HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

4
votes
0answers
189 views

Continuous ping on proxy preventing https requests, why?

I hope someone can help me solve this mystery. I have a small linux box which is configured as a transparent proxy on my network. I'm trying to run a script at startup that does a continuous ping to ...
3
votes
0answers
3k views

Tomcat fails to find a key entry in keystore

I am installing a SSL cert in my Tomcat server, but it fails to find the key entry in my keystore file. If I don't specify keyAlias="mykey" it shows me the following error message: ...
2
votes
0answers
125 views

replay decrypted ssl traffic with tcpreplay

I have an pcap format from some https traffic from one of my web-servers. So I can use the key from my webserver to decrypt the traffic in wireshark. The problem I'm now facing is that I can't get an ...
2
votes
0answers
581 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
2
votes
0answers
197 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
1
vote
0answers
33 views

When using HTTPS Index.html showing instead of ProxyPass reverse proxied site on Centos 7 Apache 2

The goal is that external users can connect via HTTPS, go through basic auth on Apache and then view a proxies tomcat site. I have set up a reverse proxy to a tomcat server running on the same ...
1
vote
0answers
33 views

HTTP Strict Transport Security (HSTS), Azure and HTTP Strict Transport Security IIS Module

Question: How do you properly install and configure HTTP Strict Transport Security (HSTS) in an Azure website? Apparently for IIS the method to use is to install this module: ...
1
vote
0answers
44 views

Enable header module on OS X server

I have been using OS X Server for some time now and find that any attempt I make to manually edit the apache config files is somehow thwarted. I am using server 4.1 on yosemite 10.10.3 (all up to ...
1
vote
0answers
45 views

nginx - redirect https://subdomain.example.com to https://example.com

I want to redirect https://subdomain.example.com to https://example.com. Here's what I'm trying: server { listen 443 ssl; server_name subdomain.example.com; return 301 ...
1
vote
0answers
72 views

From Http to Https NodeJS Websockets on Apache Server

Here is my problem. I have a virtual machine, on windows, the Apache server (2.4) is installed on it. The vm is on the network, so that other people can reach it directly on http://192.168.100.22 ...
1
vote
0answers
586 views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ ...
1
vote
0answers
53 views

Apache Signed certificate by know authority and client certificate self-signed

I've been investigating about this and it work with the apache SSL option SSLVerifyClient optional_no_ca I have the following virtualhost configuration. NameVirtualHost *:443 <VirtualHost ...
1
vote
0answers
35 views

SVN merge with HTTPS hangs on FreeBSD

I was asked to post it on here instead (original here) I setup SVN and Apache, and when I do a checkout it executes normally, but whenever I try to run svn merge for some reason it just hangs. Here ...
1
vote
0answers
46 views

WinRM HTTPS Connection to Windows 8 Systems

I have a couple virtual Windows 8 clients that I will be using to run some tests against a server. I set up WinRM so I can easily pull the data back from all the clients for analysis but the data ...
1
vote
0answers
127 views

Haproxy backend server down due to layer 6 invalid response failed ssl handashake?

The scenario is we have two servers which are in different network . We want to have ssl communication from client to front-end and from front-end to back-end ! the front-end able to get ssl ...
1
vote
0answers
60 views

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the ...
1
vote
0answers
69 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
1
vote
0answers
72 views

Apache2 Subdomains www https proxypass

I have a quite complicated setup. At least for me, since I'm new to apache, mod_rewrite and all that stuff. What I want is this: remove all www prefixes redirect all subdomains to https, and so, ...
1
vote
0answers
45 views

Google PageSpeed suggests compression - but my site is https

Google PageSpeed suggests to deliver some static files like e.g. JavaScript, CSS. But as our site is HTTPS only we disabled compression in our web server because of security reasons. As far as I ...
1
vote
0answers
18 views

Can mod_rewrite [P]roxy to an HTTPS url when the inbound request URL is HTTP?

I have a host (IIS6, running an implementation of mod_rewrite for windows, by a co called Micronovae. It works well) that has a site at http://some.host.com I also have another host (on Microsoft ...
1
vote
0answers
204 views

SSL error, unable to find valid certification path to requested target

I'm new to ssl so forgive me. I set up a site with ssl and all the online checks (eg. https://ssltools.websecurity.symantec.com/checker/views/certCheck.jsp) show that it is set up correctly and the ...
1
vote
0answers
469 views

Chef Issue bootstrapping windows VM using winrm via https

Chef Server(RHEL 6.5): 11.16.4 Windows endpoint: Windows 2008 The bootstrapping works fine over http (with winrm config allowUnEncrypeted = true and basic auth = true). Now we are trying same thing ...
1
vote
0answers
56 views

Mysterious Terminal Server HTTPS issue

The University I work for recently got into Terminal Servers, and one of them has been plagued by an unusual HTTPS issue where, after enough users have logged in and logged out, eventually users can ...
1
vote
0answers
2k views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
1
vote
0answers
179 views

Enabling AES 256 GCM on Windows Server 2012 R2

I'd like to enable the use of the AES 256 GCM encryption instead of the AES 256 CBC. We already have ECC certificates based on ECDSA so that pre-requisite has been fullfilled. The certificate has a ...
1
vote
0answers
1k views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
0answers
407 views

Virtual hosts with port 80 & 443 not working

I can't figure out why I can't connect to my VPS. httpd.conf: i added: Listen 80 listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:80> SSLEngine off ServerAdmin ...
1
vote
0answers
93 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
1
vote
0answers
410 views

CouchDB v1.2.0 - Timeout error on replication

Currently, I have a replication task that looks something like this: { "continuous": true, "create_target": true, "owner": "admin", "source": "https://remote/db/", "target": "db", ...
1
vote
0answers
142 views

Nginx - Adding a trailing slash to urls on HTTPS

I am using the below regex to add a trailing slash to any url that doesn't have a railing slash or ends ends with .. rewrite ^([^.]*[^/])$ $1/ permanent; This works fine for http, but when I use ...
1
vote
0answers
218 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
0answers
409 views

Console errors 'Invalid 'X-Frame-Options' of '(DENY || SAMEORIGIN)'

Site iframes are throwing Chrome console errors 'Invalid 'X-Frame-Options' header encountered when loading pages over https. The error is '(DENY || SAMEORIGIN)' is not a recognized directive. The ...
1
vote
0answers
58 views

Serving http and https on the same server with apache2

I have a server I host multiple sites on like http://this.example.com/site1, http://this.example.com/site2, http://this.example.com/site3. I am trying to add a secure site at ...
1
vote
0answers
177 views

Popup window opens that asking for username/password On Https pages

I have installed SSL certificate on my server,I am applying https on some selected pages. for this I am using "WebPageSecurity". I have set all required settings in my web.config as per below ...
1
vote
0answers
192 views

Apache: Setting up a reverse proxy configuration with SSL with url rewriting

There is a host: secure.foo.com that exposes a webservice using https I want to create a reverse proxy using Apache that maps a local http port on a server internal.bar.com to the https service ...
1
vote
0answers
33 views

What could cause a group of machines to fail loading secure web pages only when assigned certain IP addresses?

I have about 20 cloned machines running Windows XP Pro SP3. Three of the computers are experiencing an issue where clicking the 'Proceed to checkout' button from the amazon.com shopping cart causes ...
1
vote
0answers
206 views

SVN checkout returns 400 error

I'm trying to download the http://code.opencv.org/svn/opencv/trunk/ repository of all of the OpenCV source code - as specified in an OpenCV installation tutorial. In the tutorial, the repository ...
1
vote
0answers
300 views

Nexus functionality is limited after installation

I have a CentOS based server with Sonatype Nexus 2.0.4-1 installed. The issue is that there are no standard "Artifact Search", "Advanced Search", "Browse Index", "Refresh Index" Nexus features, as ...
1
vote
0answers
313 views

ELB allows unencrypted/http communication on port 443?

I was testing a configuration of AWS ELB to use for SSL termination when I came across an intermittent issue... Ocasionally, you can specify HTTP with port 443 (http://...:443) and ELB will pass ...
1
vote
0answers
484 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
370 views

IIS 6.0 redirection http->https as well as path redirection

What is trying to be achieved: Redirect any http traffic to https traffic If just the domain or root is entered, a redirection occurs to a particular path/url Example: User entered -> redirected ...
1
vote
0answers
454 views

How do I get self signed SSL certificates to work locally on Mac OSX?

I'm trying to test a local page on my local git repository. Unfortunately, the SSL certificates I installed using OpenSSL and Mod_SSL aren't seeming to work. I've worked on checking the httpd file ...
1
vote
0answers
1k views

Set up SSL/HTTPS in zend application via .htaccess

I have been battling with .htaccess rules to get my SSL setup working right for the past few days.I get a requested URL not found error whenever I try access any requests that does not do through the ...
0
votes
0answers
27 views

Haproxy Layer 4 balancing with TLS

We have ssl3 turned off in favor of TLS. Most the tutorials on https for layer4 support with haproxy, ie ssl passthrough, uses check-ssl or ssl-hello-chk. In our setup this will fail because we have ...
0
votes
0answers
12 views

ProxyPassReverse to change URL in response that has been redirected?

I've been trying to implement an Apache reverse proxy on one domain that proxies requests to a "controller" server on another domain, which, based on a single ID number passed in the requested URL, ...
0
votes
0answers
18 views

Apache redirection to domain (both Http and https)

I'm trying to redirect some urls in http and https to a new subdomain. For example: http://myurl.com/one/two/three -> http://newsubdomain.myurl.com/one/two/three https://myurl.com/one/two/three ...
0
votes
0answers
19 views

iis8.5 Not Found page, SNI and Host Headers. Refuse Connection Possible

I am using IIS8.5 to host a few internal and external sub domains. Everything is working prefect but I have one thing I would like to change and I have no idea where to start. I have set each site ...
0
votes
0answers
59 views

mod_firehose for Apache 2.2?

Can mod_firehose be made to work with Apache 2.2, or can its functionality be got in some other way? We need to record https traffic for Apache 2.2 (on a Windows 7 box) in exactly the way ...
0
votes
0answers
26 views

Can you set up a reverse proxy to forward requests based on request content and/or parameters?

I'm trying to set up a reverse proxy that forwards requests to different servers based on content in the body of the request itself. For example, if the request has a parameter 'type' = 'A', I'd like ...
0
votes
0answers
10 views

Login to apache website fails when using named host

Our issue seems to be when we log into a named sub-website in Firefox everything works as expected; There is nothing special about the login.php script it's simple enter name here, password there and ...