New answers tagged

2

When you are using a self-signed certificate, it is not supposed to be valid and it doesn't need to be valid. The only client that needs to trust it is Cloudflare. In fact, it might be desirable to use certificate on your origin server that isn't trusted by users as a way of discouraging access directly to your origin server. In other words, this warning ...


1

You need to ignore the SSL verification by turning off proxy_ssl_verify. Here is an example location / { proxy_pass https://www.example.com; proxy_ssl_verify off; } You can check other option in the documentation, an example you can also use proxy_ssl_trusted_certificate to define trusted proxied ssl. But I think if the target proxy ...


2

DirectAdmin 1.52.0 started supporting HTTPS for domain pointers. They say: SSL certificates used in the VirtualHost/server will be the ones from the master domain the pointer is created under. To avoid SSL Certificate errors, you'll need to ensure that the pointer is also in the master domains certificate. LetsEncrypt can do this for you, just an extra ...


0

But DST Root CA X3 Expiration error made my Let's Encrypt alert Expiration of this root certificate does not make Let's Encrypt certificates not work, you just have to take it into account and configure your servers appropriately, or just generate new certificates with the alternate chain. Please see the FAQ at the end of https://letsencrypt.org/2020/12/21/...


2

iframes and framesets are commonly used for embedding functionality from another site such as an appointment booking form. It won't cause any issues with HTTPS or certificates. There are however some drawbacks: Iframes are not dynamically sized based on how much content they contain. Your main site needs to specify the expected size up-front. If it is ...


Top 50 recent answers are included