Archiwum

Posty oznaczone ‘Certificate’

VLC – quick solution for problems with HTTPS certs

Grudzień 31st, 2010 Brak komentarzy

Can’t play music over HTTPS and VLC output looks similar?

[0x83916dc] gnutls tls client error: TLS session: access denied
[0x83916dc] gnutls tls client error: Certificate could not be verified
[0x83916dc] gnutls tls client error: Certificate's signer was not found
[0x83916dc] main tls client error: TLS client session handshake error

Solution is very simple – feed VLC with Firefox certificates.
On Arch you need to execute just one command:

$ cat /usr/share/ca-certificates/mozilla/* > ~/.local/share/vlc/ssl/certs/ca-certifcates.crt
Tagi:, , , ,

Nginx and Gandi SSL certificate

Grudzień 1st, 2010 Brak komentarzy

Getting SSL certificate from Gandi is quite straightforward task. Just remember to combine two downloaded certificates into one domain.crt file.

Nginx configuration makes all browsers happy.

ssl on;
ssl_certificate     /etc/ssl/domain.crt;
ssl_certificate_key /etc/ssl/domain.key;
 
ssl_protocols       SSLv3 TLSv1;
ssl_ciphers         HIGH:!ADH:!MD5;
ssl_prefer_server_ciphers on;

To check that certificate is installed correctly just go to Qualys SSL Labs site and perform their test.

You will get visual interpretation and quite detailed results.

Tagi:,