Category Archives: SSL

11 November, 2026

EJBCA Internal CA: Deploy a Private PKI for Your Local Servers with Docker

Deploy an EJBCA internal CA in Docker with MariaDB, build a two-tier Root and Issuing CA, and issue trusted TLS certificates to local servers.

10 November, 2026

eMudhra Certificate Compromise: What Broke and How to Clean Up Your Trust Stores

The eMudhra certificate compromise explained: what broke, which clients are still exposed, and how to patch Linux, runtimes, endpoints and FortiGate.

9 November, 2026

FortiGate Incomplete Certificate Chain: Fixing the Missing GoDaddy Intermediate

Fix an incomplete FortiGate certificate chain: prove the GoDaddy intermediate is missing with OpenSSL, import it or rebuild the PKCS#12, then verify.

14 October, 2026

TLS 1.0 vs 1.1 vs 1.2 vs 1.3: What Actually Changed and What to Disable Today

Learn to disable TLS 1.0 and 1.1 safely. Compare TLS 1.2 vs 1.3 changes, understand the attacks, and apply hardening configs for your network...

8 October, 2026

How HTTPS Works: From ClientHello to Encrypted GET

Walk through TLS 1.3 handshake steps from ClientHello to encrypted GET. Use OpenSSL and Wireshark to verify keys, certificates, and FortiGate SSL inspection.

22 September, 2026

Follow the SNI: Troubleshooting SSL/TLS Connections on FortiGate

Master FortiGate SNI troubleshooting to fix broken HTTPS. Learn to capture ClientHello, verify SSL inspection paths, and resolve certificate mismatches with precise CLI commands.

23 July, 2026

The Clock Is Ticking: What CA/B Forum’s Ballot SC-081v3 Means for the Future of Web Security

Learn how CA/B Forum Ballot SC-081v3 mandates 47-day TLS certificates. Discover the phased timeline and how to automate certificate management before 2029.

2 May, 2026

Cert-Based Site-to-Site VPN on FortiGates using Open SSL as the CA – 2026 Version

Configure FortiGate site-to-site VPN using OpenSSL CA. Generate root and device certificates, create PKCS12 files, and apply IPsec settings for secure tunneling.

5 March, 2026

802.1X EAP Protocols Explained

Compare 802.1X EAP protocols including EAP-TLS, PEAP, and TTLS. Learn how to configure FortiAuthenticator RADIUS for secure network access control.

16 February, 2026

IPsec VPNs Deep Dive

Learn to configure IPsec VPN phases and choose the right Diffie-Hellman group. Understand ISAKMP, IKE, and cipher suites for secure tunnel setup.

14 February, 2026

Deploying FortiWeb on ProxMox Server

Deploy FortiWeb on Proxmox by importing qcow2 images and configuring VM hardware. Follow these steps to set up disk boot order and network settings.

30 January, 2026

Host Header Based NAT’ng

Configure FortiGate host header NAT to host multiple apps on one IP. Set up virtual servers, HTTP multiplexing, and SSL offloading in FortiOS.

27 January, 2026

Different Types of Certificates You Can Get Today

Compare types of SSL certificates including DV, OV, EV, wildcard, and multi-domain. Learn validation levels, costs, and which certificate fits your security needs.

4 October, 2021

Removing “Launch FortiClient” from FortiGate Web Portal VPN

Remove the Launch FortiClient button from your FortiGate Web Portal VPN login page. Edit realm HTML to hide the link for client-less SSL VPN...

30 September, 2021

Converting Certificates using OpenSSL

Every OpenSSL certificate conversion you are likely to need, re-tested on OpenSSL 3: PEM, DER, P7B, PFX, PKCS#8 and JKS. Includes the fix for...

17 May, 2020

Converting a PPK file to a PEM file

Learn how to convert PPK to PEM files using puttygen on macOS and Linux. Includes steps to decrypt AWS Windows passwords and reverse conversion.

23 April, 2020

Troubleshooting FortClient VPN Connectivity Issues with FortiGate

Resolve FortiGate FortiClient VPN troubleshooting issues with CLI commands, log analysis, and packet captures. Follow these steps to fix connectivity errors.

10 February, 2020

SSL VPN Realms with Custom URLs

Configure FortiGate SSL VPN custom URLs for separate realms. Set distinct authentication methods for contractors and employees using custom domain names.