Tagged Questions

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

2
votes
2answers
129 views

Apache HSTS exception for some virtual hosts

In the global config section for Apache 2.2.15, I have the following (per recommendation) <IfModule mod_headers.c> Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" ...
1
vote
0answers
34 views

nginx: HSTS on a page with www-authentication

Is it possible, on nginx, to send a Strict-Transport-Security header, even on pages that require WWW-Authentication? When I have both auth_basic and add_header Strict-Transport-Security ...
0
votes
2answers
45 views

lighttpd - redirect everything to https

I have tried to use the example from this wiki page - $HTTP["scheme"] == "http" { # capture vhost name with regex conditiona -> %0 in redirect pattern # must be the most inner block to ...
0
votes
0answers
227 views

IIS Rewrite Rule in web.config to redirect HTTPS requests to HTTP

I need to redirect all https requests to http, for example, if someone visits https://www.example.com/another-page/ to http://www.example.com/another-page/ I have the following rewrite rule in my ...
0
votes
4answers
105 views

Redirect HTTPS traffic without changing the HOSTS file

I have a website hosted on 2 servers. The website is SSL based. I'd like to monitor (load the main page and look for a certain string) the website per server using a local Opsview. Meaning I need to ...
0
votes
0answers
45 views

Firefox, Chrome - can't start https google services

I'm using MIKROTIK as proxy, but using Firefox or Chrome I have following problems: https google can't show almost any of pictures found https gmail stuck on progress bar before mailbox is loaded ...
0
votes
0answers
112 views

Tuning Apache KeepAlive Timeout for HTTPS

My website forces HTTPS everywhere and has an average first load time of 3-5 seconds. Thanks to caching, repeat load time is 0.8 seconds. The SSL negotiation takes 150-300ms on my server, so I want ...
0
votes
1answer
64 views

How to add HTTPS to Elastic Load Balancer?

I'm using boto to create an Apache http server that "hides" behind an AWS Elastic Load Balancer (ELB). However, the ELB DNS address is functional only when I specify port 80 (http) in its security ...
0
votes
0answers
15 views

Internal IIS http to https

I have setup a test environment (all Windows Server 2012 boxes) with a Domain Controller and an Exchange Server 2013. On the Exchange Server, I have setup in IIS redirects for OWA. This works fine ...
0
votes
0answers
70 views

Squid, WCCP and Transparent HTTPS

Sorry if this has been answered but i just can't get it to work for me. We would like to log all HTTPS & HTTP requests but not to use Squid-in-the-middle. We would like the proxy to connect the ...
3
votes
1answer
524 views

Can a Reverse Proxy use SNI with SSL pass through?

I need to serve several applications over https using one external ip address. The ssl certificates should not be managed on the reverse proxy. They are installed on the application servers. Can a ...
-1
votes
2answers
68 views

.htaccess file isn't working for https

I have simple .htaccess file to forbid access to a directory as : order allow,deny deny from all Well, it doesn't work with SSL and show the content of directory if client access the directory ...
0
votes
1answer
483 views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
2
votes
3answers
105 views

Steps to produce a self-signed certficate(s) that, after being trusted, will work for two different IPs without a security warning

We have a test server that I'm trying to change over to HTTPS/SSL, and it has both an internal IP and an external IP. We have to use self-signed certificates for this particular server. There was ...
0
votes
1answer
67 views

Multiple Proxy servers - and how to get around non-SNI devices?

We have a lot of devices that cannot use SNI and we want to be able to proxy a lot of HTTP/HTTPS servers. I was thinking we could setup a HAProxy for each URL to connect to initially, and then load ...
0
votes
0answers
93 views

400 error with nginx subdomains over https

Not sure what I'm doing wrong, but I'm trying to get gunicorn/django through nginx using only https. Here is my nginx configuration: upstream app_server { server ...
-2
votes
2answers
65 views

https download file with custom S3 URL

I believe the following question should be asked here and not @Super User. My web application is using S3 for users to download files. Prior customizing the url, files were downloaded from S3 with ...
1
vote
0answers
72 views

Enabling AES 256 GCM on Windows Server 2012 R2

I'd like to enable the use of the AES 256 GCM encryption instead of the AES 256 CBC. We already have ECC certificates based on ECDSA so that pre-requisite has been fullfilled. The certificate has a ...
0
votes
1answer
54 views

LAMP Server HTTP-> HTTPS redirect in .htaccess

I have 2 LAMP servers with the same version of Apache, both running Wordpress. SSL is working on both servers (although the test server uses a cert for a different domain). On both I have the ...
0
votes
0answers
99 views

SCCM 2012 R2 and Client Certificates for HTTPS

We have a SCCM 2012 R2 site with a Management Point and a Distribution Point, all of which are using HTTPS with certificates issued by our Enterprise CA. We want to do OS Deployments (PXE for bare ...
0
votes
2answers
952 views

Why does Android Chrome say my site's security certificate is not trusted?

My site is https://blendbee.com. It's using a PositiveSSL certificate that is valid. In Windows 8 Chrome the certificate is fine (green lock in top left corner). But...on my Android, it's not so ...
0
votes
1answer
386 views

Jenkins and HTTPS: Cannot connect to server

We have a Subversion repository located on an https connection. I am able to connect to it locally (no proxy needed): $ svn ls --username=qazwart --password=swordfish \ ...
1
vote
1answer
579 views

Redirect all http requests behind Amazon ELB to https without using if

Currently I have an ELB serving both http://www.example.org and https://www.example.org. I would like to set it up so any request pointing to http://www.example.org is redirect to ...
-1
votes
1answer
56 views

“Securely” download a file over https without using authentication

I need to securely download a file over https without using authentication. The reason I need to do this is I want to create a zap at Zapier.com that allows me the copy a file from a https post to my ...
0
votes
1answer
23 views

Is it possible to mimic the client of a https web service

There is such a windows application that communications with the server through https protocol, it is an auction tool and works only several hours per month. I have captured network packets (by ...
0
votes
1answer
566 views

URL redirect not working in IIS 7.5

I am facing problem redirecting my HTTPS web service from HTTP. I have applied CA SSL certificate to my web service and using URL Rewrite, I have done the changes for redirection in IIS 7.5. Here is ...
-1
votes
1answer
915 views

Error code: ssl_error_rx_record_too_long on nginx ubuntu server

I have a site which was perfectly running with apache on some old ubuntu server and also has https for it. But now for some reasons i need to move to different(new ubuntu server with high ...
4
votes
1answer
13k views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
0
votes
2answers
223 views

Setting up SSL - https works, http not working

Update: A temp solution I found was to just redirect all http requests to https. I have been working on setting up SSL on my website. It is like on a Rails. I use nginx with unicorn. I bought the ...
0
votes
0answers
395 views

Error code: ERR_SPDY_PROTOCOL_ERROR

Just installed StartSSL certificate on my debian wheezy, nginx 1.6 server. Everything seem to be working fine, I can browse the website in https no problem until I try to login... IE works fine and I ...
2
votes
0answers
207 views

How to provide external access to only the Git projects (clone/pull/push) of an internal GitLab deployment

We have set-up a GitLab server (GitLab 7.0 Community Edition). It is up and running and our colleagues can use it within the LAN (the IP address and Host are only visible from the LAN). Some of the ...
0
votes
1answer
36 views

IIS8 - HTTP automatically forwards to HTTPS

Currently I am running two sites (each one has an app Pool). One for HTTPS which is called cloud and the other one for HTTP content called headsup. When I browse to the domain.com/cloud it all works ...
0
votes
2answers
64 views

configuring https on EC2

I know similar questions have been asked here and I read them all, but I could not get a clear answer. So I am asking here. I have an EC2 instance.It is a dedicated instance running LAMP. Everything ...
-2
votes
1answer
367 views

ssl certificate - identity not verified with godaddy [closed]

I followed all the steps to create a unique certificate that looks like this -----BEGIN CERTIFICATE----- MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCAmowggHXAhAF ...
0
votes
1answer
25 views

setting up duplicate http and https locations in apache 2.2 [closed]

I have VirtualHost *:80 tag with many Locations with authentication defined in it. Now I just added https. do I need to replicate all of these Locations under VirualHost *:443? is there any easy way ...
0
votes
0answers
115 views

openVPN on TCP 443 + sniproxy only for certain IPs - is it a way to do it?

I'm currently running sniproxy and https server. If user is known (IP is known) iptables just allows connection to sniproxy which redirects user to desired website or local https server (127.0.0.1 ...
0
votes
0answers
237 views

Squid forward SSL certificate with passphrase

I have a HTTPS server that expects the client to provide a certificate. This cert uses a passphrase. Everything works fine. But if I use SQUID as my proxy then the authentication fails and squid ...
0
votes
3answers
81 views

Nginx server redirect being ignored

I'm must be stuffing this up somewhere but can't see where. Nginx appears to be ignoring the following redirect. This currently resides in its own conf file, but I have placed it in the other files. ...
0
votes
2answers
148 views

Squid request_header_add with https

I'm trying to configure my squid proxy to add a header to all my requests. There is nothing fancy about the configuration. I have the following: request_header_add X-Custom-Header "customheadervalue" ...
0
votes
0answers
47 views

apache issue with https requests

I am running Apache/2.2.27 WHM vps and have problem with https requests. http requests are handled fine but when a single https page is visited, several requests are shown in "R" (reading) state in ...
0
votes
0answers
16 views

Something in the network is causing my REST interface to respond to requests with an empty body

We import orders from online through a REST interface over HTTP, which sends back JSON responses. I've confirmed that the code itself works, and it works on the test server. For some odd reason, ...
1
vote
1answer
48 views

How do I use NGINX as a frontend for a Legacy (Apache) Webserver [duplicate]

I have an NGINX server setup that is already hosting two applications, and SSL is set up on that NGINX server. Now, I need to setup the NGINX server to be a front-end for a legacy Apache application ...
0
votes
1answer
56 views

Apache https error log

We have a website running on Apache. Users can access part of it by HTTP and the other part by HTTPS. Apache is logging HTTP errors but not HTTPS errors. However, both log access. How can I solve ...
1
vote
1answer
158 views

nginx SSL termination for apache2.2 svn server results in endless redirects

I'm trying to set up a SVN repository on our new company server. We are using nginx for SSL termination and apache as SVN backend. I don't know whats wrong with my configuration, but if I call svn ...
-1
votes
1answer
377 views

Failed to bind to: /0.0.0.0:443 [closed]

I am having problems starting my play framework server on port 443,i am using scala play 2.20 and my play server running fine on port 9443 by following command ./start -Dhttps.port=9443 ...
-1
votes
1answer
151 views

Hot redirect http/https request coming to port 80 to a internal tomcat server on 8080 [closed]

I have a production server with a domain name. It has a tomcat server on 8080. It has several web applications. So I want to map the http/https requests coming to that server to these web ...
0
votes
2answers
398 views

How to redirect http to https for IP and domain on Apache2

I have an Apache2 web server running on Ubuntu 12.04. The domain of the website that I am hosting works fine, and if you go to the http version instead of the https version, it automatically redirects ...
1
vote
1answer
86 views

Nginx not redirecting but is working

This is my first setup with nginx and I'm using it to proxy to nodejs. HTTP is on port 3000, and HTTPS is on port 3001. If I go to http://test.domain.com it loads the regular unsecure pages. If I go ...
0
votes
0answers
33 views

CreateObject failing when running asp application through https on iis7

I am running an asp site on iis7 / Server 2008. I have two websites set up in IIS pointing at the same application, one site uses http, the other uses https. When executing a script, the site using ...
1
vote
2answers
587 views

Nginx block for multiple domains to redirect all traffic to https?

I have a web server running nginx 1.6 with one IP address and hosting www.domainname.com as well as dev.domainname.com. I'm trying to find a smart way to route all http traffic to https and I want to ...