167
votes
Accepted
apt-get fails: The method driver /usr/lib/apt/methods/https could not be found
Sounds like you may have added some https sources. Since there are no https sources in your sources.list, it would be something in /etc/apt/sources.list.d/.
You may also be dealing with a proxy that ...
- 2,449
79
votes
How to trust self-signed certificate in cURL command line?
Try -k:
curl -k https://yourhost/
It should "accept" self-signed certificates
- 4,661
29
votes
Accepted
Openssl command s_client always says 400 Bad Request
According to https://bz.apache.org/bugzilla/show_bug.cgi?id=60695 my command was:
openssl s_client -crlf -connect www.pgxperts.com:443
where -crlf means, according to help of the openssl command,
-...
- 406
20
votes
How to trust self-signed certificate in cURL command line?
Following these steps should solve your issue:
Download and save the self-signed certificate: echo quit | openssl s_client -showcerts -servername "${API_HOST}" -connect "${API_HOST}":443 > cacert....
- 1,033
14
votes
Accepted
Apache SSL: server cert does not include ID which matches server name
Okay, I noticed that this post is viewed quite often recently and so it seems that a lot of people are facing the same issue that I did. If so then this might help you.
I have followed a simple step-...
- 611
13
votes
Accepted
How to make SSH port fowarding for HTTPS?
Let´s suppose that example.com is 93.184.216.34.
One of the methods could be as follows.
Do:
ssh -L 4433:93.184.216.34:443 remote-linux-host
Define in your local /etc/hosts in the machine using ...
- 56.3k
12
votes
Accepted
How to trust self-signed certificate in cURL command line?
I had this issue, exact same problem and error messages, but I used GNUTLS's certtool to generate my cert rather than openssl.
My problem was that I had not made my self signed cert a CA. It was only ...
- 439
9
votes
apt-get fails: The method driver /usr/lib/apt/methods/https could not be found
For me this issue happened because one of the mirrors happened to always redirect to https.
So none of my sources were https, but due to the redirect, apt would end up trying to fetch something off an ...
- 91
9
votes
Openssl command s_client always says 400 Bad Request
OK had the same thing myself and took a while to figure out.
I can't find a way to send multiple lines in the request when using s_client interactively. It always sends the request immediately as soon ...
- 214
8
votes
Page not found but page is there
Because you have DocumentRoot /var/www/html/teampass in your https virtual host definition the URL https://teampass.urban.org/teampass is actually trying to serve the file /var/www/html/teampass/...
- 3,147
8
votes
Why is there no https transport for debian apt tool?
Note that because of vulnerabilities like
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1647467
... which circumvents InRelease signing, it's probably a good idea to configure HTTPS anyway.
...
- 1,200
8
votes
Download Windows ISO from microsoft using wget or curl
It is forbidden because there is are special characters in the url that are interpreted by the shell. There is e.g. '?' and '&'. Now take a look on your example url:
curl --location --remote-name ...
7
votes
wget doesn't support https
In case anyone else is coming across this error from within vmWare ESXi or another BusyBox environment, you aren't actually using wget:
Output from wget -V for me:
wget: invalid option -- 'V'
...
- 456
7
votes
How can I spot domain and https connection attempts to sshd?
You can add content-based firewall rules that analyze the first few bytes of incoming connections. For example, under Linux, with iptables:
iptables -N notssh
iptables -A input -p tcp --dport 443 -m ...
6
votes
What tool can I use to sniff HTTP/HTTPS traffic?
mitmproxy/mitmdump
Equalivant to tcpdump for HTTPS is mitmdump. Here are the steps:
Install mitmproxy package (macOS: brew install mitmproxy).
Install mitmproxy CA certificate by the following ...
- 20.6k
6
votes
Apache SSL: server cert does not include ID which matches server name
In my case I have resolved this by replaced in my apache ssl config file for each concerned domain :
ServerName mydomain.com
ServerAlias www.mydomain.com
by :
ServerName www.mydomain.com
...
- 171
6
votes
Accepted
Generate HPKP fingerprints for all certificate chain
Although I mostly concur with Romeo that you should have the cert files on the server already, if you do need to process the multiple certs from one s_client you can do something like:
openssl ...
- 3,903
5
votes
wget doesn't support https
Try removing the "s"... I mean just use http.
Most of the times there is a redirection from http to https active and wget seems to work with it.
Hit the address in your browser with plain http and ...
- 232
5
votes
How to trust self-signed certificate in cURL command line?
The solution provided using trustme works perfectly, but if anyone is interested in creating the certificates for learning purposes, these are the steps that worked for me:
Create the root CA:
...
- 151
5
votes
Accepted
PGP Keyservers Featuring Download over HTTPS?
openpgp.org has a facility for https. Just imported a few keys by their fingerprints. The path is predictable you just need to replace ${KEY_FINGERPRINT} with the fingerprint of the key you want to ...
- 2,366
5
votes
Accepted
How does `curl` access SSL certs in macOS?
This seems to be an issue with expired certificates and LibreSSl, according to https://curl.haxx.se/mail/lib-2020-06/0010.html. Possible workarounds are
Use curl -k at impacted web sites. This ...
- 3,241
4
votes
What tool can I use to sniff HTTP/HTTPS traffic?
For some situations, you can use a proxy that accepts incoming HTTP requests and makes outgoing HTTPS requests. As an example, I wanted to capture the traffic between git and github.com. I used ...
- 251
4
votes
Why is there no https transport for debian apt tool?
For the "anonymity" use-case there is also apt-transport-tor which then allows you to put URIs like tor+http:// in sources.list files. This is much better anonymity protection than simply encrypting ...
- 149
4
votes
How can I spot domain and https connection attempts to sshd?
A DNS over TCP client can be emulated with dig(1) like so (we explicitly use port 22 as the domain port might not be translated on the box itself):
dig @example.org -p22 +tcp example.org
Or like so:
...
- 3,243
4
votes
HTTPS with Docker?
HTTPS can't be just enabled in your container, like a setting.
You'll need to configure your web server, generate the certificates and even your application must be able to receive HTTPS requests.
I ...
- 2,701
4
votes
apt-get fails: The method driver /usr/lib/apt/methods/https could not be found
There are few possible incidents which lead to this type of issues. The most likely solution would be to run:
apt-get update
apt-get install apt-transport-https
You can find more details and possible ...
- 423
4
votes
Use OpenVPN on TCP 443 without it interfering with my web server
Use sslh - Applicative protocol multiplexer
http://www.rutschle.net/tech/sslh.shtml "Hence sslh acts as a protocol demultiplexer, or a switchboard. Its name comes from its original function to serve ...
- 14.4k
4
votes
Accepted
Can Linux differentiate between HTTPS and OpenVPN traffic?
If you read the OpenVPN man page (man openvpn) it tells you how to do something similar:
Quoting directly from the man page:
--port-share host port [dir]
When run in TCP server ...
- 111k
4
votes
Apache SSL: server cert does not include ID which matches server name
If you are seeing no other SSL errors,
and if you have tried setting 'LogLevel debug' in the httpd.conf file,
this error message can also suggest 'Listen 443' is missing from the httpd.conf file.
Only top scored, non community-wiki answers of a minimum length are eligible