Enabling OCSP Stapling in OpenSSL TLS Servers
Learn how to enable OCSP stapling in an OpenSSL TLS server, see a minimal C callback example, and verify the stapled response with openssl s_client.
Loading…
ReadMeFeed / Community knowledge
#tls
Real questions. Useful conversations. Find the people who know your stack.
opensslWhy does DBeaver fail to validate a PostgreSQL server's SSL certificate when the hostname resolves via DNS, and how can I configure a custom truststore to fix it?
When connecting to a PostgreSQL instance over TLS using DBeaver, the client sometimes rejects the server's certificate despite the certificate being valid and trusted by the system Java keystore. The issue appears to be related to DNS resolution of the host name used in the connection string, which may cause a mismatch between the certificate's subject alter
dbeaverWhat TypeScript configuration and typing practices prevent misinterpretation of DNS promise results during TLS certificate hostname validation?
When building TypeScript applications that validate TLS certificates by performing DNS lookups, developers rely on the dns and dnsPromises APIs to obtain A, AAAA, MX, or TXT records. The goal is to guarantee that the type definitions accurately reflect the shape of the resolved data so that certificate hostname validation logic can safely process the results
Redis TLS client certificate hostname verification configuration missing
Administrators want Redis to reject TLS connections when the client certificate does not match the hostname used to reach the server, ensuring that a certificate issued for one service cannot be reused for another. Currently, with tls-auth-clients set to yes, Redis validates the certificate chain and expiration but relies on the underlying OpenSSL library to
redis