HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

0
votes
0answers
9 views

How to prevent MITM in mobile apps

I want to make sure that my mobile app is the only one making calls to my API. How to ensure that if softwares like Fiddler generate a HTTPs certificate (man-in-the-middle) and anyone is able to ...
0
votes
1answer
1k views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
2answers
34 views

Redirect loop when forcing HTTPS

I am using the following to force HTTPS on my main website. ### Force SSL RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] If you want to view the full htaccess ...
-1
votes
0answers
16 views

How to redirect from within a HTTP page to a HTTPS page - IIS 8, URL Rewrite 2.0 Module

I have looked at the other answers on this site and on Google but nothing is quite helping me in my issue. I am running Windows Server 2012 with IIS 8.0 and the URL Rewrite 2.0 module installed. I ...
1
vote
2answers
34 views

Powershell HTTPS not working

I am a bit confused on how to configure certificate for my local host. My scenario is like: We've two windows 2012 servers (not joined in a domain) and I need to execute a powershell script remotely ...
0
votes
0answers
28 views

Kibana 3 on nginx with ssl

I installed Kibana 3 on nginx with the nginx-auth-ldap module. And with the example nginx.conf provided by elasticsearch and added ssl support. But for some reason, when accessing kibana with https I ...
43
votes
9answers
4k views

Why do I need to purchase an SSL certificate when I can generate one locally?

I am having trouble understanding why we need to purchase SSL certificates when we can generate them locally using openSSL. What is the difference between the certificate I purchase and a test ...
1
vote
2answers
629 views

Lighttpd Redirect to SSL results in 301 redirect loop

I am running lighttpd 1.4.31 with ssl support and am having an issue with forcing https on a specific virtualhost. If I disable the redirect line from the following config, it works as expect (http ...
0
votes
0answers
26 views

Apache randomly stops serving HTTPS, but HTTP works just fine

We have this Apache on Windows Server 2012: Server version: Apache/2.4.9 (Win32) Apache Lounge VC10 Server built: Mar 17 2014 10:48:43 Most of the time, it works perfectly, but from time to time ...
1
vote
1answer
987 views

Getting HAPROXY to redirect http to https in users browser session

We are currently using a Internet cloud provider to host our SaaS platform. The platform consists of a Firewall -> Cloud Provider SLB -> -> Apache Web Server -> HAPROXY SLB -> Liferay Platform We ...
1
vote
2answers
3k views

Pfsense: Inbound Load Balancing https with sticky connection

first of all I'm very sorry for my English... This is my scenario: Internet Firewall+LB: pfsense_1(Active) + pfsense_2(Passive) in CARP Pool servers: 3 x nginx(PHP5+HTTP+HTTPS) Pfsense 1 and 2 ...
4
votes
3answers
11k views

Dell fumbles OpenManage installation process, forgets to write documentation?

I'm setting up a Dell PowerEdge 2950 for a small business, and I've just spent a while with Dell OpenManage Server Administrator 6.2, trying to clear the installation process of errors before I ...
8
votes
3answers
35k views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
0
votes
1answer
279 views

nginx redirect loop with proxy_pass and $http + CloudFlare

My nginx configuration works great until I add a redirect that forces HTTPS. The working config before the redirect is is: server { listen 80; listen 443 default_server ssl; server_name ...
0
votes
1answer
27 views

SSL Certificates from nginx only works in Windows IE and Chrome

I have a wildcard certificate and got it signed by AlphaSSL. I followed the steps from here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains to set it up on my nginx server which ...
8
votes
2answers
416 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
0
votes
0answers
15 views

Squid: bypass url_rewrite_program when request is https

I have a url rewriter working in squid currently. The problem is that, while it works fine for HTTP, HTTPS requests obviously don't work, even when rewritten with the same URL (because my server would ...
-2
votes
0answers
13 views

Using ssl on open vpn server

So I'm getting crazy annoyed with the following problem. I have a Ubuntu 14.04 Server with OpenVPN acces server running on sub.domein.com . Now I can request different folders from the server with ...
-1
votes
1answer
58 views

Apache configuration redirect using only redirect, not rewrite

PS: this is the 2nd part of the question originally posted here. I'd like to disable the HSTS header completely for specific virtual hosts. I have (per recommendation) a redirect in the 443 container ...
0
votes
0answers
23 views

Rewriting .htaccess for https on subdomain

I'm currently hosting subdomain dev.example.com from a dev subfolder and using this .htaccess rules: RewriteEngine on RewriteCond %{HTTP_HOST} ^(www.)?dev.example.com$ RewriteCond %{REQUEST_URI} ...
0
votes
0answers
18 views

SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long) on IIS [closed]

I was trying to set SSL in IIS 7.5 but after configuring all the required things when I browse application ssl_error_rx_record_too_long error appeared in Firefox. I created self signed certificate and ...
0
votes
1answer
20 views

HTTPS Redirect in IIS 7 Only Working on Localhost

I am trying to force SSL redirection on a website through IIS 7 (Server 2008) using the following: <rule name="Redirect to HTTPS" stopProcessing="true"> <match url="(.*)" /> ...
1
vote
1answer
1k views

Nginx SSL redirect for one specific page only

I read and followed this question in order to configure nginx to force SSL for one page (admin.php for XenForo), and it is working well for a few of the site administrators but is not for myself. I ...
0
votes
1answer
185 views

openVPN on TCP 443 + sniproxy only for certain IPs - is it a way to do it?

I'm currently running sniproxy and https server. If user is known (IP is known) iptables just allows connection to sniproxy which redirects user to desired website or local https server (127.0.0.1 ...
0
votes
0answers
32 views

https no longer works and http keep looping for credential

Hopefully this noob question is not being asked already. My FTP site https://xxxxxx.xxx.com/xxx used to works well, until 2 weeks ago someone (authorized user, not intrusion) logged in to the ftp ...
1
vote
0answers
37 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
0
votes
1answer
18 views

Https transparent proxy and SSL certificate validation

If I setup a transparent proxy for https connections using a SSL certificate signed by my local CA and distributed to all my active directory clients by GPO, may the client (browsers) reject or advise ...
1
vote
1answer
2k views

Can't use HTTPS with ServerXMLHTTP object

I am supporting a Classic ASP application that connects to a payment gateway via HTTPS. Up until recently there have been no issues. A few days ago this broke without the code, IIS config or anything ...
2
votes
2answers
2k views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
2
votes
1answer
315 views

How to provide external access to only the Git projects (clone/pull/push) of an internal GitLab deployment

We have set-up a GitLab server (GitLab 7.0 Community Edition). It is up and running and our colleagues can use it within the LAN (the IP address and Host are only visible from the LAN). Some of the ...
0
votes
1answer
35 views

Nginx - redirecting non-www to www, but not subdomains

I have many domains linked to the same php directory, and I need all of them to redirect from non-www,non-https to www,https. # Add www, if missing server { server_name ...
0
votes
0answers
12 views

Automatic LAN authentication for HTTPS/HTTP sevice via Proxy

This is my situation: I have a LAN in my office that I want to connect entirely to an internet server via HTTPS. I want to log all the LAN's host injecting the session cookie in the header of ...
1
vote
2answers
2k views

OpenBSD pf 'match in all scrub (no-df)' causes HTTPS to be unreachable on mobile network

First of all: excuse me for my poor usage of the English language. For several years I'm experiencing problems with the 'match in all scrub (no-df)' rule in pf. I can't find out what's happening ...
1
vote
1answer
2k views

Apache, ISPConfig3 & https to http redirection bug [closed]

I'm having a curious problem. Since my server got no SSL certificate and I want to avoid the ugly "This site is unsecure" warning, I decided to redirect https to http. I have my website, lets say ...
0
votes
0answers
14 views

Client getting HTTP response 502 Invalid HTTP Response over https

We have a web application written in .NET C# hosted in IIS 7. The client side is written in GWT (Javascript) and the application uses JSON as data transport. The site is accessible over https. We ...
0
votes
0answers
23 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
2
votes
1answer
835 views

Apache redirecting https://host:port/folder to http://host:port/folder/

I have a apache server using two SSL domains (no SNI support) in different ports, kinda like this: https://host1.tld:443 (default) https://host2.tld:444 (non-standard) I have a Rewrite rule to ...
0
votes
1answer
859 views

Error code: ERR_SPDY_PROTOCOL_ERROR

Just installed StartSSL certificate on my debian wheezy, nginx 1.6 server. Everything seem to be working fine, I can browse the website in https no problem until I try to login... IE works fine and I ...
1
vote
1answer
40 views

Certificate Errors on “redirection” in DNS RPZ of https/ssl

I've set up a DNS RPZ where I "redirect" users to a walled garden using DNS RPZ records when users try to access a list of bad sites. Let's say a user tries to access badsite.com. The redirection to ...
0
votes
1answer
47 views

Apache always redirects http to https [closed]

I am running Apache 2.4.7 on Ubuntu 12.04. I have a site http://bharatkrishna.net/ and this is running off a machine at my home. I have forwarded ports 80 & 443 on my router. As you can see, when ...
3
votes
1answer
230 views

Has SHA256 but why is it not used?

After performing an upgrade on Apache and modssl, I get a security warning in the security logo of the URL bar in Chrome when visiting my website on Apache server: The site is using outdated ...
0
votes
2answers
45 views

Cannot set up https on microsoft azure VM

For over a week now I am trying to set up https to work with my owncloud hosted on a Microsoft Azure virtual machine (ubuntu server 14.04). I am using apache2. I have gone through every single ...
0
votes
1answer
2k views

Apache stops responding to http requests — https continues to work

Okay. Very strange problem that I'm having here. I just recently updated to Apache 2.4.2 from 2.2.17, mostly to try to get name-based SSL VirtualHosts working (although they should have been working ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
2k views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
-1
votes
2answers
86 views

HTTPS redirect from a naked domain (example.com) to a full domain 'www.example.com' without an error?

I'm trying to Redirect non-www requests to www on Amazon Route 53. I made an S3 bucket with the name of the naked domain and configure the bucket properties to redirect from example.com to ...
0
votes
0answers
21 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
-1
votes
1answer
66 views

Https to http redirect for only one of multiple sites on the same server

I have several sites on a single server, and an SSL certificate. The problem is that i need to redirect all sites from https to http except one, which should be the only site using https. Say, ...
0
votes
1answer
17 views

Issue with creating an SSL certificate

I am having the following issue: There is a Terminal Server name TERM-SRV.example.com running Windows Server 2012 that hosts a site "https://example.com/RDWeb". There was a certificate that recently ...
0
votes
0answers
57 views

How to Relay All HTTP Requests to Another Server

Here is the scenario I need to work with. We have devices which need to talk to web service. This web service is hosted elsewhere and is accessible via DynDNS. Due to limitations on the device and our ...