All about programs and services that use HTTPS.

learn more… | top users | synonyms

16
votes
4answers
20k views

Most straightforward way of getting a raw, unparsed HTTPS response

What would be the most straightforward way of making a GET request to a url over HTTPS, and getting the raw, unparsed response? Could this be achieved with curl? If so, what options would you need to ...
11
votes
4answers
6k views

Why there is no https transport for debian apt tool?

With all paranoia that has come with NSA revelations and everything, I'm wondering why debian package installation mechanism does not support HTTPS for its transport, let alone using it by default. I ...
10
votes
1answer
2k views

apt-get fails: The method driver /usr/lib/apt/methods/https could not be found

I tried to update my OS Debian jessie using the terminal and i get an error : “E: The method driver /usr/lib/apt/methods/https could not be found.” error? My sources.list : deb http://httpredir....
9
votes
2answers
5k views

What tool can I use to sniff HTTP/HTTPS traffic?

I'm looking for a command line tool that can intercept HTTP/HTTPS requests, extract information such as: (content, destination, etc.), perform various analysis tasks, and finally determine if the ...
5
votes
2answers
384 views

Make vim / curl recognize https:// links

I recently noticed vim/vimdiff can open links (using curl, it seems), which is an awesome feature. I wanted to use it today, like this: vimdiff deps https://raw.github.com/symfony/symfony-standard/v2....
5
votes
1answer
450 views

Why doesn't GCM HTTPS work with nginx?

Since these two are using GCM (Galois/Counter Mode): www.ssllabs.com: ECDHE-RSA-AES256-GCM-SHA384 www.google.com: ECDHE-RSA-AES128-GCM-SHA256 We wanted to make our webserver's HTTPS connection ...
4
votes
5answers
3k views

Download HTTPS website available only through username and password with wget?

I'm trying to recursively download website which is normally available only when you login. I have valid username and password, but the problem is that I need to login through web interface, so using ...
4
votes
2answers
6k views

Untrusted package apt-transport-https

I am using Debian wheezy and I would like to install the package apt-transport-https, which allows to access apt repositories through the https protocol. What really puzzles me is that the apt-get ...
4
votes
4answers
4k views

`openssl`: Subject Alternative Name

I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain: $ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
4
votes
2answers
8k views

cURL/wget - SSLv3, TLS handshake, CERT hangs

I have problems connecting to https sites using cURL or wget. When I download from a https curl seems to be stuck while doing the TLS handshake, CERT. The problem is independent of the site (I noticed ...
3
votes
2answers
3k views

/etc/apt/sources.list won't accept URLs with https connection

In Debian Wheezy, my /etc/apt/sources.list file looks like this: deb https://mirrors.kernel.org/debian/ wheezy main contrib non-free deb-src https://mirrors.kernel.org/debian/ wheezy main contrib non-...
3
votes
2answers
493 views

How to verify a service is listening on both ipv4 and ipv6?

I want to check whether https service is listening on both IPv6 and IPv4. And also when I am accessing url via browser, I want to know request is served by IPv4 or IPv6.
3
votes
1answer
3k views

How to see list of curl ciphers?

My understanding is that during ssl negotiation, the client (i.e. curl) sends a list of ciphers to the server, and the server replies with its preferred choice. How do I see the list of ciphers that ...
3
votes
3answers
133 views

How can I list every port serving a web page

I have a number of servers, all with various HTTP(S) services accessible on a variety of ports. It's incredibly difficult to keep track of which service is available under which host and what port. ...
3
votes
1answer
1k views

Monitor outgoing web requests as they’re happening

I want to see a list of all outgoing HTTP requests from my desktop. I think it should be possible to monitor HTTPS hostnames as well for local clients using Server Name Indication (SNI). OS X has a ...
3
votes
1answer
2k views

How to make local system CA certificates known to Firefox?

Recently, the CAcert root certificates have been removed from Debian (more precisely, from the ca-certificates package). Since I want to keep them, I backed up the directory /usr/share/ca-...
3
votes
1answer
5k views

Chrome does not open Https websites [closed]

I am a corporate user with proxy server. I am working on the Fedora 20 OS and installed Chrome browser. I set proxy settings under Settings -> Network -> Change Proxy settings -> Network Proxy. ...
3
votes
1answer
2k views

Connect to Webdav (https) with domain\user

I have a problem trying to connect with our network webdav share on mac osx. I can connect from windows, so it's working. On Mac OSX I have set the routes, and I can connect when using "Transmit" but ...
2
votes
1answer
34 views

How do I configure Apache to serve https?

After many hours I finally managed to configure Apache to use my SSL certificate but i just found out that there is something wrong in my configuration. If I try to reach my domain from Google Chrome ...
2
votes
1answer
5k views

wget doesn't support https

I want to download https://example.com using the wget command, but it says “unsupported/unrecognized protocol”. I tried using the --secure protocol='' but that does not work. I downloaded the tar file ...
2
votes
1answer
437 views

Generate a certificate signing request for an SSL server

I'm running CentOS 6.2 LAMP and I've just purchased an SSL certificate via Namecheap that I'm trying to install on my server. This is the certificate I purchased. How do I complete this process ...
2
votes
1answer
118 views

catch http requests from another process

Suppose a process, among other things, is posting https requests, for example with curl. Assuming I have root privileges, is there a way to intercept such requests and respond with an http error or,...
2
votes
7answers
3k views

Creating an HTTPS tunnel

I have a VPS. How do I connect to my server through HTTPS protocol and redirect my browser connections to the HTTPS connection? Currently I use SSH tunnel but it's too slow.
2
votes
1answer
142 views

Unable to use a self-signed certif. on localhost

I created a self-signed certificate for localhost for testing as follows: openssl genrsa -out key.pem 2048 openssl req -new -key key.pem -out certificate.csr openssl x509 -req -in certificate.csr -...
2
votes
1answer
935 views

Webserver establishing new outgoing connections from port 443

I've been trying to configure the firewall on a webserver running Apache using iptables commands. I took the approach of blocking all outgoing connections, except for those that are required. ...
2
votes
2answers
635 views

Apache server redirects main domain to https

I have this server with multiple domains running CentOS 6.2 and Apache. This server has a SSL certificate installed and working well. Every time I browse to the main domain, without adding http:// it ...
2
votes
1answer
159 views

Apache SSL timeout is not matching settings

I have a CentOS 6.7 apache Server version: Apache/2.4.7 (Unix) server with both http and https ports configured. They are configured the same, except for the SSL specific settings. The most relevant ...
2
votes
0answers
647 views

cURL does not recognize certificate

At our company they enforce a web proxy which breaks SSL connections and replaces the certificate by its own fake certificate. (To be precise it uses a proxy cert which is signed by the company cert.) ...
2
votes
0answers
115 views

Apache modssl returning random unwanted 200's rather than 404's

I have a fairly simple apache 2.4.7 config on CentOS 6.5 Linux and an active web server. No PHP or CGI, just some static pages and a proxypass to a different server tier. I'm doing some security ...
2
votes
0answers
251 views

HTTP request failed after listening on multiple ports or after enabling SSL Module on my Linux Board

I have one custom Linux board on which I want to run apache web server to test HTML and other web based services. I have configured, cross compiled and installed default httpd (2.2.24, 2.4.1, 2.4.4 ...
1
vote
1answer
467 views

Page not found but page is there

What am I doing wrong? When I search https://teampass.domain.org/ I get a blank screen. when I search https://teampass.domain.org/teampass, I get the following errors. Error on Chrome: The ...
1
vote
2answers
477 views

SSH key for HTTP

Is it possible to set something up like SSH Keys for http traffic, so that a browser must have the matching key in order to access?
1
vote
1answer
269 views

iptable rule to redirect only https handshake?

I was reading this interesting article today: http://www.moserware.com/2009/06/first-few-milliseconds-of-https.html A crazy thought came to mind...Is it possible to write an iptable rule that only ...
1
vote
2answers
5k views

Pages don't get blocked with Squid over HTTPS

I have set up Squid to block pages on my own system (i.e not on a network), and I'm trying to get SSL to work with page blocking. To this end, I've set up ssl-bump and installed the certificate to my ...
1
vote
1answer
2k views

Two HTTP servers on port 80 and 443

I use on my home server, Apache with one main application that is OwnCloud. So to access it from Internet I use URL -> https://my_host.no-ip.org/owncloud I use another HTTP application on the same ...
1
vote
1answer
783 views

Nginx : images not served in HTTPS

I have on my website an admin/ subdirectory, which I'd like to be in HTTPS, so I tried the following configuration, based on this one : server { listen 80; server_name blob.tld; root /...
1
vote
1answer
67 views

iftop, outgoing https to Amazon

When I run iftop -P to see what is coming to/from my interface, I constantly see connections to Amazon, HTTPS protocol: => ec2-176-34-135-167.eu-west-1.compute.amazonaws.com:https <= => ec2-...
1
vote
1answer
331 views

Resolving DNS through HTTP/HTTPS

Is there a way to resolve DNS through HTTP/HTTPS, the case was: my ISP redirecting every DNS request to their own DNS and poisoning the DNS records. all I need is a software that could resolve ...
1
vote
1answer
2k views

How can I update certificates on my system to fix wget's error: “Unable to establish SSL connection.”?

Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid. One example might be https://squareup.com/ which has a Verisign ...
1
vote
2answers
2k views

Fast and Small C++ https proxy

I'm looking for a small, fast, and reliable https proxy that I can extend to do the following: Look for https handshake requests. Run a regular expression against the host name being requested. If ...
1
vote
1answer
72 views

How to Troubleshoot this apache2 failure of restart?

Condition: http://192.168.1.107/ and http://192.168.1.107/owncloud (with/without https) not alive after reconfiguring settings with self-signed SSL certifigates for HTTPS as described by the thread ...
1
vote
1answer
308 views

How to fix curl sslv3 alert handshake failure on Gentoo?

I'm trying open a website with cURL like this: $ curl -vH "Accept: application/json" https://www.rocketleaguereplays.com/api/replays/-1/ The output is: * Trying 104.24.114.83... * Connected to ...
1
vote
0answers
84 views

How to pass an HTTPS scheme request to a proxy without using a CONNECT tunnel on FreeBSD?

The client (C) pass through a proxy (P) to contact a server (S): A --http--> P --https--> S I need the proxy to be able to investigate the request content, for this I see two options: SSL ...
1
vote
1answer
78 views

How to block keywords in https URL using squid proxy?

I want to block keyword "import" in any URL, including https websites. Example: http://www.abc.com/import/dfdsf https://xyz.com/import/hdovh How to create acl to do it? Thanks
1
vote
1answer
218 views

SSH on port 443 with SSLH

I have a problem with SSH and HTTPS on port 443. I have installed SSLH on my VirtualServer an want to connect via Port 443 to SSH and also use 443 for the HTTPS server. With my windows computer it ...
1
vote
1answer
185 views

Redirect outbound traffic on LAN going to port 443 to port 80 or 8080 instead

How would I achieve this, I've tried using iptables a bit but have had no success at all. Any help at all would be appreciated. I basically just want it so that whenever a user on my LAN attempts to ...
1
vote
1answer
353 views

Apache / OpenSSL configuration keywords `SSLProtocol` vs. `SSLCipherSuite`

According to the Apache docs I can configure the cipher suite with (a.o.) two different keywords and examples on Internet often use both (but not necessarily identical to below example). What is the ...
1
vote
1answer
394 views

HTTPS won't run. (CentOS) [closed]

I've installed my SSL using the following guide as I would usually with other servers: http://wiki.centos.org/HowTos/Https However when I run httpd and try to connect using https it doesn't work. I ...
1
vote
0answers
363 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
1
vote
0answers
277 views

Ubuntu 12.04 apache2 site shows index of instead of actual site on redmine

I have an Ubuntu 12.04 server that has a successful redmine install on it. I have been using redmine on it for a while, but when I tried to set up the SSL cert using this method, https://www....