0
votes
1answer
26 views

Multiple Proxy servers - and how to get around non-SNI devices?

We have a lot of devices that cannot use SNI and we want to be able to proxy a lot of HTTP/HTTPS servers. I was thinking we could setup a HAProxy for each URL to connect to initially, and then load ...
0
votes
1answer
30 views

Redirect all http requests behind Amazon ELB to https without using if

Currently I have an ELB serving both http://www.example.org and https://www.example.org. I would like to set it up so any request pointing to http://www.example.org is redirect to ...
2
votes
1answer
750 views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
0
votes
1answer
29 views

IIS8 - HTTP automatically forwards to HTTPS

Currently I am running two sites (each one has an app Pool). One for HTTPS which is called cloud and the other one for HTTP content called headsup. When I browse to the domain.com/cloud it all works ...
-1
votes
1answer
78 views

Hot redirect http/https request coming to port 80 to a internal tomcat server on 8080 [closed]

I have a production server with a domain name. It has a tomcat server on 8080. It has several web applications. So I want to map the http/https requests coming to that server to these web ...
0
votes
0answers
40 views

Multiplying requests by using Nginx

I am trying to write an http request analyzer however I want it to be transparent to web application. So I want to know if I can multiply the request by using an nginx proxy like below; Internet ...
2
votes
2answers
191 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
0answers
485 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
2answers
81 views

nginx ssl virt host issue - site won't load

I have configured nginx for port 80 and 443, with 443 containing an ssl cert configuration. When I restart nginx, no errors occur, so I don't believe it's a cert issue, but of course I could be ...
5
votes
5answers
1k views

Force https entire site without redirecting http to https

There were a plenty of discussions while I was researching how to make my entire site https. The most answers were to redirect http to https (.htaccess file), which is not good, because it's not good ...
-2
votes
1answer
409 views

Redirecting and changing protocol from http to https using CNAME

Hi I bought a domain with dreamhost. example.com. Now I want to redirect it to one of my azure VM at https://example.cloudapp.net. Apparently it needed to change the protocole as well. Based on my ...
0
votes
0answers
72 views

Random Switch from HTTP to HTTPS

For quiet sometime I've been dealing with a random switch from HTTP to HTTPS, at times it vanishes after a few attempts to remove the https from the url, otherwise I have to clear my cache to be ...
154
votes
11answers
26k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. I use a web hosting panel called ZPanel that is an open source project. It then set up a redirect for all traffic on my domain on Port 80 to ...
0
votes
1answer
41 views

Serving image content over https, must encryption strength match that of the main website?

Im looking at migrating my website to https throughout. I have a server responsible for the HTML/PHP, and 4 other servers which serve image content Now clearly all the image servers need to be https ...
1
vote
1answer
190 views

Can not access single HTTPS domain [duplicate]

I'm having a very weird issue with a certain HTTPS site. I have no crazy network setup or firewalls. Just computers behind a cable modem. I feel dumb but I can't figure it out for the life of me. ...
0
votes
1answer
90 views

apache2 mod ssl does not respond to wan request

WAN =====> router (interface WAN1 setup with my public ip) ==> NAT incoming 443 connection to ====> Apache2 Web server apache2 is configured with one virtual host on port listening on mysite.com on ...
0
votes
2answers
349 views

nginx responding to unknown host names?

I have two domains that point to the same server, one we'll call home and one we'll call web. I'm running nginx on port 80 for HTTP and 443 for HTTPS. In my server definitions, I've defined two ...
2
votes
1answer
86 views

Why do I get a 404 for my index.page in my http/https nginx setup?

I'm using WPN-XM (stack with Nginx, MariaDB, PHP and OPENSSL) and am trying to setup OpenSSL in a HTTP/HTTPS server. I'm following the instructions from NGINX here and my server starts/stops without ...
-3
votes
3answers
74 views

How to redirect https request to http [closed]

Assuming I don't have a valid certificate to handle a https session I want to redirect all https requests to http. Is it possible without opening https session?
0
votes
3answers
87 views

HTTPS and HTTP issue on server with SSL

I have a site www.example.com for which i purchased SSL cert and installed. And it was working fine, I also have a subdomain with app.example.com which was not on SSL. Both www.example.com and ...
0
votes
0answers
31 views

I believe this is preventing me from using SSL on SVN

I cannot use SSL for Subversion (Apache) on port 443, so I listed my URLReservations and I found this: Reserved URL : https://+:443/sra_{BA235980-CD49-458b-9E23-C84EE0ADCD75}/ User: ...
0
votes
0answers
61 views

Apache2 - Vhost keep redirect to https vhost, and not the request vhost

i am facing an issue with my vHost setup which I rly can't figure out how to fix First my vhost config: <VirtualHost *:80> ServerName dnsmaster.anonogle.com:80 DocumentRoot /var/www/dns ...
1
vote
1answer
172 views

Jetty 9 - redirect http to https

I'd like to force use of https in Jetty 9. Apparently: <Set name="confidentialPort">443</Set> no longer works in jetty 9. How should I do it properly?
-1
votes
1answer
350 views

Apache: Allow only certain http requests, deny all else

We have an Apache server, on a Windows Server 2008 machine, that is used for specific secure traffic for our customers, like a gateway. Now, I only want to allow traffic for a certain range of secure ...
1
vote
1answer
118 views

Redirecting HTTP-Request to HTTPS through httpd.conf

I currently try to redirect the HTTP-request to HTTPS, but couldnt find a solution for this, in my httpd.conf I have the following redirection to my Tomcat application: RedirectMatch permanent ^/$ ...
-1
votes
1answer
298 views

HTTP digest authentication vs. HTTPS basic authentication [closed]

What is the difference between HTTP Digest Authentication and HTTPS basic authentication from a performance and security point of view?
2
votes
1answer
68 views

vhosts with various hosts and http/https

I have the file underneath in my vhosts.d directory and it's called hosts.conf (from what I gather the name isn't a problem). Now there are various hosts as you can see, if I use http (port 80) no ...
0
votes
2answers
3k views

Redirect all http AND https non-www URLS to https://www.example.com via htaccess

For reasons much too long and complex to get into (it involves several layers of corporate red tape resulting in someone else not purchasing a wildcard SSL certificate I requested), I have to set up a ...
2
votes
3answers
104 views

Can i set 443 as default web port which means it can only be accessed via https and no port 80

As title says, I want to set my apache to listen on 443, and will configure SSL. So, My Question is :- 1). Does that mean, i will not have port 80 or any other port which is no ssl ? 2). My site ...
2
votes
4answers
2k views

Referer is passed from HTTPS to HTTP in some cases… How?

In theory browsers do not pass on referer information from HTTPS to HTTP sites. And in my experience this has always been true. But I just found an exception, and I want to understand why it works so ...
0
votes
1answer
175 views

HTTPS shows website correctly, HTTP shows IIS start page

Just setup a new VPS server and am migrating a few clients to it from my dedicated server. The new VPS server is Win Server 2008 with IIS7. For some reason, when you go to http version using the ip, ...
-1
votes
1answer
84 views

How to set up https only on one directory of VirualHost

I have VPS with several sites and applications, and I want to run MySQL administration tool over https to avoid possibility of man-in-the-middle attack, since I often have to use mysql root password. ...
1
vote
1answer
937 views

Apache, ISPConfig3 & https to http redirection bug

I'm having a curious problem. Since my server got no SSL certificate and I want to avoid the ugly "This site is unsecure" warning, I decided to redirect https to http. I have my website, lets say ...
0
votes
2answers
273 views

Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?

I have read, namely on Rackspace, that one should not use SSL termination for sensitive information (search the page for "SSL Termination should not be used"). Firstly, why would that be the case. ...
0
votes
1answer
216 views

Redirect from HTTP to HTTPS with respect to the X-Forwarded-For header (SSL termination used)

I'm looking to redirect from HTTP to HTTPS. My Nginx server sits behind a load balancer which will terminate SSL for me and send all traffic (HTTP and HTTPS) to port 80. The only evidence I will have ...
0
votes
0answers
280 views

stunnel: redirect HTTP traffic to HTTPS

Is it possible for stunnel to detect non-SSL requests and issue a redirect to HTTPS URL? Or maybe it's possible to have stunnel mark these requests somehow and let the underlying app issue the ...
-2
votes
1answer
118 views

How do iptables ports work? [closed]

Let's say, for instance, a user on the network makes a HTTP request to http://serverfault.com. I believe the destination port (dport) in this case is 80. What is the source port (sport)? If the user ...
-2
votes
1answer
135 views

Can Squid or other open-source proxy server be set up to process HTTPS encrypted traffic? [closed]

I would like to set up a home proxy server which would filter ads and viruses even before they get to the browser. The problem in this case is that many web sites use encrypted HTTPS connections and I ...
0
votes
1answer
117 views

Cisco route HTTP / HTTPS to proxy server

Given a Cisco router, is it possible to route all HTTP and HTTPS traffic to a proxy server for filtering, and allow the proxy server to send the filtered traffic back?
1
vote
2answers
78 views

Interim way to handle https requests while SSL certificate is being arranged?

What can I do to handle https requests while an SSL certicate is being arranged? The https requests are being made from a desktop app so there are no browsers involved. Are there free certs I can ...
0
votes
1answer
124 views

Redirect HTTP to HTTPS without a web server

I'm running an OpenVPN AS server on a VPS and the server itself has a web interface accessible through HTTPS. I'd like to redirect all HTTP traffic to HTTPS without having to install a web server for ...
-2
votes
1answer
176 views

IIS - https:// works while http://host:443 doesn't

This is my site: http://scyk.pl When you go https://scyk.pl Everything is ok, but when you go http://scyk.pl:443 Connection is timing out. I am running IIS7, today I configured ssl, and I ...
2
votes
2answers
554 views

enable/disable resuming downloads feature on the server side

How is it that some servers doesn't allow resuming downloads? Where - in terms of server configurations - you have to configure to disable/enable this feature? Is it an http config? or it has ...
2
votes
1answer
94 views

Can I turn on HSTS for 1 subdomain

I would like to enforce HSTS for only 1 subdomain, but not the whole domain, is this possible ? xxx.yyy.com -> HSTS on zzz.yyy.com -> HSTS off yyy.com -> HSTS off
7
votes
2answers
2k views

Apache: insecure request sent to secure port…want to redirect

Preface Firstly: A simply Port 80 -> Port 443 Rewrite WILL NOT fix this. In almost every previous question, mail thread, forum thread, etc., I have found this was the first ignorant response and ...
0
votes
1answer
98 views

Ngninx HTTP Speed vs. HTTPS Speed

I installed a testsetup to find the impact of ssl on nginx performance (requests per second) I don't understand a behaviour with the Testsetup I have here. The setup: a nearly naked Ubuntu 12.04 ...
1
vote
1answer
272 views

Can I set up NGINX as a transparent SSL proxy?

Can NGINX be set up as reverse transparent proxy with SSL support? I have a third-party application using HTTPS. For business purposes it is required to log some request data from HTTPS connections.
-2
votes
1answer
51 views

http / https / SSL [closed]

let's say I got a domain which is www.foobar.com and if I try to visit my site using https://www.foobar.com I got a message like "This Connection is Untrusted". and I have created a name base ...
0
votes
2answers
554 views

How to do a 301 redirect from http to https in a domino server?

I need to do a 301 redirect from http://www.example.com to https://www.example.com The Internet site document option that does a TCP to SSL redirect is a response with http code 302. Does setting ...
0
votes
1answer
472 views

HAProxy redirect HTTPS to HTTP

I'm using HAProxy as a load balancer and i'd like to redirect any traffic that comes in on 443 (HTTPS) to 80 (HTTP). My site doesn't support HTTPS at all and i'd rather just redirect users than cause ...