HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

3
votes
0answers
7k views

Configure Squid as an HTTPS forward proxy?

Here's some background about my problem: I have a web service running on Heroku, with a dynamic IP address. Static IPs on Heroku are not an option. I need to connect to an external web service which ...
3
votes
0answers
144 views

Continuous ping on proxy preventing https requests, why?

I hope someone can help me solve this mystery. I have a small linux box which is configured as a transparent proxy on my network. I'm trying to run a script at startup that does a continuous ping to ...
2
votes
0answers
229 views

How to provide external access to only the Git projects (clone/pull/push) of an internal GitLab deployment

We have set-up a GitLab server (GitLab 7.0 Community Edition). It is up and running and our colleagues can use it within the LAN (the IP address and Host are only visible from the LAN). Some of the ...
2
votes
0answers
85 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
2
votes
0answers
148 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
2k views

Tomcat fails to find a key entry in keystore

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file. If I don't specify keyAlias="mykey" it shows me the following error message: ...
2
votes
0answers
259 views

Delivering images to Facebook on HTTPS (Apache 2.2 configuration)

I have a server which provides images to a facebook application. Works fine over HTTP but not over HTTPS. Update: that is, facebook downloads and displays the image over HTTP but not over HTTPS. ...
1
vote
0answers
28 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
1
vote
0answers
198 views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
1
vote
0answers
40 views

curl 7.21 does not correctly call a host with a host header on https

We found out that calling a host like following using curl 7.21 or 7.24 does produce an error in the apache config (we have multiple SSL Vhosts!). Whereas the same command runs smooth with curl 7.34 ...
1
vote
0answers
43 views

nginx: HSTS on a page with www-authentication

Is it possible, on nginx, to send a Strict-Transport-Security header, even on pages that require WWW-Authentication? When I have both auth_basic and add_header Strict-Transport-Security ...
1
vote
0answers
86 views

Enabling AES 256 GCM on Windows Server 2012 R2

I'd like to enable the use of the AES 256 GCM encryption instead of the AES 256 CBC. We already have ECC certificates based on ECDSA so that pre-requisite has been fullfilled. The certificate has a ...
1
vote
0answers
448 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
1
vote
0answers
794 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
332 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
1
vote
0answers
372 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
1
vote
0answers
46 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
1
vote
0answers
281 views

CouchDB v1.2.0 - Timeout error on replication

Currently, I have a replication task that looks something like this: { "continuous": true, "create_target": true, "owner": "admin", "source": "https://remote/db/", "target": "db", ...
1
vote
0answers
101 views

Nginx - Adding a trailing slash to urls on HTTPS

I am using the below regex to add a trailing slash to any url that doesn't have a railing slash or ends ends with .. rewrite ^([^.]*[^/])$ $1/ permanent; This works fine for http, but when I use ...
1
vote
0answers
172 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
0answers
313 views

Console errors 'Invalid 'X-Frame-Options' of '(DENY || SAMEORIGIN)'

Site iframes are throwing Chrome console errors 'Invalid 'X-Frame-Options' header encountered when loading pages over https. The error is '(DENY || SAMEORIGIN)' is not a recognized directive. The ...
1
vote
0answers
57 views

Serving http and https on the same server with apache2

I have a server I host multiple sites on like http://this.example.com/site1, http://this.example.com/site2, http://this.example.com/site3. I am trying to add a secure site at ...
1
vote
0answers
497 views

How to redirect all HTTP traffic to HTTPS for a Django 1.4 application running on an EC2 with nginx/uWSGI behind ELB with an SSL cert

I would like to know how to put my entire django site behind HTTPS. If anyone tries to come via HTTP I want that user to be redirected to HTTPS. Currently, firefox is giving me the error "Firefox has ...
1
vote
0answers
134 views

Popup window opens that asking for username/password On Https pages

I have installed SSL certificate on my server,I am applying https on some selected pages. for this I am using "WebPageSecurity". I have set all required settings in my web.config as per below ...
1
vote
0answers
159 views

Apache: Setting up a reverse proxy configuration with SSL with url rewriting

There is a host: secure.foo.com that exposes a webservice using https I want to create a reverse proxy using Apache that maps a local http port on a server internal.bar.com to the https service ...
1
vote
0answers
32 views

What could cause a group of machines to fail loading secure web pages only when assigned certain IP addresses?

I have about 20 cloned machines running Windows XP Pro SP3. Three of the computers are experiencing an issue where clicking the 'Proceed to checkout' button from the amazon.com shopping cart causes ...
1
vote
0answers
166 views

SVN checkout returns 400 error

I'm trying to download the http://code.opencv.org/svn/opencv/trunk/ repository of all of the OpenCV source code - as specified in an OpenCV installation tutorial. In the tutorial, the repository ...
1
vote
0answers
262 views

Nexus functionality is limited after installation

I have a CentOS based server with Sonatype Nexus 2.0.4-1 installed. The issue is that there are no standard "Artifact Search", "Advanced Search", "Browse Index", "Refresh Index" Nexus features, as ...
1
vote
0answers
273 views

ELB allows unencrypted/http communication on port 443?

I was testing a configuration of AWS ELB to use for SSL termination when I came across an intermittent issue... Ocasionally, you can specify HTTP with port 443 (http://...:443) and ELB will pass ...
1
vote
0answers
356 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
346 views

IIS 6.0 redirection http->https as well as path redirection

What is trying to be achieved: Redirect any http traffic to https traffic If just the domain or root is entered, a redirection occurs to a particular path/url Example: User entered -> redirected ...
1
vote
0answers
431 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
966 views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
8 views

Squid delays logs for some CONNECT requests for Chrome clients

I'm running Squid 3.3.8 on Ubuntu 14.04.1 as a regular proxy without any SSL intercept tricks. When I visit a HTTPS site on a client using the Internet Explorer, all CONNECT requests are logged just ...
0
votes
0answers
32 views

using nodejs https module with ssl certificate proxy with nginx without adding ssl certificate in nginx

I am using nodejs https module with nginx proxy. I have multiple ssl certificate and I want to run all https sites using node without adding all certificates in nginx ssl server. Is any way to proxy ...
0
votes
0answers
34 views

Nginx: Prevent non-www address from redirecting to www?

My site uses both www and non-www addresses for our site (dcturano.com). The problem I'm having is that the server is redirecting non-www traffic to www traffic. How do I prevent this? server { ...
0
votes
0answers
32 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...
0
votes
0answers
34 views

How to Relay All HTTP Requests to Another Server

Here is the scenario I need to work with. We have devices which need to talk to web service. This web service is hosted elsewhere and is accessible via DynDNS. Due to limitations on the device and our ...
0
votes
0answers
34 views

Install certificate chain on Konica Minolta C280

I am trying to install a certificate issued by our company CA on our Konica Minolta C280 printer. We have a company root ca installed on our desktops, which has issued an intermediate certificate, ...
0
votes
0answers
19 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
0
votes
0answers
47 views

Limit Plesk Panel (11.5) to a single domain?

We have a server which uses Plesk 11.5 to manage 30+ websites. Most of these websites are e-commerce and require PCI Compliance. These sites get flagged for port 8443 having an invalid SSL certificate ...
0
votes
0answers
32 views

Apache configuration redirect using only redirect, not rewrite

PS: this is the 2nd part of the question originally posted here. I'd like to disable the HSTS header completely for specific virtual hosts. I have (per recommendation) a redirect in the 443 container ...
0
votes
0answers
49 views

Apache+subversion Kerberos Authorization Active Directory

I have configured Apache+Subversion with Kerberos. Here's my config: SSLRequireSSL DAV svn SVNPATH /var/www/svn/testrepo AuthType Kerberos Krb5KeyTab /etc/krb5.keytab KrbAuthRelams ...
0
votes
0answers
275 views

IIS Rewrite Rule in web.config to redirect HTTPS requests to HTTP

I need to redirect all https requests to http, for example, if someone visits https://www.example.com/another-page/ to http://www.example.com/another-page/ I have the following rewrite rule in my ...
0
votes
0answers
51 views

Firefox, Chrome - can't start https google services

I'm using MIKROTIK as proxy, but using Firefox or Chrome I have following problems: https google can't show almost any of pictures found https gmail stuck on progress bar before mailbox is loaded ...
0
votes
0answers
141 views

Tuning Apache KeepAlive Timeout for HTTPS

My website forces HTTPS everywhere and has an average first load time of 3-5 seconds. Thanks to caching, repeat load time is 0.8 seconds. The SSL negotiation takes 150-300ms on my server, so I want ...
0
votes
0answers
21 views

Internal IIS http to https

I have setup a test environment (all Windows Server 2012 boxes) with a Domain Controller and an Exchange Server 2013. On the Exchange Server, I have setup in IIS redirects for OWA. This works fine ...
0
votes
0answers
110 views

400 error with nginx subdomains over https

Not sure what I'm doing wrong, but I'm trying to get gunicorn/django through nginx using only https. Here is my nginx configuration: upstream app_server { server ...
0
votes
0answers
103 views

SCCM 2012 R2 and Client Certificates for HTTPS

We have a SCCM 2012 R2 site with a Management Point and a Distribution Point, all of which are using HTTPS with certificates issued by our Enterprise CA. We want to do OS Deployments (PXE for bare ...
0
votes
0answers
565 views

Error code: ERR_SPDY_PROTOCOL_ERROR

Just installed StartSSL certificate on my debian wheezy, nginx 1.6 server. Everything seem to be working fine, I can browse the website in https no problem until I try to login... IE works fine and I ...