HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
1answer
49 views

How to prevent a specific request to redirect from http to https in SSL configuration?

I am facing one issue regarding ssl. Basically i want to stop redirection of only one request from http to https in Jboss 7. According to the requirement all http request should be redirected to ...
0
votes
1answer
47 views

HTTPS Certificate error

I have a telephone system in my office which hosts its administration interface on a local webserver secured by https. When I try to access the interface I always get a certificate error, even after ...
2
votes
2answers
105 views

Nginx Reverse Proxy Will Not Load HTTPS Sites

Today has been the first time I've used Nginx. I got it set up as a dedicated reverse proxy by following a few guides. This is what I'm trying to recreate - ...
1
vote
2answers
62 views

How can I tell nginx to serve SSL for one domain only?

Yes, this is something of a duplicate to this question, however, according to the ngnx document "Configuring HTTPS servers" (the section "Single HTTPS Server"), this limitation no longer exists, and ...
0
votes
0answers
50 views

Single domain with Apache https as a proxy for many local servers

Using Apache we need to setup number of instances of our application running on different servers internally in such a way that they are visible under our single domain name externally. This is so ...
1
vote
1answer
984 views

“CHECK_NRPE: Socket timeout after 10 seconds” HTTPS / SSL

I have configured NAGIOS server on IP address AA.BB.CC.DD (Linux Fedora 20), and Monitoring the host with IP address LL.MM.NN.OO (Linux Fedora 20). I have configured NRPE to run on port # 15666 ...
0
votes
2answers
52 views

Subdomain-to-folder redirect (HTTPS)

I have the following in my httpd.conf at the very bottom. No other configuration is done. NameVirtualHost *:80 <VirtualHost *:80> ServerAdmin webmaster@contoso.com ServerName ...
0
votes
0answers
63 views

Wildcard and multiname certificates aren't recognized by clients?

So, this is my problem. I have dev environment under internal domain - let's say machine name is dev. Every single working copy I create is autodetected by puppet and appropriate virtual host is ...
0
votes
0answers
65 views

Apache form authentication issues

I am trying to authenticate users through Apache using the form authentication method to restrict https requests to a certain folder. Although, regardless of whether the correct login details are ...
2
votes
2answers
70 views

How to prevent https:// being accessible from domains without a certificate?

I have this setup Server version: Apache/2.2.22 (Ubuntu) OpenSSL 1.0.1c 10 May 2012 One IP with multiple domains connected to it. For example1.com I have a signed SSL certificate, and thus ...
1
vote
3answers
131 views

Cannot connect to HTTPS port on Ubuntu

I've installed a new SSL certificate and set up Nginx to use it. But requests time out when trying to hit HTTPS on the site. When I telnet to my domain on port 80 it connects, but times out on port ...
1
vote
1answer
51 views

configure HTTPS server on a cisco router

For the past week I was trying to configure an HTTPS server on a cisco 2900 router, I've used the following commands and assigned a username and password to privilege 15 however, when Im trying to ...
0
votes
0answers
242 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
1
vote
1answer
53 views

Both example.com and www.example.com with SSL

I obtained a free CA certificate from https://www.startssl.com/. I added the domain name example.com, and in the control panel, it shows www.example.com under SSL/TLS Server, and example.com under ...
1
vote
1answer
79 views

IIS Redirecting by domain in ASP.NET MVC 4

I've created an app that is like a mini-shop, but now I have two problems with my clients: Some of them want it to be their domain, instead of mine, say: http://myshop.com/?shop=a197dc43fd89e should ...
2
votes
1answer
365 views

Having problems setting up SSL with Nginx

I'm trying to setup SSL(0.9.8e) using Nginx(1.2.3) on a Windows 7 machine. I've generated a self-signed certificate that is needed, so I have a key and a certificate file. When trying to start Nginx ...
0
votes
0answers
44 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
0
votes
0answers
37 views

No longer can get nginx.conf to respect my redirect rules

I want to redirect all sites and subdomains to one https domain name. I'll use https://my-site.com as an example. Previously I had all the redirection working with the following code: server { ...
1
vote
0answers
99 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
2
votes
1answer
97 views

Nginx, setup https

I'm trying to setup https on my ubuntu server with NGINX ver 1.4.7 and Phusion Passenger 4.0.41. I created .key and .csr using these two commands sudo openssl genrsa -des3 -out server.key 2048 sudo ...
2
votes
1answer
71 views

What determines how long an SSL session is valid

HTTP(S) is stateless, right? But if I go to some site via HTTPS, I assume I don't need an SSL handshake for every single page request. Is it a combination of SSL session cache and cookies?
0
votes
4answers
9k views

Fix/Bypass “Cannot connect to the real website-blocked” error in Google Chrome with OpenDNS blocking

I have a large problem with Chrome in my organisation. I use DNS to manage web site blocking, for sites which are not appropriate and are potentially a risk to the organisation where I do this. I ...
2
votes
0answers
66 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
0
votes
1answer
260 views

nginx https -> http redirection using wildcard error

I've already search the whole web for an answer, unfortunately there isn't. I hope there is a genius out here. Context: My nginx acts as a reverse proxy serving multiple domains Problem: the problem ...
0
votes
1answer
74 views

Apache HTTPS redirect from old domain to new HTTPS Domain

I used to have a domain which used to have a SSL Certificate, it still does have. But I have changed the domain, and I also have a new SSL Certificate for that new domain. I still have users ...
0
votes
0answers
40 views

Multiplying requests by using Nginx

I am trying to write an http request analyzer however I want it to be transparent to web application. So I want to know if I can multiply the request by using an nginx proxy like below; Internet ...
1
vote
1answer
86 views

Mixed Content and SSL Sites / Protocol Relative URLs

I have a site that was all HTTP until recently, when it was requested that we add an SSL cert because there was a concern about MIM attacks with a login applet on the home page. I bought the cert, ...
1
vote
2answers
343 views

Why won't Nginx return a 404 error for URLs starting with a question mark?

I'm trying to get a rewrite rule working and I've discovered that if the URL begins with a question mark, Nginx fails to return 404 error as expected. Instead, index.html as defined in the root ...
3
votes
2answers
235 views

Automatically reconfigure WinRM HTTPS listener with new certificate?

I am looking to enable WinRM HTTPS listeners on all of our servers for secure communication when using CredSSP between servers to get around the double-hop issue. Setting this up is fine, we have ...
0
votes
0answers
135 views

cURL NSS error -12286 SSL_ERROR_NO_CYPHER_OVERLAP

Using cURL 7.36.0 (x86_64-redhat-linux-gnu) on EC2 Amazon Linux, I can't connect to certain websites (not all) using HTTPS and receive the above error. From researching the issue I have learned that ...
2
votes
2answers
207 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
0
votes
1answer
44 views

cannot access ssl-secured website on the server side

I am having problems accessing a website, that recentely got SSL-security, on the server side. Accessing the website like normal is not a problem, but when I try to open the website on the server ...
0
votes
1answer
31 views

HTTPS to HTTP - Response appears cached, or maybe this doesn't work.

Long story short: Google cached https:// links, when this website doesn't need an SSL - The SSL is expired now, and people are getting that warning screen when coming from Google. Thus, we found ...
0
votes
1answer
480 views

How to make git push work with nginx (basic auth) behind nginx reverse proxy (HTTPS)?

I like to have a git server on a computer (backend) without direct internet access. There should be basic authentication. The access should be available by means of a reverse proxy (frontend) on ...
-1
votes
1answer
28 views

Only allow a specific client to talk to a server

I have the following situation: have a server (ubuntu) running an application. I have a client (only the one client) requesting stuff from that server. To execute the requests, the client has to ...
0
votes
1answer
210 views

Local Proxy tool which authenticates against NTLM, sits on top of the Java VM and possibly transparently passes through HTTPS requests

I'm looking for a local HTTP proxy which I can run locally on my machine. This proxy accepts HTTP and HTTPS request and passes them upstream on to an external corporate proxy. The local proxy needs to ...
0
votes
0answers
40 views

Oracle Content Server Losing HTTPS on adfAuthentication

This has been a nagging problem for a while now, in summary we have the following setup. Cisco ACE Load Balancer -> Oracle HTTP Sevrer -> WebLogic We are terminating the SSL on the load balancer, ...
-1
votes
1answer
149 views

mod_rewrite: Redirect https://example.com to https://sub.example.com [duplicate]

I have an domain example.com running on an Apache Server and I want to redirect every call to https://example.com to https://sub.example.com. I have a Virtual Host configured like this: ...
14
votes
1answer
672 views

How does this kind of SSL work?

"Issued to" and "Domain Name" doesn't match but still valid and accepted by all major browsers without any warning. While previewing my blog post in Blogger, I noticed that my blog was previewed via ...
0
votes
2answers
208 views

After enabled SSL, HTTP not working Nginx VPS

Today I set up a self-signed SSL certificate for my Wordpress sites via my Cent OS Nginx VPS. Because I want to use HTTPS only for Wordpress backend. This is my vhost nginx configuration file (file ...
2
votes
2answers
190 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
1answer
55 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
0
votes
1answer
50 views

Curl pressing enter or ctr+c in order to have the right response [closed]

This is a script that checks my current ip on this site: http://myip.dnsdynamic.org/ and pick the response and calls an API in order to update my dynamic ip. Here the script: curl --user ...
0
votes
0answers
99 views

How do I test Apache that mod_evasive is working for HTTPS virtual hosts?

I have enabled Apache mod_evasive on my web server. I have disabled my default virtual host and have set up several virtual hosts which server content via HTTPS. I would like to test that ...
0
votes
2answers
152 views

HTTPS SSH Tunnel

Ok so I have a web server, lets call it Server A, which is providing a service via HTTPS. And I have an SSH gateway server, lets call it Server B. Due to firewall rules I cannot access Server A's web ...
0
votes
2answers
147 views

Configuring two IPs for one server?

I have a windows server that is running two ASP.NET websites. I would like to setup an HTTPS connection for each site. I had initially run into problems because I was trying to use a single IP ...
1
vote
1answer
70 views

what are the security implication of intentionally leaking a ssl certificate?

I have a website (http://example.com) which makes some requests to http://localhost:12345 in its javascript. I want to open this website over https but due to mixed content some browsers throw ...
1
vote
0answers
483 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
169 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
0
votes
2answers
245 views

nginx redirect https://www to https:// non-www without untrusted connection warning?

I have a valid SSL certificate for myapp.com, but not for www.myapp.com. Based on this question, it seems to me that it's not possible to immediately redirect from https://www.myapp.com to ...