Questions tagged [https]

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

Filter by
Sorted by
Tagged with
1 vote
0 answers
29 views

SSL configuration issue - "SSL received a record that exceeded the maximum permissible length"

We are trying to setup SSL on our application running on Wordpress, PHP, Apache. After doing the necessary configuration changes, we get the following error on curl command - [root@www ~]# curl https:/...
user avatar
0 votes
1 answer
25 views

Can't load Web API with SSL (ERR_SSL_PROTOCOL_ERROR)

So I can't get my head around this problem, and looked everywhere on the internet but did not found any working solution. 1.1. I have an apache server running as virtual host. In the initial situation,...
user avatar
  • 1
0 votes
0 answers
21 views

nginx; how to serve some https sites but proxy unknown https sites to another nginx instance?

I have a "main" Nginx instance, that i configure manually. This one faces the internet on my home connection. It has some https sites configured that i consider important for me. Then i have ...
user avatar
-1 votes
0 answers
23 views

HTTPS certificate valid at root domain, but throws security error for SVN use

After setting up an SVN/Apache server, I've successfully gotten HTTPS enabled with a Let's Encrypt certificate. When accessing the root domain, there are no issues and the certificate is accepted by ...
user avatar
0 votes
1 answer
64 views

after applying ssl certificate, static files aren't served anymore

My config file is located in /etc/nginx/sites-enabled is called songreccs.conf and looks like this: server { server_name www.songreccs.com songreccs.com; location /static { ...
user avatar
  • 3
0 votes
0 answers
32 views

SSL not working in nginx

I'm running an Ubuntu 20.04 instance with nginx. My server block is as follows. (masked the original domain though) server { listen 80; listen [::]:80; # SSL configuration # ...
user avatar
  • 101
0 votes
0 answers
32 views

Cisco Switch - Enable Telnet using HTTP

I'm trying to automate the configuration process of a Cisco switch (SG-300). I was able to automate everything I need using telnet, but the last issue I still have is to enable telnet itself. For now ...
user avatar
  • 103
0 votes
0 answers
9 views

probleme with HTTPS and Nginx reverseproxy + Docker

I try something, but I'm not sure it's possible. I have a docker on port 8090 I have a Nginx I try to configure Nginx to display my docker on same port with https. It's possible ? Thank you
user avatar
1 vote
1 answer
39 views

Can there be a "TLS Passthrough based on SNI" version of CloudFlare's "orange-cloud"?

My understanding is that the "orange-cloud" [1] is a TLS terminating reverse proxy. Multiple upstream servers share the same Cloudflare Anycast IP. A TLS connection is formed between the ...
user avatar
0 votes
0 answers
115 views

How can I add host.docker.internal to the trusted root certificate in an Alpine Linux container?

I'm using Alpine Linux via Docker. I want to make an HTTPS connection to host.docker.internal. There is a service on the host machine that can be reached via localhost:8443 on the host machine. I want ...
user avatar
0 votes
1 answer
39 views

How does a TLS Passthrough reverse proxy based on SNI work?

There are various articles and questions explaining how to use a given reverse proxy's (e.g. nginx) implementation of this [1] [2] [3] [4], but none explain how this actually works under the hood. By &...
user avatar
1 vote
1 answer
45 views

AWS PrivateLink connection with HTTPS

I have two VPCs, a consumer VPC and a service VPC. Consumer application HAS to access the service via AWS PrivateLink and it HAS to be an HTTPS call. Here is my current setup, which works: Note that ...
user avatar
0 votes
0 answers
43 views

How to handle offline LAN self-signed SSL certificates?

I want to provide a git repo with tutorials and examples of WebRTC applications, for people who are just starting to learn and don't have any grasp at all on the technology involved. These tutorials ...
user avatar
  • 101
1 vote
1 answer
40 views

Is a valid SSL certificate important when accessing a localhost URL via SSH tunnel?

I've got a PHPMyAdmin installation set up, but accessible only via localhost. This means that to access the URL, I need to set up an SSH tunnel before I access the URL. When I do so, however, I get a ...
user avatar
  • 303
0 votes
0 answers
20 views

Http vs. Https in Stress Testing

Does anyone know if using http vs. https in a stress test like this would likely yield a huge difference? I'd personally be inclined to use https rather than http as that's more likely what my ...
user avatar
  • 99
0 votes
1 answer
55 views

Apache HTTPS not works, HTTP works

OS: Ubuntu Server 20.40. WebServer: Apache2 SSL: OpenSSL SSL Module enabled SSL files copied on server SSL site configurated (above the code) Apache Syntax: OK Firewall: disabled HTTP request works ...
user avatar
0 votes
0 answers
9 views

Kubernetes. I cannot curl https url after Kube-Proxy applies iptables rules on node. Can curl successfully prior to rules being applied

When kube-proxy iptables rules are NOT applied, I can, for example, run: curl -k https://kibana.default.svc.cluster.local:443/api/status (IP address of kibana is 10.233.74.67) But, as soon as the ...
user avatar
  • 1
1 vote
1 answer
26 views

Advice on a catch all for https incoming but no cert installed

I am trying to think of an elegant way to handle an SSL / HTTPS issue we are having. I have read THIS QUESTION but it raises a slightly larger question in my case. Say I have these domains installed ...
user avatar
  • 345
0 votes
1 answer
91 views

is it possible to use .cer file to server website without private key?

Today i imported a certificate with mmc ( certlm.msc ) without need of any private and everything is working just fine. my question is that doesn't IIS need private key to serve a https website ? How ...
user avatar
  • 54
0 votes
1 answer
105 views

www certificate not getting pulled correctly - nginx and certbot

I am using a docker stack with nginx and certbot. My domain is hosted on google domains. I want a domain to be accessible via example.tld only: redirect all http to https redirect www to non-www ...
user avatar
0 votes
0 answers
21 views

Private IP Address redirecting to DNS - content is not being loaded

I have followed below links: How do I run proper HTTPS on an Internal Network? getting Firefox/Chrome to trust your internal websites After executing steps from Second link, I am stuck at error ...
user avatar
0 votes
0 answers
34 views

How to set up a webserver and a mail server on the same network to use port 443 but on different IP addresses

Please could someone assist me with an issue I am facing running a mail server and a webserver on the same network. Please excuse the long post, however, I would like to provide as much information as ...
user avatar
1 vote
1 answer
60 views

Change served SSL certifiate dependent on client IP in Nginx

I have two SSL certificates, foo.crt and bar.crt. Both certificates use the same key, foo.key. I want my Nginx to send foo.crt as the SSL certificate when the client IP matches 192.168.1.0/24, and bar....
user avatar
  • 13
1 vote
0 answers
32 views

Is there still a need for the web applications/API to use HTTPS if the proxy server is already using it in microservices architecture?

If my proxy server already is using HTTPS/SSL, is there still any sense for my other applications to implement it too? I'm trying out microservices architecture through Docker/Kubernetes, and I am ...
user avatar
  • 129
-2 votes
1 answer
42 views

Will Disabling All Non-256-bit Cipher Suites Cause An Issue? [closed]

I want to disable some risky cipher suites (especially for TLS 1.1 and 1.0) which are 128-bit, in order to achieve a more secure server in Windows. But these cipher suites may be used by some client. ...
user avatar
  • 99
0 votes
1 answer
538 views

How To Disable Weak Cipher Suites Only For TLS 1.0 and 1.1 In Windows?

I want to disable some weak cipher suites in Windows but TLS 1.2 is not so vulnerable and I don't want to cause any other problem in the server, so I just want to disable them for TLS 1.0 and 1.1. ...
user avatar
  • 99
0 votes
0 answers
131 views

Redirect port 443 to 8080?

(note: I intentionally wrote "httpz" instead of "https" because I got an error message when trying to post the question) I have a web server (docker container) running on 8080. I ...
user avatar
  • 111
0 votes
1 answer
432 views

unable to load certificate when convert cer to pem

I am using this openssl OpenSSL 1.0.2k-fips 26 Jan 2017 command to convert cer to pem: openssl x509 -inform der -in fullchain.cer -out fullchain.pem but shows error: unable to load certificate ...
user avatar
  • 281
-3 votes
1 answer
28 views

Extend validity of SSL certificate - Any Hack [closed]

I have an absolute requirement of extending the validity of my SSL certificate. I have an SSL certificate pinned in the SDK which cannot be updated in time. This will lead to a huge business loss. Any ...
user avatar
0 votes
1 answer
69 views

How to force SSL on Nginx & Varnish

how can i redirect only to https in Nginx and varnish. I use varnish cache in port 80 and Nginx listening on 8080. Works fine in http, but i need to add SSL. my configuration is as follows server { ...
user avatar
  • 1
0 votes
1 answer
119 views

Nginx rewrite rule to make php see https scheme

I want my pho application to only see the https scheme even if the secure connection is already terminated. I have the following setup: Browser --https--> nginx --http--> nginx --> php-fpm ...
user avatar
  • 103
0 votes
0 answers
34 views

Security Headers X-XSS-Protection issue

Is there any issues coming from adding 'Strict-Transport-Security' and 'X-XSS-Protection' headers ? Header set Strict-Transport-Security "max-age=10886400; Header set X-XSS-Protection "1; ...
user avatar
0 votes
1 answer
81 views

MacOS Monterey (12.3) and Apache 2.53 https does not connect

On macOS Monterey (12.3.1) and Apache 2.53 (homebrew) I always receive (on Firefox) "Secure Connection Failed" Error code: SSL_ERROR_RX_RECORD_TOO_LONG Other browsers will not connect as ...
user avatar
  • 101
0 votes
1 answer
835 views

Docker can't pull images behind proxy server

am using docker version 20.10.14 with CentOS Linux 7, i just installed docker and set up the proxy settings in /usr/lib/systemd/system/docker.service and my proxy settings are Environment="...
user avatar
  • 1
0 votes
0 answers
71 views

How to pass https requests to http in nginx

I have a self signed certificate, I deployed my front end react app on nginx which is served by using HTTPS but front end is making call to back-end spring-boot app over HTTP and when i check inspect ...
user avatar
0 votes
0 answers
71 views

Cant handle HTTPS request to HTTP with specified port at Nginx

So I have one server. Let it be server example.com (where SSL is working good) From this server I am sending request to other server called server2.example.com (other location) I am sending such ...
user avatar
0 votes
1 answer
147 views

Nginx www does not work

I really do not know why my nginx configuration does not work for www. My configuration is: server { listen 80; server_name postimg.cz www.postimg.cz; return 301 https://$server_name$...
user avatar
  • 1
0 votes
1 answer
2k views

How to nginx + proxy_pass to docker container with ssl?

I want to serve multiple sites on my server. Each site I suppose to wrap as docker-compose build, each has its own nginx, that listen to one single port I have a site with hostname site1.com. It's ...
user avatar
0 votes
0 answers
101 views

Apache2 Default HTTPS 443 Vhost

I'm currently trying to make a default vhost for HTTPS to block traffic from unauthorized domains. However, when I define a default 443 vhost, ALL other HTTPS vhosts inherit this as well and prevents ...
user avatar
0 votes
0 answers
598 views

Nginx: Forward HTTPS traffic to a proxy server requiring authentication

I need to set up a transparent HTTP/HTTPS server (proxy X) with NGINX to proxy the traffic with the authorization needed to the proxy endpoint (proxy Y). The proxy endpoint (B) requires basic ...
user avatar
0 votes
1 answer
219 views

Can not redirect https with upstream directive

With such config a I get redirecting to google.com server { listen 80; proxy_ssl_server_name on; rewrite_log on; location / { proxy_pass https://google.com; } } but if I ...
user avatar
  • 101
0 votes
0 answers
36 views

Nginx serve mutliple services via https on different port

Web is not my field but i thought i could handle it. The purpose is quite simple: Got 3 services i want to serve from the same Virtual Machine on the same network. elastic:8881 > ssl > :8881 ...
user avatar
-1 votes
2 answers
63 views

The Importance of Paying for SSL Certificate [closed]

Is It really compulsory to pay for ssl Certificate while setting up website? What are the advantages and disadvantages? Thank you.
user avatar
0 votes
0 answers
151 views

How to find the symmetric key algorithm being used for a TLS connection in Wireshark?

I'm doing a TLS Wireshark lab and I can't find any information in Wireshark, the lab, or online how to find this answer: What symmetric key cryptography algorithm is being used by the client and ...
user avatar
0 votes
0 answers
154 views

Generated .crt file from text

I bought a SSL certificate and got these Text files. -----BEGIN CERTIFICATE----- MIIHhjCCBm6gAwIBAgIQBBHZG2IHaYx3EGHHgy1+GzANBgkqhkiG9w0BAQsFADBZ . . . STrB0u+/i8hZL9KBhMXFxhdUdcaze3xSlX6xDL+...
user avatar
0 votes
1 answer
296 views

Redirect HTTPS to HTTP for Safari User-Agents only

Yes, you read that right. I need HTTPS to HTTP for Safari only. Because all links referring to the site anywhere are HTTPS. I have a website that has an SSL certificate, and normally we force ...
user avatar
  • 1
0 votes
0 answers
20 views

Cannot GET/ Objects once domain name is enabled

By enabling sub domain to my public IP am not getting the GET respone from my backend. In my local machine once i type the URL http://35.22.12.94:3001/objects?design=ficco-desings&category=formals&...
user avatar
0 votes
1 answer
689 views

haproxy not working when upgrading to version 2.2 (reqadd doesn't exist any more)

[I erronously had posted this question on stackoverflow] On my debian buster server I had a perfecly working haproxy (v1.8), which I use for managing certificates for my web sites. haproxy listens to ...
user avatar
0 votes
0 answers
215 views

Nginx Redirect from HTTP to HTTPS works in Firefox but not in Chrome

with my Nginx configuration (see below) redirecting from http to https works fine when accessing the page (http://example.com/) with Firefox. But for some strange reason it does not work with Chrome. ...
user avatar
  • 1
0 votes
1 answer
266 views

Rejecting connections based on a pattern in nginx

in the nginx.conf I have added an if clause to filter the ssl connections based on the cn. For example map $ssl_client_s_dn $ssl_client_s_dn_cn { default ""; ~/CN=(?<CN>[^/]+)...
user avatar

1
2 3 4 5
49