HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

3
votes
0answers
167 views

Continuous ping on proxy preventing https requests, why?

I hope someone can help me solve this mystery. I have a small linux box which is configured as a transparent proxy on my network. I'm trying to run a script at startup that does a continuous ping to ...
2
votes
0answers
821 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
2
votes
0answers
111 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
2
votes
0answers
508 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
2
votes
0answers
166 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
2k views

Tomcat fails to find a key entry in keystore

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file. If I don't specify keyAlias="mykey" it shows me the following error message: ...
1
vote
0answers
11 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
1
vote
0answers
23 views

WinRM HTTPS Connection to Windows 8 Systems

I have a couple virtual Windows 8 clients that I will be using to run some tests against a server. I set up WinRM so I can easily pull the data back from all the clients for analysis but the data ...
1
vote
0answers
56 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
1
vote
0answers
44 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
1
vote
0answers
44 views

Apache2 Subdomains www https proxypass

I have a quite complicated setup. At least for me, since I'm new to apache, mod_rewrite and all that stuff. What I want is this: remove all www prefixes redirect all subdomains to https, and so, ...
1
vote
0answers
31 views

Google PageSpeed suggests compression - but my site is https

Google PageSpeed suggests to deliver some static files like e.g. JavaScript, CSS. But as our site is HTTPS only we disabled compression in our web server because of security reasons. As far as I ...
1
vote
0answers
11 views

Can mod_rewrite [P]roxy to an HTTPS url when the inbound request URL is HTTP?

I have a host (IIS6, running an implementation of mod_rewrite for windows, by a co called Micronovae. It works well) that has a site at http://some.host.com I also have another host (on Microsoft ...
1
vote
0answers
135 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
0answers
39 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
1
vote
0answers
1k views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
1
vote
0answers
113 views

curl 7.21 does not correctly call a host with a host header on https

We found out that calling a host like following using curl 7.21 or 7.24 does produce an error in the apache config (we have multiple SSL Vhosts!). Whereas the same command runs smooth with curl 7.34 ...
1
vote
0answers
122 views

Enabling AES 256 GCM on Windows Server 2012 R2

I'd like to enable the use of the AES 256 GCM encryption instead of the AES 256 CBC. We already have ECC certificates based on ECDSA so that pre-requisite has been fullfilled. The certificate has a ...
1
vote
0answers
928 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
363 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
1
vote
0answers
75 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
1
vote
0answers
343 views

CouchDB v1.2.0 - Timeout error on replication

Currently, I have a replication task that looks something like this: { "continuous": true, "create_target": true, "owner": "admin", "source": "https://remote/db/", "target": "db", ...
1
vote
0answers
124 views

Nginx - Adding a trailing slash to urls on HTTPS

I am using the below regex to add a trailing slash to any url that doesn't have a railing slash or ends ends with .. rewrite ^([^.]*[^/])$ $1/ permanent; This works fine for http, but when I use ...
1
vote
0answers
195 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
0answers
346 views

Console errors 'Invalid 'X-Frame-Options' of '(DENY || SAMEORIGIN)'

Site iframes are throwing Chrome console errors 'Invalid 'X-Frame-Options' header encountered when loading pages over https. The error is '(DENY || SAMEORIGIN)' is not a recognized directive. The ...
1
vote
0answers
58 views

Serving http and https on the same server with apache2

I have a server I host multiple sites on like http://this.example.com/site1, http://this.example.com/site2, http://this.example.com/site3. I am trying to add a secure site at ...
1
vote
0answers
151 views

Popup window opens that asking for username/password On Https pages

I have installed SSL certificate on my server,I am applying https on some selected pages. for this I am using "WebPageSecurity". I have set all required settings in my web.config as per below ...
1
vote
0answers
180 views

Apache: Setting up a reverse proxy configuration with SSL with url rewriting

There is a host: secure.foo.com that exposes a webservice using https I want to create a reverse proxy using Apache that maps a local http port on a server internal.bar.com to the https service ...
1
vote
0answers
32 views

What could cause a group of machines to fail loading secure web pages only when assigned certain IP addresses?

I have about 20 cloned machines running Windows XP Pro SP3. Three of the computers are experiencing an issue where clicking the 'Proceed to checkout' button from the amazon.com shopping cart causes ...
1
vote
0answers
185 views

SVN checkout returns 400 error

I'm trying to download the http://code.opencv.org/svn/opencv/trunk/ repository of all of the OpenCV source code - as specified in an OpenCV installation tutorial. In the tutorial, the repository ...
1
vote
0answers
279 views

Nexus functionality is limited after installation

I have a CentOS based server with Sonatype Nexus 2.0.4-1 installed. The issue is that there are no standard "Artifact Search", "Advanced Search", "Browse Index", "Refresh Index" Nexus features, as ...
1
vote
0answers
301 views

ELB allows unencrypted/http communication on port 443?

I was testing a configuration of AWS ELB to use for SSL termination when I came across an intermittent issue... Ocasionally, you can specify HTTP with port 443 (http://...:443) and ELB will pass ...
1
vote
0answers
410 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
356 views

IIS 6.0 redirection http->https as well as path redirection

What is trying to be achieved: Redirect any http traffic to https traffic If just the domain or root is entered, a redirection occurs to a particular path/url Example: User entered -> redirected ...
1
vote
0answers
442 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
1k views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
16 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...
0
votes
0answers
26 views

RedHat 6.6, Apache 2.2.15 and Varnish 4.0.3: Status Code 403 Forbidden on HTTPS/SSL configuration

I'm trying to configure Varnish to work with my SSL Apache configuration. Here's an extract of my httpd.conf file: Listen 8080 ExtendedStatus On NameVirtualHost 192.168.xxx.123:8080 Then I have ...
0
votes
0answers
15 views

HTTPS Config for symfony2

I have followed this tutorial for setting up https on an ubuntu server: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 I have ended up ...
0
votes
0answers
31 views

Squid: bypass url_rewrite_program when request is https

I have a url rewriter working in squid currently. The problem is that, while it works fine for HTTP, HTTPS requests obviously don't work, even when rewritten with the same URL (because my server would ...
0
votes
0answers
26 views

Rewriting .htaccess for https on subdomain

I'm currently hosting subdomain dev.example.com from a dev subfolder and using this .htaccess rules: RewriteEngine on RewriteCond %{HTTP_HOST} ^(www.)?dev.example.com$ RewriteCond %{REQUEST_URI} ...
0
votes
0answers
15 views

Automatic LAN authentication for HTTPS/HTTP sevice via Proxy

This is my situation: I have a LAN in my office that I want to connect entirely to an internet server via HTTPS. I want to log all the LAN's host injecting the session cookie in the header of ...
0
votes
0answers
19 views

Client getting HTTP response 502 Invalid HTTP Response over https

We have a web application written in .NET C# hosted in IIS 7. The client side is written in GWT (Javascript) and the application uses JSON as data transport. The site is accessible over https. We ...
0
votes
0answers
28 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
0
votes
0answers
25 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
0answers
46 views

IIS 8.5 reverse proxy https to http

I have IIS 8.5 using url rewrites to handle requests from example.domain.com:80 to a process serving content on port 8080, this works fine over normal http. All content is served fine. I'd like to be ...
0
votes
0answers
34 views

Doku wiki cannot connect to fast cgi behind ngnix

I'm trying to configure dokuwiki with ngnix. I'm using the https setup: server { server_name wiki.example.co; root /var/www/dokuwiki; index doku.php; listen 443 ssl; keepalive_requests 10; ...
0
votes
0answers
44 views

IIS 8.5 + WCF + SSL and local hostname

After setting up my Windows server, I am able to connect and view my WSDL via HTTP. I am also able to view my WSDL via HTTPS. However inside the HTTPS (and only for HTTPS) WSDL, the hostname is ...
0
votes
0answers
29 views

HTTPS Push on redmine_git_hosting

This is the set up: Ruby 1.9 Rails 3.2 Redmine 2.6.1 jbox's redmine_git_hosting plugin Trying to use git repo through HTTPS. Clone works fine. Push starts and hangs at Counting objects: 3, done. ...
0
votes
0answers
189 views

wordpress 4.1 force http intp https with .htaccess

I would like to force https with correct Comodo Certificate, in the website www.cabdrome.com with .htaccess (and not only from php). My webserver suggest to use these row to force HTTPS for an entire ...