Re: Nginx using HTPPS but without SSL ???

2023-01-27 Thread wordlesswind via nginx
I'm not sure if it's possible to use TLS without a certificate in nginx, but you can use OpenSSL to generate a CA certificate and server certificate and deploy it to nginx, as well as trust the CA certificate in the client: https://mariadb.com/docs/xpand/security/data-in-transit-encryption/c

Why do newer versions of Chromium favor RSA certificates over ECC certificates?

2022-05-21 Thread wordlesswind via nginx
Hello, I noticed that after Chromium 594356 build (71.0.3563.0) it favors RSA certificates over ECC certificates. Windows x86-64: https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Win_x64/594356/ https://commondatastorage.googleapis.com/chromium-browser-

About nginx and OCSP Must-Staple

2022-02-24 Thread wordlesswind via nginx
Hello guys, I enabled OCSP Must-Staple, then I found that after restarting nginx, I always get "MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING" error when visiting my website for the first time. I think this error means that the server is not caching OCSP information. My nginx.conf is as f