HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

14
votes
1answer
665 views

How does this kind of SSL work?

"Issued to" and "Domain Name" doesn't match but still valid and accepted by all major browsers without any warning. While previewing my blog post in Blogger, I noticed that my blog was previewed via ...
0
votes
2answers
128 views

After enabled SSL, HTTP not working Nginx VPS

Today I set up a self-signed SSL certificate for my Wordpress sites via my Cent OS Nginx VPS. Because I want to use HTTPS only for Wordpress backend. This is my vhost nginx configuration file (file ...
2
votes
2answers
122 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
1answer
53 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
0
votes
1answer
43 views

Curl pressing enter or ctr+c in order to have the right response [closed]

This is a script that checks my current ip on this site: http://myip.dnsdynamic.org/ and pick the response and calls an API in order to update my dynamic ip. Here the script: curl --user ...
0
votes
0answers
75 views

How do I test Apache that mod_evasive is working for HTTPS virtual hosts?

I have enabled Apache mod_evasive on my web server. I have disabled my default virtual host and have set up several virtual hosts which server content via HTTPS. I would like to test that ...
0
votes
2answers
85 views

HTTPS SSH Tunnel

Ok so I have a web server, lets call it Server A, which is providing a service via HTTPS. And I have an SSH gateway server, lets call it Server B. Due to firewall rules I cannot access Server A's web ...
0
votes
2answers
147 views

Configuring two IPs for one server?

I have a windows server that is running two ASP.NET websites. I would like to setup an HTTPS connection for each site. I had initially run into problems because I was trying to use a single IP ...
1
vote
1answer
67 views

what are the security implication of intentionally leaking a ssl certificate?

I have a website (http://example.com) which makes some requests to http://localhost:12345 in its javascript. I want to open this website over https but due to mixed content some browsers throw ...
1
vote
0answers
284 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
111 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
0
votes
2answers
150 views

nginx redirect https://www to https:// non-www without untrusted connection warning?

I have a valid SSL certificate for myapp.com, but not for www.myapp.com. Based on this question, it seems to me that it's not possible to immediately redirect from https://www.myapp.com to ...
0
votes
0answers
97 views

Configure nginx proxy_pass

I am trying to use a proxy to be able to call the url https://:8082/test and "redirect" to https://:8081. I tried with the "location /" it is working well but when I put a specific location like ...
0
votes
2answers
129 views

Properly setting up a “default” nginx server for https

I have several servers running on the same machine, some with http only, some with both http and https. There are several server blocks defined in separate files which are included from the main ...
0
votes
0answers
91 views

Provide SSTP VPN and normal HTTPS Websites over the same Port and IP?

In my little lab I want to use SSTP VPN AND a HTTPS-Webpage, which should be accessible from the internet. I just have 1 public IP and the lab is behind NAT (Port forwarding 443). SSTP already works ...
1
vote
2answers
58 views

nginx ssl virt host issue - site won't load

I have configured nginx for port 80 and 443, with 443 containing an ssl cert configuration. When I restart nginx, no errors occur, so I don't believe it's a cert issue, but of course I could be ...
0
votes
1answer
185 views

Blocking/redirecting port 3000 with Nginx and Ruby On Rails (thin server)

I am setting up a server now that uses Ruby on Rails with the Thin server. I have set up Nginx to redirect all of my http://mysite.com to https://mysite.com(with ssl). I want all network traffic to ...
1
vote
0answers
156 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
-1
votes
1answer
117 views

Shorewall forward 443 port to two servers [closed]

I have a question/problem. I have two webservers. One is a webmail and the other one is a standard webserver. I need to forward 443 port to both of them. I have added proxyarp to the shorewall and ...
2
votes
1answer
187 views

OpenSSL missing cipher

I'm trying to configure proper setup for my HTTPS server and I am have a little trouble with IE8@WinXP. This platform has a very poor support for TLS siphers: ...
0
votes
0answers
141 views

Moving gitlab-ssl to a subdirectory

I have a server with static ip, currently with this config <VirtualHost *:80> ServerAdmin webmaster@localhost ServerName rab JkMount /rab ajp13_worker JkMount /rab/ ...
0
votes
3answers
679 views

Can't Block https://facebook using squid Transparent

I'm using Squid Proxy 3.1 as transparent proxy server, I want to block facebook.com but while listed in blocked list , Some user's accessing facebook using https, how can i block only https for ...
1
vote
2answers
51 views

Which operating systems ship with StartCom_Certification_Authority.pem

I purchased some (cheap) HTTPS certificates from StartSSL. They work great on all browsers I tested. According to this post they are even recognized in IE 7 and 8, which good enough for me. However, ...
0
votes
2answers
73 views

How do i properly configure multiple multiple SECURE virtual hosts - Apache 2.2.15 & RedHat 6

To start, this question might overlap with others but I almost feel like this is a Red Hat issue regarding the "how to properly configure it" part. I have a few websites being served from the same ...
0
votes
1answer
200 views

nginx and SNI: is it possible to automatically resolve SSL certificate by domain name

I need to setup a server that will server same content over SSL using different domain names. The problem is that I need an ability to add new domain names as easily as possible. Assuming that all ...
0
votes
1answer
27 views

Transfer SSL certificate from one to another ubuntu server

we´re working together with a client. There server (A, example.com) is including content from our ubuntu apache (B, 140.120.98.178). There server (A) is already using a ssl certificate which we should ...
0
votes
1answer
479 views

HTTP 502 Bad Gateway error response

I'm debugging an issue and running out of ideas. I have a server with SharePoint code hosted at port 8080 and a WCF REST service at port 8801. From another machine on the domain, I can connect to the ...
5
votes
5answers
837 views

Force https entire site without redirecting http to https

There were a plenty of discussions while I was researching how to make my entire site https. The most answers were to redirect http to https (.htaccess file), which is not good, because it's not good ...
-2
votes
1answer
209 views

Redirecting and changing protocol from http to https using CNAME

Hi I bought a domain with dreamhost. example.com. Now I want to redirect it to one of my azure VM at https://example.cloudapp.net. Apparently it needed to change the protocole as well. Based on my ...
0
votes
1answer
80 views

SSL for secure.DOMAIN.com on port 443 and 2443, is it possible?

So I have a sub-domain that is secured using a godaddy ssl. what I would like to do is have the standard 443 port secured as well as port 2443 so when going to https://secure.domain.com its secured as ...
-1
votes
1answer
61 views

Windows azure vm refusing connection port 443

I am deploying my sailsjs app using forever in windows azure. And it is taking forever to get my server up and running. Initally it was working fine when it was http but I changed to SSL with self ...
0
votes
0answers
70 views

Random Switch from HTTP to HTTPS

For quiet sometime I've been dealing with a random switch from HTTP to HTTPS, at times it vanishes after a few attempts to remove the https from the url, otherwise I have to clear my cache to be ...
0
votes
0answers
57 views

SSL error - certificate not identifying correct server

SO I have set up my SSL certificate on my ubuntu/nginx server. When I created the certificate the wizard on Gandi (the CA for the certificate) asked me to identify a subdomain for the certificate. I ...
0
votes
2answers
61 views

Use fasterize.com : redirect to “http://www” except for one page in https (with lighttp)

I use the awesome front end optimizer fasterize.com , which requires www subdomain. Also I have a payment page that I would https without using fasterize, so on another subdomain. I use lighttpd, I ...
-1
votes
1answer
54 views

Self-signed certificate is not “trusted” by default? [closed]

Self-signed certificate is not “trusted” by default? How can I make it trusted? I used this tutorial for generate my .crt and .key - ...
1
vote
1answer
400 views

Sonicwall and HTTPS sites

I've been asked to investigate an issue with our company's network. The Sonicwall appliance was already setup and the one who did has already left the company. The problem is that the hosts under the ...
0
votes
1answer
232 views

HTTPS overhead compared to HTTP

HTTPS is the encrypted version of HTTP, and nowadays it is becoming a common practice to encrypt all the web traffic, not only sensitive one. The drawback of HTTPS, apart from the need to buy ...
0
votes
0answers
73 views

Secure froxlor access with https

I hope this is the right place to ask, but does anybody know how to configure froxlor right? I want that the login into the froxlor admin panel is secured by encrytion (https), so that the passwords ...
153
votes
11answers
24k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. I use a web hosting panel called ZPanel that is an open source project. It then set up a redirect for all traffic on my domain on Port 80 to ...
0
votes
2answers
109 views

Wrong application loads on port 443

I have a server with two web application that configured as follow: app1: www.domain1.com has https version app2: www.domain1.com has not https version This is my VirtualHost config for ...
0
votes
1answer
35 views

Serving image content over https, must encryption strength match that of the main website?

Im looking at migrating my website to https throughout. I have a server responsible for the HTML/PHP, and 4 other servers which serve image content Now clearly all the image servers need to be https ...
1
vote
1answer
129 views

Can not access single HTTPS domain [duplicate]

I'm having a very weird issue with a certain HTTPS site. I have no crazy network setup or firewalls. Just computers behind a cable modem. I feel dumb but I can't figure it out for the life of me. ...
0
votes
0answers
60 views

ssl_error_rx_record_too_long and basic Authentication

I have webspace, hosted at a german provider (its name could be understood as »2«) and added an SSL-Certificate to the domain. The domain points to a subdirectory in webspace. The subdirectory is ...
0
votes
3answers
61 views

nginx https 443 redirection from no subdomain to 'www' subdomain

My configuration: server { listen 80; server_name mydomain.com; rewrite ^(.*)$ $scheme://www.mydomain.com$1; } server { listen 80; server_name www.mydomain.com; return 301 ...
0
votes
1answer
107 views

Apache Serving Wrong Document Root

I have installed SSL on a subdomain of my site. Everything works perfectly, except this strange behavior. If I point my browser at the following locations, these document roots are served: ...
0
votes
1answer
48 views

SSL on Subdomain Only

This should be a super simple setup! I am trying to enable SSL on only a single subdomain. However, when I do this, all of my subdomains and my primary domain end up pointing towards that ...
0
votes
2answers
127 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...
2
votes
0answers
2k views

Configure Squid as an HTTPS forward proxy?

Here's some background about my problem: I have a web service running on Heroku, with a dynamic IP address. Static IPs on Heroku are not an option. I need to connect to an external web service which ...
2
votes
2answers
61 views

http in the Location-header when the original request was made over https

I am currently implementing https on our production environment, but I am scratching my head over a little thing here. SSL is terminated in the load balancer and the flow in our stack is basically ...
0
votes
2answers
30 views

Apache2 listening on port 443 even though sites-available config files don't list it

I removed the symbolic links from /etc/apache2/sites-enabled. I created a config file in /etc/apache2/sites-available/ which specifies my HTTP only site for port 80. Then I create the symbolic link ...