HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
2answers
48 views

Is my site secure if the SSL padlock does not appear?

I have moved a website to https and its working fine. The admin area and login page display the green https padlock when i visit the pages, but none of the other pages display the padlock. I ran a ...
0
votes
0answers
47 views

TCP Handshake failing only on outside internet access

I have an Apache webserver using https which suddenly stopped working with access from outside the internet. LAN access to the webserver is working fine. I was tracing the packets using tshark and it ...
1
vote
1answer
21 views

Securing traffic handled with mod_proxy

I have a machine running Apache and a Node.js server. Traffic is being routed through Apache using mod_proxy like so: <VirtualHost *:443> ServerName example.com ProxyPass / http://localhost:...
1
vote
1answer
75 views

Tomcat/https: I can see compression is enabled, but file sizes are the same as without compression

I have enabled compression on Tomcat running on my machine. The https response header is showing compression is enabled, but the same amount of data is being transferred with and without compression ...
0
votes
0answers
12 views

Is there a way around Apache HTTPS redirect filtering blocks?

I am currently using a mod_security HTTPS redirect in order to maintain PCI requirements. However, I have noticed that many commercial web filters (i.e. websense) are blocking the site due to a proxy ...
3
votes
1answer
105 views

Prevent HAProxy from redirecting HTTP to HTTPS

I'm using HAproxy to load balance requests between Apache servers. I'm trying to disable HTTPS for a special use case (serving of kickstart files), and I'm using port 8000 to do this. I have an ...
0
votes
2answers
109 views

How to setup 2 domain at the same nginx server, 1st on HTTPS, 2nd on HTTP?

I have a nginx config like this First Block: server { listen 80; server_name abcd.info; return 301 https://$host$request_uri; } server { listen 443 ssl http2 ...
-1
votes
1answer
25 views

HTTPS activated, how to refuse HTTP connections [duplicate]

I recently installed an SSL certificate on my server and now HTTPS seems to work for all the pages. However, the server is still accepting connections from HTTP. How do I enforce HTTPS? I use a ...
1
vote
1answer
107 views

iptables to allow only ssh and https

I'm trying to configure the iptables on my device in order to allow only SSH and HTTPS traffic. In particular, the HTTPS protocol is used to call some REST API toward a remote server from a java ...
2
votes
2answers
44 views

SSL Subject Alternative Name and Man in the Middle attacks

My company "ourcompany" owns a 2nd level DNS domain name: ourcompany.org. We currently use this domain, as well as www.ourcompany.org and feature1.ourcompany.org, and have an SSL certificate generated ...
0
votes
0answers
38 views

http/https in one VHOST apache. It works, but should it?

A lot of my hosts run http and https (apache 2.4), and it would be more manageable if I could combine both configurations in one vhost directive. When searching online, I get conflicting responses ...
0
votes
2answers
159 views

Have both Hostname and FQDN in SSL Certificate on IIS

I've been searching here, technet and google but haven't been able to find an answer to my question yet. I have a website running on IIS 7, Server 2012 R2. The IIS serves as an access to our Citrix ...
0
votes
0answers
36 views

Apache name-based TLS/SSL virtual hosts don't work properly when using wildcard for IP

I have two VPSs running Apache 2.4 on CentOS 7 each hosting several virtual hosts, listening on port 80 for HTTP connections and port 443 for HTTPS connections: VPS1 (Xen): domain.tld /var/www/...
0
votes
0answers
39 views

reach webmin over apache2 reverse-proxy

First of all, sry for my English. I tried to setup Webmin over apache2 reverse proxy. It seems good, but when I login the port is changed from 443 to 10000. I avoid from it, because I don't want to ...
0
votes
0answers
57 views

Apache SSL mod_wsgi only getting directory listing

I'm trying to setup SSL with Apache and mod_wsgi (flask app). The http version of the site works fine, and I've tried duplicating the virtual hosts section minus the WSGIDaemonProcess statement, plus ...
1
vote
1answer
186 views

Testing HTTP/2 using `openssl s_client`

CloudFlare’s blog post on tools for debugging, testing and using HTTP/2 mentions this approach to finding out which protocols are supported by a given server: $ openssl s_client -connect www....
0
votes
0answers
43 views

HTTPS tomcat 7 working only with curl not in browser

I have added in server.xml: <Connector port="8081" protocol="HTTP/1.1" SSLEnabled="true" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" enableLookups="false"...
0
votes
1answer
80 views

HTTPS not working on Tomcat 7

I am trying to add ssl configuration in tomcat 7 in ubuntu 11.10 but it is not working and there are no errors in logs. I added in server.xml this: <Connector port="8443" protocol="HTTP/1.1" ...
0
votes
1answer
13 views

Light monitoring of local https services with mon?

I'm running mon as a secondary monitoring system. It's clean and simple --an excellent backup monitoring system. It has some built-in monitors but not one for https. Is there a way to quickly and ...
0
votes
0answers
47 views

Configuring HTTPS on elastic beanstalk (single instance) of Tomcat

I have configured https on load balancer for testing that was easy, Adding your certificate and key contents directly to the configuration file is acceptable for testing with self-signed certificates. ...
2
votes
2answers
361 views

RHEL Nginx SSL versus non SSL performance huge difference.

I'm in the process of setting up an Nginx 1.8 reverse proxy. In short - Serving HTML content HTTP traffic is up to 50x faster than HTTPS. Serving ProxyPass HTTP traffic is up to 7x faster than ...
0
votes
0answers
54 views

squid reverse proxy through https, no cache, no public proxy

is it possible to hide website IP behind squid reverse proxy? I am not interested to use proxy to access Internet, I don't want to use squid to cache or to make public proxy, than just to hide ...
0
votes
0answers
193 views

Set up IIS as forward proxy for HTTPS requests

Is it possible to set up IIS as a forward proxy for HTTPS requests? My use case is this: I have some process running locally on the IIS machine which is able to make HTTP calls, but not HTTPS calls. ...
1
vote
0answers
43 views

software for sharing data through URL (HTTP/HTTPS)

do you know about software, which can provide sharing files or folders through generated URL links? Software, which I can implement on my own server? Something like guest links on Sharepoint or ...
0
votes
1answer
40 views

Route HTTPS traffic to different virtual servers on single IP

I have Proxmox instance with single IP available. I have multiple virtual machines for different sites (domains). Each virtual server have it's own https certificates inside them. I need to find way ...
1
vote
1answer
176 views

Nginx transparent reverse proxy for https and http to another server

I have researched this for a while but the use cases that others have asked about are more complex/different to what I am trying to achieve. I have Nginx serving pages on both ports 80 and 443 for ...
0
votes
2answers
21 views

single apache with many virtualhosts but only some of them have https

I have apache listening on 80 and runs 4 sites: aaa.com:80 bbb.com:80 ccc.com:80 ddd.com:80 I enable port 443 and add SSL cert only for the first 2 sites ("aaa" and "bbb") and it works well, so ...
1
vote
1answer
51 views

Force HTTP on all pages except specific URLs

I have a situation where I need to force every single page in my site to redirect to HTTP except for two specific URLs which need to force redirect to HTTPS. The two pages that need to redirect to ...
0
votes
1answer
135 views

Apache: Redirect everything from www to non-www using https only (including HSTS)

My goal Everything results in https://mydomain.tld (non-www and with TLS) and HSTS works correct. I am using the certificates from LE (Let's Encrypt) and so I used their wizard to make my website ...
0
votes
1answer
11 views

How do I enable server certificates option in iis7

I'm administrator on a Windows box with IIS7 installed (specifically, 7.5). I'm trying to set up a self-signed certificate, so I can enable https for a web application I've set up within an IIS ...
-2
votes
2answers
40 views

apache https applies to other http vhosts [duplicate]

I've searched a lot, i also tried lots of thing but still cannot find the problem. I have an apache 2.2.22 server installed on an ubuntu server 12.04 lts. I have a number of http virtual hosts and 2 ...
15
votes
1answer
618 views

Under HTTP2, how often are new TCP connections initiated?

I understand that HTTP2 aims to keep everything under a single TCP connection, and I was wondering how often TCP connections would be torn down. For example, if I visit youtube, do some browsing, ...
0
votes
0answers
41 views

Custom Error Page doesn´t work with SSL

I have a custom 404 error page but unfortunatly when I install the HTTPS on my server and set everthing up so that https works the error page doesn´t work. When I enter a wrong url I just get a ...
0
votes
0answers
46 views

Analyzing SSL Encryption Alerts

I have captured the traffic between my machine and my server using Wireshark, trying to find why some SSL requests fail. I've read this and this post about debugging SSL entries, and I'm able to find ...
0
votes
1answer
57 views

Using ports instead of HTTP request to tell server which site to serve

Are there any drawbacks to using ports to tell my server which website to return instead of getting that info from the HTTP request? Is there a best practice to decide which port range to use? As I ...
0
votes
0answers
185 views

HTTPS Content Filtering without de-crypting traffic using squid?

I am attempting to terminate https traffic based on ACLs using ssl_bumping WITHOUT de-crypting the traffic in intercept/transparent mode. Has anyone got this to work before? I have copied my ...
0
votes
2answers
29 views

proxypass https from one servet to another as https

I have serverA which act as a reverse proxy for serverB. What i wish to accomplish is to porxypass an https connection from serverA to serverB. In other words: ---https-->(serverA)---proxypass-...
1
vote
1answer
68 views

apache 2.4.18 server-status weird “W” Sending Reply threads

We recently switched to apache 2.4.18 on our production server and went all https/ssl (HTTP/2 with http2_module) with our website with about 100.000 visits per day. We're using the worker MPM and PHP ...
0
votes
0answers
152 views

Amazon ELB https termination results in 504 for large file uploads

I've stumbled upon the following issue and can't seem to find a solution. Setup: IIS server behind Amazon ELB setup to terminate SSL connections on the ELB with a setup of https 443 -> https 443 (...
0
votes
2answers
96 views

Apache TLS (SSL) Performance

We are running a fairly powerful dedicated server with a Xeon CPU, 32GB RAM, and RAID SSDs running Centos 6. Yet, we are still seeing HTTPS add over 100ms to our page download time. Is there anything ...
0
votes
1answer
202 views

Allow active mixed content (iframes) with SSL and Content Security Policies

I've installed a SSL certificate on my server, and I've made it HTTPS. But I need to load existent iframes with embedded content, usually YouTube videos that were saved with HTTP url, but also other ...
0
votes
1answer
149 views

nginx accept HTTP & HTTPS requests on two different ports

I have one nginx server setup(two config files) with two gunicorn web servers setup and running. One gunicorn is production and the other is staging. I want nginx to serve http requests to xyz.com ...
3
votes
0answers
238 views

How to reverse proxy https with lighttpd?

I want to forward (reverse proxy) requests to https://secure.mydomain.com(:443) to my internal (HTTPS-)WebServer on port 8443 using Lighttp. Environment-Infos: My WebServer is a Tomcat running on ...
0
votes
2answers
94 views

Redirect port 443 to port 80 at a firewall?

I recently ran into a situation in which a web server I was running could no longer serve HTTPS traffic (due to some SSL cert issues). Since the server could not process this traffic I could not use ...
0
votes
0answers
33 views

Uploading A Server certificate AWS, A client error (MalformedCertificate).

I have been trying to upload server certificates for the last 2 days but I keep getting this error every time A client error (MalformedCertificate) occurred when calling the UploadServerCertificate ...
-1
votes
1answer
142 views

HTTPS certificate not working on WWW, but is on NON-WWW

I bought an SSL certificate from SSLMate and it's working fine on my Nginx server when I access http://example.com, but not when I access http:// www.example.com I believe the problem has to do with ...
0
votes
2answers
63 views

apache 2.2 mod_rewrite redirect some urls to https and force http for others

I have my page at a shared host. In general the site is reachable using http and https. The page serves ads and most of the ads are not available using https therefore I only want the admin parts to ...
0
votes
2answers
189 views

CloudFlare giving error 522 without HTTPS

I've set up Let's Encrypt (with nginx) on my server, following the tutorial I've linked in the comments. I've also set up CloudFlare with the following DNS settings: http://i.imgur.com/Z7PRD6l.png ...
-5
votes
1answer
1k views

Disable/remove Let's Encrypt? [closed]

I followed this tutorial to enable Let's Encrypt on my server, however I now want to remove/disable it: https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-...
0
votes
1answer
82 views

is it possible to terminate SSL with Nginx and cache https responses from the backend?

Looking to terminate SSL from backend service at nginx and offload to clients as http. Cache all responses for performance and offline scenario. With the setup below I'm not able to cache, what's ...