HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
0answers
11 views

How to prevent MITM in mobile apps

I want to make sure that my mobile app is the only one making calls to my API. How to ensure that if softwares like Fiddler generate a HTTPs certificate (man-in-the-middle) and anyone is able to ...
-1
votes
0answers
17 views

How to redirect from within a HTTP page to a HTTPS page - IIS 8, URL Rewrite 2.0 Module

I have looked at the other answers on this site and on Google but nothing is quite helping me in my issue. I am running Windows Server 2012 with IIS 8.0 and the URL Rewrite 2.0 module installed. I ...
-1
votes
0answers
29 views

Kibana 3 on nginx with ssl [on hold]

I installed Kibana 3 on nginx with the nginx-auth-ldap module. And with the example nginx.conf provided by elasticsearch and added ssl support. But for some reason, when accessing kibana with https I ...
1
vote
2answers
34 views

Powershell HTTPS not working

I am a bit confused on how to configure certificate for my local host. My scenario is like: We've two windows 2012 servers (not joined in a domain) and I need to execute a powershell script remotely ...
0
votes
2answers
35 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
0
votes
0answers
26 views

Apache randomly stops serving HTTPS, but HTTP works just fine

We have this Apache on Windows Server 2012: Server version: Apache/2.4.9 (Win32) Apache Lounge VC10 Server built: Mar 17 2014 10:48:43 Most of the time, it works perfectly, but from time to time ...
0
votes
1answer
27 views

SSL Certificates from nginx only works in Windows IE and Chrome

I have a wildcard certificate and got it signed by AlphaSSL. I followed the steps from here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains to set it up on my nginx server which ...
0
votes
0answers
15 views

Squid: bypass url_rewrite_program when request is https

I have a url rewriter working in squid currently. The problem is that, while it works fine for HTTP, HTTPS requests obviously don't work, even when rewritten with the same URL (because my server would ...
-2
votes
0answers
13 views

Using ssl on open vpn server

So I'm getting crazy annoyed with the following problem. I have a Ubuntu 14.04 Server with OpenVPN acces server running on sub.domein.com . Now I can request different folders from the server with ...
0
votes
0answers
23 views

Rewriting .htaccess for https on subdomain

I'm currently hosting subdomain dev.example.com from a dev subfolder and using this .htaccess rules: RewriteEngine on RewriteCond %{HTTP_HOST} ^(www.)?dev.example.com$ RewriteCond %{REQUEST_URI} ...
8
votes
2answers
418 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
0
votes
0answers
20 views

SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long) on IIS [closed]

I was trying to set SSL in IIS 7.5 but after configuring all the required things when I browse application ssl_error_rx_record_too_long error appeared in Firefox. I created self signed certificate and ...
0
votes
1answer
21 views

HTTPS Redirect in IIS 7 Only Working on Localhost

I am trying to force SSL redirection on a website through IIS 7 (Server 2008) using the following: <rule name="Redirect to HTTPS" stopProcessing="true"> <match url="(.*)" /> ...
1
vote
0answers
37 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
0
votes
1answer
18 views

Https transparent proxy and SSL certificate validation

If I setup a transparent proxy for https connections using a SSL certificate signed by my local CA and distributed to all my active directory clients by GPO, may the client (browsers) reject or advise ...
0
votes
0answers
32 views

https no longer works and http keep looping for credential

Hopefully this noob question is not being asked already. My FTP site https://xxxxxx.xxx.com/xxx used to works well, until 2 weeks ago someone (authorized user, not intrusion) logged in to the ftp ...
0
votes
0answers
12 views

Automatic LAN authentication for HTTPS/HTTP sevice via Proxy

This is my situation: I have a LAN in my office that I want to connect entirely to an internet server via HTTPS. I want to log all the LAN's host injecting the session cookie in the header of ...
0
votes
1answer
36 views

Nginx - redirecting non-www to www, but not subdomains

I have many domains linked to the same php directory, and I need all of them to redirect from non-www,non-https to www,https. # Add www, if missing server { server_name ...
0
votes
0answers
14 views

Client getting HTTP response 502 Invalid HTTP Response over https

We have a web application written in .NET C# hosted in IIS 7. The client side is written in GWT (Javascript) and the application uses JSON as data transport. The site is accessible over https. We ...
0
votes
0answers
23 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
1
vote
1answer
42 views

Certificate Errors on “redirection” in DNS RPZ of https/ssl

I've set up a DNS RPZ where I "redirect" users to a walled garden using DNS RPZ records when users try to access a list of bad sites. Let's say a user tries to access badsite.com. The redirection to ...
0
votes
1answer
47 views

Apache always redirects http to https [closed]

I am running Apache 2.4.7 on Ubuntu 12.04. I have a site http://bharatkrishna.net/ and this is running off a machine at my home. I have forwarded ports 80 & 443 on my router. As you can see, when ...
3
votes
1answer
230 views

Has SHA256 but why is it not used?

After performing an upgrade on Apache and modssl, I get a security warning in the security logo of the URL bar in Chrome when visiting my website on Apache server: The site is using outdated ...
0
votes
0answers
21 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
2answers
45 views

Cannot set up https on microsoft azure VM

For over a week now I am trying to set up https to work with my owncloud hosted on a Microsoft Azure virtual machine (ubuntu server 14.04). I am using apache2. I have gone through every single ...
0
votes
1answer
24 views

Using Azure as infrastructure as a service, configuring HTTPS endpoints / load balancer

I am quiete now to the topic of routing traffic, since it's done by our hosting provider so far. I would like to setup some Virtual machines and configure HTTPS and Loadbalancing on Azure. I do pick ...
0
votes
0answers
37 views

IIS 8.5 reverse proxy https to http

I have IIS 8.5 using url rewrites to handle requests from example.domain.com:80 to a process serving content on port 8080, this works fine over normal http. All content is served fine. I'd like to be ...
1
vote
0answers
38 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
-1
votes
1answer
66 views

Https to http redirect for only one of multiple sites on the same server

I have several sites on a single server, and an SSL certificate. The problem is that i need to redirect all sites from https to http except one, which should be the only site using https. Say, ...
0
votes
1answer
17 views

Issue with creating an SSL certificate

I am having the following issue: There is a Terminal Server name TERM-SRV.example.com running Windows Server 2012 that hosts a site "https://example.com/RDWeb". There was a certificate that recently ...
0
votes
1answer
39 views

Apache: SSL and Non-SSL (without VirtualHosts?)

I have a web server and have two folders I would like to treat differently. One folder on the local filesystem should use SSL and the other should not, for example: /path/to/ssl/site ...
-1
votes
1answer
28 views

New domain and HTTPS redirects [duplicate]

I have a domain.co and just bought domain.com and want to use SSL on it. Having in mind this H5BP apache config for HTTP to HTTPS redirect: <IfModule mod_rewrite.c> RewriteEngine On ...
-1
votes
2answers
86 views

HTTPS redirect from a naked domain (example.com) to a full domain 'www.example.com' without an error?

I'm trying to Redirect non-www requests to www on Amazon Route 53. I made an S3 bucket with the name of the naked domain and configure the bucket properties to redirect from example.com to ...
4
votes
4answers
469 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...
0
votes
1answer
48 views

Nginx doesn't send certificate chain

I've got the following certificate (first one is my own, the other two are from Comodo PositiveSSL): -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIPPZlYpZLvxHV+Rsy+qSD/MA0GCSqGSIb3DQEBCwUAMIGQ ...
1
vote
0answers
39 views

Apache2 Subdomains www https proxypass

I have a quite complicated setup. At least for me, since I'm new to apache, mod_rewrite and all that stuff. What I want is this: remove all www prefixes redirect all subdomains to https, and so, ...
0
votes
0answers
29 views

Doku wiki cannot connect to fast cgi behind ngnix

I'm trying to configure dokuwiki with ngnix. I'm using the https setup: server { server_name wiki.example.co; root /var/www/dokuwiki; index doku.php; listen 443 ssl; keepalive_requests 10; ...
0
votes
1answer
57 views

Browser gets two different SSL certificates instead of one (IE only) [closed]

It seems the problem appears only for IE11 (Win) users, for other OS and browsers HTTPS connection works fine. IE11 firstly gets outdated SSL certificate warning You ignore warning, proceed anyway ...
3
votes
1answer
50 views

Proxy dropping custom headers with https

Problem : With HTTPS requests my proxy is dropping custom headers from the response : HTTP request : $ curl -I -x 127.0.0.1:5566 http://www.google.fr HTTP/1.1 200 OK ... X-Servedby: 50001 => My ...
0
votes
0answers
36 views

IIS 8.5 + WCF + SSL and local hostname

After setting up my Windows server, I am able to connect and view my WSDL via HTTP. I am also able to view my WSDL via HTTPS. However inside the HTTPS (and only for HTTPS) WSDL, the hostname is ...
1
vote
0answers
25 views

Google PageSpeed suggests compression - but my site is https

Google PageSpeed suggests to deliver some static files like e.g. JavaScript, CSS. But as our site is HTTPS only we disabled compression in our web server because of security reasons. As far as I ...
0
votes
1answer
127 views

Multiple domains and subdomains with SSL on single server with NGINX

I need to configure several domains on the same server, all with SSL and some of them being wildcard subdomains. I have the following domains pointing to same IP: projects.acme.com acme.server.com ...
0
votes
2answers
29 views

Redirect HTTP to HTTPs using .htaccess and mod_rewrite

I know there are plenty of tutorials online and posts here about redirecting HTTP to HTTPS using .htaccess. However, my problem is regarding the URL which will be changed during redirection. Apache2 ...
0
votes
0answers
22 views

HTTPS Push on redmine_git_hosting

This is the set up: Ruby 1.9 Rails 3.2 Redmine 2.6.1 jbox's redmine_git_hosting plugin Trying to use git repo through HTTPS. Clone works fine. Push starts and hangs at Counting objects: 3, done. ...
1
vote
2answers
50 views

Load Balancer, EC2 - HTTPS Connection

Ok this might be a rookie question but here's my scenario. I have a loadbalancer managing a single EC2 instance at the moment. I have an application running on that EC2 instance. What I like to ...
1
vote
0answers
10 views

Can mod_rewrite [P]roxy to an HTTPS url when the inbound request URL is HTTP?

I have a host (IIS6, running an implementation of mod_rewrite for windows, by a co called Micronovae. It works well) that has a site at http://some.host.com I also have another host (on Microsoft ...
-1
votes
1answer
53 views

PHP Session sharing between HTTP and HTTPS

I am setting up a shopping cart website however I am having issues with sharing PHP Sessions between HTTPS and HTTP. My secure address: https://secure.domain.com My regular address: http://domain.com ...
5
votes
1answer
498 views

Does cloudflare know the decrypted content when using a https connection?

CloudFlare provides ssl support. However, if a visitor visits a website protected by CloudFlare, is CloudFlare able to know the plain data transfered during this visit? There are a few SSL options: ...
2
votes
2answers
168 views

PFsense https connections unusably slow

I have a very strange issue with PFsense as router running in KVM with CentOS 7. https connections are incredibly slow (10KB/s or less), and uploads over https simply don't work; for example using ...
1
vote
1answer
148 views

Curl on Fedora does not accept Cloudflare https

Using curl on a clean vanilla Fedora 21 to retrieve a site hosted via the cloudflare https service gives an error: curl https://www.opencpu.org >> curl: (35) Cannot communicate securely with ...