SSL on Support Tools

Easier Alternative to Nginx + Let’s Encrypt with Caddy Docker Proxy

Sun, 01 Jun 2025 12:00:00 -0500

Managing SSL certificates and proxying Docker applications has traditionally required a combination of Nginx and Let’s Encrypt. While effective, this setup can feel overly complex for many use cases. Enter Caddy Docker Proxy, a tool that simplifies this process, making it ideal for small applications or CI/CD pipelines.

How to Get Chrome to Accept a Self-Signed Certificate

Fri, 13 Oct 2023 09:30:00 -0500

This guide explains how to make Chrome accept a self-signed certificate. It is based on Chrome 68 on Windows 10, but the steps should be similar for other versions and platforms.

How to Get Chrome to Accept a Self-Signed Certificate

If you’re working with a self-signed certificate and need to make Chrome accept it, here’s a step-by-step procedure that works for Chrome 68 on Windows 10. This method allows you to trust the certificate and use it without encountering constant security warnings.

vSphere 7 – Certificates with VMCA as Subordinate

Tue, 07 Sep 2021 07:46:00 +0000

For enterprises that need fully trusted SSL certificates for the vSphere 7.0 environment, you have two basic options:

Full Custom Mode: Manually replace all certificates for vCenter and the ESXi hosts with your trusted certificates. Subordinate CA Mode: Use the built-in VMCA service as an official subordinate CA of your existing PKI infrastructure. After the initial configuration, automates the issuing of SSL certs for your vSphere environment. This is the method covered in this blog post. VMware offers two other certificate options: Fully Managed and hybrid mode, for a total of four certificate options. You can find out more about all of them in this VMware blog post.

In a high-security environment, it is very likely the security team will NOT let you configure the vCenter VMCA as a subordinate CA. So, you will be left with the full custom mode if you want 100% of the certificates trusted. However, if you are in a situation where you can configure the VMCA as a subordinate CA, this post is for you!

Note: Before you do this replacement in production, I strongly urge you to set up a test vCenter instance and run this entire procedure. Botched certificate replacements can lead to bad days. And another tip for a lab test is to snapshot the vCenter VM before you try the process. That way, you can easily roll back should things go south.

How to change the Rancher v2.x Server certificate to an externally created certificate.

Mon, 01 Mar 2021 11:10:00 +0000

It’s often necessary to migrate from a self-signed or LetsEncrypt certificate to an externally created certificate like DigiCert or Comodo in Rancher v2.x.