HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
3answers
59 views

Should I use a single SSL certificate for example.com and www.example.com?

I have a website (hosted by Amazon S3) which redirects example.com to www.example.com. I am setting up an Amazon CloudFront distribution for this website, and would like the same redirection to work ...
0
votes
1answer
20 views

HTTPS throws CloudFlare Error 524

I have a website running off of Apache. Standard HTTP works, but HTTPS does not. HTTPS causes my site to hang, and then eventually throw Error 524. I've looked all over for answers, but couldn't find ...
0
votes
1answer
36 views

AWS Elastick Beanstalk + Node JS + HTTPS = Connection Refused

I have a node js app deployed on AWS, using Elastic Beanstalk with a single instance. It works well with HTTP but I am having trouble setting up the HTTPS access. I created my certificate and ...
1
vote
1answer
66 views

How to build Apache httpd 2.4.20 on CentOS 7 with http2 support?

I've spent nearly a day trying to make Apache httpd builds with ALPN and http2 support for EL6 and EL7 for my company and society, as I previously did for NGINX (Built statically against OpenSSL ...
-3
votes
0answers
15 views

Google cloud and https [on hold]

I am migrating one site and changing domain name from one "normal" hosting provider to google cloud. My question is, my old site is in https and I don't understand if I can use https (apache2) in the ...
3
votes
1answer
1k views

Apache redirecting https://host:port/folder to http://host:port/folder/

I have a apache server using two SSL domains (no SNI support) in different ports, kinda like this: https://host1.tld:443 (default) https://host2.tld:444 (non-standard) I have a Rewrite rule to ...
0
votes
0answers
7 views

Connections are reset when trying to access site over HTTPS

I have a Windows 2008 R2 Server running IIS 7.5 The Site was running fine on Friday and I came in this morning to find that it was not accessible. After removing the 'Require SSL' restriction on the ...
0
votes
0answers
35 views

Can NGINX inspect the TLS request to look for SNI like HAProxy (etc) does?

It seems that, when configuring HAProxy for hostname routing on HTTPS connections, it is crucial to include a tcp-request inspect-delay directive to "give HAProxy a chance to look into the ...
2
votes
1answer
59 views

Does NGINX support SNI or does it not?

EDIT New question: Can NGINX inspect the TLS request to look for SNI like HAProxy (etc) does? According to what I've read around (and I've been told), NGINX should not support SNI and I should go for ...
0
votes
0answers
30 views

How to configure ELB load-balancer over HTTPS for two sites deployed to the same pair of servers?

I would appreciate immensely if you shed some light into what we might be missing or doing wrong. I am not completely in charge of the configuration, and I'm not an expert on the subject, but have ...
0
votes
1answer
1k views

Two virtual hosts with internal and external ip for same application, same port

Is it possible to have two virtual host configurations for the same server - one with internal ip address and one with domain name(the domain name points to the same server with the internal ip ...
0
votes
1answer
22 views

Site being accessed with wrong protocol?

I'm running a Tornado web server that only accepts SSL connections, and only listens on port 443. Connecting to it in a browser over HTTPS works well. I'm seeing messages like this in my logs: ERROR ...
0
votes
0answers
151 views

IPA Server installation: Error with port number

When I am trying to install IPA server, I am getting the following error : IPA requires port 8443 for PKI but it is currently in use. Aborting installation I checked with netstat -tuplen | grep ...
4
votes
2answers
4k views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
45
votes
3answers
49k views

_default_ VirtualHost overlap on port 443, the first has precedence

I have two ruby on rails 3 applications running on same server, (ubuntu 10.04), both with SSL. Here is my apache config file: <VirtualHost *:80> ServerName example1.com DocumentRoot ...
2
votes
2answers
35 views

How to keep one page of a site secure using mod_rewrite

I'd like redirect access to a url from http to https for only a couple of pages on my website. I know how to do it for a whole site using the rewrite in apache virtual hosts: RewriteEngine On ...
0
votes
0answers
36 views

Can haproxy perform ssl termination for forwarding to (squid) proxy servers?

I understand that haproxy can perform ssl termination for load balancing web servers, but is it possible to perform ssl termination when load balancing squid proxy servers? My scenario is that I have ...
1
vote
1answer
20 views

IIS 7 WCF Webservices giving 404 error over HTTPS

I have some WCF webservices running under IIS 7.5 which are responding correctly to http requests but respond with 404 (Not Found) errors when methods are called using SSL. The binds for the site are ...
0
votes
2answers
29 views

proxypass https from one servet to another as https

I have serverA which act as a reverse proxy for serverB. What i wish to accomplish is to porxypass an https connection from serverA to serverB. In other words: ...
2
votes
1answer
1k views

Encrypt client connection with squid forward proxy using SSL

I'm setting up a Squid forward proxy and I'm wondering if I could configure Squid in such a way that the connection from my web browser to squid is https regardless of whether the connection from ...
25
votes
5answers
40k views

Is it possible to generate RSA key without pass phrase?

I'm working with Apache2 and Passenger for a Rails project. I would like to create a self-signed SSL Certificate for testing purposes. sudo openssl rsa -des3 -in server.key -out server.key.new ...
0
votes
1answer
2k views

Apache: Allow only certain http requests, deny all else

We have an Apache server, on a Windows Server 2008 machine, that is used for specific secure traffic for our customers, like a gateway. Now, I only want to allow traffic for a certain range of secure ...
0
votes
0answers
41 views

PHP $_SERVER contains incorrect values

We have a login portal on our site and $_SERVER['SERVER_PORT'] and $_SERVER['HTTPS'] aren't returning the correct value. The thing is that we are not getting any response for $_SERVER['SERVER_PORT'] ...
3
votes
1answer
8k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
1
vote
1answer
38 views

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to ...
2
votes
1answer
1k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
25
votes
4answers
40k views

How to use Jenkins with SSL / https

I have a Fedora server running Jenkins which I install via yum. Everything is okay, I can access it with http://ci.mydomain.com. But now, I want to access it with https://ci.mydomain.com so the login ...
1
vote
2answers
3k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
0
votes
0answers
68 views

SSL Error when pressing CTRL+F5 (overwriting cache) in Firefox

I have an nginx server which fails to correctly delive ssl, when a user presses ctrl+shift+r or ctrl+F5. These shortcuts reload the page and bypass the browser cache. It seems to work in Chrome and ...
-1
votes
0answers
9 views

self signed certificate with openssl for server at home and no domain name [migrated]

All of the articles I read online talk about creating a self-signed certificate for a domain you own. I have Apache2 set up on an Ubuntu 16.04 server at home. My ISP gives me a dynamic IP so I use ...
-2
votes
0answers
10 views

Will loading passive content in secure Iframe will show up on all browsers?

Hey we would like to move our site to HTTPS, but the main question is will our passive content that hosted on 3rd party website shown in secure iframe, Example: The page on website is using HTTPS ...
-3
votes
1answer
17 views

I have a dns= https://www.mywebsite.com, I want to redirect it to https://www.mywebsite.com/Abc in IIS

When I hit the dns i.e www.mywebsite.com it displays the iis welcome page and when I hit https://www.mywebsite.com/Abc it opens up with the website which is supposed to be hosted. Abc is also the ...
1
vote
0answers
33 views

Https: not working but :443/ work?

I don't understand (on debian) why I can access to my website using http://www.myserver.com:443/ but not directly with https://... I'm using LetsEncrypt, all my cert' are generates and works. Here my ...
1
vote
1answer
735 views

Permanent Redirect on Apache is not working

I have an Apache 2.4 server on Windows 2008 that has been working great as a reverse proxy. It is serving content from a LifeRay 6.0 installation running on Glassfish 3.0. Originally, when we ...
2
votes
2answers
66 views

Windows Server 2012 R2 port 443 open, stopping IIS doesn't work

Sorry for the bad wording in the title, 'doesn't help' is not allowed as a title, I am definitely able to stop IIS. While trying to install VisualSVN I ran into the problem that port 443 was already ...
0
votes
2answers
14 views

automatic redirect in HTTPS for users which recognised CaCert authority

I use CaCert certificates for my domains. I want to redirect my users to HTTPS only if they recognised the CaCert authority. What is the best way to do this ?
0
votes
0answers
10 views

HTTP to HTTPS redirect not working on internal pages [duplicate]

I am using this code to redirect HTTP to HTTPS and non www to www but not working on internal pages. Only homepage is working. <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / ...
1
vote
0answers
14 views

Cookie Secure Flag not persistent

I'm trying to implement a Secure flag for all cookies. I'm doing this via Headers. Here's how I did it: Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4" It ...
0
votes
1answer
35 views

Ensure client compatibility before https certificate change on server if you don't have access to all clients

In the next months we plan/need to refresh our https certificate and update our server OS version. We are thinking about switching to Let's Encrypt. It would be inacceptable, if clients could not ...
4
votes
3answers
17k views

HTTPS not working; binding set, certificate installed

I've installed the certificate and set up the HTTPS bindings. However, when I load the site on HTTPS it does not load. I've looked at all the settings but everything seems correct. I've restarted ...
3
votes
2answers
2k views

After setting up Elastic Load balancer my https doesn't work anymore. Nginx error

I have a regular instance that works fine when not behind a load balancer. I set up an ELB with 80 forwarding to 80 and 443 forwarding to 443 and sticky sessions. Afterward I receive this error when ...
2
votes
1answer
45 views

421 Misdirected Request using HTTP/2 and SAN SSL

I'm running Apache 2.4.20 on Ubuntu and I have SSL configured. I have a SAN SSL Certificate and www.example.com and www2.example.com are sharing the same certificate. I'm getting a 421 Misdirected ...
1
vote
1answer
42 views

Nginx Https issue http automatically redirected to https

I have a config file and have a site up and running. But there is an issue if we go to the non-SSL page then also it redirects back to https. I have a site in Magento and it has base URL as ...
0
votes
0answers
27 views

Is there any way to disable at least TLS 1.0 in GCE HTTPS Load Balancer?

I'm trying to pass the Trustwave pci DSS scan but i can't because it fails in "TLSv1.0 supported" and i think the problem is in GCE HTTPS loadbalancer that enables TLSv 1.0, 1.1 and 1.2 by default ...
0
votes
2answers
703 views

Apache ~ how to force SSL client auth for specific IP

Haven't been able to figure out how to easily manage access to my SSL website. I'm trying to allow access to a specific location based on client IP. If client IP = 192.168.x.x => bypass client ...
1
vote
0answers
21 views

HTTP/2 and SPDY running together in Apache

I have the latest Apache installed and currently support HTTP/2. Can I setup SPDY and run it together with HTTP/2? The goal is to also take advantage of the SPDY for browsers that do not support ...
0
votes
0answers
36 views

Redirect locally generated HTTPS traffic through external proxy

I have a configuration like this: Internet | Public Zone | Private Zone IP x.x.x.x |<--- Forward Proxy / WebCache | <--- Linux Server (RedHat) ...
2
votes
1answer
51 views

Setting Port 443 ssl; loads different server directory?

Running Nginx + Centos 7.2 + Wordpress I am installing SSL for a domain of mine, and when I set the port in my serer configuration to listen 443 ssl;when I visit the domain, it prompts me with the ...
336
votes
7answers
273k views

In Nginx, how can I rewrite all http requests to https while maintaining sub-domain?

I want to rewrite all http requests on my web server to be https requests, I started with the following: server { listen 80; location / { rewrite ^(.*) https://mysite.com$1 ...
46
votes
11answers
7k views

Why do I need to purchase an SSL certificate when I can generate one locally?

I am having trouble understanding why we need to purchase SSL certificates when we can generate them locally using openSSL. What is the difference between the certificate I purchase and a test ...