The second post of our series about protecting SSL private keys shows how to set up HashiCorp Vault to store the passwords that protect private keys, and to configure NGINX to retrieve the passwords. We also discuss using a hardware security module for even greater security.
Tag: SSL/TLS
Tag: SSL/TLS
Announcing NGINX Plus R18
NGINX Plus R18 introduces dynamic loading of SSL/TLS certificates, enhances our OpenID Connect reference implementation, and supports port ranges for virtual servers. It also includes enhancements to the key-value store, health checks, NGINX Plus clustering, and the NGINX JavaScript module.
Secure Distribution of SSL Private Keys with NGINX
We describe three progressively more secure ways to protect SSL private keys when configuring NGINX to handle HTTPS traffic: allowing read access only to the root user, encrypting keys with separately stored passwords, and distributing passwords from a central repository.
Announcing NGINX Plus R17
NGINX Plus R17 introduces support for two-stage rate limiting and TLS 1.3, the latest version of the Transport Layer Security protocol. Configuration of OpenID Connect is simpler and NGINX WAF is 2x faster than before. The NGINX JavaScript module has also been updated.
NGINX Unit Now Supports TLS and JavaScript Apps with Node.js
NGINX Unit 1.5 adds support for Node.js applications, which extends the set of supported languages to six: Go, JavaScript (Node.js), Perl, PHP, Python, and Ruby. It also adds support for encrypting connections with SSL/TLS, and dynamic updating of security certificates.
Running SSL and Non-SSL Protocols over the Same Port with NGINX 1.15.2
The $ssl_preread_protocol variable introduced in NGINX 1.15.2 allows you to distinguish between SSL/TLS and other protocols when forwarding traffic using a TCP proxy. This is useful if you want to avoid firewall restrictions by running (for example) SSL/TLS and SSH services on the same port.
Top 5 NGINX Blog Posts for 2017 – R12, Microservices, & More
Top 5 2017 blog posts: NGINX Plus Release 12, microservices, load balancing, security, and the NGINX Application Platform.
Optimizing Web Servers for High Throughput and Low Latency
Alexey Ivanov, Site Reliability Engineer at Dropbox, goes into depth on optimizing NGINX web servers for high throughput and low latency.
Update: Using Free Let’s Encrypt SSL/TLS Certificates with NGINX
Learn how to use the Let’s Encrypt client to generate RSA certificates and automatically configure NGINX to use the newly issued certificates.
Running Microservices on OpenShift with the NGINX MRA’s Fabric Model
Deploy a microservices application on OpenShift, using the Fabric Model of the NGINX MRA for service discovery, persistent SSL connections, & health checks.