ssl

create-react-app | Is it possible to serve a file from backend instead of serving index.html when a browser connect to app

淺唱寂寞╮ 提交于 2021-02-11 15:05:15
问题 I have been trying to enable SSL on my MERN heroku-deployed app. I have been stuck at this step far more than necessary: I am following this tutorial to set-up SSL certificate on my website. After, generating the certificate using this command locally: sudo certbot certonly --manual I was asked to do this by the terminal: Create a file containing just this data: dC9Ry5Ps_qgkOheuWnxCXFobim8vshqMqbDC9FQS4ic.noFTXhkC3HFnZ-RC9djrM6FpWGRy2AFSB17xz59apDA And make it available on your web server at

Use both Certificate and UserName for client authentication in WCF with basicHttpsBinding for passing reverse proxy authentication

随声附和 提交于 2021-02-11 14:58:11
问题 I'm trying to connect to a Web Service, which is located in rather non-standard environment. Before IIS server with a Web Service I have a reverse proxy server, which requires a client certificate to authenticate the connection. After that the Web Service itself requires additional UserName authentication. Moreover Web Service uses basicHttpsBinding with streamed transfer mode, as sending of quite large binary files is required (up to 1GB). The problem is that I can't get it working on the

FCM and self-certificate issue (reopen)

主宰稳场 提交于 2021-02-11 14:49:13
问题 I'm using FCM to send a notification, my code works well when I use HTTP. The issue happened when I enable SSL using self-certificate, I cannot call subscribe/unsubscribe to/from a topic on FCM with error UNKOWN code. Any idea this issues please help I'm trying to debug so I can get access-token but cannot call sub/unsubscribe This is the request to get access-token 2020-12-02T16:06:24.192Z|2|INFO|fcm-demo|c5230eb4f07f582a,9b72559f0d3b8e39,true,|9|task-2|com.google.api.client.http

SSLHandshakeException for Google Recaptcha

我的未来我决定 提交于 2021-02-11 14:19:41
问题 I am using a Java 1.7 application running on a JBoss7.0.2.Final server. I created a REST endpoint to handle user login. This works fine, but when I call Google's recaptcha (v2) url (https://www.google.com/recaptcha/api/siteverify), I get the following error: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure This was working with no errors yesterday, and there have been no changes on our server, so I suspect something might have changed on googles end. Question Does

Tomcat 9.x.x Client Authentication using X.509 Certificates

爷,独闯天下 提交于 2021-02-11 14:17:03
问题 I’m using Tomcat 9.0.19 and trying to enable X.509 cert.-based client authentication (AKA I&A) for a particular Web application. In summary, the Tomcat works for an application that has basic I&A enabled over one-way TLS. When accessing the Web application that has certificate-based I&A, Tomcat does not seem to request a client certificate as part of the Server Hello message, prior to sending Server Hello Done and it later fails the authentication check: 02-Jan-2020 13:00:40.371 FINE [https

Jenkins with SSL over Docker

爷,独闯天下 提交于 2021-02-11 14:13:35
问题 I am trying to set up a Jenkins with SSL over Docker sudo docker run --name trial -d -p 443:8443 -p 50003:50000 -v /net/host/fs0/temp:/var/jenkins_home -httpPort=-1 -httpsPort=8443 -httpsKeyStore=/local/home/jenkins_keystore.jks -httpsKeyStorePassword=<password> --restart unless-stopped <ImageID> The container is created but I do not find the jenkins in my browser with https://< hostname >:443 . 回答1: You have the wrong order in your flags. All application-related flags need to be set after

how to verify nginx SSL that is forwarding to another nginx that also needs verifying (jitsi)

喜你入骨 提交于 2021-02-11 13:58:41
问题 I am trying to have a subdomain go to a Jitsi Video Chat service on a VM I'm running on my local homelab by way of an nginx reverse proxy. Currently this is how I'm trying to achieve this: I have my subdomain CNAME'd and pointed to a dynamic DNS address provided by NetGear. It sends traffic to my router which has ports 80, 443, and 81 forwarding to my nginx reverse proxy VM. I want the nginx reverse proxy VM to forward to the Jitsi VM (which is also running nginx). I'm doing a simple proxy

how to verify nginx SSL that is forwarding to another nginx that also needs verifying (jitsi)

不羁岁月 提交于 2021-02-11 13:57:46
问题 I am trying to have a subdomain go to a Jitsi Video Chat service on a VM I'm running on my local homelab by way of an nginx reverse proxy. Currently this is how I'm trying to achieve this: I have my subdomain CNAME'd and pointed to a dynamic DNS address provided by NetGear. It sends traffic to my router which has ports 80, 443, and 81 forwarding to my nginx reverse proxy VM. I want the nginx reverse proxy VM to forward to the Jitsi VM (which is also running nginx). I'm doing a simple proxy

android Trust anchor for certification path not found. My backend have not self assigned certificate. What to do?

怎甘沉沦 提交于 2021-02-11 13:36:41
问题 My backend server can be accessed only by https. The certificate was bought/configured from a certificate authority (CA). When I am trying to access my API through retrofit, I am getting error W/System.err: javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. The certificate which is configured on backend, I can not just put into my app. Then everyone using my app, can hack into and steal it. What to do? 回答1:

System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel

自古美人都是妖i 提交于 2021-02-11 13:36:08
问题 I have a windows service in a VM. It is calling an API hosted in another server. When I call that api from my windows service, it is giving me error saying : System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure. Now I know that if I add this line before calling the api, it will work