Tagged Questions

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
1answer
17 views

SSL Common Name Wildcard

I looked through the other questions and didn't really see anything specific to this. My boss bought a QNAP NAS server for our office and up until now it's been great to use. Up until I needed to ...
0
votes
1answer
14 views

How do I switch from http to https and back again with an Apache reverse proxy and WebSphere Application Server

I'm running a Spring Web App in WebSphere Application Server (WAS). WAS is listening on port 36500 using https, Apache is listening on port 80 using http. The protocols in use are out of my control ...
0
votes
1answer
12 views

SSL/HTTPS issue on Safari when using ngixn+unicorn

I have an application that runs on nginx+unicorn. This is how my server block looks like upstream rtdev{ # fail_timeout=0 means we always retry an upstream even if it failed # to return a good HTTP ...
0
votes
0answers
16 views

Install certificate chain on Konica Minolta C280

I am trying to install a certificate issued by our company CA on our Konica Minolta C280 printer. We have a company root ca installed on our desktops, which has issued an intermediate certificate, ...
0
votes
1answer
10 views

Allow HTTPS only for specific domains with pound

quick question here: I have trafic from several domains routed to a Pound Reverse Proxy. I have a valid certificate for one of these domain that I want accessible over HTTPS (this part I managed to ...
0
votes
1answer
22 views

Error when using wget to https via proxy

My browser uses my PC's proxy setting. As far as I can see it uses some $http_URL. So, I put https_proxy=$http_URL http_proxy=$http_URL The http connection work fine wget $http_URL but I can't ...
0
votes
0answers
8 views

Gerrit + built-in Jetty: HTTP to HTTPS redirect

For various reasons we decided to run Gerrit within the built-in Jetty servlet container and access it using HTTPS and SSH. How to setup the server to redirect/rewrite all HTTP requests to HTTPS? ...
0
votes
1answer
24 views

HAProxy: stop subdomains from redirecting to https

After editing my haproxy config. All my subdomains are now redirecting to https. I just want my domain.com to redirect to https not my subdomains. How do I stop this? Below is my redirect script. ...
0
votes
1answer
25 views

Https Nginx with Apache on :8080

I don't know if it is a dumb question. However, i got a debian server with nginx listening on port 80, nginx also forward all non-static content to apache2 running on 127.0.0.1:8080 I want my site ...
0
votes
0answers
19 views

Htaccess redirect all traffic https, except mobile. And rewrite to non-www [duplicate]

I'm trying to rewrite using htaccess all traffic over SSL (https). However my certificate gives an error on mobile, so I Want mobile traffic to go over the normal http protocol. This is my htaccess: ...
0
votes
0answers
13 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
0
votes
1answer
28 views

Forcing https redirect is rewriting all URLs to root directory and not appending latter half of URL

I'm forcing http to https with the following in .htaccess: ## Forcing https RewriteCond %{HTTPS} !^on$ RewriteRule (.*) https://website.com/$1 [R,L] Following that, I also have a redirect that ...
0
votes
1answer
40 views

apache rewrite rules for multimple domains | https://www

I have two applications configured on one apache (eg. example.com and test.net). Rewrite rules for those apps are the same (so in config file for domain example.com I've got this rules, and the same ...
10
votes
2answers
4k views

How can I tell if my website is vulnerable to CVE-2014-3566 (POODLE)?

Google announced a vulnerability in the SSLv3 protocol that ... allows the plaintext of secure connections to be calculated by a network attacker. This vulnerability has been given the ...
0
votes
2answers
44 views

How to setup a backup SSL apache server

In case of my MAIN server crashing, I'd like to be able to change the DNS IP address to another (BACKUP) server, in order to reduce the system's downtime. MAIN server = https:// MAIN_WEBSITE / ...
0
votes
0answers
23 views

Limit Plesk Panel (11.5) to a single domain?

We have a server which uses Plesk 11.5 to manage 30+ websites. Most of these websites are e-commerce and require PCI Compliance. These sites get flagged for port 8443 having an invalid SSL certificate ...
1
vote
1answer
42 views

How can I enable outgoing HTTP/HTTPS requests on an EC2 in a public subnet within a VPC on Amazon AWS

I set up a VPC using scenario 2 from the AWS Docs: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html I've assigned an Elastic IP to an EC2 instance running in a Public Subnet. ...
0
votes
1answer
49 views

Nginx HTTPS www to non-www redirect issue

I'm having some issues redirecting from HTTPS www to HTTPS non-www with my nginx config. I'm following the directions provided at (Remove "www" and redirect to "https" with ...
0
votes
1answer
469 views

“SSL input filter read failed” Apache and 443

I have a little problem with my apache conf. When I read the error log, here is what I can see: [client xxx.xxx.xx.xx] AH01964: Connection to child 1 established (server www.mywebsite.com:443) ...
0
votes
0answers
16 views

Apache configuration redirect using only redirect, not rewrite

PS: this is the 2nd part of the question originally posted here. I'd like to disable the HSTS header completely for specific virtual hosts. I have (per recommendation) a redirect in the 443 container ...
0
votes
0answers
7 views

Accessing a particular directory via HTTPS [migrated]

I am trying to create a particular directory on my LAMP installation folder to be HTTPS enabled. I was reading about that and i found out it can be done in httpd.conf. However i do not have https.conf ...
0
votes
1answer
44 views

Root certificate invalid on a WHM site [closed]

I am a newbie in SSL certificates and was given the task on troubleshooting a site's WHM page that uses https but it displays an red "x" on the https section of the URL. On Google Chrome, details of ...
0
votes
1answer
1k views

upstream prematurely closed connection while reading response header from upstream

I am having issues setting up SSL for my Jenkins CI server. I use Jenkins behind nginx for a reverse proxy. I am getting these upstream prematurely closed connection while reading response header from ...
0
votes
0answers
22 views

Apache+subversion Kerberos Authorization Active Directory

I have configured Apache+Subversion with Kerberos. Here's my config: SSLRequireSSL DAV svn SVNPATH /var/www/svn/testrepo AuthType Kerberos Krb5KeyTab /etc/krb5.keytab KrbAuthRelams ...
0
votes
1answer
71 views

Nginx Reverse Proxy: servername.domain.com reverse to http://ip.add.res.s/location/App

I need a little help sorting out how to configure a reverse proxying load balancer in nginx. Basically, I have two web applications that live under subdirectories on Apache servers, /flavors/Chocolate ...
-1
votes
0answers
75 views

Unable to get SSL working on Apache 2.4 (Ubuntu 14.04) VM

I am following this guide: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 To set up a self-signed SSL certificate on my VM. In the end, I ...
0
votes
1answer
41 views

I want to proxy only HTTP but I'm not sure what to do with HTTPS traffic

I have a DNS server that resolves all traffic to my Squid server that will proxy all HTTP traffic transparently (it must be transparent or it will drop a invalid url error) which works great. The ...
2
votes
1answer
104 views

cUrl for an HTTPS address/domain times out unless previously accessed from browser

I've lost a couple days to this problem and hope it sparks a thought from someone. I am integrating several systems together using Powershell scripts. One of the two services I am connecting to ...
0
votes
1answer
32 views

301 Redirect Root and Only Root (“/”) from https to http

I have found several Q/As on how to redirect root only, how to redirect from https to http (using .htaccess). But there was no question that merged both. And this answer is too dirty: ...
0
votes
1answer
27 views

apt-get don't support https and can't install the necessery package to do it

On Linux 3.2.0-4-amd64 #1 SMP Debian 3.2.60-1+deb7u3 x86_64 I'm using Ansible (software to manage and configure machines) to install Passenger and copy the sources.list from another machine. To ...
-1
votes
0answers
18 views

Cookie is not deleted by HTTP header [migrated]

My project is using an external authentication provider that sets a cookie if a user is logged in. To log out, I have to delete that cookie. As far as I can tell, the Set-Cookie header is correct, but ...
1
vote
1answer
165 views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
0
votes
1answer
32 views

Unable to use https on Amazon loadbalancer

I have a wild card certificate for a domain and have configured it on a load balancer. The load balancer has an EC2 instance assigned. I am using the domain name to point to the load balancer through ...
0
votes
1answer
88 views

Iptables drop outgoing HTTPs GET request matches string in payload [closed]

I'm using CentOS 5.8(final), kernel 2.6.18-308.8.2, iptables v1.3.5 I want to block a HTTPs POST/GET request to outside which matches a string (defined as ABCxyz) in the POST/GET payload. I tried to ...
-4
votes
2answers
35 views

Security certificate only displays with HTTPS and not HTTP [closed]

I have a security certificate installed on my Ubuntu server, running Apache. When I visit my site using the HTTPS protocol, the green certificate appears at the start of the URL. However, when I use ...
2
votes
2answers
108 views

Apache HSTS exception for some virtual hosts

In the global config section for Apache 2.2.15, I have the following (per recommendation) <IfModule mod_headers.c> Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" ...
1
vote
0answers
30 views

nginx: HSTS on a page with www-authentication

Is it possible, on nginx, to send a Strict-Transport-Security header, even on pages that require WWW-Authentication? When I have both auth_basic and add_header Strict-Transport-Security ...
0
votes
2answers
40 views

lighttpd - redirect everything to https

I have tried to use the example from this wiki page - $HTTP["scheme"] == "http" { # capture vhost name with regex conditiona -> %0 in redirect pattern # must be the most inner block to ...
0
votes
0answers
179 views

IIS Rewrite Rule in web.config to redirect HTTPS requests to HTTP

I need to redirect all https requests to http, for example, if someone visits https://www.example.com/another-page/ to http://www.example.com/another-page/ I have the following rewrite rule in my ...
0
votes
4answers
67 views

Redirect HTTPS traffic without changing the HOSTS file

I have a website hosted on 2 servers. The website is SSL based. I'd like to monitor (load the main page and look for a certain string) the website per server using a local Opsview. Meaning I need to ...
0
votes
0answers
42 views

Firefox, Chrome - can't start https google services

I'm using MIKROTIK as proxy, but using Firefox or Chrome I have following problems: https google can't show almost any of pictures found https gmail stuck on progress bar before mailbox is loaded ...
0
votes
0answers
83 views

Tuning Apache KeepAlive Timeout for HTTPS

My website forces HTTPS everywhere and has an average first load time of 3-5 seconds. Thanks to caching, repeat load time is 0.8 seconds. The SSL negotiation takes 150-300ms on my server, so I want ...
0
votes
1answer
53 views

How to add HTTPS to Elastic Load Balancer?

I'm using boto to create an Apache http server that "hides" behind an AWS Elastic Load Balancer (ELB). However, the ELB DNS address is functional only when I specify port 80 (http) in its security ...
0
votes
0answers
12 views

Internal IIS http to https

I have setup a test environment (all Windows Server 2012 boxes) with a Domain Controller and an Exchange Server 2013. On the Exchange Server, I have setup in IIS redirects for OWA. This works fine ...
0
votes
0answers
53 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
0
votes
0answers
96 views

Cannot Access web Interface https Zimbra from WAN

I have a zimbra 8 installed on Ubuntu 12.04 LTS I can access to web interface (https) from LAN. I just type https://192.168.1.10/ in the Firefox. But if i try to access from other PC to my WAN IP ...
3
votes
1answer
430 views

Can a Reverse Proxy use SNI with SSL pass through?

I need to serve several applications over https using one external ip address. The ssl certificates should not be managed on the reverse proxy. They are installed on the application servers. Can a ...
-1
votes
2answers
65 views

.htaccess file isn't working for https

I have simple .htaccess file to forbid access to a directory as : order allow,deny deny from all Well, it doesn't work with SSL and show the content of directory if client access the directory ...
0
votes
1answer
230 views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
2
votes
3answers
103 views

Steps to produce a self-signed certficate(s) that, after being trusted, will work for two different IPs without a security warning

We have a test server that I'm trying to change over to HTTPS/SSL, and it has both an internal IP and an external IP. We have to use self-signed certificates for this particular server. There was ...