Questions tagged [https]

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

HTTPS connections are often used for payment transactions and for sensitive transactions in corporate systems. They are increasingly being used for social networking sites like Facebook and Twitter to help prevent identity theft etc.

HTTPS on Wikipedia

2524 questions
7
votes
4 answers

Apache configuration with virtual hosts and SSL on a local network

I'm trying to setup my local Apache configuration like so: http://localhost/ should serve ~/ http://development.somedomain.co.nz/ should serve ~/sites/development.somedomain.co.nz/ https://development.assldomain.co.nz/ should serve…
Petah
  • 650
  • 2
  • 13
  • 24
7
votes
4 answers

Does using SSL cause a significant performance hit?

I'm trying to decide whether to use SSL for a webapp. It doesn't handle credit cards or financial data, but it does store information that should be private for personal/social reasons. There is also the usual user registration and login…
Agvorth
  • 2,459
  • 4
  • 29
  • 29
7
votes
5 answers

Load balancing and HTTPS strategies

I am faced with the following problem: Servers get saturated since current load balancing strategy is based on client IP. Some corporate clients access our servers from behind large proxies so all clients appear with same IP to our load balancer. I…
Dan
  • 173
  • 1
  • 6
7
votes
1 answer

Does using CloudFront just to enable https make sense?

If I have an EC2 instance, running a web app (HTTP), and I have an Amazon-provided SSL certificate, I can use CloudFront to make the EC2 instance accessible via HTTPS, handling the certificate automatically. Is this a legitimate use of CloudFront,…
mitchus
  • 213
  • 1
  • 7
7
votes
1 answer

Letsencrypt for all subdomains *.example.com

I'd like to obtain one certificate working for all my subdomains *.example.com. This works: certbot-auto certonly --webroot --webroot-path /home/www/example/ --domain example.com --domain www.example.com --email…
Basj
  • 709
  • 3
  • 11
  • 29
6
votes
3 answers

Troubleshooting HTTPS on AWS ALB: Target Group Health Check Failing

I'm having trouble setting up HTTPS for my AWS EC2 instance. In short, I'm running a program on an EC2 instance, and it's critical that I be able to transfer the data securely from clients to AWS. What I've done so far: On AWS: Launched an EC2…
pixel-drinker
  • 61
  • 1
  • 1
  • 2
6
votes
2 answers

Https connection, TLS hangs and eventually fails SSL_ERROR_SYSCALL

I'm trying to correctly diagnose an issue where the server i have access to doesn't seem to be able to contact another server on the internet over port 443: ~$ curl https://mydomain.co.uk -vvv * Rebuilt URL to: https://mydomain.co.uk/ * Trying…
Ankur22
  • 111
  • 1
  • 2
  • 8
6
votes
1 answer

Open 443 on Google Compute Instance?

For some reason I can't open port 443 on my google compute instance. I have HTTPS server enabled on the instance, and using gcloud compute firewall-rules list returns the rules below: NAME NETWORK DIRECTION PRIORITY ALLOW …
cclloyd
  • 593
  • 2
  • 14
  • 29
6
votes
1 answer

HTTP status code to signal bad or missing Host header

Is there an HTTP status code which is appropriate to use for clients which send a bad hostname (or none at all) through SNI or the HTTP Host header? An older question address how and why such requests happen in the first place as well as how you can…
kasperd
  • 30,455
  • 17
  • 76
  • 124
6
votes
1 answer

Set Nginx https (on port 443) without the certificate?

I tried to follow up this thread as much as possible but I am always getting this message: This site can’t be reached example.com unexpectedly closed the connection. Try: Checking the connection Checking the proxy and the…
prosti
  • 348
  • 1
  • 6
  • 18
6
votes
1 answer

SSL alert number 113

We're seeing some errors in the past few days similar to this one, in our nginx error logs: /var/log/nginx/error.log.2.gz:2017/01/30 16:11:46 [crit] 13114#13114: *139338 SSL_do_handshake() failed (SSL: error:14094459:SSL…
Simon Woodside
  • 466
  • 1
  • 7
  • 15
6
votes
5 answers

Nginx reverse proxy pass through client certificate

I'm trying to set up a load balancer via an Nginx reverse proxy. My application uses client certificates to authenticate clients. I would like my reverse proxy to forward the client certificate to my back-end servers. I have added this line to my…
Hidde
  • 211
  • 1
  • 2
  • 6
6
votes
1 answer

Are caching proxy servers still be helpful for saving bandwith, now that major services have migrated to https?

I live in Turkey and am part of a group planning to build a WiFi-based ISP to service my home town, as we believe it will be easier to connect all the sub-villages that are not close to our town center wirelessly. During our research about the…
6
votes
1 answer

nginx accept HTTP & HTTPS requests on two different ports

I have one nginx server setup(two config files) with two gunicorn web servers setup and running. One gunicorn is production and the other is staging. I want nginx to serve http requests to xyz.com as well as https requests to xyz.com to the…
bazfire
  • 63
  • 1
  • 1
  • 4
6
votes
2 answers

HTTP to HTTPS local proxy that can do the HTTPS connection over a proxy

Here's the deal: Our client software can only connect using http protocol, it can not do https. However, security requirements dictate end-to-end security, so we need to use https when talking to the server. Now I have been able to do this in a…
codeape
  • 485
  • 2
  • 10
  • 16