0
votes
0answers
12 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
0
votes
2answers
41 views

How to setup a backup SSL apache server

In case of my MAIN server crashing, I'd like to be able to change the DNS IP address to another (BACKUP) server, in order to reduce the system's downtime. MAIN server = https:// MAIN_WEBSITE / ...
0
votes
1answer
211 views

“SSL input filter read failed” Apache and 443

I have a little problem with my apache conf. When I read the error log, here is what I can see: [client xxx.xxx.xx.xx] AH01964: Connection to child 1 established (server www.mywebsite.com:443) ...
0
votes
0answers
10 views

Apache configuration redirect using only redirect, not rewrite

PS: this is the 2nd part of the question originally posted here. I'd like to disable the HSTS header completely for specific virtual hosts. I have (per recommendation) a redirect in the 443 container ...
0
votes
0answers
7 views

Accessing a particular directory via HTTPS [migrated]

I am trying to create a particular directory on my LAMP installation folder to be HTTPS enabled. I was reading about that and i found out it can be done in httpd.conf. However i do not have https.conf ...
0
votes
1answer
38 views

Root certificate invalid on a WHM site [closed]

I am a newbie in SSL certificates and was given the task on troubleshooting a site's WHM page that uses https but it displays an red "x" on the https section of the URL. On Google Chrome, details of ...
0
votes
1answer
562 views

upstream prematurely closed connection while reading response header from upstream

I am having issues setting up SSL for my Jenkins CI server. I use Jenkins behind nginx for a reverse proxy. I am getting these upstream prematurely closed connection while reading response header from ...
0
votes
1answer
62 views

Nginx Reverse Proxy: servername.domain.com reverse to http://ip.add.res.s/location/App

I need a little help sorting out how to configure a reverse proxying load balancer in nginx. Basically, I have two web applications that live under subdirectories on Apache servers, /flavors/Chocolate ...
1
vote
1answer
123 views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
0
votes
1answer
31 views

Unable to use https on Amazon loadbalancer

I have a wild card certificate for a domain and have configured it on a load balancer. The load balancer has an EC2 instance assigned. I am using the domain name to point to the load balancer through ...
-4
votes
2answers
35 views

Security certificate only displays with HTTPS and not HTTP [closed]

I have a security certificate installed on my Ubuntu server, running Apache. When I visit my site using the HTTPS protocol, the green certificate appears at the start of the URL. However, when I use ...
2
votes
2answers
95 views

Apache HSTS exception for some virtual hosts

In the global config section for Apache 2.2.15, I have the following (per recommendation) <IfModule mod_headers.c> Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" ...
0
votes
1answer
46 views

How to add HTTPS to Elastic Load Balancer?

I'm using boto to create an Apache http server that "hides" behind an AWS Elastic Load Balancer (ELB). However, the ELB DNS address is functional only when I specify port 80 (http) in its security ...
0
votes
0answers
47 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
-1
votes
2answers
64 views

.htaccess file isn't working for https

I have simple .htaccess file to forbid access to a directory as : order allow,deny deny from all Well, it doesn't work with SSL and show the content of directory if client access the directory ...
0
votes
1answer
169 views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
-1
votes
1answer
612 views

Error code: ssl_error_rx_record_too_long on nginx ubuntu server

I have a site which was perfectly running with apache on some old ubuntu server and also has https for it. But now for some reasons i need to move to different(new ubuntu server with high ...
0
votes
2answers
140 views

Setting up SSL - https works, http not working

Update: A temp solution I found was to just redirect all http requests to https. I have been working on setting up SSL on my website. It is like on a Rails. I use nginx with unicorn. I bought the ...
-2
votes
1answer
245 views

ssl certificate - identity not verified with godaddy [closed]

I followed all the steps to create a unique certificate that looks like this -----BEGIN CERTIFICATE----- MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCAmowggHXAhAF ...
0
votes
0answers
45 views

apache issue with https requests

I am running Apache/2.2.27 WHM vps and have problem with https requests. http requests are handled fine but when a single https page is visited, several requests are shown in "R" (reading) state in ...
1
vote
1answer
39 views

How do I use NGINX as a frontend for a Legacy (Apache) Webserver [duplicate]

I have an NGINX server setup that is already hosting two applications, and SSL is set up on that NGINX server. Now, I need to setup the NGINX server to be a front-end for a legacy Apache application ...
-1
votes
1answer
293 views

Failed to bind to: /0.0.0.0:443 [closed]

I am having problems starting my play framework server on port 443,i am using scala play 2.20 and my play server running fine on port 9443 by following command ./start -Dhttps.port=9443 ...
0
votes
2answers
332 views

How to redirect http to https for IP and domain on Apache2

I have an Apache2 web server running on Ubuntu 12.04. The domain of the website that I am hosting works fine, and if you go to the http version instead of the https version, it automatically redirects ...
0
votes
0answers
27 views

CreateObject failing when running asp application through https on iis7

I am running an asp site on iis7 / Server 2008. I have two websites set up in IIS pointing at the same application, one site uses http, the other uses https. When executing a script, the site using ...
0
votes
0answers
63 views

How do I get “redirect permanent” to work in Safari?

I want to force https. All certificates, signed and ready, are working. In httpd.conf, I put: redirect permanent / https://my.site.org It seems Firefox and Chrome use https, but in Safari it just ...
0
votes
1answer
82 views

How to prevent a specific request to redirect from http to https in SSL configuration?

I am facing one issue regarding ssl. Basically i want to stop redirection of only one request from http to https in Jboss 7. According to the requirement all http request should be redirected to ...
1
vote
2answers
97 views

How can I tell nginx to serve SSL for one domain only?

Yes, this is something of a duplicate to this question, however, according to the ngnx document "Configuring HTTPS servers" (the section "Single HTTPS Server"), this limitation no longer exists, and ...
0
votes
0answers
51 views

Single domain with Apache https as a proxy for many local servers

Using Apache we need to setup number of instances of our application running on different servers internally in such a way that they are visible under our single domain name externally. This is so ...
1
vote
1answer
3k views

“CHECK_NRPE: Socket timeout after 10 seconds” HTTPS / SSL

I have configured NAGIOS server on IP address AA.BB.CC.DD (Linux Fedora 20), and Monitoring the host with IP address LL.MM.NN.OO (Linux Fedora 20). I have configured NRPE to run on port # 15666 ...
0
votes
0answers
115 views

Wildcard and multiname certificates aren't recognized by clients?

So, this is my problem. I have dev environment under internal domain - let's say machine name is dev. Every single working copy I create is autodetected by puppet and appropriate virtual host is ...
2
votes
2answers
79 views

How to prevent https:// being accessible from domains without a certificate?

I have this setup Server version: Apache/2.2.22 (Ubuntu) OpenSSL 1.0.1c 10 May 2012 One IP with multiple domains connected to it. For example1.com I have a signed SSL certificate, and thus ...
1
vote
3answers
228 views

Cannot connect to HTTPS port on Ubuntu

I've installed a new SSL certificate and set up Nginx to use it. But requests time out when trying to hit HTTPS on the site. When I telnet to my domain on port 80 it connects, but times out on port ...
0
votes
0answers
472 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
1
vote
1answer
66 views

Both example.com and www.example.com with SSL

I obtained a free CA certificate from https://www.startssl.com/. I added the domain name example.com, and in the control panel, it shows www.example.com under SSL/TLS Server, and example.com under ...
2
votes
1answer
600 views

Having problems setting up SSL with Nginx

I'm trying to setup SSL(0.9.8e) using Nginx(1.2.3) on a Windows 7 machine. I've generated a self-signed certificate that is needed, so I have a key and a certificate file. When trying to start Nginx ...
0
votes
0answers
48 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
1
vote
0answers
228 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
2
votes
1answer
151 views

Nginx, setup https

I'm trying to setup https on my ubuntu server with NGINX ver 1.4.7 and Phusion Passenger 4.0.41. I created .key and .csr using these two commands sudo openssl genrsa -des3 -out server.key 2048 sudo ...
2
votes
1answer
76 views

What determines how long an SSL session is valid

HTTP(S) is stateless, right? But if I go to some site via HTTPS, I assume I don't need an SSL handshake for every single page request. Is it a combination of SSL session cache and cookies?
0
votes
4answers
12k views

Fix/Bypass “Cannot connect to the real website-blocked” error in Google Chrome with OpenDNS blocking

I have a large problem with Chrome in my organisation. I use DNS to manage web site blocking, for sites which are not appropriate and are potentially a risk to the organisation where I do this. I ...
2
votes
0answers
77 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
0
votes
1answer
399 views

nginx https -> http redirection using wildcard error

I've already search the whole web for an answer, unfortunately there isn't. I hope there is a genius out here. Context: My nginx acts as a reverse proxy serving multiple domains Problem: the problem ...
1
vote
1answer
115 views

Mixed Content and SSL Sites / Protocol Relative URLs

I have a site that was all HTTP until recently, when it was requested that we add an SSL cert because there was a concern about MIM attacks with a login applet on the home page. I bought the cert, ...
2
votes
2answers
218 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
0
votes
1answer
63 views

cannot access ssl-secured website on the server side

I am having problems accessing a website, that recentely got SSL-security, on the server side. Accessing the website like normal is not a problem, but when I try to open the website on the server ...
0
votes
0answers
50 views

Oracle Content Server Losing HTTPS on adfAuthentication

This has been a nagging problem for a while now, in summary we have the following setup. Cisco ACE Load Balancer -> Oracle HTTP Sevrer -> WebLogic We are terminating the SSL on the load balancer, ...
2
votes
2answers
363 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
1answer
57 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
1
vote
1answer
72 views

what are the security implication of intentionally leaking a ssl certificate?

I have a website (http://example.com) which makes some requests to http://localhost:12345 in its javascript. I want to open this website over https but due to mixed content some browsers throw ...
1
vote
0answers
669 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...