Questions tagged [https]
All about programs and services that use HTTPS.
173
questions
1
vote
2answers
8 views
How to add correct chain certificate when acessing url with wget?
There is a site (https://datashare.is.ed.ac.uk/bitstream/handle/10283/3192/CINIC-10.tar.gz) which I know is misconfigured and I can get the new chained certificate from here: https://whatsmychaincert....
0
votes
1answer
25 views
Tools to investigate how DNS over TLS/HTTPS work / how resolve / if work correctly/ how establish tunnels etc
DoT DNS over TLS https://tools.ietf.org/html/rfc7858
DoH DNS over HTTPs https://tools.ietf.org/html/rfc8484
(nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- port tcp/...
0
votes
1answer
46 views
Safari does not use the private root CA certificate
I've created a private root CA and issued some SSL certificate for some https websites,
(I am not sure whether this should be called as self-signed certificate, in my case, the root ca certificate is ...
0
votes
1answer
56 views
Why is HAProxy forwarding HTTP2 requests as HTTP 1.1?
I'm trying to configure a load balancer between 2 servers with HAPoxy, this is my configuration:
frontend haproxynode
bind *:443 ssl crt /etc/ssl/private/isel.pem alpn h2,http/1.1
mode tcp
...
0
votes
1answer
63 views
How can I fix curl that seems to be stuck on NSS initialization?
curl, dnf and other cmd lines tools that depends on https are not working properly
$ curl -vvv --insecure https://google.com
* Rebuilt URL to: https://google.com/
* Trying 172.217.29.14...
* ...
0
votes
0answers
50 views
website STILL need to redirect from HTTP to https after Nginx redirect config
I use AWS EC2 to build a website using load balancer.
However, the pentesting result shows that the website still could be reached by http.
I have checked that in the Nginx config file, we does have a ...
0
votes
1answer
45 views
Raspberry PI (local) openSSL help: red-line through HTTPS fix?
I recently installed SSL on my RPi..
after using a few different tutorials.. I finally got the https:// url to resolve into showing the webpage content.
However..
I had to 'ignore' the SSL warning (...
0
votes
1answer
40 views
Redirect ip address to https
I am using Ubuntu and Nginx.
I have my site hosted under SSL protection.
If I type in the domain name in a browser without the 's' in 'https' in will redirect to 'https'.
But if I type in the IP ...
1
vote
0answers
16 views
Website migration
I have a website on a home linux box (Rasperry Pi2B). It is mailnly for my own use, but is exposed to the world, uses a Dynamic DNS service, HTTPS with a LetsEncrypt certificate, which renews ...
0
votes
1answer
122 views
How can I fix broken https on Cockpit?
I've just installed cockpit on my CentOS 8 box:
dnf install cockpit
systemctl start cockpit.socket
systemctl enable cockpit.socket
Once I'd let it through the firewall, I can get it up on a.b.c.d:...
0
votes
1answer
146 views
Server httpd(OpenBSD), doesn't work server.key
I have tried several methods, but the SSL certificate doesn't work.
BSD# curl -vi https://192.168.1.21:443
* Trying 192.168.1.21:443...
* Connected to 192.168.1.21 (192....
0
votes
0answers
70 views
How to force ddclient to use only HTTPS?
I'm running ddclient on Arch Linux with Namecheap. I want to force ddclient to use only HTTPS.
Ddclient is a Perl client used to update dynamic DNS entries for accounts on 'Dynamic DNS Network ...
1
vote
1answer
1k views
How to compile Wget with OpenSSL?
I'm trying to compile Wget using SSL suppor OpenSSL but I can't find a way to configure it.(I'm new to Linux)
I already installed OpenSSL but wget it compiling by it default compiler gnutls as you can ...
1
vote
1answer
1k views
How does `curl` access SSL certs in macOS?
I'm on a Macbook with macOS 10.15.5. I have MacPorts, but I am using the 'native' version of curl.
% curl --version
curl 7.64.1 (x86_64-apple-darwin19.0) libcurl/7.64.1 (SecureTransport) LibreSSL/2....
1
vote
0answers
1k views
Impossible to start Apache service due to SSL library error
I am trying to configure Apache in order to accept HTTPS requests.
Following some tutorials found online, I generated the following certificates:
my-ca.key (CA private key)
my-ca.crt (CA certificate)
...
0
votes
0answers
21 views
how to generate HTTPS related keys on Linux?
For the https://github.com/bstarynk/helpcovid project we use the cpp-httplib C++ HTTP server library configured with CPPHTTPLIB_OPENSSL_SUPPORT ; see its simplesrv.cc example.
For testing purposes we ...
0
votes
0answers
67 views
How to forward path along with port
I'm willing to bet I have a fundamental misunderstanding here, but I am trying to do something akin to port-forwarding AND url-forwarding without using something like nginx.
I have a remote linux ...
6
votes
1answer
7k views
Download Windows ISO from microsoft using wget or curl
Objective: download the official Win10_1909 iso into linux directly via command line
Source: https://www.microsoft.com/en-in/software-download/windows10ISO
After selecting edition and language you ...
0
votes
1answer
84 views
I would like to block access to all http
On a Linux system, I need to block outbound access to all http and https traffic except to the web server 192.168.1.253. The system should also block all incoming traffic except ssh.
How would I ...
1
vote
0answers
34 views
Backward ssh connection via Forward https connection (https-tunnel)
I need a construction that make possible to tunnel backward SSH via forward HTTPS. I tried to draw on a picture what I have to get. The picture shows 4 steps that explain what and how I want to make.
...
0
votes
1answer
173 views
HTTPS connections are generating incoming connections
I have a lot of records in my firewall log that are related to HTTPS traffic. For some reason incoming connections are being made to ephemeral ports and they are blocked by my firewall because these ...
2
votes
2answers
3k views
How can i force apt-get or apt to use only https connections
I am running a mongo db docker container on a network using only https. The container uses apt-get for installing packages. Since network allows only https connections,apt-get is not working for me.
...
1
vote
0answers
78 views
Will this firewall configuration prevent unencrypted traffic?
All incoming and outgoing traffic denied.
Allowed outgoing ports: 53,67,68,443
Since I have not allowed port 80 and since programs use port 443 for https traffic by default, will this configuration ...
0
votes
1answer
235 views
http server with ssl does not work with nc
If run:
cat index.html | nc --ssl --broker --keep-open -l 443
on the client side browser keeps on trying to connect with no success. I mean, the html page does not load.
Besides, curl output is:
...
0
votes
1answer
123 views
Nginx as Web Proxy fails on https
I have been trying to configure nginx to act as a web proxy (like squid) to be able to modify headers. It is working with http, but https shows "Server not found". Also, I can access directly with the ...
0
votes
1answer
164 views
Monitor incoming traffic on ports 80 & 443, vanilla VPS, recycled IP address
On a newly-created Debian (or derivative) server operating system, how can I a) check for the existence of, b) roughly quantify, and c) see the origin of any junk/DoS traffic on ports 80 and 443, ...
1
vote
0answers
17 views
Nginx, Let's encrypt cause error redirect http to https partially
I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx.
I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
1
vote
0answers
49 views
Redirect http->https, but exclude subdomain
I use Drupal, with a complicated multi-Domain setup, and have a local development site, that uses (locally) the dev. subdomain.
So I want a .htaccess file that can be used on production AND ...
4
votes
2answers
441 views
What is the best next step when faced with curl <url> | sh
Most installation scripts these days have this particular pattern:
curl -fsSL <url> | sh --- and usually run as root
Some sites might even have a disclaimer about running this as root and to ...
0
votes
0answers
44 views
What are the ways to unwrap HTTPS in proxy-like way using standard tools?
For the low-end 8bit devices like home computers of 80ies, when attached to internet via newly-made network cards, or for low-end embedded devices as well, it is practically impossible to browse ...
0
votes
1answer
177 views
is it possible to detect ssh activity on port 443
I would like to detect the usage of ssh on port 443 on a linux gateway.
A kind of counter measure against stuff like sslh.
I think netfilter and iptables would be the solution, but can't find module ...
0
votes
1answer
2k views
Redirect on the same port from http to https with nginx reverse proxy
I have a website setup http://mydomain.com/myroject on ubuntu 14.04(apache webserver)
I setup htsql service on the same host to run on port 5000
working links:
http://mydomain.com/myproject
http://...
3
votes
1answer
6k views
How to configure “https” in same domain for multiple ports?
I have a website(apache web server, ubuntu 14.04) setup http://example.com and configured with ports 1996 and 1980.
These links works with http
http://example.com/myproject
http://example.com:1996/
...
5
votes
1answer
424 views
PGP Keyservers Featuring Download over HTTPS?
My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS.
Are there keyservers out there that offer a ...
1
vote
0answers
4k views
How to configure yum to support https
I am trying to configure yum 3.4.3 to support HTTPS on my CentOS 7.
Currently I am getting the following error when trying to update an application with yum clean all; yum update myApp.
The error:
...
0
votes
2answers
166 views
Varying a certificate based on client TLS version in ClientHello
I've got a scenario where some older clients are only able to support MD5 and SHA1 signatures. Obviously these are generally considered deprecated but I do still need to support them. Upgrading ...
0
votes
0answers
2k views
How to config HTTPS on Apache tomcat
I have installed the Apache Tomcat/7.0.76 on centos7.
I want to enable SSL on the tomcat.
I have root, intermediate, domain certificate. Like this
85163c004aa3625d.crt gd_bundle-g2-g1.crt gdig2....
0
votes
1answer
3k views
How to download https file in AIX without wget and curl? [duplicate]
In an UNIX environment running AIX where I'm a not privileged user (without sudo) if I need to download a file from HTTPS server and there is no wget or curl... How I do it?
Is there any replacement ...
2
votes
0answers
1k views
wget a zip file from GitHub, OpenSSL error [closed]
$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip
--2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip
Resolving ...
1
vote
0answers
479 views
https server hello missing
I've setup an nginx server, and config it with a https certificate. But I cannot access my server through https occasionally . In some rare cases, it works well, but no server hello in most cases. ...
1
vote
1answer
397 views
Open Port443 on Linux Ubuntu 12.04
i have a Linux Ubuntu 12.04.3 LTS with Elastic Search installed. the Elastic Search is configured to accept the local requests via HTTP. i have a php website on the same server. it was on port 80 but ...
1
vote
1answer
629 views
OpenBSD redirect HTTPS by doman with relayd or pf
I have one machine with multiple domains and I'm trying to run multiple HTTPS web servers on it. All web servers have https support so I just need to redirect incoming packets to appropriate port (...
4
votes
2answers
826 views
OpenBSD relay, https proxy for multiple domains
I'm trying to make a proxy for 3 web servers (running on the same machine as the proxy). A have successfully configured relayd to redirect a request to correct port by their host header, but I cannot ...
0
votes
1answer
2k views
Unable to use curl with cookie-jar
I am trying to use curl for login request automation. Here, use of cookie-jar is must. When I use --cooki-jar cjar option, it shows following error.
root@kali:~# curl --cookie-jar cjar --output /root/...
0
votes
1answer
79 views
nghttp2 w/Buildroot on Raspberry Pi 3
I'm fairly new to buildroot and I'm trying to figure out the best way to get the "nghttp2" package added to my system so that I can utilize it in conjunction with curl on my embedded system.
I'm not ...
23
votes
5answers
82k views
How to trust self-signed certificate in cURL command line?
I've created a self-signed certificate for foo.localhost using a Let's Encrypt recommendation using this Makefile:
include ../.env
configuration = csr.cnf
certificate = self-signed.crt
key = self-...
2
votes
1answer
5k views
Create HTTPS server with socat
Currently I am trying to setup a toy https server with socat I am doing the following:
As described here: EXAMPLE FOR OPENSSL CONNECTION USING SOCAT
cert() {
openssl genrsa -out $1.key 2048
...
1
vote
0answers
401 views
NGINX -> varnish load balancer -> Apache SSL connection = BAD REQUEST
This is my setup :
Server 1 = Nginx is receiving the request on port 443 and is used as a reverse proxy to send it to Varnish 5, on the same server on port 80.
Varnish is load balancing requests on ...
1
vote
0answers
183 views
Is this the right way to generate a wildcard CSR?
I generated my CSR on an Amazon Linux system using this command
openssl req -new -sha256 -key ~/mymaindomain.com.ssl/mymaindomain.com.key -out ~/mymaindomain.com.ssl/mymaindomain.com.csr
I verified ...
-1
votes
1answer
2k views
Apache2 as reverse proxy not working?
Hello I am trying to setup apache2 as reverse proxy on Ubuntu.
For the backed I have tomcat 7.
For the configuration file /etc/apache2/sites-enabled/example.co.conf
<VirtualHost *:80>
...
