Posts

Showing posts with the label ssl

Exception Resource Temporarily unavailable while firing 50 requests for checking snapshot exits or not

Image
Clash Royale CLAN TAG #URR8PPP Exception Resource Temporarily unavailable while firing 50 requests for checking snapshot exits or not I have created snapshots of 50 disks because gcloud does not allow snapshots with similar name. Before firing snapshot create I was checking if snapshot exists or not in gcp and fired 50 requests simultaneously and almost 5-6 requests failed with below exception. snapshots().get(project=self.project, snapshot=name).execute() exception : File "/tmp/cloudpoint/libs/gcp/lib/oauth2client/_helpers.py", line 133, in positional_wrapper return wrapped(*args, **kwargs) File "/tmp/cloudpoint/libs/gcp/lib/googleapiclient/http.py", line 837, in execute method=str(self.method), body=self.body, headers=self.headers) File "/tmp/cloudpoint/libs/gcp/lib/googleapiclient/http.py", line 163, in _retry_request resp, content = http.request(uri, method, *args, **kwargs) File "/tmp/cloudpoint/libs/gcp/lib/oauth2client/transport.py"...

Amazon S3 - HTTPS/SSL - Is it possible? [closed]

Image
Clash Royale CLAN TAG #URR8PPP Amazon S3 - HTTPS/SSL - Is it possible? [closed] I saw a few other questions regarding this without any real answers or information (or so it appeared). I have an image here: http://furniture.retailcatalog.us/products/2061/6262u9665.jpg Which is redirecting to: http://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg I need it to be (https): https://furniture.retailcatalog.us/products/2061/6262u9665.jpg So I installed a wildcard ssl on retailcatalog.us (we have other subdomains), but it wasn't working. I went to check https://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg And it wasn't working, which means on the Amazon S3 website itself the https wasn't working. How do I make this work? Questions on Stack Overflow are expected to relate to programming within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be r...

How to generate Certificate Signing Request (CSR) for setting up TLS in GKE

Image
Clash Royale CLAN TAG #URR8PPP How to generate Certificate Signing Request (CSR) for setting up TLS in GKE I'm running a service in GKE and have an Ingress for setting up LTS. I have tried by my self-signing certificates and I could access to my site through https protocol. It looks good. Please notice that I have a static IP for Ingress and a domain name for it already. But now I'm going to create a real-certificates and trying to create a CSR and sending it to CA but I'm so confused after reading those posts: Manage TLS Certificates in a Cluster Certificates I have some questions: All I want is to make *.crt and *.key file for setting up https on my service. (I have read some blog posts telling about Let's Encrypt but I don't want to use it). Thank you for reading. 1 Answer 1 Let's go over each of your questions first: What's Pod's DNS, Pod's Ip and Service'...

Cname for AWS API Gateway custom domain

Image
Clash Royale CLAN TAG #URR8PPP Cname for AWS API Gateway custom domain the concept is simple. Create a Cname switch that points to blue / green deployment channels via AWS API Gateway. The API has two stages for blue and green mapped back into an environment variable which in turns maps back into the Lambda alias associated with it's own dedicated version. Therefore there are now two separate channels for conducting deployments into. All of this works fine. The issue arises when a Cname is created in Route53 to point to either of the API Gateways blue or green custom domains. The SSL cert is held in AWS Certificate Manager. When we call the blue endpoint via the Cname we get an SSL error curl -Il -H "Host:blue-api.example.com" -H "x-api-key:xxxxxxxxx" -X GET https://cname-api.example.com/questions/health curl: (35) SSL peer handshake failed, the server most likely requires a client certificate to connect Whereas when we call the custom domain directly it works c...

Nginx replace PEM files in configuration

Image
Clash Royale CLAN TAG #URR8PPP Nginx replace PEM files in configuration I'm configuring my Nginx with some provided certificates. At first, I tried with self signed certificates, and it works. I just used: $ sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt $ sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048 And editing my self certificates file: $ sudo nano /etc/nginx/snippets/self-signed.conf ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt; ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key; And including the pem file: $ /etc/nginx/snippets/ssl-params.conf ssl_dhparam /etc/ssl/certs/dhparam.pem; Generating a bak file $ sudo cp /etc/nginx/sites-available/default /etc/nginx/sites-available/default.bak And editing the file: /etc/nginx/sites-available/default /etc/nginx/sites-available/default With server { listen 80 default_server; listen [::]:80 default_server; ...