If you see similar errors as below when using openssl to test a https site, it is most likely caused by the SNI that is configured in the reverse proxy or server, like Nginx. openssl s_client -connect bla.bla.com:443 CONNECTED(00000003) 51089:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:/BuildRoot/Library/Caches/com.apple.xbs/Sources/OpenSSL098/OpenSSL098-59.60.1/src/ssl/s23_clnt.c:618: To make it work, you need to specify the hostname in the command, … Continue reading Openssl error: SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
Putting the K in GKE
Not sure if you have noticed Today that Google has renamed Container Engine to Kubernetes Engine. A quick search leads me to a article on Google Cloud blog - Google has been working with the Cloud Native Computing Foundation (CNCF) and the Kubernetes community to create the Certified Kubernetes Conformance Program. The Certified Kubernetes program officially launched today, and … Continue reading Putting the K in GKE
Enable HSTS in Akamai
What is HSTS? It stands for HTTP Strict Transport Security. Simply speaking, HSTS is a method that allows the browser to do http to https redirect. Why use HSTS? Security! As explained above, the http traffics only stay inside the machine, so it reduces the risk of exposing sensitive information in plain text to the Internet. … Continue reading Enable HSTS in Akamai
CICD on OpenShift Part One
I have successfully migrated 'Dilbert' from EC2 instance to OpenShift. Dilbert is an automation bot that we use to offload some daily operations. In this article, I will show you how it works. In the Dilbert project, I have one build configuration. For each version, I only build once. This to ensure only one binary … Continue reading CICD on OpenShift Part One
Simple version of CICD Workflow
Above is my simple version of CICD workflow that I use as a guidance in day to day work. A bit explanations on how to use it. The workflow has six stages and seven scenarios. Six Stages: Commit Change: When user commit changes to code repository. Build Binary: When CI server builds the binary to … Continue reading Simple version of CICD Workflow
Jackie Chen's IT Workshop 