HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
1answer
18 views

Filter HTTPS content & enforce Captive Portal without MITM proxy

My church wants to start providing free WiFi to our guests, but with 2 requirements: Inappropriate content (such as Pornography and Warez) must be filtered out. The end-user must create an account ...
0
votes
0answers
16 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...
0
votes
0answers
14 views

Gray triangle on firefox over HTTPS [on hold]

I've been searching on the net for a while now but don't really seem to find the solution. I have an TLS connection to app.spiderdoc.co that works on Chrome and Safari but I have a minor issue on ...
0
votes
1answer
26 views

Public Key Pinning headers correct setup and failure test

I'm trying to set up Public Key Pinning header in nginx 1.7.12 (Public-Key-Pins) but I seem to be missing something. I know how to generate the relevant pin-sha256 fields. I thought it will work like ...
0
votes
1answer
31 views

How can I use a virtual host to redirect https subfolders to different ports in apache?

I have a web service running on port 8112 and I can redirect a subdomain eg http://myapp.mydomain.com to 127.0.0.1:8112 using a virtual host by setting the ServerAlias, proxypass and proxypassreverse ...
0
votes
2answers
64 views

HTTP to HTTPS redirect loop

Firstly, I know there is a million of copies of this question already but after hours of trying solutions from all of them I've got nowhere. So I want to redirect all incoming HTTP traffic on my ...
0
votes
0answers
4 views

Schema links and HTTPS [migrated]

In the process of moving to 100% HTTPS on a site, I performed a site-wide search for http:// in an effort to find potential problems. One common class of instances included "schema links" (certainly ...
1
vote
0answers
11 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
0
votes
1answer
13 views

IIS: logging client certificate's thumbprint

On IIS 7.5, with client authentication by certificate, how to enable logging of client certificate's thumbprint (or serial, or subject dn) to IIS log?
3
votes
1answer
62 views

nginx: browser rewriting http request to https when not wanted

So I have an nginx config that looks like this: ## Redirects all HTTP traffic to the HTTPS host server { listen *:80; server_name me.example.com; server_tokens off; return 301 ...
0
votes
1answer
21 views

How to make apache, node.js, beego and https work nicely together?

I have a server who I want to serve up two different sites: a.example.com should be directed to node.js listening on 8081/8443 b.example.com should be directed to beego listening on 8081/8444 I ...
0
votes
0answers
25 views

RedHat 6.6, Apache 2.2.15 and Varnish 4.0.3: Status Code 403 Forbidden on HTTPS/SSL configuration

I'm trying to configure Varnish to work with my SSL Apache configuration. Here's an extract of my httpd.conf file: Listen 8080 ExtendedStatus On NameVirtualHost 192.168.xxx.123:8080 Then I have ...
1
vote
0answers
23 views

WinRM HTTPS Connection to Windows 8 Systems

I have a couple virtual Windows 8 clients that I will be using to run some tests against a server. I set up WinRM so I can easily pull the data back from all the clients for analysis but the data ...
0
votes
2answers
72 views

nginx redirect http to https not working

I am trying to reroute from http to https. For example you visit example.com and you will be automatically redirected to https://example.com. I tryed using this one: server { listen ...
0
votes
0answers
15 views

HTTPS Config for symfony2

I have followed this tutorial for setting up https on an ubuntu server: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 I have ended up ...
0
votes
2answers
32 views

How to force HTTPS connections? [closed]

I am running apache on an Ubuntu 14.04 home server. The server is behind a router so all ports need to be forwarded for them to be used. I have forwarded port 443 for HTTPS, but did not forward port ...
1
vote
2answers
53 views

Powershell HTTPS not working

I am a bit confused on how to configure certificate for my local host. My scenario is like: We've two windows 2012 servers (not joined in a domain) and I need to execute a powershell script remotely ...
0
votes
2answers
58 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
0
votes
1answer
57 views

Apache randomly stops serving HTTPS, but HTTP works just fine

We have this Apache on Windows Server 2012: Server version: Apache/2.4.9 (Win32) Apache Lounge VC10 Server built: Mar 17 2014 10:48:43 Most of the time, it works perfectly, but from time to time ...
0
votes
1answer
35 views

SSL Certificates from nginx only works in Windows IE and Chrome

I have a wildcard certificate and got it signed by AlphaSSL. I followed the steps from here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains to set it up on my nginx server which ...
0
votes
0answers
31 views

Squid: bypass url_rewrite_program when request is https

I have a url rewriter working in squid currently. The problem is that, while it works fine for HTTP, HTTPS requests obviously don't work, even when rewritten with the same URL (because my server would ...
0
votes
0answers
26 views

Rewriting .htaccess for https on subdomain

I'm currently hosting subdomain dev.example.com from a dev subfolder and using this .htaccess rules: RewriteEngine on RewriteCond %{HTTP_HOST} ^(www.)?dev.example.com$ RewriteCond %{REQUEST_URI} ...
8
votes
2answers
552 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
0
votes
1answer
34 views

HTTPS Redirect in IIS 7 Only Working on Localhost

I am trying to force SSL redirection on a website through IIS 7 (Server 2008) using the following: <rule name="Redirect to HTTPS" stopProcessing="true"> <match url="(.*)" /> ...
1
vote
0answers
56 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
0
votes
1answer
23 views

Https transparent proxy and SSL certificate validation

If I setup a transparent proxy for https connections using a SSL certificate signed by my local CA and distributed to all my active directory clients by GPO, may the client (browsers) reject or advise ...
0
votes
0answers
15 views

Automatic LAN authentication for HTTPS/HTTP sevice via Proxy

This is my situation: I have a LAN in my office that I want to connect entirely to an internet server via HTTPS. I want to log all the LAN's host injecting the session cookie in the header of ...
0
votes
1answer
51 views

Nginx - redirecting non-www to www, but not subdomains

I have many domains linked to the same php directory, and I need all of them to redirect from non-www,non-https to www,https. # Add www, if missing server { server_name ...
0
votes
0answers
19 views

Client getting HTTP response 502 Invalid HTTP Response over https

We have a web application written in .NET C# hosted in IIS 7. The client side is written in GWT (Javascript) and the application uses JSON as data transport. The site is accessible over https. We ...
0
votes
0answers
28 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
1
vote
1answer
54 views

Certificate Errors on “redirection” in DNS RPZ of https/ssl

I've set up a DNS RPZ where I "redirect" users to a walled garden using DNS RPZ records when users try to access a list of bad sites. Let's say a user tries to access badsite.com. The redirection to ...
0
votes
1answer
66 views

Apache always redirects http to https [closed]

I am running Apache 2.4.7 on Ubuntu 12.04. I have a site http://bharatkrishna.net/ and this is running off a machine at my home. I have forwarded ports 80 & 443 on my router. As you can see, when ...
3
votes
1answer
255 views

Has SHA256 but why is it not used?

After performing an upgrade on Apache and modssl, I get a security warning in the security logo of the URL bar in Chrome when visiting my website on Apache server: The site is using outdated ...
0
votes
0answers
25 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
2answers
71 views

Cannot set up https on microsoft azure VM

For over a week now I am trying to set up https to work with my owncloud hosted on a Microsoft Azure virtual machine (ubuntu server 14.04). I am using apache2. I have gone through every single ...
0
votes
1answer
31 views

Using Azure as infrastructure as a service, configuring HTTPS endpoints / load balancer

I am quiete now to the topic of routing traffic, since it's done by our hosting provider so far. I would like to setup some Virtual machines and configure HTTPS and Loadbalancing on Azure. I do pick ...
0
votes
0answers
46 views

IIS 8.5 reverse proxy https to http

I have IIS 8.5 using url rewrites to handle requests from example.domain.com:80 to a process serving content on port 8080, this works fine over normal http. All content is served fine. I'd like to be ...
1
vote
0answers
44 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
-1
votes
1answer
72 views

Https to http redirect for only one of multiple sites on the same server

I have several sites on a single server, and an SSL certificate. The problem is that i need to redirect all sites from https to http except one, which should be the only site using https. Say, ...
0
votes
1answer
18 views

Issue with creating an SSL certificate

I am having the following issue: There is a Terminal Server name TERM-SRV.example.com running Windows Server 2012 that hosts a site "https://example.com/RDWeb". There was a certificate that recently ...
0
votes
1answer
43 views

Apache: SSL and Non-SSL (without VirtualHosts?)

I have a web server and have two folders I would like to treat differently. One folder on the local filesystem should use SSL and the other should not, for example: /path/to/ssl/site ...
-1
votes
1answer
31 views

New domain and HTTPS redirects [duplicate]

I have a domain.co and just bought domain.com and want to use SSL on it. Having in mind this H5BP apache config for HTTP to HTTPS redirect: <IfModule mod_rewrite.c> RewriteEngine On ...
-1
votes
2answers
96 views

HTTPS redirect from a naked domain (example.com) to a full domain 'www.example.com' without an error?

I'm trying to Redirect non-www requests to www on Amazon Route 53. I made an S3 bucket with the name of the naked domain and configure the bucket properties to redirect from example.com to ...
4
votes
4answers
501 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...
0
votes
1answer
61 views

Nginx doesn't send certificate chain

I've got the following certificate (first one is my own, the other two are from Comodo PositiveSSL): -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIPPZlYpZLvxHV+Rsy+qSD/MA0GCSqGSIb3DQEBCwUAMIGQ ...
1
vote
0answers
44 views

Apache2 Subdomains www https proxypass

I have a quite complicated setup. At least for me, since I'm new to apache, mod_rewrite and all that stuff. What I want is this: remove all www prefixes redirect all subdomains to https, and so, ...
0
votes
0answers
34 views

Doku wiki cannot connect to fast cgi behind ngnix

I'm trying to configure dokuwiki with ngnix. I'm using the https setup: server { server_name wiki.example.co; root /var/www/dokuwiki; index doku.php; listen 443 ssl; keepalive_requests 10; ...
0
votes
1answer
57 views

Browser gets two different SSL certificates instead of one (IE only) [closed]

It seems the problem appears only for IE11 (Win) users, for other OS and browsers HTTPS connection works fine. IE11 firstly gets outdated SSL certificate warning You ignore warning, proceed anyway ...
3
votes
1answer
67 views

Proxy dropping custom headers with https

Problem : With HTTPS requests my proxy is dropping custom headers from the response : HTTP request : $ curl -I -x 127.0.0.1:5566 http://www.google.fr HTTP/1.1 200 OK ... X-Servedby: 50001 => My ...
0
votes
0answers
44 views

IIS 8.5 + WCF + SSL and local hostname

After setting up my Windows server, I am able to connect and view my WSDL via HTTP. I am also able to view my WSDL via HTTPS. However inside the HTTPS (and only for HTTPS) WSDL, the hostname is ...