Should I stop using DSA key algorithm self-signed certificates in production in favor of RSA Certificates?

We use a self-signed certificate with DSA key algorithm (and RSA signature algorithm) for securing a Kafka cluster in production. The access to the Kafka servers is already limited (by firewall) by allowing access only to specific IP subne… Continue reading Should I stop using DSA key algorithm self-signed certificates in production in favor of RSA Certificates?

Are SAN IP addresses / DNS names useless in self signed certificates by untrusted CAs?

I want to generate a self signed certificate for temporary local testing of a web service via HTTPS. I don’t want to install the CA though, because the self signed certificate is generated on the fly with each start of the we… Continue reading Are SAN IP addresses / DNS names useless in self signed certificates by untrusted CAs?

Use self-signed certificate inside of Docker Container for localhost

I’ve created a self-signed certificate for localhost to use https.

I’m running an Apache Docker container which uses the self-signed certificate and the private key. I then installed the certificate on my windows machine. So… Continue reading Use self-signed certificate inside of Docker Container for localhost

HSTS doesn’t work on browser when dealing with a self-signed certificate

We have a web portal and I need to add HSTS header in the response. Ours is an on-premise solution, so we use a self-signed certificate. I have added the hsts header in the response & I need to check whether it really works.

I underst… Continue reading HSTS doesn’t work on browser when dealing with a self-signed certificate