Questions tagged [https]

All about programs and services that use HTTPS.

Filter by
Sorted by
Tagged with
0 votes
1 answer
41 views

Why squid deny the https request but allow the same site with http request?

I want to allow dev just use github copilot and deny other request. According to github info: https://docs.github.com/en/copilot/troubleshooting-github-copilot/troubleshooting-firewall-settings-for-...
张龙飞's user avatar
0 votes
0 answers
48 views

ufw rule supposed to block traffic but iptables allows it

As a test I wanted to temporarily block access to my website. So, I deleted http/https rules using ufw delete command. ufw is set to default deny incoming. The only remaining rule is the one allowing ...
Faxopita's user avatar
  • 179
0 votes
1 answer
112 views

Debian (and ubuntu) having throubles in downloading apt-get updates if I use https

As stated in the previous question: How can i force apt-get or apt to use only https connections deb https://deb.debian.org/debian bookworm main deb https://security.debian.org/debian-security ...
user3450548's user avatar
  • 2,836
0 votes
0 answers
387 views

Disable TLSv1.0 and TLSv1.1 using httpd CentOS7

I'm trying to disable TLS 1.0/1.1 for PCI Compliance, but having problems. Running CentOS 7 / Apache 2.4.6 The Server is setup with multiple hosts. All the documentation I've found is similar but ...
TexasTim's user avatar
0 votes
0 answers
80 views

why do I have requests from inside apache server with source ports 80 and 443

On one machine, I have a web server running (apache) and responding on ports 80 and 443. On this machine, I have a firewall (shorewall) that blocks everything except what I authorize, and I therefore ...
Chris972's user avatar
0 votes
1 answer
32 views

How to identify on console for a remote server what TLS it is providing on an HTTPS endpoint

I would like to find a way, to identify what type of TLS a remote HTTPS endpoint is providing, using only "standard" Linux command-line tools. I would like to know, what type of TLS the ...
PaulEdison's user avatar
0 votes
1 answer
85 views

SSL cert recognized by OpenSSL but not geventhttpclient

I have an instance of an NVIDIA Triton Inference Server. Then, there is the Python's client which uses geventhttp Python's package to perform the requests. This is all deployed as microservices, so in ...
bert's user avatar
  • 265
0 votes
0 answers
259 views

Squid transparent proxy for HTTPS requests that have been redirected by DNAT rule

I would like to look into suspicious activity of possibly infected web application in my network. I wanted to use squid to intercept https requests with https_port directive. My network setup: http/...
Marcel Tkáč's user avatar
0 votes
1 answer
46 views

Http outperformed Http2 ,why, please help me to figure out?

I'm currently conducting performance testing on my NGINX web server container and I'm encountering some unexpected results. My tests show that HTTP performance is outperforming HTTP/2, despite SSL and ...
Mhd HZ's user avatar
  • 1
0 votes
0 answers
69 views

How to create a catch all https "default_server" for "Welcome to Nginx!" Page, using self signed certificate in /etc/nginx/conf.d/default.conf

I am running a LEMP server with Nginx, and have the "listen 80 default_server;" directive enabled for port 80 in the catch all /etc/nginx/conf.d/default.conf directive. When I browse to the ...
DanRan's user avatar
  • 113
0 votes
0 answers
51 views

What is the correct way of redirecting / rewrtiting traffic from HTTP to HTTPS in Ubuntu / Apache2?

I'm learning about website hosting, and more and more YouTube sources recommend redirecting traffic from HTTP to HTTPS these days. I've found two ways this can be done, and I'd like to ask which one ...
michal roesler's user avatar
0 votes
0 answers
15 views

Apache - Move /wordpress installation to main website address

I just re-installed wordpress in Debian server and it sits in /var/www/html/wordpress directory. I used wordpress in the past, so I have partially configured things, just need to polish it a bit. I ...
saXh26Ql0zkF's user avatar
0 votes
0 answers
652 views

How to configure Privoxy HTTPS inspection?

After following through the docs at www.privoxy.org, I have created a cert and key with openssl, placed them into the CA directory at /usr/local/etc/privoxy/CA/, and given permissions to the privoxy (...
ManSoMean's user avatar
0 votes
0 answers
70 views

Enabling TLS1.1 on Tomcat9

On Ubuntu 22.04 I am trying to enable TLSv1.1 on Tomcat9 and openjdk-8-jdk I have added TLSv1.1 to Connector <Connector port="443" protocol="org.apache.coyote....
yurtesen's user avatar
  • 548
0 votes
1 answer
1k views

Getting the issuer or subject hash from a server's SSL certificate

Is there a way to check the issuer of subject hash of some server's SSL certificate? I know that curl or wget search for the matching root certificate in /var/lib/ca-certificates/openssl or /etc/ssl/...
aviro's user avatar
  • 4,927
1 vote
0 answers
24 views

https:// url for port 8443 lands on index in /var/www NOT its correct sub Dir

After a long time I have finally got port 8443 to work albeit at the end of the URL(:8443). However it lands on an html index page in the /var/www/ directory not in on the index in the correct sub ...
ozstar's user avatar
  • 11
0 votes
0 answers
235 views

Error Trying to load http url using curl

I am beginner. I am trying to load HTTP URL using curl in my Ubuntu terminal. The command I am using is curl -L 'http://google.com' But instead of getting source code. I am getting below error curl: ...
hmmbhaskar's user avatar
0 votes
0 answers
92 views

How to check whether my network connection supports HTTP2, gRPC or WebSocket?

My ISP/AS/NAT is problematic since I think it blocks some transfer-layer protocols. I want to check whether my connection to my domain behind a CDN (e.g. cloudflare) supports HTTP/2, gRPC, QUIC or ...
Ragahito's user avatar
0 votes
0 answers
3k views

curl(28) : ssl connection timeout

I try to tell only the details My browsers have no problem with https sites. But when they get to tools like links, wget and curl, they run into trouble, sites like gitlab, github, google, etc. are ...
ahmadreza1383's user avatar
0 votes
1 answer
158 views

Can't decrypt https traffic with wireshark

I am trying to decrypt https traffic according to these guides: https://linuxhint.com/decrypt-ssl-tls-wireshark/ https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/ But nothing is ...
Алекс Шевцов's user avatar
1 vote
1 answer
541 views

Which process is sending outbound requests?

I recently installed a Ubuntu desktop (only additional programs being google-chrome and VLC). When I enabled UFW and blocked everything outgoing by default, I noticed a bunch of outgoing attempts ...
Dr Phil's user avatar
  • 139
1 vote
2 answers
930 views

How to configure lighttpd to redirect HTTP to HTTPS?

I want to redirect HTTP requests to my website to HTTPS when the client browser supports it. My web server is lighttpd.
a3nm's user avatar
  • 9,177
1 vote
0 answers
5k views

curl OpenSSL SSL_connect: Connection was reset error

I am trying to run below command from azure VM. i am getting error. I have also validated the port connectivity and 443 is open for status.cloud.google.com. Is there anything else i am missing. please ...
Rajnish Kumar Soni's user avatar
3 votes
0 answers
820 views

Configure dnf to use DNS-over-HTTPS (DoH) without using systemd-resolved

Is there a way to configure dnf to use DNS-over-HTTPS (DoH) without using systemd-resolved or a proxy (i.e. dnscrypt-proxy)? I dont like have local servers running on desktops (even on loop back ...
python_nube's user avatar
3 votes
2 answers
596 views

How to get HTTPS response from a Website using OpenBSD base tools?

Using tools like curl or wget it's easy to "get" the response of an HTTP GET request, but both tools aren't installed by default on OpenBSD, and writing a portable shell script, it cannot be ...
Luca Etienne Schulz's user avatar
2 votes
1 answer
4k views

curl -- via proxy -- how to ignore self signed certificate

I can access insecure sites: curl -k https://self-signed.badssl.com I can access a site with mitmproxy: curl --proxy 127.0.0.1:8080 --cacert ~/.mitmproxy/mitmproxy-ca-cert.pem https://google.com ...
JenyaKh's user avatar
  • 346
2 votes
1 answer
7k views

openssl verify - how to verify a single combined certificate bundle file

I maintain/enhance a product that uses a browser-based admin interface. We're late to the party and are only now looking to support HTTPS between the browser and our backend (Apache httpd in front of ...
John Lamb's user avatar
0 votes
1 answer
2k views

Curl Parallel requests using links source file

I have this script to go through a list of URLs and the check return codes using Curl. Links file goes like this: https://link1/... https://link2/... https://link200/... (...) The script: INDEX=0 DIR=...
markfree's user avatar
  • 335
1 vote
1 answer
482 views

Is there some kind of hack that I can do to upgrade my Apache openssl from 0.9.8 to 1.1.1 ? Perhaps implement / recompile my own mod_ssl.so module?

I'm in desperate need for help. I've purchased a SSL certificate but my Apache server is running an old version of OpenSSL. Unfortunately I cannot re-install or re-compile Apache. It was installed ...
Richard Brason's user avatar
0 votes
1 answer
360 views

Server responses with IP Address instead of host name

I have a Backend which is used as a REST API. When I make a request to the server (GET https://subdomain.server.com/users/all) I get this response from the server: GET https://87.69.152.36/users/all ...
Daniel's user avatar
  • 1
0 votes
1 answer
402 views

Calcurse cant sync with Nextcloud

Hello I've recently setup a nextcloud instance with a calendar and wanted to sync my calcurse with it. This is my calcurse-caldav config(password, username and hostname obviously changed): [General] ...
Jocomol's user avatar
  • 101
0 votes
1 answer
212 views

SSL/TLS on linux mint using XAMPP?

I have a basic website that I want to get HTTPS on. It's like the crowning jewel to me. However, I am using linux mint for the server. All the tutorials I can find for it are on windows, using a ...
Piggy's user avatar
  • 15
0 votes
1 answer
141 views

Nextcloud container can't be accessed

I'm trying to create a nextcloud setup in a debian 10 VM with https and mysql and docker-compose but when I acces https://cloud.example.org my browser says it can't be reached. If I acces the link ...
Zeth's user avatar
  • 15
-1 votes
1 answer
157 views

Why can't http be changed to https in ubuntu?

Why can't http be changed to https in ubuntu? Err:1 https://ports.ubuntu.com/ubuntu-ports focal InRelease Could not connect to ports.ubuntu.com:443 (91.189.91.38). - connect (111: Connection refused)...
user487583's user avatar
0 votes
1 answer
2k views

Squid (proxy) is eating up its own resources (and other issues)

I have several squid issues, but one at a time: WARNING! Your cache is running out of filedescriptors This can happen when the proxy are getting a lot of calls, and can be fixed by increasing the ...
JoBe's user avatar
  • 397
0 votes
2 answers
2k views

Could not get nonce, let's try again when using acme

When I am using this command to generate a certificate on CentOS 7.6: acme.sh --issue --dns dns_cf -d poemhub.top -d *.poemhub.top -k ec-256 shows this error: [Sun Jul 11 23:09:28 CST 2021] Using CA:...
Dolphin's user avatar
  • 609
1 vote
2 answers
3k views

How to add correct chain certificate when acessing url with wget?

There is a site (https://datashare.is.ed.ac.uk/bitstream/handle/10283/3192/CINIC-10.tar.gz) which I know is misconfigured and I can get the new chained certificate from here: https://whatsmychaincert....
user avatar
0 votes
1 answer
272 views

Tools to investigate how DNS over TLS/HTTPS work / how resolve / if work correctly/ how establish tunnels etc

DoT DNS over TLS https://www.rfc-editor.org/rfc/rfc7858 DoH DNS over HTTPs https://www.rfc-editor.org/rfc/rfc8484 (nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- ...
Grzegorz Wierzowiecki's user avatar
0 votes
1 answer
923 views

Safari does not use the private root CA certificate

I've created a private root CA and issued some SSL certificate for some https websites, (I am not sure whether this should be called as self-signed certificate, in my case, the root ca certificate is ...
osexp2000's user avatar
  • 492
1 vote
1 answer
3k views

Why is HAProxy forwarding HTTP2 requests as HTTP 1.1?

I'm trying to configure a load balancer between 2 servers with HAPoxy, this is my configuration: frontend haproxynode bind *:443 ssl crt /etc/ssl/private/isel.pem alpn h2,http/1.1 mode tcp ...
Rodrigo Pina's user avatar
1 vote
1 answer
5k views

How can I fix curl that seems to be stuck on NSS initialization?

curl, dnf and other cmd lines tools that depends on https are not working properly $ curl -vvv --insecure https://google.com * Rebuilt URL to: https://google.com/ * Trying 172.217.29.14... * ...
Diogo Melo's user avatar
0 votes
0 answers
66 views

website STILL need to redirect from HTTP to https after Nginx redirect config

I use AWS EC2 to build a website using load balancer. However, the pentesting result shows that the website still could be reached by http. I have checked that in the Nginx config file, we does have a ...
Django's user avatar
  • 1
0 votes
1 answer
590 views

Raspberry PI (local) openSSL help: red-line through HTTPS fix?

I recently installed SSL on my RPi.. after using a few different tutorials.. I finally got the https:// url to resolve into showing the webpage content. However.. I had to 'ignore' the SSL warning (...
whispers's user avatar
  • 101
0 votes
1 answer
440 views

Redirect ip address to https

I am using Ubuntu and Nginx. I have my site hosted under SSL protection. If I type in the domain name in a browser without the 's' in 'https' in will redirect to 'https'. But if I type in the IP ...
Andrew Simpson's user avatar
1 vote
0 answers
17 views

Website migration

I have a website on a home linux box (Rasperry Pi2B). It is mailnly for my own use, but is exposed to the world, uses a Dynamic DNS service, HTTPS with a LetsEncrypt certificate, which renews ...
NormB's user avatar
  • 11
1 vote
1 answer
5k views

How can I fix broken https on Cockpit?

I've just installed cockpit on my CentOS 8 box: dnf install cockpit systemctl start cockpit.socket systemctl enable cockpit.socket Once I'd let it through the firewall, I can get it up on a.b.c.d:...
Codemonkey's user avatar
0 votes
1 answer
1k views

Server httpd(OpenBSD), doesn't work server.key

I have tried several methods, but the SSL certificate doesn't work. BSD# curl -vi https://192.168.1.21:443 * Trying 192.168.1.21:443... * Connected to 192.168.1.21 (192....
igor's user avatar
  • 1
0 votes
0 answers
546 views

How to force ddclient to use only HTTPS?

I'm running ddclient on Arch Linux with Namecheap. I want to force ddclient to use only HTTPS. Ddclient is a Perl client used to update dynamic DNS entries for accounts on 'Dynamic DNS Network ...
MountainX's user avatar
  • 17.8k
2 votes
2 answers
5k views

How to compile Wget with OpenSSL?

I'm trying to compile Wget using SSL suppor OpenSSL but I can't find a way to configure it.(I'm new to Linux) I already installed OpenSSL but wget it compiling by it default compiler gnutls as you can ...
Retrosec6's user avatar
2 votes
1 answer
10k views

How does `curl` access SSL certs in macOS?

I'm on a Macbook with macOS 10.15.5. I have MacPorts, but I am using the 'native' version of curl. % curl --version curl 7.64.1 (x86_64-apple-darwin19.0) libcurl/7.64.1 (SecureTransport) LibreSSL/2....
Seamus's user avatar
  • 2,885

1
2 3 4 5