentOS 7 environment targeting Nginx 1.18+. Begin by configuring the official package repository and installing the binary. Ensure the http_ssl_module is compiled into the binary, as it is mandatory for TLS termination. # Install repository management utility yum install -y yum-utils # Create reposit ...

Posted on Thu, 06 Aug 2026 16:53:03 +0000 by zenon

Automating SSL Certificate Issuance on Windows with ACME Clients

Managing SSL certificates manually on Windows can be tedious, especially when dealing with DNS challenges and frequent renewals. Since Certbot ceased native Windows support and acme.sh requires a Bash environment, Windows administrators need reliable, native alternatives for managing Let's Encrypt certificates. Using Posh-ACME for Certificate A ...

Posted on Thu, 06 Aug 2026 16:43:28 +0000 by allspiritseve

X.509 Certificates: Structure and Format

Certificate Purpose Public key certificates are fundamental components of PKI (Public Key Infrastructure), forming the security foundation of modern internet communication. When vulnerabilities emerge in these protocols, the impact on global internet security can be severe. For this discussion, we'll simplify the CA (Certificate Authority) conc ...

Posted on Sat, 25 Jul 2026 16:04:31 +0000 by volomike

Generating Free SSL Certificates Using acme.sh with ACME Protocol

Installation Process To install acme.sh: wget -O - https://get.acme.sh | sh -s email=admin@domain.com source ~/.bash_profile The installation performs these actions: Creates a directory at ~/.acme.sh/ Sets up a shell alias for easy access Configures a cron job for automatic certificate renewal Certificate Authority Selection Switch between d ...

Posted on Sun, 05 Jul 2026 16:40:33 +0000 by nipsilanti

Fixing SQL Server JDBC Connection SSL Certificate Errors

When connecting to a SQL Server database from a Java application using JDBC, you might encounter an SSL/TLS handshake failure. This typically manifests as an error indicating the driver cannot establish a secure connection. The root cause is often that the SQL Server's SSL certificate is not trusted by the Java Virtual Machine (JVM). This can h ...

Posted on Thu, 18 Jun 2026 18:22:21 +0000 by nerya

Connecting Spring Boot to Elasticsearch via HTTPS with Self-Signed Certificates

Before diving into the code, ensure your Elasticsearch server is running. Open a terminal and execute the elasticsearch command to start the server. Understanding the Two REST Client Types Elasticsearch provides two distinct REST client implementations: High-Level REST Client (RestHighLevelClient): This wrapper handles serialization and deseria ...

Posted on Wed, 17 Jun 2026 17:30:22 +0000 by priya_amb

Handling SSL Certificate Errors in Chrome WebDriver

OverviewWhen automating Chrome browsers using Selenium, developers frequently encounter SSL handshake failures. This typically occurs when the target website possesses an invalid, expired, or untrusted security certificate, or when testing against internal environments with self-signed certificates.The IssueThe browser instance fails to load th ...

Posted on Thu, 28 May 2026 18:58:05 +0000 by Jaguar83

Sending Email with Python via SMTP and SSL

import smtplib from email.mime.text import MIMEText sender = 'alice@example.com' # QQ mailbox address auth_code = 'your-16-char-auth-code' # generated in QQ Mail settings recipients = ['bob@example.com', 'carol@example.com'] title = 'Test message from Python' body = ''' Hello, This is a plain-text message sent with smtplib. Regards, ...

Posted on Mon, 25 May 2026 18:51:37 +0000 by joquius

Implementing Mutual TLS Authentication with Nginx

Generating Certificates To establish mutual authentication, you must first create a Certificate Authority (CA) and sign your server and client certificates. Use the following commands to generate the necessary keys and certifictaes: # Generate the root CA private key openssl genrsa -out root_authority.key 4096 # Generate the root CA self-signed ...

Posted on Thu, 07 May 2026 10:53:29 +0000 by jrodd32