HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
0answers
61 views

Nginx - Adding a trailing slash to urls on HTTPS

I am using the below regex to add a trailing slash to any url that doesn't have a railing slash or ends ends with .. rewrite ^([^.]*[^/])$ $1/ permanent; This works fine for http, but when I use ...
0
votes
1answer
42 views

Redirect particular hostname from https to httpd in httpd/apache2

I have a webserver that has an ssl certificate applied to a subdomain https://shop.mydomain.com. I also have the hostname http://mydomain.com that has no ssl certificate. When invoking ...
0
votes
3answers
84 views

HTTPS and HTTP issue on server with SSL

I have a site www.example.com for which i purchased SSL cert and installed. And it was working fine, I also have a subdomain with app.example.com which was not on SSL. Both www.example.com and ...
2
votes
2answers
1k views

How to redirect http requests to https (nginx)

There appear to be many questions and guides out there that instruct how to setup nginx to redirect http requests to https. Many are outdated, or just flat out wrong. # MANAGED BY PUPPET upstream ...
1
vote
1answer
59 views

How to record IIS 8 client authentication errors in Windows Events?

We have an internal web application hosted on IIS 8 that exposes some REST services through HTTPS. Since it's accessed by other applications, we require client certificates. We are getting some ...
0
votes
0answers
27 views

Hosting two sites with different authorisation methods and different url subdirectories but the same domain in Apache

I'm a bit of an Apache rookie and this is outside my area of expertise but needs must when the devil drives. Attempts to research this have come across similar issues but the combinations of url path ...
0
votes
0answers
181 views

How to add Pound & Varnish to my SPDY/https-only LEMP stack?

So I got quite excited about installing Varnish, having read lots of good things. But then I discovered it doesn't work with https. Fair enough. It seems combining it with Pound is the solution: ...
0
votes
1answer
62 views

Single Shared Host, Single IP, Multiple Domains, Multiple Websites… (with and without SSL)

While my post may look similar to others, it concerns shared accounts at a web hosting provider all utilizing the same IP address (rather than different IP addresses). Here comes what I would like to ...
0
votes
3answers
76 views

Apache redirect multiple domain names from https

My server distribute two main websites, says : www.google.com & www.facebook.com (yeah I know :p) I want them to be distributed via https. Using Apache, I defined a vhost file in ...
0
votes
0answers
144 views

Git push over https URL fails from Jenkins, works from command line

I have limitation in the CI environment in the sense that SSH and Port 22 is blocked by company firewall policies and they will never open it. I get stuck at a post build step where I want to push to ...
0
votes
2answers
75 views

Setting two https on one IP, two domains also

I have two domains and one IP. Both domains listen on port 80. Also on port 443 listen one of the domains (from these two). But there is also possibility to access one of the domains only by IP. I ...
1
vote
1answer
82 views

With SPDY push, is there any point in far-future expires headers?

As I understand it, in SPDY push the server serves up an HTML doc, looks at it before sending it, and decides I need images/css resources X Y and Z, so sends them over as well. How does it know to ...
0
votes
2answers
56 views

Apache2 SSL 'default virtualhost' does not work

I have a server with a number of virtualhosts, most of which do not have or need https:// connections, and some that do. What I want to happen is for users who accidentally type in ...
2
votes
2answers
85 views

Does SPDY improve delivery of assets served from a non-SPDY CDN?

So my site is SPDY. All of my local assets are SPDY too. But the majority of my assets are served from Rackspace's CloudFiles CDN. This is not SPDY. Do those files get streamed through SPDY ...
0
votes
0answers
30 views

I believe this is preventing me from using SSL on SVN

I cannot use SSL for Subversion (Apache) on port 443, so I listed my URLReservations and I found this: Reserved URL : https://+:443/sra_{BA235980-CD49-458b-9E23-C84EE0ADCD75}/ User: ...
0
votes
0answers
49 views

Apache2 - Vhost keep redirect to https vhost, and not the request vhost

i am facing an issue with my vHost setup which I rly can't figure out how to fix First my vhost config: <VirtualHost *:80> ServerName dnsmaster.anonogle.com:80 DocumentRoot /var/www/dns ...
0
votes
2answers
101 views

SPDYCheck says “yay”, but my browser says “nay”?

SPDYcheck.org gives the thumbs up all round, with its only criticism being Out-of-Date SPDY Protocol Support The most recent version of SPDY is spdy/3. The highest version this website supports is ...
2
votes
1answer
97 views

Is this much (40x) nginx slowdown under HTTPS to be expected?

So I've created a simple file, ab.htm, with just "test" in it. ab -n 1000 -c 10 http://www.domain.com/ab.htm gives me 15400req/sec and ab -n 1000 -c 10 https://www.domain.com/ab.htm gives me ...
0
votes
0answers
36 views

allow BOTH http and https

My https cert in configured, and everything with https works fine, but if a user want to acces http://mysite.com/ I want to handle the redirect with my app. But with my current config, any http ...
0
votes
1answer
66 views

https blocks all http content on my website?

I got a certificate and am currently trying to set up https. However, I've got a problem : all the content from http source (not https) is blocked : [blocked] The page at xxxxx ran insecure content ...
0
votes
0answers
75 views

Jetty 9 - redirect http to https

I'd like to force use of https in Jetty 9. Apparently: <Set name="confidentialPort">443</Set> no longer works in jetty 9. How should I do it properly?
0
votes
0answers
14 views

Apache https crashes when ServerName set correctly

I have a problem with my server :/ Following environment: - Windows Server 2008 RC2 - IIS handles one website - Apache handles two 3rd party administration tools and an SVN repo - HTTPS in Apache - ...
0
votes
1answer
764 views

SSL23_GET_SERVER_HELLO:reason(1112) issue curl 7.25.0

Please consider two curl commands: curl -v --ssl https://example.com * About to connect() to example.com port 443 (#0) * Trying 10.20.30.40... * connected * Connected to example.com (10.20.30.40) ...
-1
votes
1answer
164 views

Apache: Allow only certain http requests, deny all else

We have an Apache server, on a Windows Server 2008 machine, that is used for specific secure traffic for our customers, like a gateway. Now, I only want to allow traffic for a certain range of secure ...
1
vote
0answers
1k views

Apache SSL configuration - Invalid method in request \x16\x03\x01

I'm trying to set up https service on my VirtualBox guest instance running Debian Squeeze and Apache 2. When trying to load my virtual host's test page in a browser from my Win7 host machine, I'm ...
0
votes
1answer
45 views

How to force HTTP for some pages in HTTPS forced website with htaccess? [duplicate]

A part of my htaccess that redirects HTTP traffic to HTTPS looks like this: RewriteCond %{HTTP:X-Forwarded-Proto} !https RewriteRule ^.*$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] I need allow ...
0
votes
0answers
151 views

Squid SSL Protocol error

What is the issue of this error in Squid? (I Don't find anything in google) The system returned: (71) Protocol error The remote host or network may be down. Please try the request again. my ...
2
votes
0answers
97 views

Continuous ping on proxy preventing https requests, why?

I hope someone can help me solve this mystery. I have a small linux box which is configured as a transparent proxy on my network. I'm trying to run a script at startup that does a continuous ping to ...
0
votes
1answer
32 views

Does nginx cache the unencrypted responses when using HTTPS?

I thought public cache was not possible when using HTTPS since every response was different (due to encryption), but just now I realized one could at least cache the unencrypted response, and the only ...
1
vote
1answer
52 views

Redirecting HTTP-Request to HTTPS through httpd.conf

I currently try to redirect the HTTP-request to HTTPS, but couldnt find a solution for this, in my httpd.conf I have the following redirection to my Tomcat application: RedirectMatch permanent ^/$ ...
-1
votes
1answer
63 views

Redirect non-local connections to HTTPS in nginx

I'm trying to force HTTPS on remote connections and forward all traffic that is not from the 192.168.0 net to https://$host$request_uri but allow access on local connections. In apache2 I had Order ...
5
votes
1answer
333 views

IIS no longer trusts any CAs for client authentication

Yesterday the IIS on our build server (running Windows Server 2012) started refusing our clients' certificates. The certificates are signed using our own self-signed CA cert that has been added to ...
1
vote
1answer
151 views

Curl fail to retrieve HTTPS content

i've an issue on my production server running on Debian 6 (apt-get update;apt-get upgrade done with success). When I call an HTTPS (StartSSL) server I got an error message on Debian 6 : #> curl ...
-1
votes
1answer
122 views

HTTP digest authentication vs. HTTPS basic authentication [closed]

What is the difference between HTTP Digest Authentication and HTTPS basic authentication from a performance and security point of view?
0
votes
1answer
108 views

Is there any way to log HTTPS requests (URLs) in a proxy server (Squid no transparent proxy)?

We do not want to know what is inside the package. Only monitor the destination URLs. Is it possible? In other words: I want the Squid log accesses without being transparent proxy.
0
votes
1answer
147 views

Apache Fails To Acknowledge HTTPS Virtual Host

I am running Apache 2.6 on my computer running Arch Linux. It runs a mail server, and because I wanted to setup webmail, I decided I would create my own SSL certificates, as only my friends and family ...
1
vote
2answers
75 views

How to configure multiple apache virtual hosts on multiple ports?

I have a server with one IP address. I want to run several virtual hosts in an Apache 2.2. And I want all virtual hosts to be accessible on port 80 (plain http), 8000 (plain http) and 443 (ssl). For ...
0
votes
3answers
58 views

dns security sending username and password over get request

This might be a theoretical question but if I were to request the following url: https://example.com?username=username&password=password Would the username and password be stored on the dns ...
1
vote
1answer
63 views

How to catch request to http://<public_ip> and https://<public_ip> in nginx?

I have a few websites each in its own server{} block in nginx, with their domains defined in server_name directives. One of the websites also has an https server{} block. They're all on the same IP. ...
-1
votes
1answer
68 views

Is it possibel to get that “Padlock” symbol in the address bar for a localhost https connection that uses a self signed certificate? [closed]

I am currently implemented SSL for my Web App in tomcat using a self signed certificate using java Keystore tool. I am using the web app in my machine as localhost. When I visit the url ...
0
votes
1answer
234 views

nginx refusing SSL connection on cPanel server

I have nginx 4.4 installed on a cPanel server (via nginx admin plugin) as a proxy to Apache. I used to have nginx listening on ports 80 and 443 on a dedicated IP address without any problems but ...
0
votes
1answer
64 views

Allied Telesis AlliedWare gui http server accepted cipher suites

When configuring a AT-9924T switch running AlliedWare 2.9.2 to serve ssl encryption on the http server as described in the manual like this: create enco key=0 type=rsa length=2048 set system ...
0
votes
1answer
282 views

I'm able to connect to my seafile using my root domain, although I only specified to use my subdomain. (nginx)

I have the following problem, that I'm able to connect to my seafile installation using my root domain "www.domain.com", although I only specified and I only want to use "cloud.domain.com". I only ...
0
votes
0answers
128 views

CURL SSL fails due to timeout in Ubuntu 12.04

I am developing an application, which uses CURL to establish connection to Facebook. 4 of 5 executions are fine, while 1 of 5 hangs. That what CURL trace says: == Info: About to connect() to ...
3
votes
1answer
93 views

HTTPS: Enable globally or only when data is sent?

I want to enable HTTPS for my website on pages where data is sent by the user (forms, comments etc). Does it make sense to enable it only when a page uses forms or is it easier to enable globally? ...
0
votes
1answer
214 views

bind apache ssl port with different port with same openssl port 443

I have a server (linux base) in which i installed dotcms and it runs on port 80 and openssl is on port 443. both are started in running process. Recently i installed apache on my server. and when i ...
0
votes
1answer
193 views

Nginx: Detect HTTPS connection using a header

On my load balancer I terminate HTTPS connections with Nginx and then proxy the request to one of the web servers which are also backed by Nginx. On the load balancer in fastcgi_params I have: ...
3
votes
1answer
51 views

Close non-HTTPS Connection in Nginx

I'm using basic auth where the user sends their username an password in the header. These requests will be done over HTTPS for security (since the password would be in plain text otherwise). If the ...
-3
votes
2answers
479 views

Is it possible to redirect https to http using dns?

I asked this on SO, but this might be a better forum? I just switched a domain from a custom site to a shopify site. The custom site used SSL, and any customer who has gone to the site in Chrome most ...
3
votes
2answers
197 views

apache force if url has specific pattern redirect to https [duplicate]

How can I force Apache if URI start with "admin-" pattern or contain "admin/user/login" redirect to https of the same uri. For example: If the URI is : http://examplesite.com/admin-2dns24dw ...