Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [https]

All about programs and services that use HTTPS.

1
vote
0answers
28 views

Redirect http->https, but exclude subdomain

I use Drupal, with a complicated multi-Domain setup, and have a local development site, that uses (locally) the dev. subdomain. So I want a .htaccess file that can be used on production AND ...
0
votes
0answers
11 views

Appache SSL timeout and reqtimeout module

It seems Apache SSL http2 does not honor KeepAliveTimeout Server version: Apache/2.4.29 (Ubuntu) built: 2018-10-10T18:59:25 Searching Stackoverflow, I could find the issue is with ...
4
votes
2answers
68 views

What is the best next step when faced with curl <url> | sh

Most installation scripts these days have this particular pattern: curl -fsSL <url> | sh --- and usually run as root Some sites might even have a disclaimer about running this as root and to ...
0
votes
0answers
25 views

What are the ways to unwrap HTTPS in proxy-like way using standard tools?

For the low-end 8bit devices like home computers of 80ies, when attached to internet via newly-made network cards, or for low-end embedded devices as well, it is practically impossible to browse ...
0
votes
1answer
53 views

is it possible to detect ssh activity on port 443

I would like to detect the usage of ssh on port 443 on a linux gateway. A kind of counter measure against stuff like sslh. I think netfilter and iptables would be the solution, but can't find module ...
0
votes
1answer
94 views

Redirect on the same port from http to https with nginx reverse proxy

I have a website setup http://mydomain.com/myroject on ubuntu 14.04(apache webserver) I setup htsql service on the same host to run on port 5000 working links: http://mydomain.com/myproject http://...
2
votes
1answer
57 views

How to configure “https” in same domain for multiple ports?

I have a website(apache web server, ubuntu 14.04) setup http://example.com and configured with ports 1996 and 1980. These links works with http http://example.com/myproject http://example.com:1996/ ...
0
votes
0answers
8 views

PGP Keyservers Featuring Download over HTTP?

My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS. Are there keyservers out there that offer a ...
0
votes
0answers
134 views

How to configure yum to support https

I am trying to configure yum 3.4.3 to support HTTPS on my CentOS 7. Currently I am getting the following error when trying to update an application with yum clean all; yum update myApp. The error: ...
0
votes
2answers
33 views

Varying a certificate based on client TLS version in ClientHello

I've got a scenario where some older clients are only able to support MD5 and SHA1 signatures. Obviously these are generally considered deprecated but I do still need to support them. Upgrading ...
0
votes
0answers
145 views

How to config HTTPS on Apache tomcat

I have installed the Apache Tomcat/7.0.76 on centos7. I want to enable SSL on the tomcat. I have root, intermediate, domain certificate. Like this 85163c004aa3625d.crt gd_bundle-g2-g1.crt gdig2....
0
votes
1answer
291 views

How to download https file in AIX without wget and curl? [duplicate]

In an UNIX environment running AIX where I'm a not privileged user (without sudo) if I need to download a file from HTTPS server and there is no wget or curl... How I do it? Is there any replacement ...
2
votes
0answers
249 views

wget a zip file from GitHub, OpenSSL error [closed]

$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip --2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip Resolving ...
1
vote
0answers
66 views

https server hello missing

I've setup an nginx server, and config it with a https certificate. But I cannot access my server through https occasionally . In some rare cases, it works well, but no server hello in most cases. ...
1
vote
1answer
61 views

Open Port443 on Linux Ubuntu 12.04

i have a Linux Ubuntu 12.04.3 LTS with Elastic Search installed. the Elastic Search is configured to accept the local requests via HTTP. i have a php website on the same server. it was on port 80 but ...
0
votes
0answers
11 views

can't ban chrome redirect http domain to https

chrome:Version 68.0.3440.75 (Official Build) (64-bit). cat /etc/hosts 127.0.0.1 www.test.app test.app I have build apache on local pc.Do as the webpage say. Google Chrome redirecting localhost ...
1
vote
1answer
242 views

OpenBSD redirect HTTPS by doman with relayd or pf

I have one machine with multiple domains and I'm trying to run multiple HTTPS web servers on it. All web servers have https support so I just need to redirect incoming packets to appropriate port (...
2
votes
1answer
153 views

OpenBSD relay, https proxy for multiple domains

I'm trying to make a proxy for 3 web servers (running on the same machine as the proxy). A have successfully configured relayd to redirect a request to correct port by their host header, but I cannot ...
0
votes
0answers
44 views

HTTPS over direct Ethernet connection very slow

Very often I have to connect via a direct Ehternet connection from my Linux machine to network appliances that run OpenBSD. While SSH is always fast and as reliable as you would expect, HTTPS ...
0
votes
1answer
500 views

Unable to use curl with cookie-jar

I am trying to use curl for login request automation. Here, use of cookie-jar is must. When I use --cooki-jar cjar option, it shows following error. root@kali:~# curl --cookie-jar cjar --output /root/...
0
votes
1answer
50 views

nghttp2 w/Buildroot on Raspberry Pi 3

I'm fairly new to buildroot and I'm trying to figure out the best way to get the "nghttp2" package added to my system so that I can utilize it in conjunction with curl on my embedded system. I'm not ...
4
votes
3answers
8k views

How to trust self-signed certificate in cURL command line?

I've created a self-signed certificate for foo.localhost using a Let's Encrypt recommendation using this Makefile: include ../.env configuration = csr.cnf certificate = self-signed.crt key = self-...
1
vote
1answer
1k views

Create HTTPS server with socat

Currently I am trying to setup a toy https server with socat I am doing the following: As described here http://www.dest-unreach.org/socat/doc/socat-openssl.txt cert() { openssl genrsa -out $1....
0
votes
0answers
32 views

How do I trust a proxy certificate on raspbian:

I just downloaded and ran fiddler using mono on my raspbery pi 3 running raspbian. To install/trust the certificate I tried to follow this tutorial. I copied the certificate to /root using sudo mc ...
1
vote
0answers
235 views

NGINX -> varnish load balancer -> Apache SSL connection = BAD REQUEST

This is my setup : Server 1 = Nginx is receiving the request on port 443 and is used as a reverse proxy to send it to Varnish 5, on the same server on port 80. Varnish is load balancing requests on ...
1
vote
0answers
85 views

Is this the right way to generate a wildcard CSR?

I generated my CSR on an Amazon Linux system using this command openssl req -new -sha256 -key ~/mymaindomain.com.ssl/mymaindomain.com.key -out ~/mymaindomain.com.ssl/mymaindomain.com.csr I verified ...
-1
votes
1answer
683 views

Apache2 as reverse proxy not working?

Hello I am trying to setup apache2 as reverse proxy on Ubuntu. For the backed I have tomcat 7. For the configuration file /etc/apache2/sites-enabled/example.co.conf <VirtualHost *:80> ...
0
votes
0answers
678 views

How to configure apache as reverse proxy for HTTPS tomcat7 backend?

I have configured my tomcat7 to use letsencrypt SSL successfully on port 8443. Now I want to accept for 443 port only I am using apache2 in front of it. I added virtual host and this is the content on ...
0
votes
0answers
18 views

Setting up multiple websites on Apache Httpd renders one site only accessible

I am planning to setup bugzilla and Orangescrum on one server. I did the following configuration in httpd.conf <VirtualHost *:80> DocumentRoot /var/www/html/ <Directory /var/...
1
vote
2answers
577 views

How to make SSH port fowarding for HTTPS?

I've created the following port forwarding: ssh -vL localhost:4433:example.com:443 remote-linux-host Note: I'm using 4433 on my local instead of 443 to avoid running with sudo. however when I go to ...
0
votes
1answer
740 views

blocking YouTube not working for Google Chrome

I have some rules on the FILTER table of Netfilter, which block HTTPS access to some websites: -A FORWARD -s 10.255.255.0/26 -p tcp -m tcp --dport 443 -m string --string "facebook.com" --algo bm -j ...
0
votes
0answers
50 views

HTTP website tries to load with another website's SSL certificate

I have an HTTP website that when I try to load it via web, it redirects to HTTPS and the browser then says that site is using an invalid security certificate. That certificate in fact belongs to ...
2
votes
0answers
806 views

Timeout error after https configuration on CentOS 7

I have an app that has been running for 2 years now via http. Now we want to move to https for better security. Our OS is CentOS Linux 7. We have a virtual host config in /etc/httpd/sites-available ...
1
vote
1answer
2k views

HTTPS not responding in Centos 7 server

I use a commercial godaddy standard SSL server; I tried stop firewalld and iptables, but still no change. It works fine with HTTP, but is not responding with HTTPS. No ssl_error logs. I've been stuck ...
0
votes
2answers
513 views

Can't clone https urls with git

After the upgrade to Fedora 27, I can't clone urls using https anymore, ssh works fine. The error is: fatal: unable to access 'https://repo-url': SSL certificate problem: unable to get local issuer ...
1
vote
1answer
1k views

HTTPS Authentication with Axel Downloader

Is there a way to use https authentication with Axel to download files? I have gone through this answer and tried what was written, but to no extent. I got HTTP/1.1 401 Unauthorized as the output ...
1
vote
0answers
895 views

Curl fails on TLS connection: sslv3 alert bad record mac

I'm running a fresh debian stretch installation in a VM using QEMU on a Ubuntu 14.04 host. When I use curl on any HTTPS resource like curl -vL https://get.rvm.io/ I get this error: * Trying 2600:...
0
votes
0answers
792 views

Apt Update/Upgrade fail HTTPS (maybe?)

I cant update/upgrade my package on my server because some repository are not accessible. apt-get update : Ign:1 https://dl.yarnpkg.com/debian stable InRelease Ign:2 http://nightly.odoo.com/10.0/...
0
votes
2answers
58 views

Black-listing client side certificates in Apache2?

Is there a way to black-list a client-side certificate issued to an specific user? I currently have a case where a few malicious actors have my website's client side certificates and I do not know ...
2
votes
0answers
367 views

How to redirect all requests for localhost:483 to localhost:80 with dnsmasq

I have an issue with redirecting advertising domains to localhost on Linux Mint. I've followed the instructions on Debain Administration Guide and this gist on dns-based ad-blocking. Generation of ...
3
votes
4answers
407 views

Automating OpenSSL certificates creation, Let'sEncrypt signing, and site dir associating, in an Nginx environment

I have an Ubuntu-server 16.04 VPS and Nginx. Now I'm implementing HTTP1 (without TLS, utilizing port 80) but I desire to go "one step forward" and work with HTTP2 (with TLS, utilizing port 443), for ...
0
votes
1answer
481 views

Run node app with SSL on 443 port (on 80 is working)

I am trying to configure a server running on Amazon EC2. I figured out how to run my node app on port 80, but now I'm trying to run on port 443, with Letsencrypt SSL. Before to work on port 80 I ...
1
vote
1answer
123 views

Certain HTTPS web sites do not load from KVM virtual machine over IPv6

This is driving me crazy as I cannot load certain HTTPS web sites only from KVM virtual machines and only over IPv6. IPv4 works fine. IPv6 connectivity works for the same websites from the hypervisor. ...
0
votes
0answers
88 views

What available Debian security repo mirrors exist?

So I have discovered apt-transport-https and understand there are some general advantages to apt over HTTPS - such as it being possible for updates to be entirely hidden by whoever controls the ...
0
votes
0answers
269 views

Any static binary for x86-64 that can download over https

I'm looking for any binary ( like wget/curl ) that could download over https , is statically built and for x86-64 architecture. I'm looking for a way to download from https on my android emulator, it ...
5
votes
4answers
6k views

Openssl command s_client always says 400 Bad Request

I am trying to test a server that is working normal in web browser, with openssl s_client option, connecting it directly using openssl returns the 400 Bad Request: openssl s_client -servername ...
1
vote
2answers
163 views

How can a I redirect an HTTPS request to a HTTP server?

I have a Web Application running in HTTP. However I wanted to test a Web Service that is running on HTTPS using CORS. Since HTTP won't allow HTTPS request, I wanted to setup a proxy in my Web ...
1
vote
0answers
147 views

How to offload TLS client certificate authentication to a simple proxy

I have a web application that is accessible only through HTTPS with client certificate authentication. I need to run some analysis tools which don't cope well with client certificate authentication. A ...
1
vote
0answers
45 views

HSTSpreload, www subdomain and redirect issues

I looking for add my website to hstspreload list and the issue is it detect my website with www as a subdomain. I check web like amazon including www and it dont is detected how a subdomain (it is ...
0
votes
2answers
557 views

You're speaking plain HTTP to an SSL-enabled server port

I'm trying to open site using https://mydomain.com, but always I see: You're speaking plain HTTP to an SSL-enabled server port. But with http site works... I'm using Apache 2.2.22, without nginx. ...