HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

4
votes
0answers
5k views

Tomcat fails to find a key entry in keystore

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file. If I don't specify keyAlias="mykey" it shows me the following error message: javax.net.ssl....
3
votes
0answers
266 views

How to reverse proxy https with lighttpd?

I want to forward (reverse proxy) requests to https://secure.mydomain.com(:443) to my internal (HTTPS-)WebServer on port 8443 using Lighttp. Environment-Infos: My WebServer is a Tomcat running on ...
3
votes
0answers
109 views

Sophos firewall default settings do not allow HTTPS from Java 6 clients

Our current (default) Sophos firewall (Apache reverse proxy) settings does not allow Java 6 clients to connect over HTTPS. The ssltest result shows that the reason is "Client does not support DH ...
2
votes
0answers
27 views

Steps for setting up HTTPS using elastic beanstalk with a load balancer

I have recently used AWS elastic beanstalk to migrate my parse application server. Everything is working well with just plain HTTP, but I need more security so I've tried diving into the AWS ...
2
votes
0answers
137 views

HSTS exclude specific subdomain with “includeSubdomains”

I'm using HSTS with this header on my website: Strict-Transport-Security: max-age=15768000; includeSubDomains This works as intended and forces the browser to redirect all http connections to ...
2
votes
0answers
159 views

Squid reverse proxy redirect / rewrite HTTP to HTTPS

My Squid Reverse Proxy only accepts HTTPS requests. What is a short way to redirect/rewrite a HTTP-request to https? So if the user visits http://foo.server.com he should be automatically redirected ...
2
votes
0answers
403 views

HTTP to HTTPS local proxy that can do the HTTPS connection over a proxy

Here's the deal: Our client software can only connect using http protocol, it can not do https. However, security requirements dictate end-to-end security, so we need to use https when talking to ...
2
votes
0answers
54 views

NGINX Reverse Proxy redirect settings

I have the following scenario: NGINX | | JavaEE TERMINATING | -> REVERSE PROXY -> | Application SSL (443) | HTTP | Server Reverse proxy is done by: ...
2
votes
0answers
912 views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
2
votes
0answers
222 views

From Http to Https NodeJS Websockets on Apache Server

Here is my problem. I have a virtual machine, on windows, the Apache server (2.4) is installed on it. The vm is on the network, so that other people can reach it directly on http://192.168.100.22 (...
2
votes
0answers
210 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
2
votes
0answers
921 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
2
votes
0answers
264 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
1
vote
0answers
69 views

Squid reverse proxy with multiple SSL-certificates via SNI

Does squid Proxy Server offer the possibility to supply multiple SSL certificates to it? I have a server with various virtual machines running Apache web servers for different customers. As an ...
1
vote
0answers
34 views

Redirect IIS with multiple domains

In IIS7 there is a rule in place to redirect to HTTPS automatically that is used by our site. <rule name="Redirect to HTTPS" enabled="true" stopProcessing="false"> <match url="(.*)" />...
1
vote
0answers
63 views

haproxy with SSL in front of apache for local development

I work on a web app that regularly makes AJAX calls to a REST server that (in production) is accessed via the same domain. While developing locally, I have been redirecting REST calls to a dev server ...
1
vote
0answers
24 views

httping generates message “error shutting down ssl” with F5 HTTP endpoint

There is no failed request, but I don't know what the message error shutting down ssl means. Any idea? # httping https://ds31s3.swisscom.com PING ds31s3.swisscom.com:443 (https://ds31s3.swisscom.com):...
1
vote
0answers
55 views

Https: not working but :443/ work?

I don't understand (on debian) why I can access to my website using http://www.myserver.com:443/ but not directly with https://... I'm using LetsEncrypt, all my cert' are generates and works. Here my ...
1
vote
0answers
32 views

Cookie Secure Flag not persistent

I'm trying to implement a Secure flag for all cookies. I'm doing this via Headers. Here's how I did it: Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4" It ...
1
vote
0answers
27 views

HTTP/2 and SPDY running together in Apache

I have the latest Apache installed and currently support HTTP/2. Can I setup SPDY and run it together with HTTP/2? The goal is to also take advantage of the SPDY for browsers that do not support HTTP/...
1
vote
0answers
61 views

nginx SSL client certificate handshake very slow for domain and paths

I have a server with some subdomains publicly accessible while on one subdomain a client side certificate is required. Not only that, paths on that subdomain point to different applications. I.e that ...
1
vote
0answers
33 views

Hardware choosing and Bandwidth limitations on NGINX reverse proxy on a VPS?

Good afternoon friends. We are currently growing our infrastructure of a SaaS application and require 2 app dedicated servers, each running multiple instances of a nodejs application. The company ...
1
vote
0answers
56 views

Checking HTTPS setup on Apache/Nginx before using

You have just got a new HTTPS (SSL/TLS) Certificate, and what you hope is the correct Intermediate Certificates. This is setup in Apache with: SSLCertificateKeyFile /etc/ssl/www.example.com.key ...
1
vote
0answers
33 views

After changing to SSL index.php post fix is expected before server requests

I installed Mautic in an AWS server and it was working fine on the port 80. But when change to the following site configuration in mautic.conf (placed in /etc/apache2/sites-enabled/mautic.conf) to use ...
1
vote
0answers
35 views

Reverse Proxy with https redirect in Lighttpd

I've got a django application here that uses a lighttpd reverse proxy. We recently moved it behind an elastic load balancer on EC2 and I'm having trouble working out the correct config to do what I ...
1
vote
0answers
120 views

NGINX: Check if SSL (HTTPS) is available, if not, redirect to HTTP

The current config is: server { listen 80 default_server; listen [::]:80 default_server; listen 443 ssl default_server; listen [::]:443 ssl default_server; listen 192.168.0.5:80 default_server;...
1
vote
0answers
44 views

software for sharing data through URL (HTTP/HTTPS)

do you know about software, which can provide sharing files or folders through generated URL links? Software, which I can implement on my own server? Something like guest links on Sharepoint or ...
1
vote
0answers
46 views

Enable SSL on wordpress site hosted on Azure

I have a website running on Azure and its a wordpress site. from the Azure Documentation what they say is to just copy and past the example in web.config file <?xml version="1.0" encoding="UTF-8"?&...
1
vote
0answers
2k views

curl: (1) Protocol “https” not supported or disabled in libcurl

I've a CentOS6 vps on which O trying to access https url through curl it gives not supported error # curl https://google.com curl: (1) Protocol "https" not supported or disabled in libcurl Anyone ...
1
vote
0answers
43 views

iis 7.5 http to https redirect not working and causing an error

I have a client whom has a site configured in iis7.5 running asp.net 4.0. The site is configured with a static IP address, with a valid wildcard cert, it has headers setup as wildcard leavemanagement....
1
vote
0answers
27 views

Is reverse proxy chaining possible for HTTPS?

We have a public web server which needs to receive HTTPS requests from a customer system over HTTPS: Our system <--- HTTPS Reverse Proxy <-- Customer system Unfortunately the Customer ...
1
vote
0answers
88 views

Allow insecure connection on nginx

I have a website running on nginx and with HTTPS enabled. For any http request, I redirect users to https. The problem is that some of our clients can't access the website from their work computer due ...
1
vote
0answers
39 views

How to disable SSLv3 on R-Shiny-server 1.4

First I'm quite puzzled to discover today, that after exactly one year (and one day) of POODLE attack being around, Shiny-server (installed 3 weeks ago) is still shipping with SSLv3 enabled by default....
1
vote
0answers
106 views

NGINX infinite loop when I try to redirect http to https

I'm moving my entire website from http to https Since I have a few domains, I need to redirect then to the https version of my website. The problem is that when I try to redirect the original domain ...
1
vote
0answers
210 views

Haproxy disable Secure Renegotiation

I want to disable secure renegotiation in HAproxy-1.5.2, but can not find anything about it on the official documentation: http://www.haproxy.org/download/1.5/doc/configuration.txt My SSL HAproxy ...
1
vote
0answers
29 views

Domain is forcing HTTPS automatically when accessing by HTTP

I have a project based on Nginx + Node.js. When I'm trying to access it by my domain, it automatically redirects from HTTP to HTTPS and I get a 404 because my deployment is not ready for SSL. When it ...
1
vote
0answers
46 views

Can't make SPDY work on Apache 2.2.22 (Ubuntu 12.04 server)

I'm trying to enable this apache module. I did everything this documentation from Google says: https:// developers.google.com/speed/spdy/mod_spdy/ However, if I use "SPDY indicator" chrome extension ...
1
vote
0answers
622 views

Nginx as reverse proxy for GitLab with SSL?

I have GitLab's nginx setup to listen at 127.0.0.1:8088 . Then I have a system nginx (installed via apt-get on Ubuntu) setup as reverse proxy with HTTPS: upstream gitlab { server ...
1
vote
0answers
87 views

nginx http -> https redirect adding extra comma with the host name

I have a server that should always serve https and I try to make nginx automatically redirect from http to https. reading other questions on this subject here, I wrote the following config: server { ...
1
vote
0answers
202 views

uwsgi native https support?

I want to run my uwsgi server with https. Yes, I know it is a wrong thing to do in production. The docs clearly say: configure your keys and use --https option: http://uwsgi-docs.readthedocs.org/en/...
1
vote
0answers
192 views

Enable header module on OS X server

I have been using OS X Server for some time now and find that any attempt I make to manually edit the apache config files is somehow thwarted. I am using server 4.1 on yosemite 10.10.3 (all up to date)...
1
vote
0answers
57 views

nginx - redirect https://subdomain.example.com to https://example.com

I want to redirect https://subdomain.example.com to https://example.com. Here's what I'm trying: server { listen 443 ssl; server_name subdomain.example.com; return 301 $scheme://example.com$...
1
vote
0answers
1k views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ --disable-dependency-...
1
vote
0answers
416 views

Nginx Varnish 4.0 SSL Wordpress configuration redirects mydomain.tld to https://127.0.0.1

I have the following stack: (redirect http to https =>) https nginx -> varnish -> nginx http -> php5-fpm When I open my.url.com I get instantly redirected to https://127.0.0.1 Without varnish, ...
1
vote
0answers
134 views

Apache Signed certificate by know authority and client certificate self-signed

I've been investigating about this and it work with the apache SSL option SSLVerifyClient optional_no_ca I have the following virtualhost configuration. NameVirtualHost *:443 <VirtualHost *:...
1
vote
0answers
60 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
1
vote
0answers
75 views

WinRM HTTPS Connection to Windows 8 Systems

I have a couple virtual Windows 8 clients that I will be using to run some tests against a server. I set up WinRM so I can easily pull the data back from all the clients for analysis but the data ...
1
vote
0answers
391 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
1
vote
0answers
92 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
1
vote
0answers
186 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...