Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [https]

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

HTTPS connections are often used for payment transactions and for sensitive transactions in corporate systems. They are increasingly being used for social networking sites like Facebook and Twitter to help prevent identity theft etc.

HTTPS on Wikipedia

2524 questions
5
votes
1 answer

Let's Encrypt certbot - add a new domain to certificate

I have certbot installed and it created a certificate for a few domains that I host and that's working - I got a single certificate that covers all the domains. Now I want to add a new domain to the certificate. I saw the the domain roots are listed…
Ivailo Karamanolev
  • 155
  • 1
  • 2
  • 7
5
votes
2 answers

SSL initial connection painfully slow in Chrome

Our customer has a PrestaShop based Webshop (https://www.hoerschiff.at) and now his hoster installed a SSL Cert. We updated the configuration of PrestaShop, so all pages are forced to be delivered via SSL. We're now facing the issue that the page…
Lukas Leitner
  • 61
  • 1
  • 1
  • 6
5
votes
2 answers

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to decrypt/reencrypt HTTPS traffic but push it as…
WoJ
  • 3,607
  • 9
  • 49
  • 79
5
votes
2 answers

Checking HTTPS setup on Apache/Nginx before using

You have just got a new HTTPS (SSL/TLS) Certificate, and what you hope is the correct Intermediate Certificates. This is setup in Apache with: SSLCertificateKeyFile /etc/ssl/www.example.com.key SSLCertificateChainFile…
Craig Francis
  • 633
  • 1
  • 8
  • 23
5
votes
1 answer

Set up IIS as forward proxy for HTTPS requests

Is it possible to set up IIS as a forward proxy for HTTPS requests? My use case is this: I have some process running locally on the IIS machine which is able to make HTTP calls, but not HTTPS calls. I would like to set up IIS so that I can send a…
w3worker
  • 51
  • 1
  • 1
  • 3
5
votes
1 answer

How to reverse proxy https with lighttpd?

I want to forward (reverse proxy) requests to https://secure.mydomain.com(:443) to my internal (HTTPS-)WebServer on port 8443 using Lighttp. Environment-Infos: My WebServer is a Tomcat running on Port 8080 (HTTP) and Port 8443 (HTTPS). HTTP and…
Ben
  • 221
  • 2
  • 6
5
votes
2 answers

Nginx correct SSL Certificate order

I got the following files: priv.key // This is my priv key and contains one -----BEGIN ENCRYPTED PRIVATE KEY----- section req.csr // This is my certificate request file cert.pem // This is my certificate I got back per mail and contains one…
Cracker0dks
  • 113
  • 1
  • 6
5
votes
1 answer

why is curl to https not working

I can do the following without any problems: curl -u "username:password" http://www.example.com/exportfile.xml But if I try to use the same command to the https version of our site it fails curl -u "username:password"…
ITFun
  • 69
  • 1
  • 1
  • 3
5
votes
2 answers

Can I use wildcards with SAN self-signed certificates?

We have a dev server that is accessible through the Internet, but is IP restricted, so security here is merely a way of allowing us to reproduce the live environment as opposed to trying to be secure. The top level domain, let's call it dev.com,…
Leonard Challis
  • 53
  • 4
  • 13
  • 27
5
votes
3 answers

Why does Chrome complain about "obsolete cryptography"?

I am hosting an ASP.NET website with wildcard ssl certificate on IIS / Windows 2008R2. While Chrome works fine with my website and shows a green lock the https connection, the https details mention "obsolete cryptography": I assume that this is due…
Adrian Grigore
  • 1,072
  • 3
  • 21
  • 34
5
votes
0 answers

Do modern web browsers always send the web server's hostname in the SNI extension header?

When a web browser that supports Server Name Indication (SNI) connects to an HTTPS site, does it ALWAYS send the hostname in the SNI field? That is, there is no way for a web browser to know if the HTTPS site it is connecting to is the only HTTPS…
Phillip Stewart
  • 61
  • 3
5
votes
1 answer

Nginx doesn't send certificate chain

I've got the following certificate (first one is my own, the other two are from Comodo PositiveSSL): -----BEGIN…
autrilla
  • 153
  • 1
  • 4
5
votes
1 answer

Proxy dropping custom headers with https

Problem : With HTTPS requests my proxy is dropping custom headers from the response : HTTP request : $ curl -I -x 127.0.0.1:5566 http://www.google.fr HTTP/1.1 200 OK ... X-Servedby: 50001 => My custom header is added to the response full response :…
vdaubry
  • 151
  • 4
5
votes
2 answers

Dockerfile separation of concerns for a secure apache httpd server with respect to SSL certification files

Issue: In a non-docker solution, the SSL certificates can be located in /etc/pki/CA/.... and with references to these in /etc/httpd/conf.d/*.conf files. How must these SSL certificates be managed/placed/used in a docker image for a secure apache…
Dev Dev
  • 65
  • 6
5
votes
5 answers

When do you use https:// and when do you use ssl://?

I am confused with the differences of the two. When do you use https:// and when do you use ssl://?
Randell
  • 1,173
  • 8
  • 18
  • 26
1 2 3
…
99 100