HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
1answer
214 views

Curl fail to retrieve HTTPS content

i've an issue on my production server running on Debian 6 (apt-get update;apt-get upgrade done with success). When I call an HTTPS (StartSSL) server I got an error message on Debian 6 : #> curl ...
-1
votes
1answer
285 views

HTTP digest authentication vs. HTTPS basic authentication [closed]

What is the difference between HTTP Digest Authentication and HTTPS basic authentication from a performance and security point of view?
0
votes
1answer
168 views

Is there any way to log HTTPS requests (URLs) in a proxy server (Squid no transparent proxy)?

We do not want to know what is inside the package. Only monitor the destination URLs. Is it possible? In other words: I want the Squid log accesses without being transparent proxy.
0
votes
1answer
220 views

Apache Fails To Acknowledge HTTPS Virtual Host

I am running Apache 2.6 on my computer running Arch Linux. It runs a mail server, and because I wanted to setup webmail, I decided I would create my own SSL certificates, as only my friends and family ...
1
vote
2answers
82 views

How to configure multiple apache virtual hosts on multiple ports?

I have a server with one IP address. I want to run several virtual hosts in an Apache 2.2. And I want all virtual hosts to be accessible on port 80 (plain http), 8000 (plain http) and 443 (ssl). For ...
0
votes
3answers
69 views

dns security sending username and password over get request

This might be a theoretical question but if I were to request the following url: https://example.com?username=username&password=password Would the username and password be stored on the dns ...
1
vote
1answer
66 views

How to catch request to http://<public_ip> and https://<public_ip> in nginx?

I have a few websites each in its own server{} block in nginx, with their domains defined in server_name directives. One of the websites also has an https server{} block. They're all on the same IP. ...
-1
votes
1answer
73 views

Is it possibel to get that “Padlock” symbol in the address bar for a localhost https connection that uses a self signed certificate? [closed]

I am currently implemented SSL for my Web App in tomcat using a self signed certificate using java Keystore tool. I am using the web app in my machine as localhost. When I visit the url ...
0
votes
1answer
313 views

nginx refusing SSL connection on cPanel server

I have nginx 4.4 installed on a cPanel server (via nginx admin plugin) as a proxy to Apache. I used to have nginx listening on ports 80 and 443 on a dedicated IP address without any problems but ...
0
votes
1answer
96 views

Allied Telesis AlliedWare gui http server accepted cipher suites

When configuring a AT-9924T switch running AlliedWare 2.9.2 to serve ssl encryption on the http server as described in the manual like this: create enco key=0 type=rsa length=2048 set system ...
0
votes
1answer
394 views

I'm able to connect to my seafile using my root domain, although I only specified to use my subdomain. (nginx)

I have the following problem, that I'm able to connect to my seafile installation using my root domain "www.domain.com", although I only specified and I only want to use "cloud.domain.com". I only ...
3
votes
1answer
93 views

HTTPS: Enable globally or only when data is sent?

I want to enable HTTPS for my website on pages where data is sent by the user (forms, comments etc). Does it make sense to enable it only when a page uses forms or is it easier to enable globally? ...
0
votes
1answer
660 views

bind apache ssl port with different port with same openssl port 443

I have a server (linux base) in which i installed dotcms and it runs on port 80 and openssl is on port 443. both are started in running process. Recently i installed apache on my server. and when i ...
0
votes
1answer
471 views

Nginx: Detect HTTPS connection using a header

On my load balancer I terminate HTTPS connections with Nginx and then proxy the request to one of the web servers which are also backed by Nginx. On the load balancer in fastcgi_params I have: ...
3
votes
1answer
63 views

Close non-HTTPS Connection in Nginx

I'm using basic auth where the user sends their username an password in the header. These requests will be done over HTTPS for security (since the password would be in plain text otherwise). If the ...
-3
votes
2answers
965 views

Is it possible to redirect https to http using dns?

I asked this on SO, but this might be a better forum? I just switched a domain from a custom site to a shopify site. The custom site used SSL, and any customer who has gone to the site in Chrome most ...
3
votes
2answers
483 views

apache force if url has specific pattern redirect to https [duplicate]

How can I force Apache if URI start with "admin-" pattern or contain "admin/user/login" redirect to https of the same uri. For example: If the URI is : http://examplesite.com/admin-2dns24dw ...
1
vote
1answer
206 views

Firefox SSL security warning [duplicate]

We have a weird issue on one of our sites. The site in question forces https for all traffic but it throws a security error for some users. Different browsers, settings and network environments make ...
0
votes
1answer
334 views

Redirect HTTP to HTTPS with ldirectord/LVS

We're using LVS for load balancing and want to do a 301 redirect for http://example.com to https://example.com LVS is enabling https without issue, but the http real servers are not being added to ...
1
vote
0answers
128 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
2
votes
1answer
68 views

vhosts with various hosts and http/https

I have the file underneath in my vhosts.d directory and it's called hosts.conf (from what I gather the name isn't a problem). Now there are various hosts as you can see, if I use http (port 80) no ...
0
votes
1answer
663 views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
2answers
2k views

Redirect all http AND https non-www URLS to https://www.example.com via htaccess

For reasons much too long and complex to get into (it involves several layers of corporate red tape resulting in someone else not purchasing a wildcard SSL certificate I requested), I have to set up a ...
2
votes
3answers
103 views

Can i set 443 as default web port which means it can only be accessed via https and no port 80

As title says, I want to set my apache to listen on 443, and will configure SSL. So, My Question is :- 1). Does that mean, i will not have port 80 or any other port which is no ssl ? 2). My site ...
0
votes
1answer
325 views

How to change default listening port on webbserver IIS 7?

How do you change the default port to which the webbserver IIS 7 is listening for incoming traffic to whatever portnumber? e.g. I have web application named "mywebapplication" published on SSL port ...
0
votes
1answer
48 views

wildcard setup with 2 nginx servers

I just need a bit of help with https config for nginx using a wildcard domain name across 2 servers. we have the wildcard domain lets call it *.mydomain.com We currently have a server ...
0
votes
2answers
159 views

All HTTPS traffic redirecting to one IIS site

We have two sites/applications in IIS: www.corpsite.com accounts.corpsite.com As you can see the accounts app has the same TLD and is the only application/site on the server that makes use of an ...
0
votes
3answers
383 views

Disable HTTPS for a domain that shares IP with another domain that is under HTTPS

I am running into a weird problem trying to disable HTTPS for one domain, but the other domain has HTTPS. They both are different websites running on a dedicated server, sharing the same IP address ...
1
vote
2answers
57 views

How do I prevent Apache from serving a HTTPS site when it doesn't match the requested VirtualHost Name?

I'm using Apache2 and named virtual hosts to serve two different dotcom's (exampleone.com and exampletwo.com) from one IP address. One site (exampleone.com should be HTTP and HTTPS, while the other ...
2
votes
4answers
2k views

Referer is passed from HTTPS to HTTP in some cases… How?

In theory browsers do not pass on referer information from HTTPS to HTTP sites. And in my experience this has always been true. But I just found an exception, and I want to understand why it works so ...
0
votes
1answer
171 views

HTTPS shows website correctly, HTTP shows IIS start page

Just setup a new VPS server and am migrating a few clients to it from my dedicated server. The new VPS server is Win Server 2008 with IIS7. For some reason, when you go to http version using the ip, ...
0
votes
2answers
127 views

Can't download from a https address using wget

I'm trying to download some videos from DefCon archive using wget but i'm getting this: Unable to establish SSL connection. I tried to use wget with --no-check-certificate but got the same result. ...
-1
votes
1answer
84 views

How to set up https only on one directory of VirualHost

I have VPS with several sites and applications, and I want to run MySQL administration tool over https to avoid possibility of man-in-the-middle attack, since I often have to use mysql root password. ...
1
vote
1answer
910 views

Apache, ISPConfig3 & https to http redirection bug

I'm having a curious problem. Since my server got no SSL certificate and I want to avoid the ugly "This site is unsecure" warning, I decided to redirect https to http. I have my website, lets say ...
0
votes
2answers
402 views

HTTPS listen on additional port apache/httpd

I have a pretty simple configuration on a dev server where everything in the web root is available over http and https. I would like to add an additional listening port such as 8443 so that I have ...
0
votes
1answer
39 views

Loadbalancer passing client IP to the web server (HTTPS)

Can a loadbalacer (reverse proxy) configured with sticky sessions pass on the client IP to the Web servers if the session is SSL encrypted without doing SSL termination? Is it even possible to have ...
0
votes
1answer
70 views

When I redirect nginx https non-www -> www, do I need ssl on?

I'm using nginx with SSL, and I want to always redirect to www, regardless of whether the request is http or https. I just want to redirect to the respective protocol www version. I have the port 80 ...
0
votes
1answer
287 views

URL rewriting and SSL conflict

I am facing following problem. URL rewriting with .htaccess is working perfectly on HTTP URLs. Now I have installed SSL Certificates on my server and now accessing my site with HTTPS URLs. Site is ...
0
votes
2answers
267 views

Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?

I have read, namely on Rackspace, that one should not use SSL termination for sensitive information (search the page for "SSL Termination should not be used"). Firstly, why would that be the case. ...
0
votes
1answer
212 views

Redirect from HTTP to HTTPS with respect to the X-Forwarded-For header (SSL termination used)

I'm looking to redirect from HTTP to HTTPS. My Nginx server sits behind a load balancer which will terminate SSL for me and send all traffic (HTTP and HTTPS) to port 80. The only evidence I will have ...
0
votes
0answers
223 views

Client can not access some HTTPS through Squeeze gateway

I have a gateway (+firewall +proxy) set up on a Squeeze box with 2 NICs. The problem is the client cannot see some of the HTTPS (for example they can go https://mail.google.com but not ...
0
votes
0answers
270 views

stunnel: redirect HTTP traffic to HTTPS

Is it possible for stunnel to detect non-SSL requests and issue a redirect to HTTPS URL? Or maybe it's possible to have stunnel mark these requests somehow and let the underlying app issue the ...
1
vote
1answer
260 views

How do I get iPXE to boot from HTTPS server with self signed cert?

I am chainloading iPXE (undionly.kpxe) and using an embedded script wanting to boot from HTTPS. The problem is the HTTPS server is connecting to the http server (a custom service) via stunnel using a ...
2
votes
3answers
5k views

HTTP to HTTPS redirect with Exchange 2013 OWA

I'm trying to set up an automatic redirect from http://webmail.domain.com to https://webmail.domain.com/owa of our Exchange Server 2013 CU1 using the IIS interface. The old trick to just redirect the ...
0
votes
2answers
44 views

https redirect to https (No Cert Warning) [duplicate]

Am I right in thinking that in order to redirect an https URL to another https URL without a certificate warning, the first https URL has to have it's own valid certificate and IP address? Am trying ...
0
votes
1answer
2k views

How to configure seafile to run in HTTPS?

I've installed and configured seafile 1.6.1 on a debian squeeze. By default, it's working on http, port 8000. To set up https, I added these 3 lines to seafile.conf ...
-2
votes
1answer
118 views

How do iptables ports work? [closed]

Let's say, for instance, a user on the network makes a HTTP request to http://serverfault.com. I believe the destination port (dport) in this case is 80. What is the source port (sport)? If the user ...
0
votes
1answer
241 views

Apache ~ how to force SSL client auth for specific IP

Haven't been able to figure out how to easily manage access to my SSL website. I'm trying to allow access to a specific location based on client IP. If client IP = 192.168.x.x => bypass client ...
0
votes
2answers
62 views

Apache reverse proxy converts links in page to https

I have set up a reverse proxy and on the resulting page the http links show as https, so they cannot be loaded as this is a pure http page. Could this be caused by a bad reverse proxy configuration? ...
2
votes
2answers
198 views

Nginx serves same content for HTTPS requests across various domains

I created a GitLab instance on my server, let's call it git.domain1.tld. When I connect to https://git.domain1.tld it works fine. However, when I connect to https://domain2.tld, it shows the same ...