1
vote
1answer
69 views

HTTPS reverse proxy using apache

I am using this apache configuration to set up a reverse proxy to a process running on the same machine, on port 8443, <Directory "/var/www/html"> Options +FollowSymLinks RewriteEngine ...
0
votes
2answers
128 views

Is the danger of the heartbleed bug worse than using non-ssl connections?

Trying to understand everything while reading http://heartbleed.com/ This sentence Leaked secret keys allows the attacker to decrypt any past and future traffic to the protected services and to ...
7
votes
3answers
335 views

Upgrade HTTP connection to SSL/TLS

I currently have a server which automatically redirects all HTTP requests to the equivalent HTTPS site. The problem is that is seems like some browsers do not accept the SSL certificate (StartSSL.com) ...
2
votes
2answers
193 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
1
vote
0answers
488 views

How to have Jetty redirect http to https on the same port?

This question is related to How to have Jetty redirect http to https and Jetty 9 - redirect http to https but not answered in either location. Basically, we run our app at some port, say 8085. We ...
1
vote
2answers
82 views

nginx ssl virt host issue - site won't load

I have configured nginx for port 80 and 443, with 443 containing an ssl cert configuration. When I restart nginx, no errors occur, so I don't believe it's a cert issue, but of course I could be ...
2
votes
1answer
122 views

SSL/TLS cert: Get alternative name to work with LAN IP

I have created my own CA and imported its root certificate on my devices. I use a signed SSL certificate to provide myself with remote access to my NAS. When I access my NAS over the proper URL (e.g. ...
0
votes
0answers
72 views

Random Switch from HTTP to HTTPS

For quiet sometime I've been dealing with a random switch from HTTP to HTTPS, at times it vanishes after a few attempts to remove the https from the url, otherwise I have to clear my cache to be ...
154
votes
11answers
26k views

Is it bad to redirect http to https?

I just installed an SSL Certificate on my server. I use a web hosting panel called ZPanel that is an open source project. It then set up a redirect for all traffic on my domain on Port 80 to ...
0
votes
1answer
41 views

Serving image content over https, must encryption strength match that of the main website?

Im looking at migrating my website to https throughout. I have a server responsible for the HTML/PHP, and 4 other servers which serve image content Now clearly all the image servers need to be https ...
0
votes
1answer
90 views

apache2 mod ssl does not respond to wan request

WAN =====> router (interface WAN1 setup with my public ip) ==> NAT incoming 443 connection to ====> Apache2 Web server apache2 is configured with one virtual host on port listening on mysite.com on ...
0
votes
0answers
21 views

Mac Server & Ruby SSL help needed

I need some advice on a potential problem i face, relating to a Mac server & Ruby on Rails. We have a mac server (xserve running tiger) running Ruby, Apache (httpd?) and mongrel to provide a ...
0
votes
0answers
31 views

I believe this is preventing me from using SSL on SVN

I cannot use SSL for Subversion (Apache) on port 443, so I listed my URLReservations and I found this: Reserved URL : https://+:443/sra_{BA235980-CD49-458b-9E23-C84EE0ADCD75}/ User: ...
1
vote
1answer
173 views

Jetty 9 - redirect http to https

I'd like to force use of https in Jetty 9. Apparently: <Set name="confidentialPort">443</Set> no longer works in jetty 9. How should I do it properly?
0
votes
1answer
270 views

WD Sentinel DX 4000 Remote Web Access requires port blocked by ISP. Is it possible to change the default ports?

WD Sentinel DX 4000 Remote Web Access requires port blocked by ISP. Is it possible to change the default ports? The ports required are 80 for HTTP, and 443 for HTTPS. I can RDP into the server ...
-1
votes
1answer
84 views

How to set up https only on one directory of VirualHost

I have VPS with several sites and applications, and I want to run MySQL administration tool over https to avoid possibility of man-in-the-middle attack, since I often have to use mysql root password. ...
1
vote
1answer
938 views

Apache, ISPConfig3 & https to http redirection bug

I'm having a curious problem. Since my server got no SSL certificate and I want to avoid the ugly "This site is unsecure" warning, I decided to redirect https to http. I have my website, lets say ...
0
votes
2answers
273 views

Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?

I have read, namely on Rackspace, that one should not use SSL termination for sensitive information (search the page for "SSL Termination should not be used"). Firstly, why would that be the case. ...
3
votes
1answer
367 views

Apache AB (ApacheBench) : -no-check-certificate option available?

It seems there is no option to avoid this error : "Verify return code: 20 (unable to get local issuer certificate)". Is there a way to avoid issuer ssl check with AB (like wget's -no-check-certificate ...
1
vote
2answers
78 views

Interim way to handle https requests while SSL certificate is being arranged?

What can I do to handle https requests while an SSL certicate is being arranged? The https requests are being made from a desktop app so there are no browsers involved. Are there free certs I can ...
-2
votes
1answer
176 views

IIS - https:// works while http://host:443 doesn't

This is my site: http://scyk.pl When you go https://scyk.pl Everything is ok, but when you go http://scyk.pl:443 Connection is timing out. I am running IIS7, today I configured ssl, and I ...
2
votes
1answer
94 views

Can I turn on HSTS for 1 subdomain

I would like to enforce HSTS for only 1 subdomain, but not the whole domain, is this possible ? xxx.yyy.com -> HSTS on zzz.yyy.com -> HSTS off yyy.com -> HSTS off
0
votes
1answer
98 views

Ngninx HTTP Speed vs. HTTPS Speed

I installed a testsetup to find the impact of ssl on nginx performance (requests per second) I don't understand a behaviour with the Testsetup I have here. The setup: a nearly naked Ubuntu 12.04 ...
-2
votes
1answer
51 views

http / https / SSL [closed]

let's say I got a domain which is www.foobar.com and if I try to visit my site using https://www.foobar.com I got a message like "This Connection is Untrusted". and I have created a name base ...
2
votes
1answer
798 views

url request aborted http traffic apache

I'm having problem in our extjs php application. We have two server and there is a load balancing (NLB) in there working in a round robin way . While using the system the user is having some problems ...
0
votes
2answers
148 views

Apache not responding after SSL handshake

Sometimes on my CentOS servers with Apache 2 + mod_ssl, Apache stops responding to requests made through HTTPS. The SSL connection and handshake is successfull (I tested it with openssl s_client), but ...
-1
votes
1answer
101 views

HTTPS and HTTP folder setup? [closed]

I've done some basic HTTPS sites on my shared hosting, but in my hosting provider the folders in filesystem are different for SSL and the regular website. Is this an option, or is it required for the ...
0
votes
0answers
205 views

standalone https as http reverse proxy

I want to do this: HTTP client -> [proxy] -> HTTPS server. Possible? But I want it as a command line program that turns a port on localhost into an HTTP listener for a remote HTTPS server, so ...
1
vote
0answers
68 views

Apache not sending headers on certain SSL errors

If I make a http:// request over port 443 on our server, Apache is sending a plaintext error page with no headers, which most implementations of the protocol will interpret as a 200/ As far as I can ...
4
votes
1answer
386 views

Apache won't upgrade connection to TLS

I have written a IPP server in PHP running under Apache. With the standard IPP clients it works just fine. But when I try to print from an iOS device the connections breaks when the client tries to ...
3
votes
1answer
2k views

How do I set up lighttpd for x.509 client certificate authentication

So far I've had HTTPS working for a long time, so I don't think there are any trouble with the server certificates. Now I tried to add this to lighttpd.conf: ssl.engine = "enable" ...
0
votes
1answer
1k views

wampserver2.2 ssl - how to make both http and https work

I followed this tutorial install SSL http://guides.jlbn.net/setssl/setssl1.html I setup up to localhost after the configuration, I able to access HTTPS (https:// localhost/) however, when I want to ...
0
votes
5answers
182 views

Controlling access to my API using SSH public key (not SSL) [closed]

I have the challenge of implementing an API to be consumed by relatively non-technical clients -- pasting some sample code into their WordPress or homegrown PHP site is probably as much as we can ask. ...
0
votes
1answer
147 views

How do http proxies determine https traffic with a single port?

If a proxy receives the tcp packet, then the destination ip address and port are that of the proxy. In that case, I imagine the only way a proxy can still resolve the intended destination is either ...
1
vote
1answer
376 views

Configure Apache2.2 as http to https encrypter/converter

I am using Apache 2.2 on SUSE 10 with mod_ssl. My problem: I want to connect a client(supporting only http) to a Server(supporting only HTTPS). So I thought of deploying Apache as a proxy to convert ...
0
votes
2answers
211 views

Trying to set up SSL for a Ruby on Rails app, mac Lion says ports 80 and 443 are already in use.. how do I debug / solve?

In the above picture is my console output which occurs when I run sudo /usr/sbin/apachectl restart the console doesn't have any messages of syntax errors or anything when I manually start and ...
3
votes
2answers
123 views

Force SSL for IIS 6

What is the best way to force HTTP requests to HTTPS requests on IIS 6? For example, I have both a directory and a whole site that I need to force HTTPS on for two different servers. What is the ...
-2
votes
1answer
663 views

https does not work externally , but http works [closed]

I have an website hosted on IIS 7 as http://mywebsite.com. Works fine and publicly accessible. I now created a https://mywebsite.com/newapplication with self sign certificate. I can access the ...
1
vote
3answers
263 views

Problem with SSL and hosting provider

My website is hosted on hosting24.com*, which, at the time I purchased their service, seemed like a good enough host. I was (I hope) to be proved wrong. Bascially, they are saying that You need a ...
5
votes
1answer
2k views

Serve http (port 80) and https (port 443) on same VirtualHost

I need to setup my VirtualHost on Apache to serve on both http and https (using standard ports) If I enable the SSL Engine (as per below) - I get an error when on port 80. The reason is, parts of ...
1
vote
2answers
1k views

SVN + HTTPS = Could not read status line: connection was closed by server

I have a problem with svn related with https, but with http it works. Here is the problem: I can Checkout a repo in our SVN-Server, but I canĀ“t commit it, I get following error: Commit Commit ...
3
votes
2answers
78 views

how to sign web pages

using https for websites ensures that the communication is encrypted and comes from and goes to the right server. BUT https is really slow compared to http, it also breaks the http cache protocol. ...
2
votes
1answer
232 views

Should I use HTTP code 301 or 426 on port 80 of a HTTPS only server?

When a user hits my SSL/TLS only server at port 80, should I advertise Upgrade Required (426) or redirect with Moved Permanently (301)? What are the drawbacks and benefits of each approach? As far ...
0
votes
1answer
253 views

Why does my IIS6 web server return a 301-moved permanently when it receives a https request?

I did not set the server up so there is probably a setting that I'm missing. My server has a SSL cert installed and it appears to be configured to accept secure connections. However, whenever a https ...
1
vote
1answer
498 views

ssl access from non-root users

For security reasons i'm running fastcgi php as non-privileged user "user", but looks like running php as different users provide different abilities, I have strange issue with php setup: ...
0
votes
1answer
470 views

Protocol switching with reverse proxy and application server with static links

This makes me really a headache! At first a schema that explains the matter much more efficient: ------WWW / Internet--||-------------Intranet--------------- +----------+ ...
2
votes
3answers
556 views

static page instead of the default “ssl_error_handshake_failure_alert”

I want to create a static page instead of the default "ssl_error_handshake_failure_alert" page when an error occurs, for example when the client do not send any certificate. how can i do this? any ...
0
votes
2answers
177 views

Last (I think and hope) problems configuring SSL certificate with Apache and VirtualHosts

Finally I set apache2 to get a single certificate for all subdomains. [...] # Go ahead and accept connections for these vhosts # from non-SNI clients SSLStrictSNIVHostCheck off # Apache setup ...
0
votes
1answer
95 views

Last (I think and hope) problems configuring SSL certificate with Apache and VirtualHosts [duplicate]

Possible Duplicate: Last (I think and hope) problems configuring SSL certificate with Apache and VirtualHosts Finally I set apache2 to get a single certificate for all subdomains. [...] ...
1
vote
6answers
926 views

Best practices for keeping a portion of website under https & under http for the rest

I have certain portion of my site to be behind SSL which is reserved for registered users & want rest of the site which is open to public to be served by just http. Currently it is set up so that ...