HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.
0
votes
1answer
49 views
Allow only local requests to use HTTP, all other redirected to HTTPS, in IIS 7
I have a app that runs on the web server that needs to post back to a site. It will only work locally over http. Now all requests are set to redirect to https if http is used. Is there any way to ...
0
votes
2answers
66 views
Is it possible to use the same SSL certificate for http and ftp?
Using https://example.com, I wonder if it is possible to use its SSL certificate for ftps://example.com ? The used certificate is basic like (RapidSSL, PositiveSSL, etc ...)
0
votes
0answers
53 views
nginx phpbb SSL only on posting, login in and registering
i want to use SSL on phpbb only on posting, loging and registering
the three URLS are...
http://abc.com/ucp.php?mode=login
http://abc.com/ucp.php?mode=register
http://abc.com/posting.php?
...
1
vote
2answers
131 views
How to redirect traffic to http
I have an apache server under a proxy that can run HTTPS. Instead of sending the HTTPS=on header, it sends HTTP_X_FORWARDED_PROTO=https.
I want to write an .htaccess rule that redirects all requests ...
1
vote
1answer
514 views
JBoss https on port other than 8080 not working
We have a server with two JBoss instances where one runs on 8080, the other on 8081. We need to have HTTPS enabled for the 8081 server, firstly we tried enabling https on the 8080 port instance by ...
0
votes
1answer
35 views
Need advise on linking apache and tomcat
I have been searching this for hours with no luck. I have a web server that uses https on Apache2. I also have installed tomcat7 on the same server to run some Java webapp on it. I need to keep my ...
0
votes
1answer
267 views
Is it possible to do client certificate authentication without running HTTPS on a webserver?
(Please note: this question is one of many "why don't you just try it?" questions. I certainly will, but since I haven't found an obvious answer by googling, I thought I might as well make it easier ...
3
votes
1answer
2k views
How to turn off SSLCompression in Apache 2.2.12 on Amazon EC2?
I am on an Amazon EC2, Suse installation which comes with a Apache 2.2.12. I am using HTTPS and want to turn off SSLCompression but it isn't available for Apache 2.2.12. I can't even upgrade Apache ...
0
votes
1answer
394 views
SSL connection error during handshake on Windows Server 2008 R2
Update: Issue solved by re-rolling the certificate.
I have a Windows 2008 R2 Server that runs a HTTPS Tunneling service. The software uses a certificate that is provided via the Windows certificate ...
1
vote
3answers
574 views
Forcing a particular SSL protocol for an nginx proxying server
I am developing an application against a remote https web service. While developing I need to proxy requests from my local development server (running nginx on ubuntu) to the remote https web server. ...
1
vote
3answers
97 views
Apache + SSL: Doesnt work via domain
I'm developing a small website (Magento eshop) on own Debian virtual server. I'm not very advanced in this topic.
Server now works fine, the last remaining problem is SSL access via https protocol.
...
0
votes
1answer
68 views
How to specify Multiple Secure Webpages with .htaccess RewriteCond
I have 3 pages that I want to make secure on my website using .htaccess
-login.php
-checkout.php
-account.php
I know how to make just one work page at a time using .htaccess
RewriteEngine On
...
0
votes
1answer
283 views
Apache reverse proxy jumps back to insecure protocol after redirect
I installed a reverse proxy apache server which handles the SSL encryption for a tomcat. We have a struts web application, and everytime we use response.sendRedirect(), the application falls back into ...
0
votes
1answer
296 views
Juniper SSG Firewall - TMG 2010 publishing SSL website issue?
I have an ASP.NET application working in HTTPS (SSL). This is working well in my local computer and Amazon AWS (production environment).
But when I host this application in office (for testing) some ...
-2
votes
2answers
739 views
how to block https sites on netgear router? [closed]
I am using NETGEAR Wireless-N-300 Router Model among a couple of people to share internet connectivity.
I blocked facebook.com, but the users are access on protocol https, I blocked some ip´s of ...
0
votes
1answer
148 views
reverse proxying to https apache
I'm trying to reverse proxy https from http virtual host but getting an internal server error.
Here is my config :
ProxyPass /access/signin https://mysecureserver.com
ProxyPassReverse /access/signin ...
-1
votes
1answer
69 views
HTTPS and HTTP folder setup? [closed]
I've done some basic HTTPS sites on my shared hosting, but in my hosting provider the folders in filesystem are different for SSL and the regular website. Is this an option, or is it required for the ...
0
votes
1answer
143 views
HTTP Subdomain Redirect to HTTPS automatically. Why?
I have two websites deployed in IIS 7.5 Express. The first website is the PRODUCTION website and the second is the TEST website. In the PRODUCTION website, I added an HTTPS binding and Require SSL so ...
0
votes
2answers
565 views
with nginx having the base url rewrite to https
I'd like only my base domain www.domain.com to be rewritten to https://www.domain.com
By default in my https block I have it reroute to http:// if it's not ~uri = "/" (base domain) or static content.
...
0
votes
1answer
317 views
How to secure both root domain and wildcard subdomains with one SSL cert?
I am trying to generate a self-signed SSL certificate to secure both example.com and *.example.com. Looking at the answers to this and this questions, there seems to be an equal number of people ...
0
votes
2answers
262 views
How to run a virtualhost 443 without an SSL cert?
I have a virtualhost directive that serves up a custom 404 error if invalid subdomain is entered:
<VirtualHost *:80> # the first virtual host
ServerName site_not_found
RedirectMatch 404 ...
0
votes
1answer
125 views
Redirecting HTTP to HTTPS for multiple subdomains with Apache on Red Hat
I recently added a wildcard SSL certificate to my sites. How can I get it so when a user goes the sites, it forces them to https?
The SSL covers sites in the form of *.staging.domain.com, I need it ...
3
votes
1answer
664 views
Setting HTTPS Proxy in Winbox for MikroTik
I am using MikroTik router model RB750, I need to use HTTPS proxy method for some of my clients.
The Proxy Server (VPS) is in another country and i have the IP address and the Port Number and a ...
1
vote
1answer
117 views
HTTPS vs HTTP Apache web app performance comparison(for a beginner) [closed]
I am running an apache server and a JSP web application which I am accessing over LAN.
I want to test the performance of the web app(it's a third party...not written by me) to decide whether to run it ...
2
votes
2answers
140 views
IIS 7 - allow http for part of site, https for rest?
In IIS 7, is there a way to set two urls on the same site to allow http and https, and the rest to be https only?
- http://mysite/url1 or https://mysite/url1 is accepted and stays on that protocol.
...
1
vote
2answers
56 views
All HTTPS, or is it OK to accept HTTP and redirect (secure vs. user friendly)
Our site currently redirects requests sent to http://example.com to https://example.com -- everything beyond this is served over SSL. For now, the redirect is done with an Apache rewrite rule.
Our ...
0
votes
1answer
41 views
http to https redirect with existing rule [closed]
i need a help.already we have mode rewrite rule RewriteRule ^(.*).html$ index.php?set=$1
this rule change html url to php now in this i need to add a condition https redirect how with this existing ...
0
votes
2answers
98 views
Best way to run site through https on server which can't add additional certs
So I'm in a curious situation in that I am using a particular server to host things, which I can't host anywhere else (it has access to user databases etc which can't otherwise be accessed). I've been ...
1
vote
1answer
360 views
Performance: Nginx SSL slowness or just SSL slowness in general?
I have an Amazon Web Services setup with an Apache instance behind Nginx with Nginx handling SSL and serving everything but the .php pages. In my ApacheBench tests I'm seeing this for my most ...
1
vote
2answers
293 views
Nginx with http/https - Http seemed redirected to https all the time
I've this really weird behaviour with my ubuntu 10.04 / nginx 1.2.3 server.
Basically I changed the SSL certificates this morning.
And ever since it has been behaving weirdly on all apps.
Godaddy is ...
1
vote
2answers
293 views
Securing SSL requests with mod_cluster?
In case I have both the httpd and JBoss in secure LAN, is it possible to terminate SSL requests at httpd, and pass the request to available JBoss via mod_cluster?
Any idea what configuration ...
4
votes
1answer
411 views
HTTPS and Certification for dummies
I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated.
Here we go:
To use https I ...
0
votes
1answer
358 views
Apache stops responding to http requests — https continues to work
Okay. Very strange problem that I'm having here. I just recently updated to Apache 2.4.2 from 2.2.17, mostly to try to get name-based SSL VirtualHosts working (although they should have been working ...
1
vote
1answer
99 views
HTTPS via a floating IP
I ran in what seems to see a case with little to no documentation.
I'm trying to serve content sitting behind Apache 2.2 via HTTPS. This Apache server is listening on two IP addresses, one static ...
3
votes
3answers
2k views
How to redirect from HTTPS to HTTP before server error?
I used to operate a website with an SSL certificate, but have stopped using the SSL certificate. The problem is that most of the external links to the website use the https:// prefix.
I have tried ...
1
vote
1answer
330 views
Possible to have different SSLCACertificateFiles under different Location in Apache (client side ssl certs)
I am setting up Apache to do smartcard authentication. The smartcard login is based on client-side SSL certificates handled by an OS driver.
I have currently just one smartcard provider, but in the ...
0
votes
1answer
223 views
ssl_error_bad_cert_domain when accessing site by its ip address on https
i finally got my certificate verified from a trusted CA. now, i have edited my etc/httpd/conf.d/ssl.conf to locate my new certificate.
i already included the ssl.conf in my etc/httpd/conf/httpd.conf.
...
-3
votes
2answers
66 views
Why we should go for HTTPS? [closed]
I have learnt little about https. But was not clear the need of it.
What if i encrypt the data using the most powerful algorithms like RSA instead of sending through a HTTPS zone??
Can someone ...
4
votes
3answers
152 views
Is there a downside to enforcing 128bit SSL for a website
On Windows Server 2008 R2 I can enforce 128bit SSL for a website by executing:
appcmd set config "Default Web Site" -section:access -sslFlags:Ssl,Ssl128 -commit:apphost
Is there a downside to that? ...
-1
votes
2answers
133 views
How does a webserver handle a connection lost? [closed]
How does a web server handle a lost connection, for example the client sends a request and due to some problem got disconnected from the server before the latter could reply with a response, what does ...
0
votes
1answer
54 views
SSL certificate issued by and valid dates show in Chrome but not FF
When I connect to my site over HTTPS, chrome displays the padlock and when you click it it shows the issuer and dates.
However when you view the site (over HTTPS) in firefox, it says: This website ...
2
votes
1answer
126 views
Configuring SSL hosts to be able to access HTTP / HTTPS on multiple domains?
I'm having trouble configurig multiple ssl hosts on my apache server (CentOS). Originally I thought the problem was only having one IP, so once this was discovered I asked our server provider to add ...
-1
votes
1answer
53 views
Is there a way to have a central server hold my ssl cert and use it for multiple web servers?
I have several web application servers that i'd like to convert to using https instead of http. My organization has a purchased wildcard certificate that I have asked to use. I'd like to disallow my ...
-1
votes
2answers
81 views
Can i rely over the “SSL on Shared Hosting”? [closed]
My site will be using the APIs like Paypal and also making Facebook Apps. So lets say for Facebook, they allow only https for Apps to work with them. Mine is only hosted on http site.
So can i solve ...
0
votes
0answers
158 views
Configure tomcat behind loadbalancer to respond on HTTP and HTTPS
I have 2 tomcat machines behind a load balancer on Amazon EC2. Until now The load balancer was configured to respond only on https. So in order to access our services you would go to https://url. ...
1
vote
2answers
56 views
Hosts file aliases makes https calls buggy
I have a strange behaviour on my VPS that I cannot explain.
My server is a Lucid Lynx. Apache version is 2.2.14
I wanted to make some requests to localhost faster, so I added an extra line in my ...
1
vote
1answer
221 views
How can I encrypt certain pages with SSL (HTTPS) using IIS7.5, AJP Connector (1.3), and Apache Tomcat 5.5?
I have a Windows Server 2008 R2 Box with IIS 7.5 and Apache Tomcat 5.5. JSP traffic is routed from IIS to Tomcat via the AJP Connector version 1.3. This connector uses an isapi filter in IIS to ...
0
votes
1answer
2k views
Squid proxy users in HTTPS connection
I saw in my Squid proxy log that I cannot log username in an HTTPS connection. Do you think this is my configuration error, or it is impossible due to the encryption? If the answer is the second one ...
3
votes
1answer
2k views
How to use nginx as reverse proxy with multiple IPs and SSL?
I would like to setup nginx reverse proxy with multiple domains and an IP for each of them to use different SSL Certs. I run Ubuntu as OS which is installed on a KVM/Qemu VM.
As I understand nginx, ...
4
votes
2answers
229 views
Is there a security reason not to use a wildcard cert other than manageability and exploitation if used on multiple servers?
I have a security advisor that is telling me that we can't use wildcard SSL certs for security reasons. To be clear I much prefer using single certs or multi-domain certs (SAN). However we have a need ...
