0
votes
0answers
40 views

Apache configured for HSTS, but SSLLabs/Chrome not acknowledging

I'm setting up a webserver and I've been checking it against SSLLabs and Chrome 31 to make sure the security is up to snuff. However neither Chrome nor SSLLabs seems to believe that strict transport ...
0
votes
0answers
156 views

Why does the WebDAV(HTTP) RFC Specification produce invalid XML?

I am unable to use cadaver to view files in a WebDAV collection (hosted on Apache) as the XML part of the HTTP response is invalid. If I use cURL to pull a list of properties, I then face a problem ...
0
votes
1answer
98 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running ...
0
votes
0answers
224 views

How to configure iRedMail on nginx?

I have configuration for iRedMail: server { listen 80; server_name mail.myserver.com; rewrite ^(.*) https://$server_name$request_uri? permanent; } server { # By default we ...
1
vote
1answer
144 views

Apache vhost config with ssl redirect and two sites

I am running an apache webserver for a while now with a secure server. All traffic was rerouted to https://first.some.com (example names). Now I want to add a second site for testing purposes on the ...
1
vote
0answers
65 views

Using Apache as a debug proxy for https traffic

I know that I should be using mitmproxy (or Charles, or Fiddler, or Burp Proxy), and that I can use Squid, but is it possible to use Apache to debug out going https traffic from my computer? That is, ...
0
votes
1answer
943 views

Apache mod_rewrite working with http but not https

I am configuring an apache server to change URLs from [http://(IP)/users/testuser/test.html] to [http:/(IP)/~testuser/test.html] This works fine, as such RewriteEngine On RewriteRule ...
2
votes
2answers
643 views

Redirect Apache SSL traffic to subdomain with a proper certificate

I currently have a server which has a DynDNS subdomain (let's call it foo.dyn.com). I also have a proper domain with a CNAME pointing to that subdomain (let's call it bar.baz.com). foo.dyn.com has a ...
2
votes
1answer
2k views

Stopping Apache from listening in port 443?

Pretty self-explanatory. Is there any way I can make Apache stop listening in port 443 (Https). So that it only listens on port 80 (http)? I'm working on a Windows 7 PC. Edit 1: I installed Apache ...
0
votes
2answers
832 views

HTTPS not working on custom port

I am doing this as a test for bigger deployment. I have Apache running on CentOS5 in a clean VM (just a few tools installed, PHP and such). If mod_ssl is set to listen on 443 in ...
2
votes
1answer
4k views

How can I configure apache to use https instead of http for some requests?

For some of the files that I share using Apache, I want to make sure that they are served ONLY via https. How can I configure this for Apache?
15
votes
1answer
16k views

How to easily create a SSL certificate and configure it in Apache2 in Mac OS X?

I'd like to use my Mac OS X with https for local development tests. How can I easily make Apache2 respond to ssl, just for test proposes - I don't want a real certificate, just a fake to make local ...