HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
2answers
22 views

Load Balancer, EC2 - HTTPS Connection

Ok this might be a rookie question but here's my scenario. I have a loadbalancer managing a single EC2 instance at the moment. I have an application running on that EC2 instance. What I like to ...
1
vote
0answers
4 views

Can mod_rewrite [P]roxy to an HTTPS url when the inbound request URL is HTTP?

I have a host (IIS6, running an implementation of mod_rewrite for windows, by a co called Micronovae. It works well) that has a site at http://some.host.com I also have another host (on Microsoft ...
-1
votes
1answer
14 views

PHP Session sharing between HTTP and HTTPS

I am setting up a shopping cart website however I am having issues with sharing PHP Sessions between HTTPS and HTTP. My secure address: https://secure.domain.com My regular address: http://domain.com ...
5
votes
1answer
450 views

Does cloudflare know the decrypted content when using a https connection?

CloudFlare provides ssl support. However, if a visitor visits a website protected by CloudFlare, is CloudFlare able to know the plain data transfered during this visit? There are a few SSL options: ...
2
votes
2answers
48 views

PFsense https connections unusably slow

I have a very strange issue with PFsense as router running in KVM with CentOS 7. https connections are incredibly slow (10KB/s or less), and uploads over https simply don't work; for example using ...
0
votes
0answers
25 views

Deterministic load balancing [on hold]

We have a Java app, which handles both raw TCP and HTTPS traffic (running on the same port). The app is designed in a way that both TCP and HTTPS must run on the same server. We also has groups of ...
1
vote
1answer
28 views

Curl on Fedora does not accept Cloudflare https

Using curl on a clean vanilla Fedora 21 to retrieve a site hosted via the cloudflare https service gives an error: curl https://www.opencpu.org >> curl: (35) Cannot communicate securely with ...
-1
votes
1answer
23 views

How to set up htaccess to transfer from http to https? [duplicate]

This is my .htaccess - site does redirect to HTTPS but still gives: Your connection to the site is encrypted, but Google Chrome has detected mixed content on the page. How to avoid this? Thank you. ...
2
votes
2answers
105 views
+100

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
0
votes
0answers
64 views

wordpress 4.1 force http intp https with .htaccess

I would like to force https with correct Comodo Certificate, in the website www.cabdrome.com with .htaccess (and not only from php). My webserver suggest to use these row to force HTTPS for an entire ...
0
votes
1answer
51 views

Setting up basic proxy from https to http via Apache

I need to proxy some remote api https://example.com/api/ to be accessible locally as http://localhost/api/ I tried putting this line in httpd.conf: ProxyPass /api/ https://example.com/api/ ...
-1
votes
1answer
33 views

Redirect https to http in apache 2.2 on CentOS 6 [duplicate]

I have apache2.2 on CentOS 6, having SSL enabled in configuration block. It serves the SSL pages for a host name first.defaultdomain.com (example) which is mapped to the default IP of the server. ...
0
votes
1answer
16 views

Why tomcat on linux needs to build APR and not download

I am trying to install APR on Ubuntu Linux. I found that tomcat provides a downloadable APR package for windows but i cannot find a downloadable version for Linux. The tomcat site gives instructions ...
0
votes
1answer
40 views

A way to whitelist (or blacklist) https connections

I am trying to create a captive portal using WifiDog, AuthPuppy and Squid. We want to provide access only to a selected number of resources, e.g 2-3 websites and the App Stores (Apple and Google). ...
1
vote
1answer
24 views

Force https before authentification - no access to vhost

I am a beginner when it comes to servers and I have a problem similar to this one. When accessing the desired webpage, .htpasswd prompts me for an authentification before I am redirected to https. ...
0
votes
1answer
35 views

HTTPS access to S3 bucket through Cloudflare

I'm trying to use Cloudflare to provide https access to an s3 bucket. I've setup the CNAME entry in Cloudfront with pointing to the bucket and I've verified I can access it via http but when I try and ...
1
vote
0answers
52 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
0
votes
0answers
108 views

Chef Issue bootstrapping windows VM using winrm via https

Chef Server(RHEL 6.5): 11.16.4 Windows endpoint: Windows 2008 The bootstrapping works fine over http (with winrm config allowUnEncrypeted = true and basic auth = true). Now we are trying same thing ...
-2
votes
2answers
41 views

What will happen if I force https for my image hosting site via .htaccess but embed an image with an http link? [closed]

I've built myself a small image hosting service for my own projects and I recently switched the site to https which works perfectly. Now I made a .htaccess file with a rewrite rule as described here ...
0
votes
0answers
29 views

Squid delays logs for some CONNECT requests for Chrome clients

I'm running Squid 3.3.8 on Ubuntu 14.04.1 as a regular proxy without any SSL intercept tricks. When I visit a HTTPS site on a client using the Internet Explorer, all CONNECT requests are logged just ...
6
votes
2answers
261 views

What effect does https traffic have on web cache proxy servers?

I just took two university courses on computer security and internet programming. I was thinking about this the other day: Web cache proxy servers cache popular content from servers on the web. This ...
0
votes
0answers
99 views

using nodejs https module with ssl certificate proxy with nginx without adding ssl certificate in nginx

I am using nodejs https module with nginx proxy. I have multiple ssl certificate and I want to run all https sites using node without adding all certificates in nginx ssl server. Is any way to proxy ...
1
vote
0answers
29 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
0
votes
1answer
36 views

Signed ssl certificate not working on EBS AWS for Java Spring webapp

I am looking for help getting HTTPS working on my AWS EBS wepapp. I have loaded the cert into AWS however I still cannot connect to my site via HTTPS. My application uses Spring 4.1 and Spring ...
2
votes
1answer
67 views

I can't get https://sendsonar.com working but sendsonar.com and https://www.sendsonar.com work just fine

I'm trying to get our domain - https://sendsonar.com - to go to https://www.sendsonar.com but for some reason this is failing. Here's the curl output: yo@ubuntu-i386:~/Sonar$ curl -kvI ...
-2
votes
2answers
102 views

nginx force ssl exception

I am using Ubuntu 14.04 with nginx installed and SSL installed on main domain, which works fine. I have even parked 5-6 other domains with main domain. If I go to any of those domains, I get an SSL ...
-2
votes
1answer
32 views

Are connections on a private network secure enough to not use HTTPS? [closed]

I have (for example) 2 digital ocean droplets that can talk through their local network. I can use the local ip and not the public ip. If I need to pass sensitive info between those two servers can I ...
0
votes
1answer
56 views

Domain pointing to wrong DocumentRoot?

I was following this tutorial about installing an SSL cert on a ZPanel Ubuntu Install http://blog.arnas.web.id/?p=145 (I also enabled mod_ssl, which it doesn't mention in the post) The certificate ...
1
vote
1answer
72 views

Block website with HTTPS?

I hope my question is on topic on Server Fault. If not, please excuse me and point me into the right direction. Is it possible to block a site with HTTPS? I have a website that I would like to make ...
0
votes
2answers
43 views

RPC over HTTPS with Linux Web App

I have a PHP/MySQL web application that runs on a Linux server running postfix. I use a phpmailer script which I can configure to relay via IMAP/SSL for accounts with valid login credentials. I have ...
0
votes
0answers
42 views

Nginx: Prevent non-www address from redirecting to www?

My site uses both www and non-www addresses for our site (dcturano.com). The problem I'm having is that the server is redirecting non-www traffic to www traffic. How do I prevent this? server { ...
8
votes
2answers
391 views

HTTPS warning: works on desktop, warning on mobile

I installed a wildcard SSL certificate (*.vht.com) for my work and accessing the following website in chrome (or any desktop browser) https://tours.vht.com/fsviewer3/fss2.html works, but when trying ...
-1
votes
1answer
45 views

Apache SSL configuration does not take effect

I configured a site to be served via SSL on my server but it's not available at all. $ nmap localhost PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 80/tcp open http My firewall ...
1
vote
1answer
66 views

nginx ignore https for all but one domain

I've recently set up a VPS with a couple of websites running on it (all using different domains) using nginx to proxy requests to the correct application. I've a valid SSL certificate for one of ...
0
votes
1answer
95 views

nginx redirect loop with proxy_pass and $http + CloudFlare

My nginx configuration works great until I add a redirect that forces HTTPS. The working config before the redirect is is: server { listen 80; listen 443 default_server ssl; server_name ...
0
votes
1answer
31 views

How to change response of HTTPS request, or force a redirect from HTTPS to HTTP?

I work for an ISP. We implemented a system where if a subscriber runs out of money in his account, then his browser will only show a specific HTML page. From page subscriber could be found, for ...
0
votes
1answer
39 views

Where do I find the SSL configuration for a tomcat 6 web server?

I've inherited a small secure web application that runs on a single Tomcat 6 web server on a machine running Amazon Linux. I need to disable the SSLv3 fallback, but I just can't find where the HTTPS ...
1
vote
1answer
41 views

nginx and SSL redirect

I have a nginx server which I use as a proxy. I want to have all requests forwarded as normal http requests, expect request to api.mydomain.org, those request I want to run with ssl/https. This works ...
2
votes
1answer
77 views

HAProxy 1.5 SSL and many website

Actually I'm hosting hundred website on Apache2 with some HTTP and some HTTPS, I'm preparing a new hosting infrastructure and I'm using HAProxy to loadbalance all my HTTP and HTTPS query on my ...
-1
votes
1answer
88 views

Nginx Enable HTTPS/SSL when forwarding to other URL

Currently, I'm working with an AWS Ubuntu EC2 instance, running a Node.js app on port 3000, that has an Nginx reverse proxy. I have been trying to enable HTTPS and add a SSL certificate and I've been ...
0
votes
1answer
55 views

user agent in http or https request

Is there any way that I can differentiate, the HTTP or HTTPS packets are coming from browser or not ? specially for https request.There is User-Agent field in packet in Http,but I could not found ...
0
votes
2answers
131 views

Dockerfile separation of concerns for a secure apache httpd server with respect to SSL certification files

Issue: In a non-docker solution, the SSL certificates can be located in /etc/pki/CA/.... and with references to these in /etc/httpd/conf.d/*.conf files. How must these SSL certificates be ...
-1
votes
1answer
47 views

Redirection of http to https not working [duplicate]

I want to redirect my subdomain to https. My .htaccess file contains the following: RewriteEngine On RewriteCond %{HTTPS} !on RewriteRule (.*) https: //%{HTTP_HOST}%{REQUEST_URI} It's redirecting ...
0
votes
1answer
84 views

Configure firewall and proxy server or just firewall for outbound connections

I'm actually a software developer and I am working on a web application which uses Recaptcha. I am using Asp.Net C# in a web form application. I am having an issue with the server trying to verify ...
6
votes
1answer
731 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
1
vote
0answers
543 views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
-1
votes
1answer
52 views

Really struggling with nginx rewrites to https [closed]

I hope someone can help. I am new to ubuntu and nginx and have set up my own server (with the help of various guides around the internet) Here is my setup. ubuntu server 14.04, nginx, php5 fpm, ...
0
votes
3answers
86 views

Transparent proxy for HTTPS traffic

I'm looking for a proxy to intercept HTTP traffic na pass through HTTPS traffic. Burp can do that with SSL pass through. With that option, SSL traffic isn't modified or capture, but just tunneled. I ...
0
votes
1answer
158 views

nginx: Multiple cross-domain 301 redirects with different page addresses

I'm moving my old site over to a new domain, and with that new domain comes new naming conventions. I'm trying to figure out what would be the simplest way of accomplishing the following for roughly 8 ...
1
vote
2answers
137 views

Transparent proxy and HTTPS with squid

Is is possibile to use a transparent proxy to filter some domains without a man-in-the-middle approach? I would like to guarantee the certificate verification and user privacy, by other hand, I want ...