Tagged Questions

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
1answer
67 views

Both example.com and www.example.com with SSL

I obtained a free CA certificate from https://www.startssl.com/. I added the domain name example.com, and in the control panel, it shows www.example.com under SSL/TLS Server, and example.com under ...
1
vote
1answer
114 views

IIS Redirecting by domain in ASP.NET MVC 4

I've created an app that is like a mini-shop, but now I have two problems with my clients: Some of them want it to be their domain, instead of mine, say: http://myshop.com/?shop=a197dc43fd89e should ...
2
votes
1answer
646 views

Having problems setting up SSL with Nginx

I'm trying to setup SSL(0.9.8e) using Nginx(1.2.3) on a Windows 7 machine. I've generated a self-signed certificate that is needed, so I have a key and a certificate file. When trying to start Nginx ...
0
votes
0answers
48 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
0
votes
0answers
45 views

No longer can get nginx.conf to respect my redirect rules

I want to redirect all sites and subdomains to one https domain name. I'll use https://my-site.com as an example. Previously I had all the redirection working with the following code: server { ...
1
vote
0answers
273 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
2
votes
1answer
162 views

Nginx, setup https

I'm trying to setup https on my ubuntu server with NGINX ver 1.4.7 and Phusion Passenger 4.0.41. I created .key and .csr using these two commands sudo openssl genrsa -des3 -out server.key 2048 sudo ...
2
votes
1answer
76 views

What determines how long an SSL session is valid

HTTP(S) is stateless, right? But if I go to some site via HTTPS, I assume I don't need an SSL handshake for every single page request. Is it a combination of SSL session cache and cookies?
0
votes
4answers
12k views

Fix/Bypass “Cannot connect to the real website-blocked” error in Google Chrome with OpenDNS blocking

I have a large problem with Chrome in my organisation. I use DNS to manage web site blocking, for sites which are not appropriate and are potentially a risk to the organisation where I do this. I ...
2
votes
0answers
81 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
0
votes
1answer
417 views

nginx https -> http redirection using wildcard error

I've already search the whole web for an answer, unfortunately there isn't. I hope there is a genius out here. Context: My nginx acts as a reverse proxy serving multiple domains Problem: the problem ...
0
votes
1answer
177 views

Apache HTTPS redirect from old domain to new HTTPS Domain

I used to have a domain which used to have a SSL Certificate, it still does have. But I have changed the domain, and I also have a new SSL Certificate for that new domain. I still have users ...
0
votes
0answers
43 views

Multiplying requests by using Nginx

I am trying to write an http request analyzer however I want it to be transparent to web application. So I want to know if I can multiply the request by using an nginx proxy like below; Internet ...
1
vote
1answer
121 views

Mixed Content and SSL Sites / Protocol Relative URLs

I have a site that was all HTTP until recently, when it was requested that we add an SSL cert because there was a concern about MIM attacks with a login applet on the home page. I bought the cert, ...
1
vote
2answers
588 views

Why won't Nginx return a 404 error for URLs starting with a question mark?

I'm trying to get a rewrite rule working and I've discovered that if the URL begins with a question mark, Nginx fails to return 404 error as expected. Instead, index.html as defined in the root ...
3
votes
2answers
604 views

Automatically reconfigure WinRM HTTPS listener with new certificate?

I am looking to enable WinRM HTTPS listeners on all of our servers for secure communication when using CredSSP between servers to get around the double-hop issue. Setting this up is fine, we have ...
0
votes
0answers
236 views

cURL NSS error -12286 SSL_ERROR_NO_CYPHER_OVERLAP

Using cURL 7.36.0 (x86_64-redhat-linux-gnu) on EC2 Amazon Linux, I can't connect to certain websites (not all) using HTTPS and receive the above error. From researching the issue I have learned that ...
2
votes
2answers
222 views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
0
votes
1answer
67 views

cannot access ssl-secured website on the server side

I am having problems accessing a website, that recentely got SSL-security, on the server side. Accessing the website like normal is not a problem, but when I try to open the website on the server ...
0
votes
1answer
33 views

HTTPS to HTTP - Response appears cached, or maybe this doesn't work.

Long story short: Google cached https:// links, when this website doesn't need an SSL - The SSL is expired now, and people are getting that warning screen when coming from Google. Thus, we found ...
0
votes
1answer
758 views

How to make git push work with nginx (basic auth) behind nginx reverse proxy (HTTPS)?

I like to have a git server on a computer (backend) without direct internet access. There should be basic authentication. The access should be available by means of a reverse proxy (frontend) on ...
-1
votes
1answer
32 views

Only allow a specific client to talk to a server

I have the following situation: have a server (ubuntu) running an application. I have a client (only the one client) requesting stuff from that server. To execute the requests, the client has to ...
0
votes
1answer
344 views

Local Proxy tool which authenticates against NTLM, sits on top of the Java VM and possibly transparently passes through HTTPS requests

I'm looking for a local HTTP proxy which I can run locally on my machine. This proxy accepts HTTP and HTTPS request and passes them upstream on to an external corporate proxy. The local proxy needs to ...
0
votes
0answers
50 views

Oracle Content Server Losing HTTPS on adfAuthentication

This has been a nagging problem for a while now, in summary we have the following setup. Cisco ACE Load Balancer -> Oracle HTTP Sevrer -> WebLogic We are terminating the SSL on the load balancer, ...
-1
votes
1answer
190 views

mod_rewrite: Redirect https://example.com to https://sub.example.com [duplicate]

I have an domain example.com running on an Apache Server and I want to redirect every call to https://example.com to https://sub.example.com. I have a Virtual Host configured like this: ...
14
votes
1answer
681 views

How does this kind of SSL work?

"Issued to" and "Domain Name" doesn't match but still valid and accepted by all major browsers without any warning. While previewing my blog post in Blogger, I noticed that my blog was previewed via ...
0
votes
2answers
331 views

After enabled SSL, HTTP not working Nginx VPS

Today I set up a self-signed SSL certificate for my Wordpress sites via my Cent OS Nginx VPS. Because I want to use HTTPS only for Wordpress backend. This is my vhost nginx configuration file (file ...
2
votes
2answers
404 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
1answer
59 views

Is it “safe” to use IIS for HTTPS?

I am trying to setup HTTPS in IIS (Windows Server 2008 R2 and Windows Server 2012) as secure as possible. In order to mitigate attacks such as BEAST and weakness of RC4, while trying to use ECDHE ...
0
votes
1answer
62 views

Curl pressing enter or ctr+c in order to have the right response [closed]

This is a script that checks my current ip on this site: http://myip.dnsdynamic.org/ and pick the response and calls an API in order to update my dynamic ip. Here the script: curl --user ...
0
votes
0answers
140 views

How do I test Apache that mod_evasive is working for HTTPS virtual hosts?

I have enabled Apache mod_evasive on my web server. I have disabled my default virtual host and have set up several virtual hosts which server content via HTTPS. I would like to test that ...
0
votes
2answers
506 views

HTTPS SSH Tunnel

Ok so I have a web server, lets call it Server A, which is providing a service via HTTPS. And I have an SSH gateway server, lets call it Server B. Due to firewall rules I cannot access Server A's web ...
0
votes
2answers
151 views

Configuring two IPs for one server?

I have a windows server that is running two ASP.NET websites. I would like to setup an HTTPS connection for each site. I had initially run into problems because I was trying to use a single IP ...
1
vote
1answer
73 views

what are the security implication of intentionally leaking a ssl certificate?

I have a website (http://example.com) which makes some requests to http://localhost:12345 in its javascript. I want to open this website over https but due to mixed content some browsers throw ...
1
vote
0answers
690 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
273 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
0
votes
2answers
402 views

nginx redirect https://www to https:// non-www without untrusted connection warning?

I have a valid SSL certificate for myapp.com, but not for www.myapp.com. Based on this question, it seems to me that it's not possible to immediately redirect from https://www.myapp.com to ...
0
votes
0answers
168 views

Configure nginx proxy_pass

I am trying to use a proxy to be able to call the url https://:8082/test and "redirect" to https://:8081. I tried with the "location /" it is working well but when I put a specific location like ...
2
votes
2answers
537 views

Properly setting up a “default” nginx server for https

I have several servers running on the same machine, some with http only, some with both http and https. There are several server blocks defined in separate files which are included from the main ...
0
votes
0answers
160 views

Provide SSTP VPN and normal HTTPS Websites over the same Port and IP?

In my little lab I want to use SSTP VPN AND a HTTPS-Webpage, which should be accessible from the internet. I just have 1 public IP and the lab is behind NAT (Port forwarding 443). SSTP already works ...
1
vote
2answers
119 views

nginx ssl virt host issue - site won't load

I have configured nginx for port 80 and 443, with 443 containing an ssl cert configuration. When I restart nginx, no errors occur, so I don't believe it's a cert issue, but of course I could be ...
0
votes
1answer
418 views

Blocking/redirecting port 3000 with Nginx and Ruby On Rails (thin server)

I am setting up a server now that uses Ruby on Rails with the Thin server. I have set up Nginx to redirect all of my http://mysite.com to https://mysite.com(with ssl). I want all network traffic to ...
1
vote
0answers
302 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
-1
votes
1answer
270 views

Shorewall forward 443 port to two servers [closed]

I have a question/problem. I have two webservers. One is a webmail and the other one is a standard webserver. I need to forward 443 port to both of them. I have added proxyarp to the shorewall and ...
2
votes
2answers
519 views

OpenSSL missing cipher

I'm trying to configure proper setup for my HTTPS server and I am have a little trouble with IE8@WinXP. This platform has a very poor support for TLS siphers: ...
0
votes
0answers
223 views

Moving gitlab-ssl to a subdirectory

I have a server with static ip, currently with this config <VirtualHost *:80> ServerAdmin webmaster@localhost ServerName rab JkMount /rab ajp13_worker JkMount /rab/ ...
0
votes
3answers
2k views

Can't Block https://facebook using squid Transparent

I'm using Squid Proxy 3.1 as transparent proxy server, I want to block facebook.com but while listed in blocked list , Some user's accessing facebook using https, how can i block only https for ...
1
vote
2answers
65 views

Which operating systems ship with StartCom_Certification_Authority.pem

I purchased some (cheap) HTTPS certificates from StartSSL. They work great on all browsers I tested. According to this post they are even recognized in IE 7 and 8, which good enough for me. However, ...
0
votes
2answers
193 views

How do i properly configure multiple multiple SECURE virtual hosts - Apache 2.2.15 & RedHat 6

To start, this question might overlap with others but I almost feel like this is a Red Hat issue regarding the "how to properly configure it" part. I have a few websites being served from the same ...
0
votes
1answer
465 views

nginx and SNI: is it possible to automatically resolve SSL certificate by domain name

I need to setup a server that will server same content over SSL using different domain names. The problem is that I need an ability to add new domain names as easily as possible. Assuming that all ...