HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

4
votes
0answers
5k views

Tomcat fails to find a key entry in keystore

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file. If I don't specify keyAlias="mykey" it shows me the following error message: ...
3
votes
0answers
170 views

How to reverse proxy https with lighttpd?

I want to forward (reverse proxy) requests to https://secure.mydomain.com(:443) to my internal (HTTPS-)WebServer on port 8443 using Lighttp. Environment-Infos: My WebServer is a Tomcat running on ...
3
votes
0answers
98 views

Sophos firewall default settings do not allow HTTPS from Java 6 clients

Our current (default) Sophos firewall (Apache reverse proxy) settings does not allow Java 6 clients to connect over HTTPS. The ssltest result shows that the reason is "Client does not support DH ...
2
votes
0answers
66 views

HSTS exclude specific subdomain with “includeSubdomains”

I'm using HSTS with this header on my website: Strict-Transport-Security: max-age=15768000; includeSubDomains This works as intended and forces the browser to redirect all http connections to ...
2
votes
0answers
124 views

Squid reverse proxy redirect / rewrite HTTP to HTTPS

My Squid Reverse Proxy only accepts HTTPS requests. What is a short way to redirect/rewrite a HTTP-request to https? So if the user visits http://foo.server.com he should be automatically redirected ...
2
votes
0answers
244 views

HTTP to HTTPS local proxy that can do the HTTPS connection over a proxy

Here's the deal: Our client software can only connect using http protocol, it can not do https. However, security requirements dictate end-to-end security, so we need to use https when talking to ...
2
votes
0answers
53 views

NGINX Reverse Proxy redirect settings

I have the following scenario: NGINX | | JavaEE TERMINATING | -> REVERSE PROXY -> | Application SSL (443) | HTTP | Server Reverse proxy is done by: ...
2
votes
0answers
780 views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
2
votes
0answers
193 views

From Http to Https NodeJS Websockets on Apache Server

Here is my problem. I have a virtual machine, on windows, the Apache server (2.4) is installed on it. The vm is on the network, so that other people can reach it directly on http://192.168.100.22 ...
2
votes
0answers
199 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
2
votes
0answers
862 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
2
votes
0answers
254 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
1
vote
0answers
33 views

Https: not working but :443/ work?

I don't understand (on debian) why I can access to my website using http://www.myserver.com:443/ but not directly with https://... I'm using LetsEncrypt, all my cert' are generates and works. Here my ...
1
vote
0answers
14 views

Cookie Secure Flag not persistent

I'm trying to implement a Secure flag for all cookies. I'm doing this via Headers. Here's how I did it: Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4" It ...
1
vote
0answers
21 views

HTTP/2 and SPDY running together in Apache

I have the latest Apache installed and currently support HTTP/2. Can I setup SPDY and run it together with HTTP/2? The goal is to also take advantage of the SPDY for browsers that do not support ...
1
vote
0answers
43 views

nginx SSL client certificate handshake very slow for domain and paths

I have a server with some subdomains publicly accessible while on one subdomain a client side certificate is required. Not only that, paths on that subdomain point to different applications. I.e that ...
1
vote
0answers
24 views

Hardware choosing and Bandwidth limitations on NGINX reverse proxy on a VPS?

Good afternoon friends. We are currently growing our infrastructure of a SaaS application and require 2 app dedicated servers, each running multiple instances of a nodejs application. The company ...
1
vote
0answers
50 views

Checking HTTPS setup on Apache/Nginx before using

You have just got a new HTTPS (SSL/TLS) Certificate, and what you hope is the correct Intermediate Certificates. This is setup in Apache with: SSLCertificateKeyFile /etc/ssl/www.example.com.key ...
1
vote
0answers
21 views

After changing to SSL index.php post fix is expected before server requests

I installed Mautic in an AWS server and it was working fine on the port 80. But when change to the following site configuration in mautic.conf (placed in /etc/apache2/sites-enabled/mautic.conf) to use ...
1
vote
0answers
22 views

Reverse Proxy with https redirect in Lighttpd

I've got a django application here that uses a lighttpd reverse proxy. We recently moved it behind an elastic load balancer on EC2 and I'm having trouble working out the correct config to do what I ...
1
vote
0answers
86 views

NGINX: Check if SSL (HTTPS) is available, if not, redirect to HTTP

The current config is: server { listen 80 default_server; listen [::]:80 default_server; listen 443 ssl default_server; listen [::]:443 ssl default_server; listen 192.168.0.5:80 ...
1
vote
0answers
42 views

software for sharing data through URL (HTTP/HTTPS)

do you know about software, which can provide sharing files or folders through generated URL links? Software, which I can implement on my own server? Something like guest links on Sharepoint or ...
1
vote
0answers
38 views

Enable SSL on wordpress site hosted on Azure

I have a website running on Azure and its a wordpress site. from the Azure Documentation what they say is to just copy and past the example in web.config file <?xml version="1.0" ...
1
vote
0answers
1k views

curl: (1) Protocol “https” not supported or disabled in libcurl

I've a CentOS6 vps on which O trying to access https url through curl it gives not supported error # curl https://google.com curl: (1) Protocol "https" not supported or disabled in libcurl Anyone ...
1
vote
0answers
30 views

iis 7.5 http to https redirect not working and causing an error

I have a client whom has a site configured in iis7.5 running asp.net 4.0. The site is configured with a static IP address, with a valid wildcard cert, it has headers setup as wildcard ...
1
vote
0answers
27 views

Is reverse proxy chaining possible for HTTPS?

We have a public web server which needs to receive HTTPS requests from a customer system over HTTPS: Our system <--- HTTPS Reverse Proxy <-- Customer system Unfortunately the Customer ...
1
vote
0answers
79 views

Allow insecure connection on nginx

I have a website running on nginx and with HTTPS enabled. For any http request, I redirect users to https. The problem is that some of our clients can't access the website from their work computer due ...
1
vote
0answers
34 views

How to disable SSLv3 on R-Shiny-server 1.4

First I'm quite puzzled to discover today, that after exactly one year (and one day) of POODLE attack being around, Shiny-server (installed 3 weeks ago) is still shipping with SSLv3 enabled by ...
1
vote
0answers
87 views

NGINX infinite loop when I try to redirect http to https

I'm moving my entire website from http to https Since I have a few domains, I need to redirect then to the https version of my website. The problem is that when I try to redirect the original domain ...
1
vote
0answers
174 views

Haproxy disable Secure Renegotiation

I want to disable secure renegotiation in HAproxy-1.5.2, but can not find anything about it on the official documentation: http://www.haproxy.org/download/1.5/doc/configuration.txt My SSL HAproxy ...
1
vote
0answers
29 views

Domain is forcing HTTPS automatically when accessing by HTTP

I have a project based on Nginx + Node.js. When I'm trying to access it by my domain, it automatically redirects from HTTP to HTTPS and I get a 404 because my deployment is not ready for SSL. When it ...
1
vote
0answers
44 views

Can't make SPDY work on Apache 2.2.22 (Ubuntu 12.04 server)

I'm trying to enable this apache module. I did everything this documentation from Google says: https:// developers.google.com/speed/spdy/mod_spdy/ However, if I use "SPDY indicator" chrome extension ...
1
vote
0answers
543 views

Nginx as reverse proxy for GitLab with SSL?

I have GitLab's nginx setup to listen at 127.0.0.1:8088 . Then I have a system nginx (installed via apt-get on Ubuntu) setup as reverse proxy with HTTPS: upstream gitlab { server ...
1
vote
0answers
162 views

uwsgi native https support?

I want to run my uwsgi server with https. Yes, I know it is a wrong thing to do in production. The docs clearly say: configure your keys and use --https option: ...
1
vote
0answers
166 views

Enable header module on OS X server

I have been using OS X Server for some time now and find that any attempt I make to manually edit the apache config files is somehow thwarted. I am using server 4.1 on yosemite 10.10.3 (all up to ...
1
vote
0answers
56 views

nginx - redirect https://subdomain.example.com to https://example.com

I want to redirect https://subdomain.example.com to https://example.com. Here's what I'm trying: server { listen 443 ssl; server_name subdomain.example.com; return 301 ...
1
vote
0answers
999 views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ ...
1
vote
0answers
402 views

Nginx Varnish 4.0 SSL Wordpress configuration redirects mydomain.tld to https://127.0.0.1

I have the following stack: (redirect http to https =>) https nginx -> varnish -> nginx http -> php5-fpm When I open my.url.com I get instantly redirected to https://127.0.0.1 Without varnish, ...
1
vote
0answers
127 views

Apache Signed certificate by know authority and client certificate self-signed

I've been investigating about this and it work with the apache SSL option SSLVerifyClient optional_no_ca I have the following virtualhost configuration. NameVirtualHost *:443 <VirtualHost ...
1
vote
0answers
59 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
1
vote
0answers
68 views

WinRM HTTPS Connection to Windows 8 Systems

I have a couple virtual Windows 8 clients that I will be using to run some tests against a server. I set up WinRM so I can easily pull the data back from all the clients for analysis but the data ...
1
vote
0answers
330 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
1
vote
0answers
88 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
1
vote
0answers
163 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
1
vote
0answers
167 views

Apache2 Subdomains www https proxypass

I have a quite complicated setup. At least for me, since I'm new to apache, mod_rewrite and all that stuff. What I want is this: remove all www prefixes redirect all subdomains to https, and so, ...
1
vote
0answers
115 views

Google PageSpeed suggests compression - but my site is https

Google PageSpeed suggests to deliver some static files like e.g. JavaScript, CSS. But as our site is HTTPS only we disabled compression in our web server because of security reasons. As far as I ...
1
vote
0answers
28 views

Can mod_rewrite [P]roxy to an HTTPS url when the inbound request URL is HTTP?

I have a host (IIS6, running an implementation of mod_rewrite for windows, by a co called Micronovae. It works well) that has a site at http://some.host.com I also have another host (on Microsoft ...
1
vote
0answers
333 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
0answers
697 views

Chef Issue bootstrapping windows VM using winrm via https

Chef Server(RHEL 6.5): 11.16.4 Windows endpoint: Windows 2008 The bootstrapping works fine over http (with winrm config allowUnEncrypeted = true and basic auth = true). Now we are trying same thing ...
1
vote
0answers
373 views

Enabling AES 256 GCM on Windows Server 2012 R2

I'd like to enable the use of the AES 256 GCM encryption instead of the AES 256 CBC. We already have ECC certificates based on ECDSA so that pre-requisite has been fullfilled. The certificate has a ...