HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
1answer
69 views

Mixed Content and SSL Sites / Protocol Relative URLs

I have a site that was all HTTP until recently, when it was requested that we add an SSL cert because there was a concern about MIM attacks with a login applet on the home page. I bought the cert, ...
1
vote
2answers
235 views

Why won't Nginx return a 404 error for URLs starting with a question mark?

I'm trying to get a rewrite rule working and I've discovered that if the URL begins with a question mark, Nginx fails to return 404 error as expected. Instead, index.html as defined in the root ...
2
votes
1answer
118 views

Automatically reconfigure WinRM HTTPS listener with new certificate?

I am looking to enable WinRM HTTPS listeners on all of our servers for secure communication when using CredSSP between servers to get around the double-hop issue. Setting this up is fine, we have ...
0
votes
0answers
93 views

cURL NSS error -12286 SSL_ERROR_NO_CYPHER_OVERLAP

Using cURL 7.36.0 (x86_64-redhat-linux-gnu) on EC2 Amazon Linux, I can't connect to certain websites (not all) using HTTPS and receive the above error. From researching the issue I have learned that ...
2
votes
2answers
196 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
0
votes
1answer
41 views

cannot access ssl-secured website on the server side

I am having problems accessing a website, that recentely got SSL-security, on the server side. Accessing the website like normal is not a problem, but when I try to open the website on the server ...
0
votes
1answer
29 views

HTTPS to HTTP - Response appears cached, or maybe this doesn't work.

Long story short: Google cached https:// links, when this website doesn't need an SSL - The SSL is expired now, and people are getting that warning screen when coming from Google. Thus, we found ...
0
votes
1answer
335 views

How to make git push work with nginx (basic auth) behind nginx reverse proxy (HTTPS)?

I like to have a git server on a computer (backend) without direct internet access. There should be basic authentication. The access should be available by means of a reverse proxy (frontend) on ...
-1
votes
1answer
26 views

Only allow a specific client to talk to a server

I have the following situation: have a server (ubuntu) running an application. I have a client (only the one client) requesting stuff from that server. To execute the requests, the client has to ...
0
votes
1answer
156 views

Local Proxy tool which authenticates against NTLM, sits on top of the Java VM and possibly transparently passes through HTTPS requests

I'm looking for a local HTTP proxy which I can run locally on my machine. This proxy accepts HTTP and HTTPS request and passes them upstream on to an external corporate proxy. The local proxy needs to ...
0
votes
0answers
36 views

Oracle Content Server Losing HTTPS on adfAuthentication

This has been a nagging problem for a while now, in summary we have the following setup. Cisco ACE Load Balancer -> Oracle HTTP Sevrer -> WebLogic We are terminating the SSL on the load balancer, ...
-1
votes
1answer
126 views

mod_rewrite: Redirect https://example.com to https://sub.example.com [duplicate]

I have an domain example.com running on an Apache Server and I want to redirect every call to https://example.com to https://sub.example.com. I have a Virtual Host configured like this: ...
14
votes
1answer
668 views

How does this kind of SSL work?

"Issued to" and "Domain Name" doesn't match but still valid and accepted by all major browsers without any warning. While previewing my blog post in Blogger, I noticed that my blog was previewed via ...
0
votes
2answers
145 views

After enabled SSL, HTTP not working Nginx VPS

Today I set up a self-signed SSL certificate for my Wordpress sites via my Cent OS Nginx VPS. Because I want to use HTTPS only for Wordpress backend. This is my vhost nginx configuration file (file ...
2
votes
2answers
146 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
1answer
54 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
0
votes
1answer
43 views

Curl pressing enter or ctr+c in order to have the right response [closed]

This is a script that checks my current ip on this site: http://myip.dnsdynamic.org/ and pick the response and calls an API in order to update my dynamic ip. Here the script: curl --user ...
0
votes
0answers
82 views

How do I test Apache that mod_evasive is working for HTTPS virtual hosts?

I have enabled Apache mod_evasive on my web server. I have disabled my default virtual host and have set up several virtual hosts which server content via HTTPS. I would like to test that ...
0
votes
2answers
95 views

HTTPS SSH Tunnel

Ok so I have a web server, lets call it Server A, which is providing a service via HTTPS. And I have an SSH gateway server, lets call it Server B. Due to firewall rules I cannot access Server A's web ...
0
votes
2answers
147 views

Configuring two IPs for one server?

I have a windows server that is running two ASP.NET websites. I would like to setup an HTTPS connection for each site. I had initially run into problems because I was trying to use a single IP ...
1
vote
1answer
68 views

what are the security implication of intentionally leaking a ssl certificate?

I have a website (http://example.com) which makes some requests to http://localhost:12345 in its javascript. I want to open this website over https but due to mixed content some browsers throw ...
1
vote
0answers
327 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
125 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
0
votes
2answers
165 views

nginx redirect https://www to https:// non-www without untrusted connection warning?

I have a valid SSL certificate for myapp.com, but not for www.myapp.com. Based on this question, it seems to me that it's not possible to immediately redirect from https://www.myapp.com to ...
0
votes
0answers
104 views

Configure nginx proxy_pass

I am trying to use a proxy to be able to call the url https://:8082/test and "redirect" to https://:8081. I tried with the "location /" it is working well but when I put a specific location like ...
0
votes
2answers
159 views

Properly setting up a “default” nginx server for https

I have several servers running on the same machine, some with http only, some with both http and https. There are several server blocks defined in separate files which are included from the main ...
0
votes
0answers
99 views

Provide SSTP VPN and normal HTTPS Websites over the same Port and IP?

In my little lab I want to use SSTP VPN AND a HTTPS-Webpage, which should be accessible from the internet. I just have 1 public IP and the lab is behind NAT (Port forwarding 443). SSTP already works ...
1
vote
2answers
63 views

nginx ssl virt host issue - site won't load

I have configured nginx for port 80 and 443, with 443 containing an ssl cert configuration. When I restart nginx, no errors occur, so I don't believe it's a cert issue, but of course I could be ...
0
votes
1answer
217 views

Blocking/redirecting port 3000 with Nginx and Ruby On Rails (thin server)

I am setting up a server now that uses Ruby on Rails with the Thin server. I have set up Nginx to redirect all of my http://mysite.com to https://mysite.com(with ssl). I want all network traffic to ...
1
vote
0answers
169 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
-1
votes
1answer
125 views

Shorewall forward 443 port to two servers [closed]

I have a question/problem. I have two webservers. One is a webmail and the other one is a standard webserver. I need to forward 443 port to both of them. I have added proxyarp to the shorewall and ...
2
votes
1answer
219 views

OpenSSL missing cipher

I'm trying to configure proper setup for my HTTPS server and I am have a little trouble with IE8@WinXP. This platform has a very poor support for TLS siphers: ...
0
votes
0answers
151 views

Moving gitlab-ssl to a subdirectory

I have a server with static ip, currently with this config <VirtualHost *:80> ServerAdmin webmaster@localhost ServerName rab JkMount /rab ajp13_worker JkMount /rab/ ...
0
votes
3answers
725 views

Can't Block https://facebook using squid Transparent

I'm using Squid Proxy 3.1 as transparent proxy server, I want to block facebook.com but while listed in blocked list , Some user's accessing facebook using https, how can i block only https for ...
1
vote
2answers
51 views

Which operating systems ship with StartCom_Certification_Authority.pem

I purchased some (cheap) HTTPS certificates from StartSSL. They work great on all browsers I tested. According to this post they are even recognized in IE 7 and 8, which good enough for me. However, ...
0
votes
2answers
85 views

How do i properly configure multiple multiple SECURE virtual hosts - Apache 2.2.15 & RedHat 6

To start, this question might overlap with others but I almost feel like this is a Red Hat issue regarding the "how to properly configure it" part. I have a few websites being served from the same ...
0
votes
1answer
222 views

nginx and SNI: is it possible to automatically resolve SSL certificate by domain name

I need to setup a server that will server same content over SSL using different domain names. The problem is that I need an ability to add new domain names as easily as possible. Assuming that all ...
0
votes
1answer
27 views

Transfer SSL certificate from one to another ubuntu server

we´re working together with a client. There server (A, example.com) is including content from our ubuntu apache (B, 140.120.98.178). There server (A) is already using a ssl certificate which we should ...
0
votes
1answer
532 views

HTTP 502 Bad Gateway error response

I'm debugging an issue and running out of ideas. I have a server with SharePoint code hosted at port 8080 and a WCF REST service at port 8801. From another machine on the domain, I can connect to the ...
5
votes
5answers
876 views

Force https entire site without redirecting http to https

There were a plenty of discussions while I was researching how to make my entire site https. The most answers were to redirect http to https (.htaccess file), which is not good, because it's not good ...
-2
votes
1answer
242 views

Redirecting and changing protocol from http to https using CNAME

Hi I bought a domain with dreamhost. example.com. Now I want to redirect it to one of my azure VM at https://example.cloudapp.net. Apparently it needed to change the protocole as well. Based on my ...
0
votes
1answer
83 views

SSL for secure.DOMAIN.com on port 443 and 2443, is it possible?

So I have a sub-domain that is secured using a godaddy ssl. what I would like to do is have the standard 443 port secured as well as port 2443 so when going to https://secure.domain.com its secured as ...
-1
votes
1answer
68 views

Windows azure vm refusing connection port 443

I am deploying my sailsjs app using forever in windows azure. And it is taking forever to get my server up and running. Initally it was working fine when it was http but I changed to SSL with self ...
0
votes
0answers
72 views

Random Switch from HTTP to HTTPS

For quiet sometime I've been dealing with a random switch from HTTP to HTTPS, at times it vanishes after a few attempts to remove the https from the url, otherwise I have to clear my cache to be ...
0
votes
0answers
59 views

SSL error - certificate not identifying correct server

SO I have set up my SSL certificate on my ubuntu/nginx server. When I created the certificate the wizard on Gandi (the CA for the certificate) asked me to identify a subdomain for the certificate. I ...
0
votes
2answers
63 views

Use fasterize.com : redirect to “http://www” except for one page in https (with lighttp)

I use the awesome front end optimizer fasterize.com , which requires www subdomain. Also I have a payment page that I would https without using fasterize, so on another subdomain. I use lighttpd, I ...
-1
votes
1answer
55 views

Self-signed certificate is not “trusted” by default? [closed]

Self-signed certificate is not “trusted” by default? How can I make it trusted? I used this tutorial for generate my .crt and .key - ...
1
vote
1answer
472 views

Sonicwall and HTTPS sites

I've been asked to investigate an issue with our company's network. The Sonicwall appliance was already setup and the one who did has already left the company. The problem is that the hosts under the ...
0
votes
1answer
272 views

HTTPS overhead compared to HTTP

HTTPS is the encrypted version of HTTP, and nowadays it is becoming a common practice to encrypt all the web traffic, not only sensitive one. The drawback of HTTPS, apart from the need to buy ...
0
votes
0answers
74 views

Secure froxlor access with https

I hope this is the right place to ask, but does anybody know how to configure froxlor right? I want that the login into the froxlor admin panel is secured by encrytion (https), so that the passwords ...