After creating self-signed wildcard certificates for modern browsers a while back, self-signed certificates came back to haunt me once again. This post describes a solution for creating self-signed keystores (pkcs12 or jks) in OpenShift and Kubernetes to use in Spring Boot applications to re-encrypt traffic. Actually I present 2 solutions, but the second one only … [Read more…]
When setting up my local K3s on a Intel NUC I thought it would be nice to use Ingress resources to access the services instead of using a node-port. As those services will only be used inside my LAN (and I didn’t want to have an invalid certificate warning) I decided to use a self-signed … [Read more…]
Until now I have mostly dealt with certificates for a specific host – and there is usually nothing wrong with doing it this way. There are easy to use tools for Let’s Encrypt which automate the retrieval of a certificate for a (sub-) domain. On a docker-compose based, (mostly) manually managed stack you would usually … [Read more…]
Issue: How can I add basic authentication / password to my OpenVPN connection featuring certificates? There are quite a lot of tutorials on how to set up your own VPN server. An excellent tutorial has been published by DigitalOcean. However this (and nearly every other) tutorial feature a secure connection by either certificates or user … [Read more…]
Issue: How can I fix the appearing python error while renewing a Let’s Encrypt certificate? As you may have noticed, this blog features a Let’s Encrypt certificate. Let’s Encrypt only allows certificates to be authorized for up to 3 months. While this isn’t that big of a problem for most users (you can renew the … [Read more…]