Diagnosing TLS Handshake Failures with OpenSSL s_client
Use OpenSSL s_client to perform a live TLS handshake, inspect protocol, cipher, and certificate chain, and isolate handshake failures with version‑forcing and SNI flags.
Loading…
ReadMeFeed / Community knowledge
#tls
Real questions. Useful conversations. Find the people who know your stack.
opensslEnabling HTTP/2 in Apache Tomcat: TLS, version requirements, and verification
Enable HTTP/2 in Apache Tomcat using the Http2Protocol connector, TLS, and Java 11+, then verify with curl and browser DevTools.
tomcatEliminate Legacy TLS 1.0/1.1 from OpenSSL Servers: A Diagnostic & Fix Guide
Detect and disable TLS 1.0/1.1 in OpenSSL servers with a step‑by‑step diagnostic guide. Verify config, test handshakes, and enforce TLS 1.2/1.3 to meet modern security standards.
Diagnosing Cloudflare TLS Handshake Failures: A Step‑by‑Step Guide
When HTTPS visitors hit ERR_SSL_VERSION_OR_CIPHER_MISMATCH, the root cause is often a TLS mismatch between Cloudflare and your origin. This guide walks through the recognisable symptoms, a diagnostic table, ordered checks, fixes tied to findings, and when to ask for support.
cloudflareProvisioning Let's Encrypt Certificates and Enforcing HTTPS in Yunohost
Guide to obtain a Let's Encrypt TLS certificate for a Yunohost domain and enforce HTTPS, with steps, checks, and recovery options.
yunohostTraefik’s Automatic TLS with ACME: Docker Labels & Production Pitfalls
Learn how Traefik can request, renew, and serve Let’s Encrypt certificates automatically using Docker labels, and discover the operational trade‑offs you need to watch out for in a real deployment.
dockerWhen OpenSSL 3.x Refuses to Give You MD4: A Practical Guide to Providers
OpenSSL 3.x moved algorithms into pluggable providers, which is why MD4 and Blowfish suddenly vanish after an upgrade. Here's how the provider model works, how to configure it, and how to verify what's loaded.
Choosing TLS Versions and Cipher Suites in OpenSSL 3.x: A Decision Guide
A decision guide for configuring TLS protocol versions and cipher suites in OpenSSL 3.x: enable TLS 1.2 and 1.3 only, understand how cipher selection differs between versions, deploy dual RSA/ECDSA certificates, and validate with concrete openssl commands.
Mastering Portainer Endpoints: Add, Secure, and Manage Multiple Docker Hosts
Learn how to configure Portainer 2.x to expose and control several Docker or Swarm endpoints, secure them with TLS, and scope access with RBAC. Includes a step‑by‑step command example and common pitfalls to avoid.