HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

150
votes
5answers
104k views

In Nginx, how can I rewrite all http requests to https while maintaining sub-domain?

I want to rewrite all http requests on my web server to be https requests, I started with the following: server { listen 80; location / { rewrite ^(.*) https://mysite.com$1 ...
16
votes
9answers
12k views

Multiple domains with SSL on same IP

I know that a dedicated IP is needed for setting up SSL. What happens if we add SSL for domains sharing an IP ? (Namevirtualhost)
14
votes
4answers
1k views

SSL certificate selection based on host-header: is it possible?

Is it possible for a web server to select an SSL certificate to use based on the host-header of the incoming connection, or is that information that is only available after the SSL connection is ...
154
votes
11answers
26k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. I use a web hosting panel called ZPanel that is an open source project. It then set up a redirect for all traffic on my domain on Port 80 to ...
74
votes
5answers
20k views

nginx HTTPS serving with same config as HTTP

Is there a way to share configuration directives across two nginx server {} blocks? I'd like to avoid duplicating the rules, as my site's HTTPS and HTTP content are served with the exact same config. ...
2
votes
3answers
9k views

Need help trouble shooting Https webserver error - SSL Handshake failed

I followed this guide: http://hints.macworld.com/article.php?story=20041129143420344 Here is my virtual host definition <VirtualHost *:443> SSLEngine on SSLProxyEngine On ...
5
votes
5answers
9k views

Can I run two different secure sites using the port 443 on the same server?

Let's say I want two secure sites running from the same machine using the Apache server: 1. https://mysite.com 2. https://mysite.ca Is it possible to use port 443 for both of the above sites?
2
votes
2answers
4k views

Request Entity Too Large error while uploading files of more than 128KB over SSL

We have a web portal setup on Java spring framework. It running on tomcat app server. Portal is served through apache web server connected to tomcat through JK connector. Entire portal is HTTPS ...
2
votes
1answer
1k views

Apache answer both HTTP and HTTPS on the same port

I'm trying to get apache to redirect from http to https, however I want them both on the same port (20100, but I doubt that will matter). Basically what's going on here except I'm not doing this for ...
-2
votes
1answer
135 views

Can Squid or other open-source proxy server be set up to process HTTPS encrypted traffic? [closed]

I would like to set up a home proxy server which would filter ads and viruses even before they get to the browser. The problem in this case is that many web sites use encrypted HTTPS connections and I ...
2
votes
4answers
1k views

Apache rewrite rules and DNS settings for HTTPS sites

For a web application located at: https://www.domain.com/ With an SSL certificate issued to "www.domain.com", What is are the proper rewrite rules, DNS settings, or combination of both which makes ...
1
vote
3answers
751 views

Securing phpmyadmin: non-standard port + https

Trying to secure phpmyadmin, we already did the following: Cookie Auth login firewall off tcp port 3306. running on non-standard port Now we would like to implement https... but how could it work ...
1
vote
2answers
3k views

How to configure Apache to act as an SSL proxy to an application server?

I have one physical server that runs: an Apache (httpd) server another web server (let's say Tomcat for sake of argument) on port 1234 Can I configure the Apache server to act as a proxy for SSL ...
1
vote
1answer
6k views

HAProxy not passing SSL traffic in TCP mode (unknown protocol)

I've got a HAProxy LB solution setup and working correctly. All HTTP traffic on port 80 is being passed through succesfully. I'm now trying to get SSL traffic to work (in TCP mode and on just one ...
0
votes
1answer
289 views

Block HTTPS traffic to only selected sites

The Squid at my office is currently set up as a transparent proxy. I tried to block sites like facebook.com and twitter.com and was successful because just typing in those domains do not default to ...
0
votes
1answer
770 views

Configuring IIS site to use HTTPS

I am working on a REST API which I have currently deployed on a Win XP Professional SP2 development machine running IIS 5.1. The site is currently being hosted on port 81 and being accessed via HTTP. ...
0
votes
3answers
67 views

mydomainname.com not working with https

I have create a self signed SSL Certificate for testing purpose and I have configure the generated certificate with my virtual hosts file. But when I tried to access my domainname.com with ...
0
votes
2answers
177 views

Last (I think and hope) problems configuring SSL certificate with Apache and VirtualHosts

Finally I set apache2 to get a single certificate for all subdomains. [...] # Go ahead and accept connections for these vhosts # from non-SNI clients SSLStrictSNIVHostCheck off # Apache setup ...
0
votes
1answer
78 views

https setup with apache2

I have a site called http://www.mysite.com/ configured in apache virtual hosting. Is it possible to make it use https with free certificate(if required) Please anyone give me step by step guide
8
votes
4answers
5k views

haproxy + stunnel + keep-alive?

I'd like to put stunnel in front of haproxy 1.4 to handle HTTPS traffic. I also need stunnel to add the X-Forwarded-For header. This can be achieved by the "stunnel-4.xx-xforwarded-for.diff" patches ...
13
votes
3answers
16k views

Jenkins: Use it with SSL / https

I have a Fedora server running Jenkins which I install via yum. Everything is okay, I can access it with http://ci.mydomain.com. But now, I want to access it with https://ci.mydomain.com, so the login ...
5
votes
3answers
10k views

transparent SSL proxy myths and facts

I've been searching for many hours now about a way to setup a transparent proxy for SSL (not Squid). The general answer is that I can't, but I know there are some ways, though. My purpose is only the ...
6
votes
3answers
10k views

Connecting to HTTPS with netcat (nc)

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch page on HTTP you I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
5
votes
3answers
459 views

Should I host my entire web application using https?

Actually my only requirement for using SSL encryption is that when a user logs in, the password is transferred encrypted. However after reading a bit about protocol switching, that an HTTPS session ...
6
votes
6answers
4k views

Chrome slow over https sites, particularly internal ones

We are trying to deploy Google Chrome across our corporate network, but we're finding that it takes 2-4X longer to load an https page (particularly our own internal ones) compared to IE. Has anyone ...
6
votes
7answers
5k views

Handling http and https requests using a single port with nginx

i was wondering if nginx is able to handle http and https requests on the same port. [*] This is what i'm trying to do. I'm running a web server (lighttpd) handling http requests, and a C program ...
3
votes
1answer
5k views

How to use nginx as reverse proxy with multiple IPs and SSL?

I would like to setup nginx reverse proxy with multiple domains and an IP for each of them to use different SSL Certs. I run Ubuntu as OS which is installed on a KVM/Qemu VM. As I understand nginx, ...
3
votes
2answers
2k views

CDN that supports custom SSL over custom domain [closed]

SSL is the biggest problem: S3/Cloudfront doesnt support it. Rackspace CloudFiles just told me they will support it in Q2 2011. MaxCDN told me its $299 setup fee and a $299 monthly fee. Based on ...
2
votes
5answers
3k views

Setting up https with a self-signed certificate on Apache

I'm trying to set up HTTPS on Apache, using a self-signed certificate. But instead of displaying the page, I get a bunch of weird errors. An a different error from each browser! From Chrome: ...
8
votes
4answers
7k views

Setting up a transparent SSL proxy

I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
8
votes
3answers
4k views

Can Https work without a certificate?

Recently our infrastructure team told our development team that you do not need a certificate for https. They mentioned that the only benefit of buying a certificate was to give the consumer peace of ...
3
votes
1answer
79 views

Multiple HTTPS servers for single website, and single IP?

Suppose I have a TCP-level load balancer which passes TCP packets between one of two backend HTTPS servers, and the client. In order to ensure no problems with encryption, then the load balancer would ...
3
votes
1answer
2k views

How to disable Apache http compression (mod_deflate) when SSL stream is compressed

I found that Goggle Chrome supports ssl compression and Firefox should support it soon. I'm trying to configure Apache to to disable http compression if the ssl compression is used to prevent CPU ...
1
vote
1answer
165 views

Jetty 9 - redirect http to https

I'd like to force use of https in Jetty 9. Apparently: <Set name="confidentialPort">443</Set> no longer works in jetty 9. How should I do it properly?
1
vote
4answers
225 views

Does Nginx need a unique ip address for every site served over HTTPS like Apache?

With Apache's the most common HTTPS setup you need 1 IP Address per site. Does Nginx have this same limitation or can a single IP Address serve an unlimited number of HTTPS sites?
1
vote
1answer
440 views

HTTPS reverse proxy for HTTP-only web service

I have a Windows web service application running on HTTP, no HTTPS support. Can someone recommend some lightweight HTTPS reverse proxy in front of it, so connections to it from the outside can go ...
1
vote
4answers
401 views

SSL Cert Vendors

We have a website that has an SSL Certificate from GoDaddy. Our Japanese Office is reporting that some of their clients cannot access the secure site via their mobile phone. Apparently one of the ...
0
votes
2answers
199 views

HTTP client -> [proxy] -> HTTPS server. Possible?

Is it possible to have something like this?: [Client] ----HTTP--- > [Magic] ----HTTPS----> [Server] I have a Windows Phone client that should connects to a HTTPS server which is out of my control. ...
0
votes
1answer
1k views

Securing Two Sub domains on IIS7.5 with SSL on port 443

I have two sub domains pointing at the same IP address i.e. sub1.example.com sub2.example.com Each sub domain maps to a site (let's say sub1 and sub2, respectively) in IIS 7.5 on Windows server ...
0
votes
1answer
375 views

Problem redirecting http to https with apache

I have a virtual host setup in apache, that works for SSL only. It is setup as so: <VirtualHost 8.8.8.8:443> <IfModule mod_ssl.c> SSLCertificateFile /home/me/server.crt ...
8
votes
2answers
1k views

Possible to close port 80 and still use port 443?

I have a web application that should only be accessible through HTTPS. Is it possible, and a wise idea to close port 80 entirely? Are there any drawbacks to closing port 80, beyond the fact browsers ...
5
votes
5answers
394 views

Migrating an SSL Certificate from one host to another during site migration

We are helping a new client migrate their site from a previous unreliable host, over to a new host (cloud based). They run an ecom site with an SSL Certificate (GeoTrust SSL). We plan to move their ...
5
votes
1answer
2k views

Serve http (port 80) and https (port 443) on same VirtualHost

I need to setup my VirtualHost on Apache to serve on both http and https (using standard ports) If I enable the SSL Engine (as per below) - I get an error when on port 80. The reason is, parts of ...
4
votes
5answers
733 views

How to provide HTTPS access to a webserver that doesn't support SSL?

I have a program (motion) that serves a web page showing a live camera feed. I want to make that feed available via internet, but using SSL and a certificate so the feed can only be seen by those that ...
3
votes
2answers
208 views

Automatically reconfigure WinRM HTTPS listener with new certificate?

I am looking to enable WinRM HTTPS listeners on all of our servers for secure communication when using CredSSP between servers to get around the double-hop issue. Setting this up is fine, we have ...
3
votes
3answers
4k views

nginx HTTPS WWW redirect to non-WWW

My SSL certificate is for mydomain.com, so i am trying to redirect all www.mydomain.com over to without www. Now, all these work: http://www.mydomain.com http://mydomain.com https://mydomain.com ...
3
votes
2answers
3k views

Plesk HTTPS setup and directory problems

We are trying to configure ssl for one of our domains hosted on a Red Hat server running Plesk. Plesk version: 9.5.2 Apache: 2.2.3 Redhat: 2.6.18-194.el5 We created a new SSL certificate entry ...
2
votes
3answers
103 views

Can i set 443 as default web port which means it can only be accessed via https and no port 80

As title says, I want to set my apache to listen on 443, and will configure SSL. So, My Question is :- 1). Does that mean, i will not have port 80 or any other port which is no ssl ? 2). My site ...
2
votes
1answer
1k views

Redirect http to https apache on different port

<VirtualHost *:82> SSLEngine on SSLCertificateFile /etc/ssl/certs/cert.pem DocumentRoot "/var/www/site" <Directory "/var/www/site"> allow from all Options -Indexes </Directory> ...
2
votes
3answers
861 views

What percentage of web users are running on browsers/OSes that support SNI? [closed]

Has anyone done any analysis (or know where I can find some!) on what proportion of internet users are using a browser/operating system combination that support SNI (Server Name Indication) SSL/TLS ...