Questions tagged [https]
All about programs and services that use HTTPS.
1
vote
0answers
28 views
Redirect http->https, but exclude subdomain
I use Drupal, with a complicated multi-Domain setup, and have a local development site, that uses (locally) the dev. subdomain.
So I want a .htaccess file that can be used on production AND ...
0
votes
0answers
11 views
Appache SSL timeout and reqtimeout module
It seems Apache SSL http2 does not honor KeepAliveTimeout
Server version: Apache/2.4.29 (Ubuntu)
built: 2018-10-10T18:59:25
Searching Stackoverflow, I could find the issue is with ...
4
votes
2answers
68 views
What is the best next step when faced with curl <url> | sh
Most installation scripts these days have this particular pattern:
curl -fsSL <url> | sh --- and usually run as root
Some sites might even have a disclaimer about running this as root and to ...
0
votes
0answers
25 views
What are the ways to unwrap HTTPS in proxy-like way using standard tools?
For the low-end 8bit devices like home computers of 80ies, when attached to internet via newly-made network cards, or for low-end embedded devices as well, it is practically impossible to browse ...
0
votes
1answer
53 views
is it possible to detect ssh activity on port 443
I would like to detect the usage of ssh on port 443 on a linux gateway.
A kind of counter measure against stuff like sslh.
I think netfilter and iptables would be the solution, but can't find module ...
0
votes
1answer
94 views
Redirect on the same port from http to https with nginx reverse proxy
I have a website setup http://mydomain.com/myroject on ubuntu 14.04(apache webserver)
I setup htsql service on the same host to run on port 5000
working links:
http://mydomain.com/myproject
http://...
2
votes
1answer
57 views
How to configure “https” in same domain for multiple ports?
I have a website(apache web server, ubuntu 14.04) setup http://example.com and configured with ports 1996 and 1980.
These links works with http
http://example.com/myproject
http://example.com:1996/
...
0
votes
0answers
8 views
PGP Keyservers Featuring Download over HTTP?
My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS.
Are there keyservers out there that offer a ...
0
votes
0answers
134 views
How to configure yum to support https
I am trying to configure yum 3.4.3 to support HTTPS on my CentOS 7.
Currently I am getting the following error when trying to update an application with yum clean all; yum update myApp.
The error:
...
0
votes
2answers
33 views
Varying a certificate based on client TLS version in ClientHello
I've got a scenario where some older clients are only able to support MD5 and SHA1 signatures. Obviously these are generally considered deprecated but I do still need to support them. Upgrading ...
0
votes
0answers
145 views
How to config HTTPS on Apache tomcat
I have installed the Apache Tomcat/7.0.76 on centos7.
I want to enable SSL on the tomcat.
I have root, intermediate, domain certificate. Like this
85163c004aa3625d.crt gd_bundle-g2-g1.crt gdig2....
0
votes
1answer
291 views
How to download https file in AIX without wget and curl? [duplicate]
In an UNIX environment running AIX where I'm a not privileged user (without sudo) if I need to download a file from HTTPS server and there is no wget or curl... How I do it?
Is there any replacement ...
2
votes
0answers
249 views
wget a zip file from GitHub, OpenSSL error [closed]
$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip
--2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip
Resolving ...
1
vote
0answers
66 views
https server hello missing
I've setup an nginx server, and config it with a https certificate. But I cannot access my server through https occasionally . In some rare cases, it works well, but no server hello in most cases. ...
1
vote
1answer
61 views
Open Port443 on Linux Ubuntu 12.04
i have a Linux Ubuntu 12.04.3 LTS with Elastic Search installed. the Elastic Search is configured to accept the local requests via HTTP. i have a php website on the same server. it was on port 80 but ...
0
votes
0answers
11 views
can't ban chrome redirect http domain to https
chrome:Version 68.0.3440.75 (Official Build) (64-bit).
cat /etc/hosts
127.0.0.1 www.test.app test.app
I have build apache on local pc.Do as the webpage say.
Google Chrome redirecting localhost ...
1
vote
1answer
242 views
OpenBSD redirect HTTPS by doman with relayd or pf
I have one machine with multiple domains and I'm trying to run multiple HTTPS web servers on it. All web servers have https support so I just need to redirect incoming packets to appropriate port (...
2
votes
1answer
153 views
OpenBSD relay, https proxy for multiple domains
I'm trying to make a proxy for 3 web servers (running on the same machine as the proxy). A have successfully configured relayd to redirect a request to correct port by their host header, but I cannot ...
0
votes
0answers
44 views
HTTPS over direct Ethernet connection very slow
Very often I have to connect via a direct Ehternet connection from my Linux machine to network appliances that run OpenBSD. While SSH is always fast and as reliable as you would expect, HTTPS ...
0
votes
1answer
500 views
Unable to use curl with cookie-jar
I am trying to use curl for login request automation. Here, use of cookie-jar is must. When I use --cooki-jar cjar option, it shows following error.
root@kali:~# curl --cookie-jar cjar --output /root/...
0
votes
1answer
50 views
nghttp2 w/Buildroot on Raspberry Pi 3
I'm fairly new to buildroot and I'm trying to figure out the best way to get the "nghttp2" package added to my system so that I can utilize it in conjunction with curl on my embedded system.
I'm not ...
4
votes
3answers
8k views
How to trust self-signed certificate in cURL command line?
I've created a self-signed certificate for foo.localhost using a Let's Encrypt recommendation using this Makefile:
include ../.env
configuration = csr.cnf
certificate = self-signed.crt
key = self-...
1
vote
1answer
1k views
Create HTTPS server with socat
Currently I am trying to setup a toy https server with socat I am doing the following:
As described here http://www.dest-unreach.org/socat/doc/socat-openssl.txt
cert() {
openssl genrsa -out $1....
0
votes
0answers
32 views
How do I trust a proxy certificate on raspbian:
I just downloaded and ran fiddler using mono on my raspbery pi 3 running raspbian. To install/trust the certificate I tried to follow this tutorial. I copied the certificate to /root using sudo mc ...
1
vote
0answers
235 views
NGINX -> varnish load balancer -> Apache SSL connection = BAD REQUEST
This is my setup :
Server 1 = Nginx is receiving the request on port 443 and is used as a reverse proxy to send it to Varnish 5, on the same server on port 80.
Varnish is load balancing requests on ...
1
vote
0answers
85 views
Is this the right way to generate a wildcard CSR?
I generated my CSR on an Amazon Linux system using this command
openssl req -new -sha256 -key ~/mymaindomain.com.ssl/mymaindomain.com.key -out ~/mymaindomain.com.ssl/mymaindomain.com.csr
I verified ...
-1
votes
1answer
683 views
Apache2 as reverse proxy not working?
Hello I am trying to setup apache2 as reverse proxy on Ubuntu.
For the backed I have tomcat 7.
For the configuration file /etc/apache2/sites-enabled/example.co.conf
<VirtualHost *:80>
...
0
votes
0answers
678 views
How to configure apache as reverse proxy for HTTPS tomcat7 backend?
I have configured my tomcat7 to use letsencrypt SSL successfully on port 8443.
Now I want to accept for 443 port only I am using apache2 in front of it.
I added virtual host and this is the content on ...
0
votes
0answers
18 views
Setting up multiple websites on Apache Httpd renders one site only accessible
I am planning to setup bugzilla and Orangescrum on one server. I did the following configuration in httpd.conf
<VirtualHost *:80>
DocumentRoot /var/www/html/
<Directory /var/...
1
vote
2answers
577 views
How to make SSH port fowarding for HTTPS?
I've created the following port forwarding:
ssh -vL localhost:4433:example.com:443 remote-linux-host
Note: I'm using 4433 on my local instead of 443 to avoid running with sudo.
however when I go to ...
0
votes
1answer
740 views
blocking YouTube not working for Google Chrome
I have some rules on the FILTER table of Netfilter, which block HTTPS access to some websites:
-A FORWARD -s 10.255.255.0/26 -p tcp -m tcp --dport 443 -m string --string "facebook.com" --algo bm -j ...
0
votes
0answers
50 views
HTTP website tries to load with another website's SSL certificate
I have an HTTP website that when I try to load it via web, it redirects to HTTPS and the browser then says that site is using an invalid security certificate. That certificate in fact belongs to ...
2
votes
0answers
806 views
Timeout error after https configuration on CentOS 7
I have an app that has been running for 2 years now via http. Now we want to move to https for better security. Our OS is CentOS Linux 7. We have a virtual host config in /etc/httpd/sites-available ...
1
vote
1answer
2k views
HTTPS not responding in Centos 7 server
I use a commercial godaddy standard SSL server; I tried stop firewalld and iptables, but still no change. It works fine with HTTP, but is not responding with HTTPS. No ssl_error logs. I've been stuck ...
0
votes
2answers
513 views
Can't clone https urls with git
After the upgrade to Fedora 27, I can't clone urls using https anymore, ssh works fine. The error is:
fatal: unable to access 'https://repo-url': SSL certificate problem: unable to get local issuer ...
1
vote
1answer
1k views
HTTPS Authentication with Axel Downloader
Is there a way to use https authentication with Axel to download files?
I have gone through this answer and tried what was written, but to no extent. I got HTTP/1.1 401 Unauthorized as the output ...
1
vote
0answers
895 views
Curl fails on TLS connection: sslv3 alert bad record mac
I'm running a fresh debian stretch installation in a VM using QEMU on a Ubuntu 14.04 host. When I use curl on any HTTPS resource like
curl -vL https://get.rvm.io/
I get this error:
* Trying 2600:...
0
votes
0answers
792 views
Apt Update/Upgrade fail HTTPS (maybe?)
I cant update/upgrade my package on my server because some repository are not accessible.
apt-get update :
Ign:1 https://dl.yarnpkg.com/debian stable InRelease
Ign:2 http://nightly.odoo.com/10.0/...
0
votes
2answers
58 views
Black-listing client side certificates in Apache2?
Is there a way to black-list a client-side certificate issued to an specific user?
I currently have a case where a few malicious actors have my website's client side certificates and I do not know ...
2
votes
0answers
367 views
How to redirect all requests for localhost:483 to localhost:80 with dnsmasq
I have an issue with redirecting advertising domains to localhost on Linux Mint. I've followed the instructions on Debain Administration Guide and this gist on dns-based ad-blocking.
Generation of ...
3
votes
4answers
407 views
Automating OpenSSL certificates creation, Let'sEncrypt signing, and site dir associating, in an Nginx environment
I have an Ubuntu-server 16.04 VPS and Nginx. Now I'm implementing HTTP1 (without TLS, utilizing port 80) but I desire to go "one step forward" and work with HTTP2 (with TLS, utilizing port 443), for ...
0
votes
1answer
481 views
Run node app with SSL on 443 port (on 80 is working)
I am trying to configure a server running on Amazon EC2.
I figured out how to run my node app on port 80, but now I'm trying to run on port 443, with Letsencrypt SSL. Before to work on port 80 I ...
1
vote
1answer
123 views
Certain HTTPS web sites do not load from KVM virtual machine over IPv6
This is driving me crazy as I cannot load certain HTTPS web sites only from KVM virtual machines and only over IPv6. IPv4 works fine. IPv6 connectivity works for the same websites from the hypervisor.
...
0
votes
0answers
88 views
What available Debian security repo mirrors exist?
So I have discovered apt-transport-https and understand there are some general advantages to apt over HTTPS - such as it being possible for updates to be entirely hidden by whoever controls the ...
0
votes
0answers
269 views
Any static binary for x86-64 that can download over https
I'm looking for any binary ( like wget/curl ) that could download over https , is statically built and for x86-64 architecture.
I'm looking for a way to download from https on my android emulator, it ...
5
votes
4answers
6k views
Openssl command s_client always says 400 Bad Request
I am trying to test a server that is working normal in web browser, with openssl s_client option, connecting it directly using openssl returns the 400 Bad Request:
openssl s_client -servername ...
1
vote
2answers
163 views
How can a I redirect an HTTPS request to a HTTP server?
I have a Web Application running in HTTP. However I wanted to test a Web Service that is running on HTTPS using CORS. Since HTTP won't allow HTTPS request, I wanted to setup a proxy in my Web ...
1
vote
0answers
147 views
How to offload TLS client certificate authentication to a simple proxy
I have a web application that is accessible only through HTTPS with client certificate authentication. I need to run some analysis tools which don't cope well with client certificate authentication. A ...
1
vote
0answers
45 views
HSTSpreload, www subdomain and redirect issues
I looking for add my website to hstspreload list and the issue is it detect my website with www as a subdomain. I check web like amazon including www and it dont is detected how a subdomain (it is ...
0
votes
2answers
557 views
You're speaking plain HTTP to an SSL-enabled server port
I'm trying to open site using https://mydomain.com, but always I see:
You're speaking plain HTTP to an SSL-enabled server port.
But with http site works...
I'm using Apache 2.2.22, without nginx.
...
