HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
0answers
22 views

HTTP/2 and SPDY running together in Apache

I have the latest Apache installed and currently support HTTP/2. Can I setup SPDY and run it together with HTTP/2? The goal is to also take advantage of the SPDY for browsers that do not support HTTP/...
0
votes
0answers
73 views

SSL Error when pressing CTRL+F5 (overwriting cache) in Firefox

I have an nginx server which fails to correctly delive ssl, when a user presses ctrl+shift+r or ctrl+F5. These shortcuts reload the page and bypass the browser cache. It seems to work in Chrome and ...
0
votes
0answers
39 views

Redirect locally generated HTTPS traffic through external proxy

I have a configuration like this: Internet | Public Zone | Private Zone IP x.x.x.x |<--- Forward Proxy / WebCache | <--- Linux Server (RedHat) ...
2
votes
1answer
53 views

Setting Port 443 ssl; loads different server directory?

Running Nginx + Centos 7.2 + Wordpress I am installing SSL for a domain of mine, and when I set the port in my serer configuration to listen 443 ssl;when I visit the domain, it prompts me with the "...
0
votes
1answer
72 views

SOGo as a virtualhost

I am currently busy setting up a mail/web/caldav/carddav server for personal use (apache, postfix, dovecot, SOGo) and at the moment I am getting stuck at the point where I want to specify a subdomain ...
2
votes
0answers
96 views

HSTS exclude specific subdomain with “includeSubdomains”

I'm using HSTS with this header on my website: Strict-Transport-Security: max-age=15768000; includeSubDomains This works as intended and forces the browser to redirect all http connections to ...
2
votes
1answer
81 views

Is it possible to disable HTTP Strict Transport Security in IE 11?

Is it possible to disable HTTP Strict Transport Security in IE 11? Example of why one would want to do this: A particular user group has filtered internet access through a proxy where only ...
1
vote
2answers
93 views

how to re-direct from http(s)://(www.)example.com to https://example.com using Nginx?

Just as the title states. I found another helpful Q/A, but it does not show how to do it correctly in Nginx settings, I mean the parameters. He might mean that https://exmaple.com should have a valid ...
0
votes
2answers
63 views

Can I use the same SSL certificate on the CDN and the origin

It's pretty straightforward question, I have a certificate issued by DigiCert, already installed it on my origin, and I want to use it for the CDN. I'm starting to configure Akamai CDN in front of my ...
0
votes
0answers
23 views

https: Why there is always an error at “Get a signed certificate”?

I am using diafygi/acme-tiny to config https,https://github.com/diafygi/acme-tiny There is always an error at Step 4: Get a signed certificate,why is it? [root@i001 ssl]# python acme_tiny.py --...
0
votes
2answers
19 views

One site handles https request with no ssl correctly, other generates \x16\x03\x01 error

We have two sites, sub.example1.com and example2.com. Neither one is specifically configured to handle ssl requests. One site https:/sub.example1.com, handles a secure request to port 443 successfully ...
0
votes
0answers
32 views

Is there any way to disable at least TLS 1.0 in GCE HTTPS Load Balancer?

I'm trying to pass the Trustwave pci DSS scan but i can't because it fails in "TLSv1.0 supported" and i think the problem is in GCE HTTPS loadbalancer that enables TLSv 1.0, 1.1 and 1.2 by default (...
0
votes
1answer
139 views

Nginx connection to upstream apache: Re-negotiation handshake failed

I'm configuring new nginx server which will be used as reverse proxy. We have older Debian server with apache up and running. On this apache server is site with https only access I want to hide behind ...
2
votes
1answer
56 views

HTTPS not working with two intermediate certificates

Iʼm trying to create my own certificate authority using the XCA software. I have successfully created the root CA (Fisir Technologies CA) and intermediate CA (Fisir Technologies Intermediate CA X1). ...
0
votes
2answers
188 views

Lets Encrypt with an nginx reverse proxy

Introduction I have a dev server (currently running Ubuntu 14.04 LTS), which I have been using for a while now for hosting various development tools on different ports. Because the ports can be hard ...
1
vote
1answer
76 views

Setting up Let's Encrypt for my domain and all sub-domains

I have a server (Debian 7 Wheezy and Apache 2.2) set up that hosts my domain, and a few sub-domains stemming from this. At the moment, I have these all set up in the default conf file as separate ...
1
vote
0answers
54 views

nginx SSL client certificate handshake very slow for domain and paths

I have a server with some subdomains publicly accessible while on one subdomain a client side certificate is required. Not only that, paths on that subdomain point to different applications. I.e that ...
0
votes
1answer
21 views

How can I install an SSL certificate using Amazon Certificate Manager to a VirtualHost?

I'm using Elastic Beanstalk and a t2.micro instance to host a few of my websites. For one of the websites specifically, I want to enable https. How do I go about doing this? I have each domain ...
1
vote
0answers
27 views

Hardware choosing and Bandwidth limitations on NGINX reverse proxy on a VPS?

Good afternoon friends. We are currently growing our infrastructure of a SaaS application and require 2 app dedicated servers, each running multiple instances of a nodejs application. The company ...
0
votes
0answers
59 views

Dell iDRAC Lifecycle Controller v2.21 - Support TLS 1.2?

Does Dell iDRAC Lifecycle Controller v2.21 support TLS 1.2? You should be able to (supposing default iDRAC and browser settings), in just a moment, get the answer by pointing your browser to the web ...
1
vote
0answers
54 views

Checking HTTPS setup on Apache/Nginx before using

You have just got a new HTTPS (SSL/TLS) Certificate, and what you hope is the correct Intermediate Certificates. This is setup in Apache with: SSLCertificateKeyFile /etc/ssl/www.example.com.key ...
1
vote
1answer
27 views

https not recognized by PHP when lighttpd url.rewrite used

I'm deploying a PHP website using lighttpd. To get nice URLs working, I've put this into the configuration file: url.rewrite = ( "^/(?!(wp-admin|wp-includes|wp-content))/(.*)" => "/index.php?$...
-1
votes
1answer
39 views

.htccess redirect from non-www https to www-https [closed]

I want to redirect https://example.com to https://www.example.com for my website. Can you help me with the code to put it on .htaccess file. the site is in magento.
1
vote
1answer
64 views

Website over HTTPS gives 502 error on Azure VM behind public load balancer

I have an Azure VM behind an Azure Public Load Balancer. The VM is running a website. I can load the website in a browser over HTTP with no issues, but when I try HTTPS I get a 502 error. I've got a ...
1
vote
1answer
29 views

lighttpd authentication before redirection from https to http

I would like to redirect from https to http after authentication so credentials go through a secure channel but everything else is transmitted in plain. Here it is the relevant part of the conf file: ...
1
vote
0answers
29 views

After changing to SSL index.php post fix is expected before server requests

I installed Mautic in an AWS server and it was working fine on the port 80. But when change to the following site configuration in mautic.conf (placed in /etc/apache2/sites-enabled/mautic.conf) to use ...
1
vote
0answers
28 views

Reverse Proxy with https redirect in Lighttpd

I've got a django application here that uses a lighttpd reverse proxy. We recently moved it behind an elastic load balancer on EC2 and I'm having trouble working out the correct config to do what I ...
2
votes
1answer
45 views

One IP Address and Wildcard Certificate for multiple Virtual Hosts (Windows, Apache 2.4.2, OpenSSL 1.0.2e)

I have searched and searched but I cannot find a solution to my issue, so apologies if this sounds familiar, but I am at a loss. I have: Windows environment Apache 2.4.2 OpenSSL 1.0.2e one IP ...
1
vote
0answers
37 views

Apache2 vhost SSL configuration running on Plesk [closed]

I have a problem with configuring ssl in apache 2 vhost configuration running plesk. My Server is running on a virtual machine with plesk 12. And basically I just want to setup ssl for the domain. ...
-1
votes
1answer
35 views

Apache how to create default host for https

I have several sites on my server. For example: domain1.com and domain2.com. If user requests a not existing sub-domain (For example: a.domain2.com) he will be redirected to domain1.com. I want to ...
0
votes
1answer
60 views

Reverse proxy for DoS / DDoS protection

after i search how to protect my website host server using GRE tunnels, some friends of this forum give me a tip to use Reverse Proxy that would be better. But i don't found any guide on how to ...
1
vote
0answers
14 views

SSL of domain redirecting to plesk panel default screen [closed]

I have plesk setup on my linux server, where we have a subscription setup for a website 4ti.co.uk We are getting a strange error where if you go to the domain using https://4ti.co.uk it directs you ...
0
votes
0answers
14 views

How do I run a nodejs app on HTTPS with Apache

I have a node app in apache, and I saw that people who work with NgineX can make their node app run on both HTTP and HTTPS without adding in and configuring the node app itself to run on HTTPS. Before ...
0
votes
0answers
78 views

nginx + apache2 + php-fpm - weird server port

I have nginx as proxy for apache2 + php5-fpm. I've decided to add letsencrypt cert to have a https. I've reconfigured my vhost in nginx and edited apache2 config. Everything seems to work fine, except ...
0
votes
2answers
38 views

ssl connection fails with wget, suceeds in browsers

I have a server running Apache 2.4 with various virtual hosts that provide https:// connections. These all are set up seemingly correctly and work fine in all browsers. However one virtual host ...
1
vote
1answer
26 views

Tomcat SSL not available outside

I do have a Tomcat8 server running, currently in the development environment. It's been working for a while on the port we have picked (8085) and was available outside of our network (unblocked on the ...
0
votes
0answers
44 views

Azure security HTTPS vs VPN vs ExpressRoute?

We're getting ready to release a Web API and I'm confused about the best way to secure it. Users will request data like: Browser -> HTTPS -> On-premise nginx -> ??? -> Azure worker -> Azure MSSQL ...
0
votes
1answer
96 views

Apache 2.4 https server gives connection refuse error on mac osx

I'm a newbie on Apache and I was set up my https server on OS X EI follows this article. But I always get refuse connection error, please help. This is my httpd-ssl.conf file: <VirtualHost *:443&...
3
votes
1answer
51 views

Are caching proxy servers still be helpful for saving bandwith, now that major services have migrated to https?

I live in Turkey and am part of a group planning to build a WiFi-based ISP to service my home town, as we believe it will be easier to connect all the sub-villages that are not close to our town ...
1
vote
2answers
64 views

Correctly opening port 443 to the internet

I need port 443 open to the internet on my server. When I check internally via netstat -tulpn | grep "nginx", I see that nginx is indeed LISTENing on that port. However, trying nmap -p443 mysite.com ...
0
votes
0answers
37 views

squid Failed to select source for '[null_entry]'

I created a proxy server using squid on Centos 6. It works fine with http but I can't open https websites. Squid listens to 443 port and the log file shows this error: 2016/03/04 12:50:46| Failed to ...
2
votes
1answer
100 views

HAProxy: Detect SSL connection contents and then decide to forward it or not

I would like to have a front end with HAProxy on port 443. This front end acts in the following way: It decrypts the contents of the connection and checks: 1- If the encrypted contents of the ...
-1
votes
1answer
48 views

Forcing HTTP to HTTPS causing 404 error

I have a website based on WordPress, and one section of it is built by external programmers (the backend). I was able to force all connections to go on HTTPS instead of HTTP using a plugin for the ...
1
vote
1answer
65 views

Redirect All URL to SSL, Except for X

I run NGINX on Vesta CP. There are two separate files nginx.conf and snginx.conf. Each has a server block in it. I redirect entire sites to SSL. To do this I add a return 301 https://example.com$...
1
vote
0answers
103 views

NGINX: Check if SSL (HTTPS) is available, if not, redirect to HTTP

The current config is: server { listen 80 default_server; listen [::]:80 default_server; listen 443 ssl default_server; listen [::]:443 ssl default_server; listen 192.168.0.5:80 default_server;...
0
votes
2answers
48 views

Is my site secure if the SSL padlock does not appear?

I have moved a website to https and its working fine. The admin area and login page display the green https padlock when i visit the pages, but none of the other pages display the padlock. I ran a ...
0
votes
0answers
47 views

TCP Handshake failing only on outside internet access

I have an Apache webserver using https which suddenly stopped working with access from outside the internet. LAN access to the webserver is working fine. I was tracing the packets using tshark and it ...
1
vote
1answer
21 views

Securing traffic handled with mod_proxy

I have a machine running Apache and a Node.js server. Traffic is being routed through Apache using mod_proxy like so: <VirtualHost *:443> ServerName example.com ProxyPass / http://localhost:...
1
vote
1answer
74 views

Tomcat/https: I can see compression is enabled, but file sizes are the same as without compression

I have enabled compression on Tomcat running on my machine. The https response header is showing compression is enabled, but the same amount of data is being transferred with and without compression ...
0
votes
0answers
12 views

Is there a way around Apache HTTPS redirect filtering blocks?

I am currently using a mod_security HTTPS redirect in order to maintain PCI requirements. However, I have noticed that many commercial web filters (i.e. websense) are blocking the site due to a proxy ...