Questions tagged [https]
All about programs and services that use HTTPS.
189
questions
1
vote
0
answers
45
views
Configure dnf to use DNS-over-HTTPS (DoH) without using systemd-resolved
Is there a way to configure dnf to use DNS-over-HTTPS (DoH) without using systemd-resolved or a proxy (i.e. dnscrypt-proxy)? I dont like have local servers running on desktops (even on loop back ...
- 108
2
votes
2
answers
94
views
How to get HTTPS response from a Website using OpenBSD base tools?
Using tools like curl or wget it's easy to "get" the response of an HTTP GET request, but both tools aren't installed by default on OpenBSD, and writing a portable shell script, it cannot be ...
- 190
0
votes
0
answers
21
views
is it possible to custom the acme.sh output certificate format
I am using acme.sh v3.0.2 to renew a certificate, but the default output format was *.cer, is it possible to custom the output format? for example make the output format *.pem. I read the help ...
- 103
0
votes
1
answer
320
views
curl -- via proxy -- how to ignore self signed certificate
I can access insecure sites:
curl -k https://self-signed.badssl.com
I can access a site with mitmproxy:
curl --proxy 127.0.0.1:8080 --cacert ~/.mitmproxy/mitmproxy-ca-cert.pem https://google.com
...
- 264
0
votes
1
answer
324
views
openssl verify - how to verify a single combined certificate bundle file
I maintain/enhance a product that uses a browser-based admin interface. We're late to the party and are only now looking to support HTTPS between browser and our backend (Apache httpd in front of ...
-1
votes
1
answer
225
views
Curl Parallel requests using links source file
I have this script to go through a list of URLs and the check return codes using Curl.
Links file goes like this:
https://link1/...
https://link2/...
https://link200/...
(...)
The script:
INDEX=0
DIR=...
- 81
0
votes
1
answer
122
views
Is there some kind of hack that I can do to upgrade my Apache openssl from 0.9.8 to 1.1.1 ? Perhaps implement / recompile my own mod_ssl.so module?
I'm in desperate need for help. I've purchased a SSL certificate but my Apache server is running an old version of OpenSSL. Unfortunately I cannot re-install or re-compile Apache. It was installed ...
0
votes
1
answer
24
views
Server responses with IP Address instead of host name
I have a Backend which is used as a REST API. When I make a request to the server (GET https://subdomain.server.com/users/all) I get this response from the server:
GET https://87.69.152.36/users/all
...
- 1
0
votes
1
answer
135
views
Calcurse cant sync with Nextcloud
Hello I've recently setup a nextcloud instance with a calendar and wanted to sync my calcurse with it.
This is my calcurse-caldav config(password, username and hostname obviously changed):
[General]
...
- 1
0
votes
1
answer
71
views
SSL/TLS on linux mint using XAMPP?
I have a basic website that I want to get HTTPS on. It's like the crowning jewel to me. However, I am using linux mint for the server. All the tutorials I can find for it are on windows, using a ...
- 15
0
votes
1
answer
52
views
Nextcloud container can't be accessed
I'm trying to create a nextcloud setup in a debian 10 VM with https and mysql and docker-compose but when I acces https://cloud.example.org my browser says it can't be reached. If I acces the link ...
- 15
-1
votes
1
answer
57
views
Why can't http be changed to https in ubuntu?
Why can't http be changed to https in ubuntu?
Err:1 https://ports.ubuntu.com/ubuntu-ports focal InRelease
Could not connect to ports.ubuntu.com:443 (91.189.91.38). - connect (111: Connection refused)...
- 130
0
votes
1
answer
345
views
Squid (proxy) is eating up it's own resources (and other issues)
I have several squid issues, but one at a time;
WARNING! Your cache is running out of filedescriptors
This can happen when the proxy are getting a lot of calls, and can be fixed by increasing the ...
- 327
0
votes
0
answers
161
views
Bazel Remote Cache not working with certificates/TLS
I'm runnig Bazel remote cache from https://github.com/buchgr/bazel-remote inside docker, by runnig the following commands to start the http and grpc server:
docker pull buchgr/bazel-remote-cache
...
- 101
0
votes
2
answers
837
views
Could not get nonce, let's try again when using acme
When I am using this command to generate a certificate on CentOS 7.6:
acme.sh --issue --dns dns_cf -d poemhub.top -d *.poemhub.top -k ec-256
shows this error:
[Sun Jul 11 23:09:28 CST 2021] Using CA:...
- 361
0
votes
0
answers
8
views
Redirect and add missing domain
We have a web service that is served using HTTPS on prem,
We're using apache reverse proxy to add HTTPS security.
The web services are served at wiki.abc.corp
Problem I experience is that people a ...
- 123
1
vote
2
answers
187
views
How to add correct chain certificate when acessing url with wget?
There is a site (https://datashare.is.ed.ac.uk/bitstream/handle/10283/3192/CINIC-10.tar.gz) which I know is misconfigured and I can get the new chained certificate from here: https://whatsmychaincert....
suphur
0
votes
1
answer
44
views
Tools to investigate how DNS over TLS/HTTPS work / how resolve / if work correctly/ how establish tunnels etc
DoT DNS over TLS https://www.rfc-editor.org/rfc/rfc7858
DoH DNS over HTTPs https://www.rfc-editor.org/rfc/rfc8484
(nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- ...
- 12.9k
0
votes
1
answer
257
views
Safari does not use the private root CA certificate
I've created a private root CA and issued some SSL certificate for some https websites,
(I am not sure whether this should be called as self-signed certificate, in my case, the root ca certificate is ...
- 209
1
vote
1
answer
1k
views
Why is HAProxy forwarding HTTP2 requests as HTTP 1.1?
I'm trying to configure a load balancer between 2 servers with HAPoxy, this is my configuration:
frontend haproxynode
bind *:443 ssl crt /etc/ssl/private/isel.pem alpn h2,http/1.1
mode tcp
...
- 11
1
vote
1
answer
934
views
How can I fix curl that seems to be stuck on NSS initialization?
curl, dnf and other cmd lines tools that depends on https are not working properly
$ curl -vvv --insecure https://google.com
* Rebuilt URL to: https://google.com/
* Trying 172.217.29.14...
* ...
- 143
0
votes
0
answers
55
views
website STILL need to redirect from HTTP to https after Nginx redirect config
I use AWS EC2 to build a website using load balancer.
However, the pentesting result shows that the website still could be reached by http.
I have checked that in the Nginx config file, we does have a ...
- 1
0
votes
1
answer
228
views
Raspberry PI (local) openSSL help: red-line through HTTPS fix?
I recently installed SSL on my RPi..
after using a few different tutorials.. I finally got the https:// url to resolve into showing the webpage content.
However..
I had to 'ignore' the SSL warning (...
- 101
0
votes
1
answer
93
views
Redirect ip address to https
I am using Ubuntu and Nginx.
I have my site hosted under SSL protection.
If I type in the domain name in a browser without the 's' in 'https' in will redirect to 'https'.
But if I type in the IP ...
- 103
1
vote
0
answers
16
views
Website migration
I have a website on a home linux box (Rasperry Pi2B). It is mailnly for my own use, but is exposed to the world, uses a Dynamic DNS service, HTTPS with a LetsEncrypt certificate, which renews ...
- 11
0
votes
1
answer
2k
views
How can I fix broken https on Cockpit?
I've just installed cockpit on my CentOS 8 box:
dnf install cockpit
systemctl start cockpit.socket
systemctl enable cockpit.socket
Once I'd let it through the firewall, I can get it up on a.b.c.d:...
- 203
0
votes
1
answer
605
views
Server httpd(OpenBSD), doesn't work server.key
I have tried several methods, but the SSL certificate doesn't work.
BSD# curl -vi https://192.168.1.21:443
* Trying 192.168.1.21:443...
* Connected to 192.168.1.21 (192....
- 1
0
votes
0
answers
205
views
How to force ddclient to use only HTTPS?
I'm running ddclient on Arch Linux with Namecheap. I want to force ddclient to use only HTTPS.
Ddclient is a Perl client used to update dynamic DNS entries for accounts on 'Dynamic DNS Network ...
- 15.4k
1
vote
1
answer
3k
views
How to compile Wget with OpenSSL?
I'm trying to compile Wget using SSL suppor OpenSSL but I can't find a way to configure it.(I'm new to Linux)
I already installed OpenSSL but wget it compiling by it default compiler gnutls as you can ...
- 11
2
votes
1
answer
4k
views
How does `curl` access SSL certs in macOS?
I'm on a Macbook with macOS 10.15.5. I have MacPorts, but I am using the 'native' version of curl.
% curl --version
curl 7.64.1 (x86_64-apple-darwin19.0) libcurl/7.64.1 (SecureTransport) LibreSSL/2....
- 2,114
1
vote
0
answers
2k
views
Impossible to start Apache service due to SSL library error
I am trying to configure Apache in order to accept HTTPS requests.
Following some tutorials found online, I generated the following certificates:
my-ca.key (CA private key)
my-ca.crt (CA certificate)
...
- 123
0
votes
0
answers
39
views
how to generate HTTPS related keys on Linux?
For the https://github.com/bstarynk/helpcovid project we use the cpp-httplib C++ HTTP server library configured with CPPHTTPLIB_OPENSSL_SUPPORT ; see its simplesrv.cc example.
For testing purposes we ...
- 9,993
0
votes
0
answers
121
views
How to forward path along with port
I'm willing to bet I have a fundamental misunderstanding here, but I am trying to do something akin to port-forwarding AND url-forwarding without using something like nginx.
I have a remote linux ...
- 101
10
votes
2
answers
14k
views
Download Windows ISO from microsoft using wget or curl
Objective: download the official Win10_1909 iso into linux directly via command line
Source: https://www.microsoft.com/en-in/software-download/windows10ISO
After selecting edition and language you ...
- 113
0
votes
1
answer
452
views
I would like to block access to all http
On a Linux system, I need to block outbound access to all http and https traffic except to the web server 192.168.1.253. The system should also block all incoming traffic except ssh.
How would I ...
1
vote
0
answers
52
views
Backward ssh connection via Forward https connection (https-tunnel)
I need a construction that make possible to tunnel backward SSH via forward HTTPS. I tried to draw on a picture what I have to get. The picture shows 4 steps that explain what and how I want to make.
...
- 11
1
vote
1
answer
265
views
HTTPS connections are generating incoming connections
I have a lot of records in my firewall log that are related to HTTPS traffic. For some reason incoming connections are being made to ephemeral ports and they are blocked by my firewall because these ...
- 553
2
votes
2
answers
7k
views
How can i force apt-get or apt to use only https connections
I am running a mongo db docker container on a network using only https. The container uses apt-get for installing packages. Since network allows only https connections,apt-get is not working for me.
...
- 125
1
vote
0
answers
120
views
Will this firewall configuration prevent unencrypted traffic?
All incoming and outgoing traffic denied.
Allowed outgoing ports: 53,67,68,443
Since I have not allowed port 80 and since programs use port 443 for https traffic by default, will this configuration ...
- 111
0
votes
1
answer
359
views
http server with ssl does not work with nc
If run:
cat index.html | nc --ssl --broker --keep-open -l 443
on the client side browser keeps on trying to connect with no success. I mean, the html page does not load.
Besides, curl output is:
...
- 3,939
0
votes
1
answer
194
views
Nginx as Web Proxy fails on https
I have been trying to configure nginx to act as a web proxy (like squid) to be able to modify headers. It is working with http, but https shows "Server not found". Also, I can access directly with the ...
0
votes
1
answer
249
views
Monitor incoming traffic on ports 80 & 443, vanilla VPS, recycled IP address
On a newly-created Debian (or derivative) server operating system, how can I a) check for the existence of, b) roughly quantify, and c) see the origin of any junk/DoS traffic on ports 80 and 443, ...
- 119
1
vote
0
answers
18
views
Nginx, Let's encrypt cause error redirect http to https partially
I am using CentOS 7, Let's encrypt (want to clear all thing related 002.bkit.vn), Nginx.
I try to install Let's encrypt for 002.bkit.vn , then I remove it, some things still exist, but I don't know ...
- 169
1
vote
0
answers
55
views
Redirect http->https, but exclude subdomain
I use Drupal, with a complicated multi-Domain setup, and have a local development site, that uses (locally) the dev. subdomain.
So I want a .htaccess file that can be used on production AND ...
- 151
4
votes
2
answers
579
views
What is the best next step when faced with curl <url> | sh
Most installation scripts these days have this particular pattern:
curl -fsSL <url> | sh --- and usually run as root
Some sites might even have a disclaimer about running this as root and to ...
- 113
0
votes
0
answers
54
views
What are the ways to unwrap HTTPS in proxy-like way using standard tools?
For the low-end 8bit devices like home computers of 80ies, when attached to internet via newly-made network cards, or for low-end embedded devices as well, it is practically impossible to browse ...
- 121
0
votes
1
answer
217
views
is it possible to detect ssh activity on port 443
I would like to detect the usage of ssh on port 443 on a linux gateway.
A kind of counter measure against stuff like sslh.
I think netfilter and iptables would be the solution, but can't find module ...
- 454
0
votes
1
answer
2k
views
Redirect on the same port from http to https with nginx reverse proxy
I have a website setup http://mydomain.com/myroject on ubuntu 14.04(apache webserver)
I setup htsql service on the same host to run on port 5000
working links:
http://mydomain.com/myproject
http://...
- 323
4
votes
1
answer
9k
views
How to configure "https" in same domain for multiple ports?
I have a website(apache web server, ubuntu 14.04) setup http://example.com and configured with ports 1996 and 1980.
These links works with http
http://example.com/myproject
http://example.com:1996/
...
- 323
5
votes
1
answer
748
views
PGP Keyservers Featuring Download over HTTPS?
My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS.
Are there keyservers out there that offer a ...
- 35.5k