Questions tagged [https]

All about programs and services that use HTTPS.

0
votes
1answer
17 views

Nginx as Web Proxy fails on https

I have been trying to configure nginx to act as a web proxy (like squid) to be able to modify headers. It is working with http, but https shows "Server not found". Also, I can access directly with the ...
0
votes
1answer
34 views

Monitor incoming traffic on ports 80 & 443, vanilla VPS, recycled IP address

On a newly-created Debian (or derivative) server operating system, how can I a) check for the existence of, b) roughly quantify, and c) see the origin of any junk/DoS traffic on ports 80 and 443, ...
0
votes
0answers
11 views

Nginx, Let's encrypt cause error redirect http to https partially

I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx. I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
1
vote
0answers
30 views

Redirect http->https, but exclude subdomain

I use Drupal, with a complicated multi-Domain setup, and have a local development site, that uses (locally) the dev. subdomain. So I want a .htaccess file that can be used on production AND ...
0
votes
0answers
14 views

Appache SSL timeout and reqtimeout module

It seems Apache SSL http2 does not honor KeepAliveTimeout Server version: Apache/2.4.29 (Ubuntu) built: 2018-10-10T18:59:25 Searching Stackoverflow, I could find the issue is with ...
4
votes
2answers
93 views

What is the best next step when faced with curl <url> | sh

Most installation scripts these days have this particular pattern: curl -fsSL <url> | sh --- and usually run as root Some sites might even have a disclaimer about running this as root and to ...
0
votes
0answers
26 views

What are the ways to unwrap HTTPS in proxy-like way using standard tools?

For the low-end 8bit devices like home computers of 80ies, when attached to internet via newly-made network cards, or for low-end embedded devices as well, it is practically impossible to browse ...
0
votes
1answer
63 views

is it possible to detect ssh activity on port 443

I would like to detect the usage of ssh on port 443 on a linux gateway. A kind of counter measure against stuff like sslh. I think netfilter and iptables would be the solution, but can't find module ...
0
votes
1answer
353 views

Redirect on the same port from http to https with nginx reverse proxy

I have a website setup http://mydomain.com/myroject on ubuntu 14.04(apache webserver) I setup htsql service on the same host to run on port 5000 working links: http://mydomain.com/myproject http://...
2
votes
1answer
91 views

How to configure “https” in same domain for multiple ports?

I have a website(apache web server, ubuntu 14.04) setup http://example.com and configured with ports 1996 and 1980. These links works with http http://example.com/myproject http://example.com:1996/ ...
1
vote
0answers
9 views

PGP Keyservers Featuring Download over HTTP?

My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS. Are there keyservers out there that offer a ...
0
votes
0answers
323 views

How to configure yum to support https

I am trying to configure yum 3.4.3 to support HTTPS on my CentOS 7. Currently I am getting the following error when trying to update an application with yum clean all; yum update myApp. The error: ...
0
votes
2answers
38 views

Varying a certificate based on client TLS version in ClientHello

I've got a scenario where some older clients are only able to support MD5 and SHA1 signatures. Obviously these are generally considered deprecated but I do still need to support them. Upgrading ...
0
votes
0answers
294 views

How to config HTTPS on Apache tomcat

I have installed the Apache Tomcat/7.0.76 on centos7. I want to enable SSL on the tomcat. I have root, intermediate, domain certificate. Like this 85163c004aa3625d.crt gd_bundle-g2-g1.crt gdig2....
0
votes
1answer
532 views

How to download https file in AIX without wget and curl? [duplicate]

In an UNIX environment running AIX where I'm a not privileged user (without sudo) if I need to download a file from HTTPS server and there is no wget or curl... How I do it? Is there any replacement ...
2
votes
0answers
306 views

wget a zip file from GitHub, OpenSSL error [closed]

$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip --2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip Resolving ...
1
vote
0answers
80 views

https server hello missing

I've setup an nginx server, and config it with a https certificate. But I cannot access my server through https occasionally . In some rare cases, it works well, but no server hello in most cases. ...
1
vote
1answer
70 views

Open Port443 on Linux Ubuntu 12.04

i have a Linux Ubuntu 12.04.3 LTS with Elastic Search installed. the Elastic Search is configured to accept the local requests via HTTP. i have a php website on the same server. it was on port 80 but ...
0
votes
0answers
12 views

can't ban chrome redirect http domain to https

chrome:Version 68.0.3440.75 (Official Build) (64-bit). cat /etc/hosts 127.0.0.1 www.test.app test.app I have build apache on local pc.Do as the webpage say. Google Chrome redirecting localhost ...
1
vote
1answer
277 views

OpenBSD redirect HTTPS by doman with relayd or pf

I have one machine with multiple domains and I'm trying to run multiple HTTPS web servers on it. All web servers have https support so I just need to redirect incoming packets to appropriate port (...
2
votes
1answer
176 views

OpenBSD relay, https proxy for multiple domains

I'm trying to make a proxy for 3 web servers (running on the same machine as the proxy). A have successfully configured relayd to redirect a request to correct port by their host header, but I cannot ...
0
votes
1answer
649 views

Unable to use curl with cookie-jar

I am trying to use curl for login request automation. Here, use of cookie-jar is must. When I use --cooki-jar cjar option, it shows following error. root@kali:~# curl --cookie-jar cjar --output /root/...
0
votes
1answer
54 views

nghttp2 w/Buildroot on Raspberry Pi 3

I'm fairly new to buildroot and I'm trying to figure out the best way to get the "nghttp2" package added to my system so that I can utilize it in conjunction with curl on my embedded system. I'm not ...
3
votes
3answers
12k views

How to trust self-signed certificate in cURL command line?

I've created a self-signed certificate for foo.localhost using a Let's Encrypt recommendation using this Makefile: include ../.env configuration = csr.cnf certificate = self-signed.crt key = self-...
1
vote
1answer
1k views

Create HTTPS server with socat

Currently I am trying to setup a toy https server with socat I am doing the following: As described here http://www.dest-unreach.org/socat/doc/socat-openssl.txt cert() { openssl genrsa -out $1....
1
vote
0answers
242 views

NGINX -> varnish load balancer -> Apache SSL connection = BAD REQUEST

This is my setup : Server 1 = Nginx is receiving the request on port 443 and is used as a reverse proxy to send it to Varnish 5, on the same server on port 80. Varnish is load balancing requests on ...
1
vote
0answers
99 views

Is this the right way to generate a wildcard CSR?

I generated my CSR on an Amazon Linux system using this command openssl req -new -sha256 -key ~/mymaindomain.com.ssl/mymaindomain.com.key -out ~/mymaindomain.com.ssl/mymaindomain.com.csr I verified ...
-1
votes
1answer
812 views

Apache2 as reverse proxy not working?

Hello I am trying to setup apache2 as reverse proxy on Ubuntu. For the backed I have tomcat 7. For the configuration file /etc/apache2/sites-enabled/example.co.conf <VirtualHost *:80> ...
0
votes
0answers
697 views

How to configure apache as reverse proxy for HTTPS tomcat7 backend?

I have configured my tomcat7 to use letsencrypt SSL successfully on port 8443. Now I want to accept for 443 port only I am using apache2 in front of it. I added virtual host and this is the content on ...
0
votes
0answers
20 views

Setting up multiple websites on Apache Httpd renders one site only accessible

I am planning to setup bugzilla and Orangescrum on one server. I did the following configuration in httpd.conf <VirtualHost *:80> DocumentRoot /var/www/html/ <Directory /var/...
1
vote
2answers
1k views

How to make SSH port fowarding for HTTPS?

I've created the following port forwarding: ssh -vL localhost:4433:example.com:443 remote-linux-host Note: I'm using 4433 on my local instead of 443 to avoid running with sudo. however when I go to ...
0
votes
1answer
808 views

blocking YouTube not working for Google Chrome

I have some rules on the FILTER table of Netfilter, which block HTTPS access to some websites: -A FORWARD -s 10.255.255.0/26 -p tcp -m tcp --dport 443 -m string --string "facebook.com" --algo bm -j ...
2
votes
0answers
961 views

Timeout error after https configuration on CentOS 7

I have an app that has been running for 2 years now via http. Now we want to move to https for better security. Our OS is CentOS Linux 7. We have a virtual host config in /etc/httpd/sites-available ...
1
vote
1answer
2k views

HTTPS not responding in Centos 7 server

I use a commercial godaddy standard SSL server; I tried stop firewalld and iptables, but still no change. It works fine with HTTP, but is not responding with HTTPS. No ssl_error logs. I've been stuck ...
0
votes
2answers
583 views

Can't clone https urls with git

After the upgrade to Fedora 27, I can't clone urls using https anymore, ssh works fine. The error is: fatal: unable to access 'https://repo-url': SSL certificate problem: unable to get local issuer ...
1
vote
1answer
1k views

HTTPS Authentication with Axel Downloader

Is there a way to use https authentication with Axel to download files? I have gone through this answer and tried what was written, but to no extent. I got HTTP/1.1 401 Unauthorized as the output ...
1
vote
0answers
951 views

Curl fails on TLS connection: sslv3 alert bad record mac

I'm running a fresh debian stretch installation in a VM using QEMU on a Ubuntu 14.04 host. When I use curl on any HTTPS resource like curl -vL https://get.rvm.io/ I get this error: * Trying 2600:...
0
votes
0answers
847 views

Apt Update/Upgrade fail HTTPS (maybe?)

I cant update/upgrade my package on my server because some repository are not accessible. apt-get update : Ign:1 https://dl.yarnpkg.com/debian stable InRelease Ign:2 http://nightly.odoo.com/10.0/...
0
votes
2answers
63 views

Black-listing client side certificates in Apache2?

Is there a way to black-list a client-side certificate issued to an specific user? I currently have a case where a few malicious actors have my website's client side certificates and I do not know ...
2
votes
0answers
401 views

How to redirect all requests for localhost:483 to localhost:80 with dnsmasq

I have an issue with redirecting advertising domains to localhost on Linux Mint. I've followed the instructions on Debain Administration Guide and this gist on dns-based ad-blocking. Generation of ...
3
votes
4answers
417 views

Automating OpenSSL certificates creation, Let'sEncrypt signing, and site dir associating, in an Nginx environment

I have an Ubuntu-server 16.04 VPS and Nginx. Now I'm implementing HTTP1 (without TLS, utilizing port 80) but I desire to go "one step forward" and work with HTTP2 (with TLS, utilizing port 443), for ...
0
votes
1answer
511 views

Run node app with SSL on 443 port (on 80 is working)

I am trying to configure a server running on Amazon EC2. I figured out how to run my node app on port 80, but now I'm trying to run on port 443, with Letsencrypt SSL. Before to work on port 80 I ...
1
vote
1answer
131 views

Certain HTTPS web sites do not load from KVM virtual machine over IPv6

This is driving me crazy as I cannot load certain HTTPS web sites only from KVM virtual machines and only over IPv6. IPv4 works fine. IPv6 connectivity works for the same websites from the hypervisor. ...
0
votes
0answers
286 views

Any static binary for x86-64 that can download over https

I'm looking for any binary ( like wget/curl ) that could download over https , is statically built and for x86-64 architecture. I'm looking for a way to download from https on my android emulator, it ...
6
votes
4answers
7k views

Openssl command s_client always says 400 Bad Request

I am trying to test a server that is working normal in web browser, with openssl s_client option, connecting it directly using openssl returns the 400 Bad Request: openssl s_client -servername ...
1
vote
2answers
208 views

How can a I redirect an HTTPS request to a HTTP server?

I have a Web Application running in HTTP. However I wanted to test a Web Service that is running on HTTPS using CORS. Since HTTP won't allow HTTPS request, I wanted to setup a proxy in my Web ...
1
vote
0answers
155 views

How to offload TLS client certificate authentication to a simple proxy

I have a web application that is accessible only through HTTPS with client certificate authentication. I need to run some analysis tools which don't cope well with client certificate authentication. A ...
1
vote
0answers
45 views

HSTSpreload, www subdomain and redirect issues

I looking for add my website to hstspreload list and the issue is it detect my website with www as a subdomain. I check web like amazon including www and it dont is detected how a subdomain (it is ...
0
votes
2answers
623 views

You're speaking plain HTTP to an SSL-enabled server port

I'm trying to open site using https://mydomain.com, but always I see: You're speaking plain HTTP to an SSL-enabled server port. But with http site works... I'm using Apache 2.2.22, without nginx. ...
3
votes
2answers
609 views

Generate HPKP fingerprints for all certificate chain

From below command able to generate Base64 pin for only first depth certificate. But need to generate pin for all depth of certificate. openssl s_client -servername example.com -connect example.com:...