HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

4
votes
0answers
9k views

Configure Squid as an HTTPS forward proxy?

Here's some background about my problem: I have a web service running on Heroku, with a dynamic IP address. Static IPs on Heroku are not an option. I need to connect to an external web service which ...
3
votes
0answers
161 views

Continuous ping on proxy preventing https requests, why?

I hope someone can help me solve this mystery. I have a small linux box which is configured as a transparent proxy on my network. I'm trying to run a script at startup that does a continuous ping to ...
2
votes
0answers
280 views

How to provide external access to only the Git projects (clone/pull/push) of an internal GitLab deployment

We have set-up a GitLab server (GitLab 7.0 Community Edition). It is up and running and our colleagues can use it within the LAN (the IP address and Host are only visible from the LAN). Some of the ...
2
votes
0answers
102 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
2
votes
0answers
458 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
2
votes
0answers
157 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
2k views

Tomcat fails to find a key entry in keystore

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file. If I don't specify keyAlias="mykey" it shows me the following error message: ...
1
vote
0answers
28 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
1
vote
0answers
35 views

Apache2 Subdomains www https proxypass

I have a quite complicated setup. At least for me, since I'm new to apache, mod_rewrite and all that stuff. What I want is this: remove all www prefixes redirect all subdomains to https, and so, ...
1
vote
0answers
19 views

Google PageSpeed suggests compression - but my site is https

Google PageSpeed suggests to deliver some static files like e.g. JavaScript, CSS. But as our site is HTTPS only we disabled compression in our web server because of security reasons. As far as I ...
1
vote
0answers
8 views

Can mod_rewrite [P]roxy to an HTTPS url when the inbound request URL is HTTP?

I have a host (IIS6, running an implementation of mod_rewrite for windows, by a co called Micronovae. It works well) that has a site at http://some.host.com I also have another host (on Microsoft ...
1
vote
0answers
80 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
0answers
35 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
1
vote
0answers
826 views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
1
vote
0answers
72 views

curl 7.21 does not correctly call a host with a host header on https

We found out that calling a host like following using curl 7.21 or 7.24 does produce an error in the apache config (we have multiple SSL Vhosts!). Whereas the same command runs smooth with curl 7.34 ...
1
vote
0answers
112 views

Enabling AES 256 GCM on Windows Server 2012 R2

I'd like to enable the use of the AES 256 GCM encryption instead of the AES 256 CBC. We already have ECC certificates based on ECDSA so that pre-requisite has been fullfilled. The certificate has a ...
1
vote
0answers
691 views

SNI error over SSL on some Android devices

I am getting an SNI error: Hostname X provided via SNI, but no hostname provided in HTTP request On some Android phones when making SSL requests to my domain. This is despite ensuring that the Host ...
1
vote
0answers
866 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
346 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
1
vote
0answers
57 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
1
vote
0answers
326 views

CouchDB v1.2.0 - Timeout error on replication

Currently, I have a replication task that looks something like this: { "continuous": true, "create_target": true, "owner": "admin", "source": "https://remote/db/", "target": "db", ...
1
vote
0answers
120 views

Nginx - Adding a trailing slash to urls on HTTPS

I am using the below regex to add a trailing slash to any url that doesn't have a railing slash or ends ends with .. rewrite ^([^.]*[^/])$ $1/ permanent; This works fine for http, but when I use ...
1
vote
0answers
188 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
0answers
330 views

Console errors 'Invalid 'X-Frame-Options' of '(DENY || SAMEORIGIN)'

Site iframes are throwing Chrome console errors 'Invalid 'X-Frame-Options' header encountered when loading pages over https. The error is '(DENY || SAMEORIGIN)' is not a recognized directive. The ...
1
vote
0answers
57 views

Serving http and https on the same server with apache2

I have a server I host multiple sites on like http://this.example.com/site1, http://this.example.com/site2, http://this.example.com/site3. I am trying to add a secure site at ...
1
vote
0answers
143 views

Popup window opens that asking for username/password On Https pages

I have installed SSL certificate on my server,I am applying https on some selected pages. for this I am using "WebPageSecurity". I have set all required settings in my web.config as per below ...
1
vote
0answers
167 views

Apache: Setting up a reverse proxy configuration with SSL with url rewriting

There is a host: secure.foo.com that exposes a webservice using https I want to create a reverse proxy using Apache that maps a local http port on a server internal.bar.com to the https service ...
1
vote
0answers
32 views

What could cause a group of machines to fail loading secure web pages only when assigned certain IP addresses?

I have about 20 cloned machines running Windows XP Pro SP3. Three of the computers are experiencing an issue where clicking the 'Proceed to checkout' button from the amazon.com shopping cart causes ...
1
vote
0answers
175 views

SVN checkout returns 400 error

I'm trying to download the http://code.opencv.org/svn/opencv/trunk/ repository of all of the OpenCV source code - as specified in an OpenCV installation tutorial. In the tutorial, the repository ...
1
vote
0answers
272 views

Nexus functionality is limited after installation

I have a CentOS based server with Sonatype Nexus 2.0.4-1 installed. The issue is that there are no standard "Artifact Search", "Advanced Search", "Browse Index", "Refresh Index" Nexus features, as ...
1
vote
0answers
289 views

ELB allows unencrypted/http communication on port 443?

I was testing a configuration of AWS ELB to use for SSL termination when I came across an intermittent issue... Ocasionally, you can specify HTTP with port 443 (http://...:443) and ELB will pass ...
1
vote
0answers
381 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
352 views

IIS 6.0 redirection http->https as well as path redirection

What is trying to be achieved: Redirect any http traffic to https traffic If just the domain or root is entered, a redirection occurs to a particular path/url Example: User entered -> redirected ...
1
vote
0answers
440 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
992 views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
4 views

What is the easiest way to programmatically determine if a website uses HTTPS?

I'd like to build a script of some kind that can tell if a website uses https or not. What is the easiest, most straightforward way to programmatically determine this?
0
votes
0answers
8 views

Client getting HTTP response 502 Invalid HTTP Response over https

We have a web application written in .NET C# hosted in IIS 7. The client side is written in GWT (Javascript) and the application uses JSON as data transport. The site is accessible over https. We ...
0
votes
0answers
20 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
0
votes
0answers
13 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
0answers
26 views

IIS 8.5 reverse proxy https to http

I have IIS 8.5 using url rewrites to handle requests from example.domain.com:80 to a process serving content on port 8080, this works fine over normal http. All content is served fine. I'd like to be ...
0
votes
0answers
24 views

Doku wiki cannot connect to fast cgi behind ngnix

I'm trying to configure dokuwiki with ngnix. I'm using the https setup: server { server_name wiki.example.co; root /var/www/dokuwiki; index doku.php; listen 443 ssl; keepalive_requests 10; ...
0
votes
0answers
21 views

IIS 8.5 + WCF + SSL and local hostname

After setting up my Windows server, I am able to connect and view my WSDL via HTTP. I am also able to view my WSDL via HTTPS. However inside the HTTPS (and only for HTTPS) WSDL, the hostname is ...
0
votes
0answers
17 views

HTTPS Push on redmine_git_hosting

This is the set up: Ruby 1.9 Rails 3.2 Redmine 2.6.1 jbox's redmine_git_hosting plugin Trying to use git repo through HTTPS. Clone works fine. Push starts and hangs at Counting objects: 3, done. ...
0
votes
0answers
136 views

wordpress 4.1 force http intp https with .htaccess

I would like to force https with correct Comodo Certificate, in the website www.cabdrome.com with .htaccess (and not only from php). My webserver suggest to use these row to force HTTPS for an entire ...
0
votes
0answers
217 views

Chef Issue bootstrapping windows VM using winrm via https

Chef Server(RHEL 6.5): 11.16.4 Windows endpoint: Windows 2008 The bootstrapping works fine over http (with winrm config allowUnEncrypeted = true and basic auth = true). Now we are trying same thing ...
0
votes
0answers
42 views

Squid delays logs for some CONNECT requests for Chrome clients

I'm running Squid 3.3.8 on Ubuntu 14.04.1 as a regular proxy without any SSL intercept tricks. When I visit a HTTPS site on a client using the Internet Explorer, all CONNECT requests are logged just ...
0
votes
0answers
195 views

using nodejs https module with ssl certificate proxy with nginx without adding ssl certificate in nginx

I am using nodejs https module with nginx proxy. I have multiple ssl certificate and I want to run all https sites using node without adding all certificates in nginx ssl server. Is any way to proxy ...
0
votes
0answers
47 views

Nginx: Prevent non-www address from redirecting to www?

My site uses both www and non-www addresses for our site (dcturano.com). The problem I'm having is that the server is redirecting non-www traffic to www traffic. How do I prevent this? server { ...
0
votes
0answers
64 views

Error when trying to force Glassfish to use HTTPS instead of HTTP

I am developing a JavaEE applicaction using Glassfish as server. I would like to force http connections to https. I have added to following code to web.xml, but when I run the application I have a ...
0
votes
0answers
55 views

How to Relay All HTTP Requests to Another Server

Here is the scenario I need to work with. We have devices which need to talk to web service. This web service is hosted elsewhere and is accessible via DynDNS. Due to limitations on the device and our ...