#ssl — Public Fediverse posts

G-Bus Compressor by Studio9 Plugins 🎛️
SSL 4000 G-Bus emulation, stereo RMS, sidechain HPF, drive ctrl, 2x OS

💻 Mac/Win/Linux (VST3/AU)
🎁 FREE https://recordingstudio9.com/g-bus-compressor/

More freeware 👉 https://linktr.ee/legalvst

#freeplugin #buscompressor #SSL #mastering #audioplugin

G-Bus Compressor by Studio9 Plugins 🎛️
SSL 4000 G-Bus emulation, stereo RMS, sidechain HPF, drive ctrl, 2x OS

💻 Mac/Win/Linux (VST3/AU)
🎁 FREE https://recordingstudio9.com/g-bus-compressor/

More freeware 👉 https://linktr.ee/legalvst

#freeplugin #buscompressor #SSL #mastering #audioplugin

[SSL: CERTIFICATE_VERIFY_FAILED] in Gajim Flatpak on Ubuntu when using local CAs (like mkcert)?

The sandbox can't see your host CA. Fix it by mapping the host certificate bundle into the container:

flatpak override --user --filesystem=host-etc:ro --env=SSL_CERT_FILE=/run/host/etc/ssl/certs/ca-certificates.crt org.gajim.Gajim

Restart Gajim to apply!

#Gajim #Linux #Ubuntu #Flatpak #mkcert #XMPP #SSL #OpenSSL
@prosodyim

#Linux #SysAdmin #HomeLab

Wondering how many homelabbers bother with #SSL certificates for local network stuff. I have tried so many times over the years to figure out how to do this and I can never seem to get them to work. I feel like every guide I find is always missing some part or something that I just can't sort out.

Do you use self-signed certs or a local certificate authority on your local network?

#Linux #SysAdmin #HomeLab

Wondering how many homelabbers bother with #SSL certificates for local network stuff. I have tried so many times over the years to figure out how to do this and I can never seem to get them to work. I feel like every guide I find is always missing some part or something that I just can't sort out.

Do you use self-signed certs or a local certificate authority on your local network?

Как злоумышленник за несколько шагов перехватит ваши данные

Привет, Хабр. Статья является напоминанием как уязвимы ваши личные данные при несоблюдении базовых правил цифровой гигиены. Материал создан исключительно в учебных целях, для специалистов по информационной безопасности и для пользователей, которые хотят более углубленно понимать, как защитить свои данные от утечек. Использование данных методов против других лиц без согласия — уголовно наказуемо (ст. 272 УК РФ). Речь пойдет о том, что происходит, когда вы переходите по ссылке, минуя предупреждения браузера о "Небезопасном соединения", или устанавливаете в систему корневые сертификаты, полученные из сомнительных источников.

https://habr.com/ru/articles/1068198/

#mitm #tls #ssl #security

Those of us of an age who remember the absolute nightmare involved in getting an SSL certificate for a website should bow thrice daily in the direction of the LetsEncrypt folks.

Just banged a cert out for a new website in about 15 seconds, including creating the vhost in apache.

Srsly everyone. Support these folks.

#ssl #apache #encryption #linux

https://letsencrypt.org/donate/

Those of us of an age who remember the absolute nightmare involved in getting an SSL certificate for a website should bow thrice daily in the direction of the LetsEncrypt folks.

Just banged a cert out for a new website in about 15 seconds, including creating the vhost in apache.

Srsly everyone. Support these folks.

#ssl #apache #encryption #linux

https://letsencrypt.org/donate/

Kudos to @[email protected] for this great presentation. www.youtube.com/watch?v=-9Ki... #acme #ssl #tls #sysadmin

Everything you learned about S...

Kudos to @certkit for this great presentation. https://www.youtube.com/watch?v=-9KiLFr8_hI #acme #ssl #tls #sysadmin

Kudos to @certkit for this great presentation. https://www.youtube.com/watch?v=-9KiLFr8_hI #acme #ssl #tls #sysadmin

🥳 @small-tech/node-pebble version 5.6.0 released

• Updated to support latest Pebble (version 2.10.1).

https://www.npmjs.com/package/@small-tech/node-pebble

Node Pebble is a Node.js wrapper for Let’s Encrypt’s Pebble (“a small RFC 8555 ACME test server not suited for a production certificate authority”).

• Downloads the correct Pebble binary for your platform.

• Configures Pebble to include Let’s Encrypt’s new short-lived profile (shortlived).

• Launches and manages a single Pebble process.

• Returns a reference to the same process on future calls (safe to include in multiple unit tests where order of tests is undetermined)

• Automatically patches Node.js’s TLS module to accept Pebble server’s test certificate as well as its dynamically-generated root and intermediary CA certificates.

It mostly exists so I can test @small-tech/auto-encrypt (Automatically-provisioned TLS certificates for Node.js servers using Let’s Encrypt ; https://codeberg.org/small-tech/auto-encrypt) which is used by Kitten (https://kitten.small-web.org).

#NodePebble #AutoEncrypt #Kitten #SmallTech #SmallWeb #freeSoftware #NodeJS #JavaScript #LetsEncrypt #SSL #TLS

🥳 @small-tech/node-pebble version 5.6.0 released

• Updated to support latest Pebble (version 2.10.1).

https://www.npmjs.com/package/@small-tech/node-pebble

Node Pebble is a Node.js wrapper for Let’s Encrypt’s Pebble (“a small RFC 8555 ACME test server not suited for a production certificate authority”).

• Downloads the correct Pebble binary for your platform.

• Configures Pebble to include Let’s Encrypt’s new short-lived profile (shortlived).

• Launches and manages a single Pebble process.

• Returns a reference to the same process on future calls (safe to include in multiple unit tests where order of tests is undetermined)

• Automatically patches Node.js’s TLS module to accept Pebble server’s test certificate as well as its dynamically-generated root and intermediary CA certificates.

It mostly exists so I can test @small-tech/auto-encrypt (Automatically-provisioned TLS certificates for Node.js servers using Let’s Encrypt ; https://codeberg.org/small-tech/auto-encrypt) which is used by Kitten (https://kitten.small-web.org).

#NodePebble #AutoEncrypt #Kitten #SmallTech #SmallWeb #freeSoftware #NodeJS #JavaScript #LetsEncrypt #SSL #TLS

Making good progress on some projects, but my dang #SSL cert expired, so all my services are down 😩

My momentum!

#Selfhosting

Making good progress on some projects, but my dang #SSL cert expired, so all my services are down 😩

My momentum!

#Selfhosting

#SSL is a joke.
I know a guy who build a backdoor.

What?!

What?

I have a question for the security nerds with knowledge in SAML and Microsoft Entra: We happened to notice that the application web server was presenting the certificate for "foo.example.com" instead of the certificate for the actual URL "https://foo.example.net/login". foo.example.net is CNAME to foo.example.com. Despite this, the login worked just fine the whole time. I’m not sure how serious the issue is, but my gut tells me this probably isn’t such a good idea, right?

#microsoft #saml #entra #ssl

Hai diversi servizi self-hosted e vuoi esporli in maniera semplice usando un dominio e HTTPS?
Con Nginx Proxy Manager puoi gestire reverse proxy, certificati SSL gratuiti e redirect direttamente da un'interfaccia web, senza dover scrivere a mano configurazioni Nginx.

Scopri la guida completa con Docker Compose 👇
https://www.risposteinformatiche.it/nginx-proxy-manager-docker-reverse-proxy-ssl/

@linux @opensource

#NginxProxyManager #DockerCompose #SelfHosted #ReverseProxy #SSL #Homelab #OpenSource #Linux #UnoLinux #UnoOpenSource #WebServer #Docker

Hai diversi servizi self-hosted e vuoi esporli in maniera semplice usando un dominio e HTTPS?
Con Nginx Proxy Manager puoi gestire reverse proxy, certificati SSL gratuiti e redirect direttamente da un'interfaccia web, senza dover scrivere a mano configurazioni Nginx.

Scopri la guida completa con Docker Compose 👇
https://www.risposteinformatiche.it/nginx-proxy-manager-docker-reverse-proxy-ssl/

@linux @opensource

#NginxProxyManager #DockerCompose #SelfHosted #ReverseProxy #SSL #Homelab #OpenSource #Linux #UnoLinux #UnoOpenSource #WebServer #Docker

🔐 Need a quick 𝗢𝗽𝗲𝗻𝗦𝗦𝗟 refresher?

Our 𝗰𝗵𝗲𝗮𝘁𝘀𝗵𝗲𝗲𝘁 covers essential commands for:

🔹 Generating private keys and CSRs

🔹 Creating certificates

🔹 Encrypting and decrypting files

🔹 Testing SSL/TLS connections

🔹 Signing and verifying files

𝗔 𝗽𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗿𝗲𝗳𝗲𝗿𝗲𝗻𝗰𝗲 𝗳𝗼𝗿 𝗟𝗶𝗻𝘂𝘅 𝗮𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗼𝗿𝘀, 𝗗𝗲𝘃𝗢𝗽𝘀 𝘁𝗲𝗮𝗺𝘀, 𝗮𝗻𝗱 𝗮𝗻𝘆𝗼𝗻𝗲 𝘄𝗼𝗿𝗸𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 𝘀𝗲𝗰𝘂𝗿𝗲 𝗰𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀.

📖 Save it for your next certificate or TLS task!

https://www.relianoid.com/resources/knowledge-base/misc/openssl-command-cheatsheet/

#OpenSSL #Linux #CyberSecurity #SSL #TLS #DevOps #SysAdmin

More evidence for my theory that #twitter is broke. They can't even afford their own #SSL cert.

More evidence for my theory that #twitter is broke. They can't even afford their own #SSL cert.

SSL/TLS証明書って何？なぜ必要で、誰が発行して誰が使うのかを整理する
https://qiita.com/mame_hiro416/items/dc7a18f58eb5a2c8a6e7?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #Network #Security #SSL #初心者 #TLS

Secure Certificates imply the existence of Insecure Certificates.

#Computing #SSL

Secure Certificates imply the existence of Insecure Certificates.

#Computing #SSL

I may take one of my proxy servers and put it on the edge - it serves through the vpn but could do double duty - tls and https cache fwd/rev - would help web browsing and you can also get reports #ssl bump

I may take one of my proxy servers and put it on the edge - it serves through the vpn but could do double duty - tls and https cache fwd/rev - would help web browsing and you can also get reports #ssl bump

Подробная инструкция по настройке Squid 7.5 (Squid proxy, krb+ldap auth, ssl-bump, log in JSON, delay, cache)

Настраивали когда-нибудь Squid? Если да, то вы точно знаете: чтобы всё заработало как надо, приходится лазить по десятку сайтов, форумов и старых гайдов. Кто-то пишет про SSL, кто-то про кэш, кто-то про авторизацию — и всё в разных местах, с разными версиями Для кого эта статья: - Для тех, кто хочет настроить Squid быстро. - Для тех, кто устал искать кусочки информации по всему интернету. - Для тех, кто ценит своё время и любит, когда «работает с первого раза». Эта статья — попытка собрать всё важное в одном месте…

https://habr.com/ru/articles/1060658/

#proxy #squid_7 #ssl #cache #delay #kerberos #ldap #log

US blocks SSL security certificates for Iran's Fars News Agency

The move is part of a western campaign to dominate the digital narrative and suppress dissenting voices

Tech needs to be de-americanized. They have way too much control over flow of information worldwide.

#Internet #Technology #Iran #US #WarOnIran #SSL #FarsNews

US blocks SSL security certificates for Iran's Fars News Agency

The move is part of a western campaign to dominate the digital narrative and suppress dissenting voices

Tech needs to be de-americanized. They have way too much control over flow of information worldwide.

#Internet #Technology #Iran #US #WarOnIran #SSL #FarsNews

Hürden auf dem Weg in die digitale Unabhängigkeit

Das nächste Freizeitprojekt, das mir mindestens ein Büschel grauer Haare beschert: der Abzug meiner sloppy Gitea-Instanz von Hetzner zu einer im lokalen Netzwerk gehosteten Forgejo-Instanz.

zum Blogpost…

#blogpost #blog #Gitea #Forgejo #SSL #Docker #Zertifikate

Hürden auf dem Weg in die digitale Unabhängigkeit

Das nächste Freizeitprojekt, das mir mindestens ein Büschel grauer Haare beschert: der Abzug meiner sloppy Gitea-Instanz von Hetzner zu einer im lokalen Netzwerk gehosteten Forgejo-Instanz.

zum Blogpost…

#blogpost #blog #Gitea #Forgejo #SSL #Docker #Zertifikate

We have better #security and #performance standards than most online banking sites, offering #0-RTT + #QUIC + #Post-Quantum #Cryptography. #tls #ssl #mastodon #instance

We have better #security and #performance standards than most online banking sites, offering #0-RTT + #QUIC + #Post-Quantum #Cryptography. #tls #ssl #mastodon #instance

Why are SSL certificates dropping to 47 days? Because revocation is broken.

OCSP fails open. Revocation lists go stale. A stolen certificate stays trusted too long.

Short lifespans are the industry's workaround.

https://runasradio.com/Shows/Show/1041

#SSL #InfoSec

Why are SSL certificates dropping to 47 days? Because revocation is broken.

OCSP fails open. Revocation lists go stale. A stolen certificate stays trusted too long.

Short lifespans are the industry's workaround.

https://runasradio.com/Shows/Show/1041

#SSL #InfoSec

Влияние TLS-библиотек и настроек на производительность

Тонкая настройка TLS необходима для современного веб‑сервера, обратного прокси или балансировщика с терминацией TLS. При этом тема достаточно запутанная для изучения, в сети можно найти множество устаревших материалов и откровенных мифов. В этой статье будем тестировать влияние важных настроек и вариантов TLS‑библиотек на примере веб‑сервера Angie.

https://habr.com/ru/articles/1054932/

#angie #tls #ssl #https #производительность

Gerade live gegangen: 'certificate verify failed - den Firmen-Proxy zähmen' https://blog.renesasse.de/posts/2026-07-03-certificate-verify-failed-den-firmen-proxy-zaehmen/ #blogging #blogpost #writing #TLS #SSL #Zertifikate #CorporateProxy #Certificate #Authority #Python

Gerade live gegangen: 'certificate verify failed - den Firmen-Proxy zähmen' https://blog.renesasse.de/posts/2026-07-03-certificate-verify-failed-den-firmen-proxy-zaehmen/ #blogging #blogpost #writing #TLS #SSL #Zertifikate #CorporateProxy #Certificate #Authority #Python

Тени истории: от глиняных табличек к Bitcoin. Как криптография создала наш цифровой мир

За этот цикл статей мы с вами прошли долгий путь: от узелков кипу и китайских верительных бирок в первой статье через эпоху Возрождения с шифровальным диском Альберти и полиалфавитной заменой во второй, до грохота роторных машин «Энигма» и «Фиалка» в третьей. Но величайшая революция в истории шифров произошла тогда, когда тайны перестали быть уделом избранных и стали потребностью каждого. С появлением интернета перед человечеством встал вопрос: как создать доверие в мире, где у собеседников нет лиц? Ответом оказалась криптография, которая стала фундаментом глобальной цифровой цивилизации.

https://habr.com/ru/companies/ussc/articles/1054638/

#тайнопись #криптография #история_криптографии #биткоин #ssl #секреты

Autsch, die Webseite von Schleswig-Holstein hat ein TLS Problem:

https://www.schleswig-holstein.de

$ curl https://www.schleswig-holstein.de
curl: (35) TLS connect error: error:0A000458:SSL routines::tlsv1 unrecognized name

#SchleswigHolstein #TLS #SSL

Autsch, die Webseite von Schleswig-Holstein hat ein TLS Problem:

https://www.schleswig-holstein.de

$ curl https://www.schleswig-holstein.de
curl: (35) TLS connect error: error:0A000458:SSL routines::tlsv1 unrecognized name

#SchleswigHolstein #TLS #SSL

The longest SSL certificate you can buy today is 200 days. By 2029 it will be 47.

Revocation never worked, so the industry is killing long lifespans instead.

@toddhgardner broke down the why on RunAs Radio.

https://runasradio.com/Shows/Show/1041

#SSL #PKI

The longest SSL certificate you can buy today is 200 days. By 2029 it will be 47.

Revocation never worked, so the industry is killing long lifespans instead.

@toddhgardner broke down the why on RunAs Radio.

https://runasradio.com/Shows/Show/1041

#SSL #PKI

RadioBlog.eu:
"
USA: SiriusXM funkt mit SXM-11-Satellit künftig bis nach Alaska
"
"Der amerik. Pay-Radio-Veranstalter SiriusXM hat in der Nacht zum Montag seinen neuen Satelliten SXM-11 erfolgreich in eine geostationäre Transferbahn gebracht... Start erfolgte von Cape Canaveral ..wurde von einer Falcon-9-Rakete .. durchgeführt. .."

https://www.radioblog.eu/2026/06/30/usa-siriusxm-funkt-mit-sxm-11-satellit-kuenftig-bis-nach-alaska/

30.6.2026

#IntuitiveMachines #Falcon9 #IM1300 #Lanteris #Radio #Raumfahrt #satcom #Satelliten #SiriusXM #SXM11 #SpaceFlight #SpaceX #SSL

An expired certificate is never a complex failure. It's just a calendar problem nobody automated. Code is fine, servers are healthy, but every visitor gets a security warning.

Run a daily Synthetics Certificate Check in New Relic. Alert 14 days out if you use auto-renewals, 30 days out for manual setups. Takes 5 minutes, eliminates the dumbest kind of outage.

Free guide: danielpetrica.com/newrelic/

#NewRelic #DevOps #SSL

dailygalaxy.com:
"
SpaceX Just Launched SiriusXM’s Most Powerful Satellite Ever: A 7.5-Ton Giant Built to Boost Radio Coverage
"
".. lifted off from Space Launch Complex 40 at 10:25 p.m. EDT on June 28, sending the approximately 15,000-pound (7.5-ton) SXM-11 satellite toward a geostationary transfer orbit. .."

https://dailygalaxy.com/2026/06/spacex-just-launched-siriusxms-satellite/

29.6.2026

#IntuitiveMachines #Falcon9 #IM1300 #Lanteris #Radio #Raumfahrt #satcom #Satelliten #SiriusXM #SXM11 #SpaceFlight #SpaceX #SSL

relayd(8) and httpd(8) TLS settings update. https://www.undeadly.org/cgi?action=article;sid=20260629165750 #openbsd #relayd #httpd #tls #ssl #tlsv13 #tlsv12 #security #cryptography #crypto

Is anyone aware of an alternative to crt.sh ? I really like the website, and it's simple visualization. No bloat around it, just the pure purpose of providing insights from CT logs.

However, the website quite often returns server errors, and others. More often than it did in the past, a few years ago. My hope is, to find a similarly informative tool that is however a bit more reliable.

I dislike it if I have to put down a note to re-check a domain's certificate history and to remember just because the service was down by the time I was interested in the information.

#certificates #tls #ssl #certificatetransparency #logs #bigdata #https

SSL encryption for AmigaOS 1.3: AmiTLS13 V1.0

Marcel Jähne has released an initial version of his partial port of the BearSSL library, which requires a 68020 processor and is intended to provide SSL encryption from AmigaOS 1.3 onwards. The following features have already been implemented:

https://www.amiga-news.de/en/news/AN-2026-06-00105-EN.html

#Amiga #SSL #AmigaOS13

Let's Encrypt has been down most of today

https://letsencrypt.status.io/#2026

#HackerNews #LetsEncrypt #outage #downtime #SSL #security #status

I’m having some strange issues with LetsEncrypt certificate application right now.

From what I’ve researched, it may be due to some issues with their certificate servers, either downtime or rate limiting.

Behavior changed after I waited a while, but still errors

An unexpected error occurred:
The server experienced an internal error :: Unable to validate JWS
Please see the logfiles in /var/log/letsencrypt for more details.

I’ll take a walk and try again later.

I saw people talking about alternatives to LetsEncrypt for SSL certificates. Do you have any recommendations?

#LetsEncrypt #SSL