HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
0answers
9 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
0
votes
1answer
22 views

Forcing https redirect is rewriting all URLs to root directory and not appending latter half of URL

I'm forcing http to https with the following in .htaccess: ## Forcing https RewriteCond %{HTTPS} !^on$ RewriteRule (.*) https://website.com/$1 [R,L] Following that, I also have a redirect that ...
0
votes
1answer
33 views

apache rewrite rules for multimple domains | https://www

I have two applications configured on one apache (eg. example.com and test.net). Rewrite rules for those apps are the same (so in config file for domain example.com I've got this rules, and the same ...
10
votes
2answers
3k views

How can I tell if my website is vulnerable to CVE-2014-3566 (POODLE)?

Google announced a vulnerability in the SSLv3 protocol that ... allows the plaintext of secure connections to be calculated by a network attacker. This vulnerability has been given the ...
0
votes
2answers
41 views

How to setup a backup SSL apache server

In case of my MAIN server crashing, I'd like to be able to change the DNS IP address to another (BACKUP) server, in order to reduce the system's downtime. MAIN server = https:// MAIN_WEBSITE / ...
0
votes
0answers
17 views

Limit Plesk Panel (11.5) to a single domain?

We have a server which uses Plesk 11.5 to manage 30+ websites. Most of these websites are e-commerce and require PCI Compliance. These sites get flagged for port 8443 having an invalid SSL certificate ...
1
vote
1answer
31 views

How can I enable outgoing HTTP/HTTPS requests on an EC2 in a public subnet within a VPC on Amazon AWS

I set up a VPC using scenario 2 from the AWS Docs: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html I've assigned an Elastic IP to an EC2 instance running in a Public Subnet. ...
0
votes
1answer
44 views

Nginx HTTPS www to non-www redirect issue

I'm having some issues redirecting from HTTPS www to HTTPS non-www with my nginx config. I'm following the directions provided at (Remove "www" and redirect to "https" with ...
0
votes
1answer
184 views

“SSL input filter read failed” Apache and 443

I have a little problem with my apache conf. When I read the error log, here is what I can see: [client xxx.xxx.xx.xx] AH01964: Connection to child 1 established (server www.mywebsite.com:443) ...
0
votes
0answers
10 views

Apache configuration redirect using only redirect, not rewrite

PS: this is the 2nd part of the question originally posted here. I'd like to disable the HSTS header completely for specific virtual hosts. I have (per recommendation) a redirect in the 443 container ...
0
votes
0answers
7 views

Accessing a particular directory via HTTPS [migrated]

I am trying to create a particular directory on my LAMP installation folder to be HTTPS enabled. I was reading about that and i found out it can be done in httpd.conf. However i do not have https.conf ...
0
votes
1answer
37 views

Root certificate invalid on a WHM site [closed]

I am a newbie in SSL certificates and was given the task on troubleshooting a site's WHM page that uses https but it displays an red "x" on the https section of the URL. On Google Chrome, details of ...
0
votes
1answer
519 views

upstream prematurely closed connection while reading response header from upstream

I am having issues setting up SSL for my Jenkins CI server. I use Jenkins behind nginx for a reverse proxy. I am getting these upstream prematurely closed connection while reading response header from ...
0
votes
0answers
17 views

Apache+subversion Kerberos Authorization Active Directory

I have configured Apache+Subversion with Kerberos. Here's my config: SSLRequireSSL DAV svn SVNPATH /var/www/svn/testrepo AuthType Kerberos Krb5KeyTab /etc/krb5.keytab KrbAuthRelams ...
0
votes
1answer
60 views

Nginx Reverse Proxy: servername.domain.com reverse to http://ip.add.res.s/location/App

I need a little help sorting out how to configure a reverse proxying load balancer in nginx. Basically, I have two web applications that live under subdirectories on Apache servers, /flavors/Chocolate ...
-1
votes
0answers
49 views

Unable to get SSL working on Apache 2.4 (Ubuntu 14.04) VM

I am following this guide: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 To set up a self-signed SSL certificate on my VM. In the end, I ...
0
votes
1answer
36 views

I want to proxy only HTTP but I'm not sure what to do with HTTPS traffic

I have a DNS server that resolves all traffic to my Squid server that will proxy all HTTP traffic transparently (it must be transparent or it will drop a invalid url error) which works great. The ...
2
votes
1answer
91 views

cUrl for an HTTPS address/domain times out unless previously accessed from browser

I've lost a couple days to this problem and hope it sparks a thought from someone. I am integrating several systems together using Powershell scripts. One of the two services I am connecting to ...
0
votes
1answer
22 views

301 Redirect Root and Only Root (“/”) from https to http

I have found several Q/As on how to redirect root only, how to redirect from https to http (using .htaccess). But there was no question that merged both. And this answer is too dirty: ...
0
votes
1answer
25 views

apt-get don't support https and can't install the necessery package to do it

On Linux 3.2.0-4-amd64 #1 SMP Debian 3.2.60-1+deb7u3 x86_64 I'm using Ansible (software to manage and configure machines) to install Passenger and copy the sources.list from another machine. To ...
-1
votes
0answers
18 views

Cookie is not deleted by HTTP header [migrated]

My project is using an external authentication provider that sets a cookie if a user is logged in. To log out, I have to delete that cookie. As far as I can tell, the Set-Cookie header is correct, but ...
1
vote
1answer
118 views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
0
votes
1answer
31 views

Unable to use https on Amazon loadbalancer

I have a wild card certificate for a domain and have configured it on a load balancer. The load balancer has an EC2 instance assigned. I am using the domain name to point to the load balancer through ...
0
votes
1answer
80 views

Iptables drop outgoing HTTPs GET request matches string in payload [closed]

I'm using CentOS 5.8(final), kernel 2.6.18-308.8.2, iptables v1.3.5 I want to block a HTTPs POST/GET request to outside which matches a string (defined as ABCxyz) in the POST/GET payload. I tried to ...
-4
votes
2answers
35 views

Security certificate only displays with HTTPS and not HTTP [closed]

I have a security certificate installed on my Ubuntu server, running Apache. When I visit my site using the HTTPS protocol, the green certificate appears at the start of the URL. However, when I use ...
2
votes
2answers
93 views

Apache HSTS exception for some virtual hosts

In the global config section for Apache 2.2.15, I have the following (per recommendation) <IfModule mod_headers.c> Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" ...
0
votes
0answers
18 views

Will an inbound iptables rule in ddwrt on port 443 break https? [migrated]

I want to run a vnc repeater service on my home ddwrt router. Due to the possibility of friends/family asking for support in unknown network environments, I'd like the host-repeater application to run ...
1
vote
0answers
28 views

nginx: HSTS on a page with www-authentication

Is it possible, on nginx, to send a Strict-Transport-Security header, even on pages that require WWW-Authentication? When I have both auth_basic and add_header Strict-Transport-Security ...
0
votes
2answers
37 views

lighttpd - redirect everything to https

I have tried to use the example from this wiki page - $HTTP["scheme"] == "http" { # capture vhost name with regex conditiona -> %0 in redirect pattern # must be the most inner block to ...
0
votes
0answers
99 views

IIS Rewrite Rule in web.config to redirect HTTPS requests to HTTP

I need to redirect all https requests to http, for example, if someone visits https://www.example.com/another-page/ to http://www.example.com/another-page/ I have the following rewrite rule in my ...
0
votes
4answers
62 views

Redirect HTTPS traffic without changing the HOSTS file

I have a website hosted on 2 servers. The website is SSL based. I'd like to monitor (load the main page and look for a certain string) the website per server using a local Opsview. Meaning I need to ...
0
votes
0answers
39 views

Firefox, Chrome - can't start https google services

I'm using MIKROTIK as proxy, but using Firefox or Chrome I have following problems: https google can't show almost any of pictures found https gmail stuck on progress bar before mailbox is loaded ...
0
votes
0answers
59 views

Tuning Apache KeepAlive Timeout for HTTPS

My website forces HTTPS everywhere and has an average first load time of 3-5 seconds. Thanks to caching, repeat load time is 0.8 seconds. The SSL negotiation takes 150-300ms on my server, so I want ...
0
votes
1answer
46 views

How to add HTTPS to Elastic Load Balancer?

I'm using boto to create an Apache http server that "hides" behind an AWS Elastic Load Balancer (ELB). However, the ELB DNS address is functional only when I specify port 80 (http) in its security ...
0
votes
0answers
11 views

Internal IIS http to https

I have setup a test environment (all Windows Server 2012 boxes) with a Domain Controller and an Exchange Server 2013. On the Exchange Server, I have setup in IIS redirects for OWA. This works fine ...
0
votes
0answers
46 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
0
votes
0answers
82 views

Cannot Access web Interface https Zimbra from WAN

I have a zimbra 8 installed on Ubuntu 12.04 LTS I can access to web interface (https) from LAN. I just type https://192.168.1.10/ in the Firefox. But if i try to access from other PC to my WAN IP ...
3
votes
1answer
379 views

Can a Reverse Proxy use SNI with SSL pass through?

I need to serve several applications over https using one external ip address. The ssl certificates should not be managed on the reverse proxy. They are installed on the application servers. Can a ...
-1
votes
2answers
64 views

.htaccess file isn't working for https

I have simple .htaccess file to forbid access to a directory as : order allow,deny deny from all Well, it doesn't work with SSL and show the content of directory if client access the directory ...
0
votes
1answer
167 views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
2
votes
3answers
100 views

Steps to produce a self-signed certficate(s) that, after being trusted, will work for two different IPs without a security warning

We have a test server that I'm trying to change over to HTTPS/SSL, and it has both an internal IP and an external IP. We have to use self-signed certificates for this particular server. There was ...
0
votes
1answer
57 views

Multiple Proxy servers - and how to get around non-SNI devices?

We have a lot of devices that cannot use SNI and we want to be able to proxy a lot of HTTP/HTTPS servers. I was thinking we could setup a HAProxy for each URL to connect to initially, and then load ...
0
votes
0answers
69 views

400 error with nginx subdomains over https

Not sure what I'm doing wrong, but I'm trying to get gunicorn/django through nginx using only https. Here is my nginx configuration: upstream app_server { server ...
-2
votes
2answers
44 views

https download file with custom S3 URL

I believe the following question should be asked here and not @Super User. My web application is using S3 for users to download files. Prior customizing the url, files were downloaded from S3 with ...
1
vote
0answers
49 views

Enabling AES 256 GCM on Windows Server 2012 R2

I'd like to enable the use of the AES 256 GCM encryption instead of the AES 256 CBC. We already have ECC certificates based on ECDSA so that pre-requisite has been fullfilled. The certificate has a ...
0
votes
1answer
43 views

LAMP Server HTTP-> HTTPS redirect in .htaccess

I have 2 LAMP servers with the same version of Apache, both running Wordpress. SSL is working on both servers (although the test server uses a cert for a different domain). On both I have the ...
0
votes
0answers
77 views

SCCM 2012 R2 and Client Certificates for HTTPS

We have a SCCM 2012 R2 site with a Management Point and a Distribution Point, all of which are using HTTPS with certificates issued by our Enterprise CA. We want to do OS Deployments (PXE for bare ...
0
votes
2answers
378 views

Why does Android Chrome say my site's security certificate is not trusted?

My site is https://blendbee.com. It's using a PositiveSSL certificate that is valid. In Windows 8 Chrome the certificate is fine (green lock in top left corner). But...on my Android, it's not so ...
0
votes
1answer
195 views

Jenkins and HTTPS: Cannot connect to server

We have a Subversion repository located on an https connection. I am able to connect to it locally (no proxy needed): $ svn ls --username=qazwart --password=swordfish \ ...
1
vote
1answer
319 views

Redirect all http requests behind Amazon ELB to https without using if

Currently I have an ELB serving both http://www.example.org and https://www.example.org. I would like to set it up so any request pointing to http://www.example.org is redirect to ...