Tag Info

Hot answers tagged

4

There is. You need to install the package apt-transport-https. Then you can use lines like deb https://some.server.com/debian stable main in your sources.list file. But usually that's not necessary, since the entire content is public anyway and it adds encryption overhead and latency. Since you don't trust an attackers public key, even http traffic is ...


4

As I said in a comment, the netrw plugin, which handles http://, doesn't handle https:// (this from looking at the plugin code). I went into the code and got https:// working (no guarantees it's bug-free, but it worked for the couple sites I tried). I've created a pair of patches, for netrw.vim and netrwPlugin.vim. Here's how to apply them, keeping the ...


3

What you are asking for is called a proxy http server. The software receives http requests and passes them on or rejects them (logging too) It needn't sit on your embeded device, however your device would need to be configured to access the proxy instead of going directly to the internet. apache nginx are two examples of web servers that can act as proxy ...


3

Try mitmproxy. mitmproxy is an SSL-capable man-in-the-middle proxy for HTTP. It provides a console interface that allows traffic flows to be inspected and edited on the fly. mitmdump is the command-line version of mitmproxy, with the same functionality but without the user interface. Think tcpdump for HTTP. Features Intercept HTTP requests and ...


3

What you are looking for is called Mutual SSL Authentication. In the case of a commonly deployed web server as Apache, and an also commonly deployed SSL/TLS implementation as OpenSSL, the steps would be as follows: There is a handy script distributed alongside openssl, CA.sh to do most of this stuff. Its location is distribution specific. In Debian and ...


2

No. You can't know it's a HTTPS handshake until the connection is open. At that point, it's too late to redirect it. The SYN packet doesn't tell you what's going to be transmitted; that's why we have port numbers to begin with.


2

I mailed the author (drchip) here is his answer : Hello, Netrw v144b already supports https (you may get it from http://drchip.0sites.net/astronaut/vim/index.html#NETRW). Thank you, Charles Campbell to install it, I just had to download the .vba.gz file, unpack it, open it with vim, then follow the instructions (source the file with :so %). ...


2

Your assumption is wrong: you can use HTTPS downloads. You just have to find a mirror that supports it, and put its URL in your list of sources. You'll need to install the apt-transport-https package. Debian doesn't make HTTPS downloads easy because there is very little benefit. Debian package distribution already includes a mechanism to verify packages: ...


2

If you want to use curl, this should work: curl -D - https://www.google.com/ Note, however, that this is not exactly the raw response. For instance chunked transfer encoding will not be visible in the response. Using --raw solves this, also verbose mode (-v) is useful, too and -i shows the headers before the response body: curl -iv --raw ...


2

It's not curl, but it should be available on almost all Unices: wget -S --spider https://encrypted.site If the status messages bother you: wget -S --spider https://encrypted.site 2>&1 | awk '/^ /' If you want CRLF line endings: wget -S --spider https://encrypted.site 2>&1 | awk '/^ / { sub(/$/,"\r"); print }'


2

You want to block any and all HTTPS sites? You need to do this with a firewall on your router. Blocking it in Squid won't prevent people from circumventing it unless the firewall on your router also blocks it. If your router blocks it than what squid does is irrelevant. Better yet, set the firewall to block all outgoing TCP connections except for port 80 ...


1

This has nothing to do with apache. Your http service and your https service are on different ports, and this port is specified in the TCP/IP header by the client. Apache is not making an arbitrary choice, it is just doing what it is supposed to do in response to a specific request made on a specific port. In other words, it is your net client (the ...


1

Go to Finder -> Connect to Server... ⌘K Enter https://192.168.0.3/webdav_transfer as "Server address" Respond to the Username/Password challenge as "domainA\username" for username. If that doesn't work, see http://wiki.zimbra.com/wiki/WebDAV for possible reasons; you may be out of luck without admin access to the WebDAV server.


1

I'm using Squid as proxy server and Stunnel as SSL wrapper. It has very good performance due to caching. Squid Configuration After installing Squid, follow Squid Documentations and configure it. Here is sample configuration: http_port 3193 transparent cache_dir ufs /var/cache/squid 128 16 128 cache_mem 1 MB maximum_object_size_in_memory 512 KB ...


1

I do something like this using OpenVPN. My laptop and cellphone can connect to my server at home using SSL over a TCP connection on port 443. This is really useful when I'm at stodgy places that don't let you use any ports besides 80 and 443. Here's a simple configuration that accomplishes this on the server: port 443 proto tcp dev tun server 10.44.3.0 ...



Only top voted, non community-wiki answers of a minimum length are eligible