Re: Certificate Error

2022-12-14 Thread Maxim Dounin
Hello! On Wed, Dec 14, 2022 at 10:02:04PM -0500, Software Info wrote: > Hi All, > I would really appreciate some help with this sticky problem. I am > using nginx as a reverse proxy. I have version 1.20.1 running on > FreeBSD 13.1. Today I set up for a new domain. I got a wildcard > certificate f

Re: Certificate Error

2022-12-14 Thread lists
: Certificate Error Hi All, I would really appreciate some help with this sticky problem. I am using nginx as a reverse proxy. I have version 1.20.1 running on FreeBSD 13.1. Today I set up for a new domain. I got a wildcard certificate for mydomain.com from GoDaddy. I put the paths in nginx.conf

Certificate Error

2022-12-14 Thread Software Info
Hi All, I would really appreciate some help with this sticky problem. I am using nginx as a reverse proxy. I have version 1.20.1 running on FreeBSD 13.1. Today I set up for a new domain. I got a wildcard certificate for mydomain.com from GoDaddy. I put the paths in nginx.conf but when I run nginx -

Re: https://hg.nginx.org certificate error ?

2019-04-09 Thread George
yeah updated mercurial works https://forum.nginx.org/read.php?2,283686,283694#msg-283694 though centos 7 still will use non-SNI supported mercurial 2.6.2 so folks doing hg clone for njs repo will always have this issue. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283686,283695#msg-2

Re: https://hg.nginx.org certificate error ?

2019-04-09 Thread George
okay part of the problem is centos 7 uses mercurial 2.6.2 and fix is to update to mercurial >2.7.9 for SNI support hg --version Mercurial Distributed SCM (version 2.6.2) (see http://mercurial.selenic.com for more information) Copyright (C) 2005-2012 Matt Mackall and others This is free software;

Re: https://hg.nginx.org certificate error ?

2019-04-09 Thread Maxim Dounin
C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 >i:/O=Digital Signature Trust Co./CN=DST Root CA X3 > --- That's correct certificate, it has hg.nginx.org in subjectAltNames extension and will work correctly. > and it's still a problem for hg clone command &g

Re: https://hg.nginx.org certificate error ?

2019-04-09 Thread George
looks like hg clone is a non-SNI request so looked up pubserv.nginx.com's SSL cert *.nginx.com common name so maybe best to add *.nginx.org as well to pubserv.nginx.com server's SSL cert ? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283686,283692#msg-283692

Re: https://hg.nginx.org certificate error ?

2019-04-09 Thread George
testssl 3.0rc4 output for testssl hg.nginx.org:443 Testing server defaults (Server Hello) TLS extensions (standard)"server name/#0" "renegotiation info/#65281" "EC point formats/#11" "session ticket/#35" "heartbeat/#15" "next protocol/#13172" "application layer protocol negotiation/#16"

Re: https://hg.nginx.org certificate error ?

2019-04-09 Thread George
blem for hg clone command hg clone https://hg.nginx.org/njs/ abort: hg.nginx.org certificate error: certificate is for *.nginx.com, nginx.com (configure hostfingerprint bd:90:5e:95:b4:51:d8:0b:b0:36:41:6f:99:a7:80:01:4e:cf:ee:c2 or use --insecure to connect insecurely) Posted at Nginx Forum

Re: https://hg.nginx.org certificate error ?

2019-04-09 Thread Maxim Dounin
Hello! On Tue, Apr 09, 2019 at 09:17:47AM -0400, George wrote: > Hi when I try to clone njs repo I am getting the error below > > hg clone https://hg.nginx.org/njs/ > abort: hg.nginx.org certificate error: certificate is for *.nginx.com, > nginx.com > (configure hostfingerp

https://hg.nginx.org certificate error ?

2019-04-09 Thread George
Hi when I try to clone njs repo I am getting the error below hg clone https://hg.nginx.org/njs/ abort: hg.nginx.org certificate error: certificate is for *.nginx.com, nginx.com (configure hostfingerprint bd:90:5e:95:b4:51:d8:0b:b0:36:41:6f:99:a7:80:01:4e:cf:ee:c2 or use --insecure to connect