Questions tagged [https]

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

HTTPS connections are often used for payment transactions and for sensitive transactions in corporate systems. They are increasingly being used for social networking sites like Facebook and Twitter to help prevent identity theft etc.

HTTPS on Wikipedia

2524 questions
6
votes
2 answers

HaProxy giving - 503 Service Unavailable

I am using below configuring for performing loadbalancing for two Tomcat servers. And I configured HAProxy to perform SSL/TLS bridging/re-encryption. #--------------------------------------------------------------------- # Example configuration for…
Narendra
  • 121
  • 1
  • 3
6
votes
3 answers

How to remove RC4 cipher from node.js https server running on Windows 2012 R2

Using ssllabs.com's scan tells me RC4 is in use. I read that RC4 should be disabled by default in Windows 2012 R2. I'm running a node.js server using https.createServer and not specifying ciphers (letting it default) ssllabs.com says: This server…
ciso
  • 217
  • 3
  • 14
6
votes
4 answers

How secure are wireless networks?

If I'm on an open wireless network, can a 3rd party capture packets and see all the internet traffic to and from my computer? What if WPA encryption is used, but someone has the key already? If I use HTTPS, can someone with direct access to the…
Lin
  • 2,909
  • 7
  • 27
  • 25
6
votes
1 answer

upstream prematurely closed connection while reading response header from upstream

I am having issues setting up SSL for my Jenkins CI server. I use Jenkins behind nginx for a reverse proxy. I am getting these upstream prematurely closed connection while reading response header from upstream errors in my jenkins.error.log file.…
Bryan Sills
  • 181
  • 1
  • 1
  • 4
6
votes
2 answers

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as "thawte Primary Root CA - G3" (this can be found on…
David QC
  • 83
  • 2
  • 4
6
votes
2 answers

Apache HSTS exception for some virtual hosts

In the global config section for Apache 2.2.15, I have the following (per recommendation) Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" env=HTTPS I would like to add this header only…
Gaia
  • 1,855
  • 5
  • 34
  • 60
6
votes
1 answer

Having problems setting up SSL with Nginx

I'm trying to setup SSL(0.9.8e) using Nginx(1.2.3) on a Windows 7 machine. I've generated a self-signed certificate that is needed, so I have a key and a certificate file. When trying to start Nginx it's failing and the error message I am getting in…
rfcoder89
  • 63
  • 1
  • 4
6
votes
5 answers

Redirect all http AND https non-www URLS to https://www.example.com via htaccess

For reasons much too long and complex to get into (it involves several layers of corporate red tape resulting in someone else not purchasing a wildcard SSL certificate I requested), I have to set up a domain to redirect all requests to…
Scott
  • 163
  • 1
  • 1
  • 6
6
votes
9 answers

Is there any DNS system or Service that is HTTPS aware?

Basically I need for DNS to respond with different CNAMES depending if the request was made for HTTPS or HTTP object. s.test.com -> IF(https) RESPONSE special.domain.com ELSE simple.domain.com Is it possible? What other possible ways to do that?
Jim
  • 410
  • 4
  • 14
6
votes
1 answer

HTTPS and Certification for dummies

I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated. Here we go: To use https I need to generate ‘private’ and ‘public’ keys for…
6
votes
8 answers

Apache redirect from http to https not working

I have the following conf files: file1: NameVirtualHost 123.45.67.890:80 ServerName example.com RedirectPermanent / https://example.com/ # RewriteEngine On # RewriteCond %{SERVER_PORT} !^443$ # …
6
votes
2 answers

Why is my new Ubuntu 12.04 unable to verify a Verisign ssl certificate?

In short: This request fails. $ curl 'https://secure.ogone.com/ncol/prod/orderstandard.asp' -vv * About to connect() to secure.ogone.com port 443 (#0) * Trying 213.254.248.101... connected * successfully set certificate verify locations: * …
The Shurrican
  • 2,240
  • 7
  • 39
  • 60
6
votes
3 answers

How do I diagnose network corruption on an Internet path?

I run a few hosts on network A that make requests to servers (which I don't own) on network B, somewhere across the Internet. Unfortunately, many of these requests get corrupted. If I make the requests over unencrypted HTTP, I get strange errors…
Andrew
  • 181
  • 1
  • 5
6
votes
2 answers

Apache ReverseProxyPass redrects to http rather than https

I have a reverse proxy setup using apache mod_proxy: ServerName reverse.server.com ProxyPass / http://10.1.9.11:3000/ ProxyPassReverse / http://10.1.9.11:3000/ ProxyPreserveHost on ...snip ssl…
Paul
  • 1,288
  • 13
  • 25
6
votes
2 answers

Using Apache as a reverse proxy HTTPS server in front of Remote Desktop Gateway server

I have a small server running several virtual machines, some web servers and also a windows 2008 R2 Remote Desktop Gateway server. The intention is to have an Apache2 server running on Ubuntu 11.10 which will act as a reverse proxy server to forward…