Tag Info

Hot answers tagged

6

Here's a simple way that comes to mind echo 'GET / HTTP/1.1 Host: google.com ' | openssl s_client -quiet -connect google.com:443 2>/dev/null


4

You can use lsof and watch to do this, like so: $ watch -n1 lsof -i TCP:80,443 Example output dropbox 3280 saml 23u IPv4 56015285 0t0 TCP greeneggs.qmetricstech.local:56003->snt-re3-6c.sjc.dropbox.com:http (ESTABLISHED) thunderbi 3306 saml 60u IPv4 56093767 0t0 TCP ...


4

As I said in a comment, the netrw plugin, which handles http://, doesn't handle https:// (this from looking at the plugin code). I went into the code and got https:// working (no guarantees it's bug-free, but it worked for the couple sites I tried). I've created a pair of patches, for netrw.vim and netrwPlugin.vim. Here's how to apply them, keeping the ...


4

There is. You need to install the package apt-transport-https. Then you can use lines like deb https://some.server.com/debian stable main in your sources.list file. But usually that's not necessary, since the entire content is public anyway and it adds encryption overhead and latency. Since you don't trust an attackers public key, even http traffic is ...


3

This might not work under every circumstance, but try openssl s_client -connect google.com:443 2>&1 | openssl x509 -text | grep DNS


3

If you want to use curl, this should work: curl -D - https://www.google.com/ Note, however, that this is not exactly the raw response. For instance chunked transfer encoding will not be visible in the response. Using --raw solves this, also verbose mode (-v) is useful, too and -i shows the headers before the response body: curl -iv --raw ...


3

What you are asking for is called a proxy http server. The software receives http requests and passes them on or rejects them (logging too) It needn't sit on your embeded device, however your device would need to be configured to access the proxy instead of going directly to the internet. apache nginx are two examples of web servers that can act as proxy ...


3

Try mitmproxy. mitmproxy is an SSL-capable man-in-the-middle proxy for HTTP. It provides a console interface that allows traffic flows to be inspected and edited on the fly. mitmdump is the command-line version of mitmproxy, with the same functionality but without the user interface. Think tcpdump for HTTP. Features Intercept HTTP requests and ...


3

What you are looking for is called Mutual SSL Authentication. In the case of a commonly deployed web server as Apache, and an also commonly deployed SSL/TLS implementation as OpenSSL, the steps would be as follows: There is a handy script distributed alongside openssl, CA.sh to do most of this stuff. Its location is distribution specific. In Debian and ...


2

Okay so I solved this myself. Unfortunately most of the common documentation on the internet says "As your host to request the CSR". Of course my host is myself so I had to register the code myself on my server. I established a SSH connection to my server and ran the following command. openssl req -nodes -newkey rsa:2048 -keyout myserver.key -out ...


2

No. You can't know it's a HTTPS handshake until the connection is open. At that point, it's too late to redirect it. The SYN packet doesn't tell you what's going to be transmitted; that's why we have port numbers to begin with.


2

I mailed the author (drchip) here is his answer : Hello, Netrw v144b already supports https (you may get it from http://drchip.0sites.net/astronaut/vim/index.html#NETRW). Thank you, Charles Campbell The website has since moved and can currently be found at http://www.drchip.org/astronaut/vim/index.html#NETRW To install it, I just had to ...


2

Changing the cipher suite was the final solution. ssl_protocols TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256; The problem was that Firefox 30 doesn't supports the mentioned cipher yet.


2

Use wget or curl, see the examples: wget https://blog.httpwatch.com/wp-content/uploads/2011/01/firefox-https-cache2.png Or: curl -o file.png https://blog.httpwatch.com/wp-content/uploads/2011/01/firefox-https-cache2.png Both applications are highy configurable and adjustable and are meant to use in automated scripts.


2

I downloaded the linked image with wget https://blog.httpwatch.com/wp-content/uploads/2011/01/firefox-https-cache2.png Is this what you want? Suppose that you wanted to download many files (e.g. *-cache1,2,3,4,5,6,7,8,9.png). Then you could do something like: for i in {1..9}; do wget ...


2

If you continue to run the 2nd Apache server on ports 8080 and 8081 you can do any of the following: Setup a reverse proxy using the 1st server on port 80 which will forward any traffic that comes into https://my_host.no-ip.org/owncloud. Do a 301 forward for any traffic that comes into https://my_host.no-ip.org/owncloud to https://my_host.no-ip.org:8081/. ...


2

Any reason why in the https section you send everything under /blog/admin to FastCGI? Why not make a rule specific to *.php like you have in the http section? In other words, under http you have: location ~ \.php$ { fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; include fastcgi_params; } ...


2

Yes, it is called "Client Certificate Authentication" and is oft used with Smart Cards and the like. It can be complicated to get running well, depending on what your desired product is.


2

Your assumption is wrong: you can use HTTPS downloads. You just have to find a mirror that supports it, and put its URL in your list of sources. You'll need to install the apt-transport-https package. Debian doesn't make HTTPS downloads easy because there is very little benefit. Debian package distribution already includes a mechanism to verify packages: ...


2

It's not curl, but it should be available on almost all Unices: wget -S --spider https://encrypted.site If the status messages bother you: wget -S --spider https://encrypted.site 2>&1 | awk '/^ /' If you want CRLF line endings: wget -S --spider https://encrypted.site 2>&1 | awk '/^ / { sub(/$/,"\r"); print }'


2

You want to block any and all HTTPS sites? You need to do this with a firewall on your router. Blocking it in Squid won't prevent people from circumventing it unless the firewall on your router also blocks it. If your router blocks it than what squid does is irrelevant. Better yet, set the firewall to block all outgoing TCP connections except for port 80 ...


1

This has nothing to do with apache. Your http service and your https service are on different ports, and this port is specified in the TCP/IP header by the client. Apache is not making an arbitrary choice, it is just doing what it is supposed to do in response to a specific request made on a specific port. In other words, it is your net client (the ...


1

Go to Finder -> Connect to Server... ⌘K Enter https://192.168.0.3/webdav_transfer as "Server address" Respond to the Username/Password challenge as "domainA\username" for username. If that doesn't work, see http://wiki.zimbra.com/wiki/WebDAV for possible reasons; you may be out of luck without admin access to the WebDAV server.


1

I'm using Squid as proxy server and Stunnel as SSL wrapper. It has very good performance due to caching. Squid Configuration After installing Squid, follow Squid Documentations and configure it. Here is sample configuration: http_port 3193 transparent cache_dir ufs /var/cache/squid 128 16 128 cache_mem 1 MB maximum_object_size_in_memory 512 KB ...


1

I do something like this using OpenVPN. My laptop and cellphone can connect to my server at home using SSL over a TCP connection on port 443. This is really useful when I'm at stodgy places that don't let you use any ports besides 80 and 443. Here's a simple configuration that accomplishes this on the server: port 443 proto tcp dev tun server 10.44.3.0 ...


1

Is the https server apache? I don't fully understand your situation, but if you have mod_proxy, you might able to do what you want.


1

3: Do you have suggestions for other C++ Linux proxies I might be able to build this into? squid is a fast open source proxy that you can extend to your heart's content



Only top voted, non community-wiki answers of a minimum length are eligible