HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

2
votes
1answer
45 views

I can't get https://sendsonar.com working but sendsonar.com and https://www.sendsonar.com work just fine

I'm trying to get our domain - https://sendsonar.com - to go to https://www.sendsonar.com but for some reason this is failing. Here's the curl output: yo@ubuntu-i386:~/Sonar$ curl -kvI ...
-2
votes
2answers
44 views

nginx force ssl exception

I am using Ubuntu 14.04 with nginx installed and SSL installed on main domain, which works fine. I have even parked 5-6 other domains with main domain. If I go to any of those domains, I get an SSL ...
-2
votes
1answer
30 views

Are connections on a private network secure enough to not use HTTPS? [on hold]

I have (for example) 2 digital ocean droplets that can talk through their local network. I can use the local ip and not the public ip. If I need to pass sensitive info between those two servers can I ...
-1
votes
1answer
14 views

How can I forward all http traffic to https using nginx and Plesk 12 [on hold]

This question has great answers for how to forward http to https on nginx, but Plesk (I'm using Plesk 12) introduces 2 gotchas. 1) it overwrites each domain's nginx.conf periodically - not helpful. ...
0
votes
1answer
22 views

Domain pointing to wrong DocumentRoot?

I was following this tutorial about installing an SSL cert on a ZPanel Ubuntu Install http://blog.arnas.web.id/?p=145 (I also enabled mod_ssl, which it doesn't mention in the post) The certificate ...
1
vote
1answer
68 views

Block website with HTTPS?

I hope my question is on topic on Server Fault. If not, please excuse me and point me into the right direction. Is it possible to block a site with HTTPS? I have a website that I would like to make ...
0
votes
1answer
24 views

RPC over HTTPS with Linux Web App

I have a PHP/MySQL web application that runs on a Linux server running postfix. I use a phpmailer script which I can configure to relay via IMAP/SSL for accounts with valid login credentials. I have ...
0
votes
0answers
33 views

Nginx: Prevent non-www address from redirecting to www?

My site uses both www and non-www addresses for our site (dcturano.com). The problem I'm having is that the server is redirecting non-www traffic to www traffic. How do I prevent this? server { ...
8
votes
2answers
365 views

HTTPS warning: works on desktop, warning on mobile

I installed a wildcard SSL certificate (*.vht.com) for my work and accessing the following website in chrome (or any desktop browser) https://tours.vht.com/fsviewer3/fss2.html works, but when trying ...
-1
votes
1answer
23 views

Apache SSL configuration does not take effect

I configured a site to be served via SSL on my server but it's not available at all. $ nmap localhost PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 80/tcp open http My firewall ...
1
vote
1answer
42 views

nginx ignore https for all but one domain

I've recently set up a VPS with a couple of websites running on it (all using different domains) using nginx to proxy requests to the correct application. I've a valid SSL certificate for one of ...
0
votes
1answer
35 views

nginx redirect loop with proxy_pass and $http + CloudFlare

My nginx configuration works great until I add a redirect that forces HTTPS. The working config before the redirect is is: server { listen 80; listen 443 default_server ssl; server_name ...
0
votes
1answer
25 views

How to change response of HTTPS request, or force a redirect from HTTPS to HTTP?

I work for an ISP. We implemented a system where if a subscriber runs out of money in his account, then his browser will only show a specific HTML page. From page subscriber could be found, for ...
0
votes
1answer
30 views

Where do I find the SSL configuration for a tomcat 6 web server?

I've inherited a small secure web application that runs on a single Tomcat 6 web server on a machine running Amazon Linux. I need to disable the SSLv3 fallback, but I just can't find where the HTTPS ...
1
vote
1answer
30 views

nginx and SSL redirect

I have a nginx server which I use as a proxy. I want to have all requests forwarded as normal http requests, expect request to api.mydomain.org, those request I want to run with ssl/https. This works ...
-1
votes
0answers
20 views

How to add SSL certificate to domain that is URL-frame redirected to AWS EC2 server

Currently running a node.js webapp with a NginX reverse proxy on an Amazon EC2 web server instance. Furthermore, I have a domain, call it example.com, which URL-frame redirects to this web server. ...
2
votes
1answer
39 views

HAProxy 1.5 SSL and many website

Actually I'm hosting hundred website on Apache2 with some HTTP and some HTTPS, I'm preparing a new hosting infrastructure and I'm using HAProxy to loadbalance all my HTTP and HTTPS query on my ...
-1
votes
1answer
58 views

Nginx Enable HTTPS/SSL when forwarding to other URL

Currently, I'm working with an AWS Ubuntu EC2 instance, running a Node.js app on port 3000, that has an Nginx reverse proxy. I have been trying to enable HTTPS and add a SSL certificate and I've been ...
0
votes
1answer
29 views

user agent in http or https request

Is there any way that I can differentiate, the HTTP or HTTPS packets are coming from browser or not ? specially for https request.There is User-Agent field in packet in Http,but I could not found ...
0
votes
2answers
63 views

Dockerfile separation of concerns for a secure apache httpd server with respect to SSL certification files

Issue: In a non-docker solution, the SSL certificates can be located in /etc/pki/CA/.... and with references to these in /etc/httpd/conf.d/*.conf files. How must these SSL certificates be ...
-1
votes
1answer
30 views

Redirection of http to https not working [duplicate]

I want to redirect my subdomain to https. My .htaccess file contains the following: RewriteEngine On RewriteCond %{HTTPS} !on RewriteRule (.*) https: //%{HTTP_HOST}%{REQUEST_URI} It's redirecting ...
0
votes
1answer
47 views

Configure firewall and proxy server or just firewall for outbound connections

I'm actually a software developer and I am working on a web application which uses Recaptcha. I am using Asp.Net C# in a web form application. I am having an issue with the server trying to verify ...
6
votes
1answer
625 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
1
vote
0answers
160 views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
-1
votes
1answer
47 views

Really struggling with nginx rewrites to https [closed]

I hope someone can help. I am new to ubuntu and nginx and have set up my own server (with the help of various guides around the internet) Here is my setup. ubuntu server 14.04, nginx, php5 fpm, ...
0
votes
3answers
73 views

Transparent proxy for HTTPS traffic

I'm looking for a proxy to intercept HTTP traffic na pass through HTTPS traffic. Burp can do that with SSL pass through. With that option, SSL traffic isn't modified or capture, but just tunneled. I ...
0
votes
1answer
92 views

nginx: Multiple cross-domain 301 redirects with different page addresses

I'm moving my old site over to a new domain, and with that new domain comes new naming conventions. I'm trying to figure out what would be the simplest way of accomplishing the following for roughly 8 ...
0
votes
2answers
76 views

Transparent proxy and HTTPS with squid

Is is possibile to use a transparent proxy to filter some domains without a man-in-the-middle approach? I would like to guarantee the certificate verification and user privacy, by other hand, I want ...
0
votes
2answers
85 views

AWS Beanstalk redirect entire application from http to https

I've been trying to figure this out for a while and have not had any luck. As I'm sure you guys are well aware, the aws load balancer forwards all https request onto the ec2 instance over port 80. I ...
1
vote
0answers
38 views

curl 7.21 does not correctly call a host with a host header on https

We found out that calling a host like following using curl 7.21 or 7.24 does produce an error in the apache config (we have multiple SSL Vhosts!). Whereas the same command runs smooth with curl 7.34 ...
-3
votes
1answer
46 views

Where to optain my client key for SSL decryption? [closed]

example.pcap is a traffic capture I have made on my local Linux box of and now I would like to decrypt it. tshark -o "ssl.desegment_ssl_records: TRUE" -o "ssl.desegment_ssl_application_data: ...
0
votes
0answers
30 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...
0
votes
0answers
33 views

How to Relay All HTTP Requests to Another Server

Here is the scenario I need to work with. We have devices which need to talk to web service. This web service is hosted elsewhere and is accessible via DynDNS. Due to limitations on the device and our ...
1
vote
1answer
92 views

Can TLSv1 / SNI be blocked by the network? (routers, firewalls, etc)

Our web site serves static content through a content delivery network (AWS CloudFront) which is configured to respond to a number of CNAMEs and use our SSL wildcard certificate for these hostnames. ...
0
votes
1answer
20 views

SSL Common Name Wildcard [duplicate]

I looked through the other questions and didn't really see anything specific to this. My boss bought a QNAP NAS server for our office and up until now it's been great to use. Up until I needed to ...
0
votes
1answer
30 views

How do I switch from http to https and back again with an Apache reverse proxy and WebSphere Application Server

I'm running a Spring Web App in WebSphere Application Server (WAS). WAS is listening on port 36500 using https, Apache is listening on port 80 using http. The protocols in use are out of my control ...
0
votes
2answers
70 views

SSL/HTTPS issue (no padlock icon) on Safari when using ngixn+unicorn

I have an application that runs on nginx+unicorn. This is how my server block looks like upstream rtdev{ # fail_timeout=0 means we always retry an upstream even if it failed # to return a good HTTP ...
0
votes
0answers
34 views

Install certificate chain on Konica Minolta C280

I am trying to install a certificate issued by our company CA on our Konica Minolta C280 printer. We have a company root ca installed on our desktops, which has issued an intermediate certificate, ...
0
votes
1answer
18 views

Allow HTTPS only for specific domains with pound

quick question here: I have trafic from several domains routed to a Pound Reverse Proxy. I have a valid certificate for one of these domain that I want accessible over HTTPS (this part I managed to ...
-1
votes
1answer
40 views

Error when using wget to https via proxy

My browser uses my PC's proxy setting. As far as I can see it uses some $http_URL. So, I put https_proxy=$http_URL http_proxy=$http_URL The http connection work fine wget $http_URL but I can't ...
-1
votes
0answers
28 views

Gerrit + built-in Jetty: HTTP to HTTPS redirect

For various reasons we decided to run Gerrit within the built-in Jetty servlet container and access it using HTTPS and SSH. How to setup the server to redirect/rewrite all HTTP requests to HTTPS? ...
0
votes
1answer
97 views

HAProxy: stop subdomains from redirecting to https

After editing my haproxy config. All my subdomains are now redirecting to https. I just want my domain.com to redirect to https not my subdomains. How do I stop this? Below is my redirect script. ...
0
votes
1answer
33 views

Https Nginx with Apache on :8080

I don't know if it is a dumb question. However, i got a debian server with nginx listening on port 80, nginx also forward all non-static content to apache2 running on 127.0.0.1:8080 I want my site ...
0
votes
0answers
21 views

Htaccess redirect all traffic https, except mobile. And rewrite to non-www [duplicate]

I'm trying to rewrite using htaccess all traffic over SSL (https). However my certificate gives an error on mobile, so I Want mobile traffic to go over the normal http protocol. This is my htaccess: ...
0
votes
0answers
18 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
0
votes
1answer
66 views

Forcing https redirect is rewriting all URLs to root directory and not appending latter half of URL

I'm forcing http to https with the following in .htaccess: ## Forcing https RewriteCond %{HTTPS} !^on$ RewriteRule (.*) https://website.com/$1 [R,L] Following that, I also have a redirect that ...
0
votes
1answer
54 views

apache rewrite rules for multimple domains | https://www

I have two applications configured on one apache (eg. example.com and test.net). Rewrite rules for those apps are the same (so in config file for domain example.com I've got this rules, and the same ...
11
votes
2answers
6k views

How can I tell if my website is vulnerable to CVE-2014-3566 (POODLE)?

Google announced a vulnerability in the SSLv3 protocol that ... allows the plaintext of secure connections to be calculated by a network attacker. This vulnerability has been given the ...
0
votes
2answers
46 views

How to setup a backup SSL apache server

In case of my MAIN server crashing, I'd like to be able to change the DNS IP address to another (BACKUP) server, in order to reduce the system's downtime. MAIN server = https:// MAIN_WEBSITE / ...
0
votes
0answers
44 views

Limit Plesk Panel (11.5) to a single domain?

We have a server which uses Plesk 11.5 to manage 30+ websites. Most of these websites are e-commerce and require PCI Compliance. These sites get flagged for port 8443 having an invalid SSL certificate ...