HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

learn more… | top users | synonyms

1
vote
0answers
67 views

access websites with custom https port via socks proxy

I use a socks4 proxy in chrome (ssh tunnel via putty listens on localhost:60000) which works fine for all websites with the default http ports 80 and 443. What does NOT work is accessing websites over ...
-1
votes
2answers
1k views

https letsencrypt installation on windows with WAMP

Is possible to use letsencrypt with WAMP on a Windows 7? What are the steps of the complete installation process? I installed git for windows, then run a command in the cmd.exe to clone the client ...
2
votes
2answers
73 views

HTTPS what's going wrong with chrome?

I've an ASP.NET website. HTTPS works fine with all browsers (safari, firefox,ie,chromium...) except chrome... When I want to reach the website on HTTPS with chrome I have "This webpage is not ...
0
votes
0answers
144 views

ERR_SPDY_PROTOCOL_ERROR in Google Chrome

I've gone 2 days trying to figure this problem out myself before getting in touch with you guys about it. One computer on my network is getting the above error when trying to access a page on my CMS. ...
0
votes
0answers
14 views

free https with openSSL and noip domain

I am trying to use https on my website using startSSL, I already registered myself and received emails saying that the certificate was accepted and issued, and now what I have to do? I am reading a ...
0
votes
1answer
1k views

Firefox experiences a sec_error_unknown_issuer error for every HTTPS connection

When I attempt to connect to any site that uses an HTTPS connection (e.g. https://www.google.com), I get a 'This Connection is Untrusted' error. I'm using FF 42.0. I followed the instructions in the ...
0
votes
1answer
4k views

Firefox developer edition insecure connection all the time

Just installed FDE at my work, but i get the following message when trying to visit youtube.com, google.com and sites: Your connection is not secure The owner of www.youtube.com has ...
1
vote
1answer
33 views

Apache SSL with Multiple Virtualhost

I have a VPS from DO with one ip address. I'm managing multiple domain via Apache Virtual Hosts, and now, I must setup a virtual host with SSL support. I created a self-signed ssl certificate to test ...
1
vote
0answers
52 views

IE11 (or Windows 10) changes my user name when logging into SSL sites

Since the latest major Windows 10 update (fall 2015), Internet Explorer (version 11.11) has been refusing to log me into SSL-protected (https:) websites without me having to alter the recorded user ...
4
votes
5answers
730 views

Let's Encrypt with Amazon S3

Will it be possible to have https on the my static Amazon S3 website with Let's Encrypt? Even I have Let's Encrypt Closed Beta Invite now. But how to use it with Amazon S3?
1
vote
1answer
382 views

How to implement Let's Encrypt for CentOS / Apache

I am running CentOS 7 and apache 2.4 and would like to implement Let's Encrypt. What is the process for this?
-3
votes
1answer
140 views

You don't have permission to access / on this server for HTTPS URL

I have installed ownCloud on Debian OS. It works with HTTP but not with HTTPS. When an HTTPS URL is opened it throws this error: You don't have permission to access / on this server. HTTP ...
1
vote
1answer
149 views

Untrusted connection error on Chrome and Firefox when opening HTTPS websites

Since a few days ago - I believe it started after the Daylight Saving Time change - I can't open websites that use HTTPS connections, such as Yahoo, Facebook and Youtube, on Chrome or Mozilla Firefox. ...
0
votes
0answers
27 views

Root HTTPS request to HTTP for internal use

My configuration consists on two virtual machines (both CentOs 6) VM_A: Application server VM_B: Proxy server with squid The setup for my test How can I root https request to http request for ...
0
votes
1answer
47 views

Google domain name HTTPS errors on single router only

Every time I browse to google.com or my local google (google.com.sg), I get an HTTPS error which on Chrome is ERR_CERT_COMMON_NAME_INVALID. The certificate that is returned appears to be for the ...
0
votes
0answers
63 views

Local site with IIS Express Development Certificate takes long to connect

I'm running a local site with an IIS Express Development Certificate: When I use Chrome to connect to my local site https://www.example.com the Chrome taskbar keeps showing connecting...: Only ...
0
votes
1answer
173 views

Cannot open port 443 on modem

I'm developing a website, which requires an https connection because of the login system. I opened my Tomcat's Connector on port 443 and connecting through https://localhost works well, but i need it ...
0
votes
1answer
44 views

SSL does not work

I am trying to add https to our url. Below is my config in httpd.conf. But when I type in the url with https, the server hangs are returns time out. The url works with http as before. HTTPS part is ...
1
vote
2answers
432 views

svn not accepting https/ssl certificate

When bettercodes.org disappeared in September, I moved my private repo over to https://subversion.assembla.com/. It's working great, except for the fact that I have to temporarily accept the ...
0
votes
0answers
10 views

Difference between JKS file and client certificates

I am accessing my partner URL using httpS. I was able to download the client certificates from Browser itself. However i got to know that it is not enough for us only to have the client certificates ...
1
vote
2answers
37 views

*buntu: https on apt-get [closed]

I recently searched on the web to know about https for apt-get and as far as I read there's no actual need, that at least is what a lot of people defend, for the use of it for this as it's always ...
0
votes
0answers
38 views

Enforce HTTPS for specific pages of a web application

I have a web application that works on both the HTTP and the HTTPS protocols. I want some of its pages (form pages) to work only on the HTTPS protocol. The web application was developed on the ...
0
votes
3answers
48 views

https certificates for 2 IP addresses on the same server

We are working on a router-like device which can have it’s own access point and be connected to another router. We want to have https on the management web page using a valid certificate (not a ...
-2
votes
2answers
91 views

Is the data sent from web server to browser is really more secured in https than http?

I was just reading about the differences between http and https briefly. And what I have not understood is the following possible scenario: Everyone has SSL public key right? So, anyone can get the ...
0
votes
0answers
111 views

Using Cntlm & PuTTY to use http/https through SSH Tunnel

Forgive my grammar and my bad English. I'll try to explain as clearly and concisely as I can! This is an overview of the network topology I am facing: MyWorkstation → Transparent Proxy → Internet ...
0
votes
0answers
76 views

How to use WinHTTP logging to determine SSL/TLS level negotiated

I've enabled WinHTTP Logging but the log files don't give me the SSL/TLS level negotiated. "Using WinHTTP Logging to Verify SSL/TLS Negotiation" only discusses error responses. Can I only determine ...
0
votes
2answers
162 views

How can any “replace your DNS and watch netflix from another country” company work with HTTPS traffic?

There are many services like "unblock-us.com" that make it possible to use geo-restricted services from other countries. The setup is always the same: just replace DNS and that's it. My question is: ...
0
votes
1answer
38 views

How to untrust proxy or antivirus certificate and/or certificate authority?

I have antivirus inspecting my web traffic including HTTPs. In this question we discovered, that it installed it's self certificates or certificate authority (not sure about terminology). Now I wish ...
0
votes
1answer
387 views

How can Kaspersky embed code into web page accessed via HTTPs?

I have Kaspersky Internet Security (antivirus program) doing some security for me. Specifically, it checks links by it's database and marking it with green K signs. The question is: how it can be ...
1
vote
1answer
111 views

Is there a way to make Chrome assume a domain's certificate is valid (in other words, skip validating its certificate)?

Is there a way to make Chrome on Windows avoid validating the certificate for a domain such as (www.foo.com): Basically I want to avoid getting this warning message for that site every time I start ...
2
votes
1answer
455 views

How to test if a web-services client application supports TLS?

I have a client app that accesses an HTTPS web-service. It uses an external library for SSL support. The service provider has advised they are dropping SSL 3 support and, from a specific date, will ...
0
votes
1answer
61 views

every SSL certificate fails in chrome

I have downgraded from Windows 10 to Windows 7 today. Now EVERY time i call ANY https:// url in chrome, it tells me that the connection is not secure. My time settings are correct and the sites work ...
16
votes
4answers
46k views

Force Chrome to Ignore a "weak ephemeral Diffie-Hellman public key”

With the update of Chrome to v45, it's blocking access to pages with weak ephermeral Diffie-Hellman public keys. I understand that this is due to Logjam. I understand that switching from https to http ...
0
votes
0answers
386 views

Using Fiddler to sniff HTTPS requests of any process (Proxifier)

As far as I understand Fiddler, it simply listens on localhost:8888 and changes the windows proxy settings to exactly that. So that every application that connects using that proxy sends the data ...
0
votes
0answers
177 views

HTTP/1.1 401 Unauthorized when using XML-RPC PHP client and server

HTTP/1.1 401 Unauthorized This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser ...
0
votes
0answers
15 views

mod_header for Host Public Key Pinning?

I'm trying to configure Apache to write the Host Public Key Pinning Header (a.k.a Public Key Pinning Extension for HTTP or HPKP). I'm in the Apache docs at Apache Module mod_headers, but I can't ...
0
votes
0answers
200 views

Safari won't open a URL with special utf8 characters over https, but http works fine

My https switch is almost complete. Everything works flawlessly on every browser except Safari (both iOS and OSX). Some URLs contain Polish characters, such as żźćąłóń. Apparently in some cases ...
1
vote
1answer
102 views

Same SSL Cert on 2 Servers, 1 Passes & Other Doesn't

I run a few small sites, and last year installed SSL certificates on each of them. Last week a visitor contacted me with a question about my SSL certificate, which prompted me to run a couple of SSL ...
0
votes
0answers
318 views

Install self-signed SSL certificate correctly (for use in Node.js)

I've been trying to create a self-signed certificate, use it in a simple Node.js server, and install it into the system to the system trusted. However, something is not working, the 'SSL certificate ...
1
vote
1answer
39 views

Make Firefox warn before allowing user to visit non-HTTPS website

I want to avoid accidentally visiting websites served over unencrypted HTTP. How can I configure Firefox so that it will warn me if I attempt to visit such a site? Ideally: this shouldn't need an ...
2
votes
1answer
2k views

Suppress Google Chrome's “Your Connection is Not Private” for specific Address?

We have an internal website (behind our VPN) which uses https/ssl. Every time I visit it, I get this error message: Your connection is not private Attackers might be trying to steal your ...
0
votes
1answer
260 views

Firefox - any way to override Server Name Indication for troubleshooting?

I use firefox extensively to access and troubleshoot a myriad of webapps, many of them running on apache virtualhost'ed environments. One problem I've been having is that on SSL-enabled servers I ...
0
votes
0answers
193 views

How do I fan-out HTTP requests with a HTTPS/SNI proxy?

Let's say my HTTPS server gets contacted with the SNI hostname 200.100.2.1.myhost.com. I wish to read the SNI hostname, and depending on the hostname, forward to the IP address from the beginning from ...
1
vote
2answers
277 views

How redirect to HTTPS using DNS server?

I use the openDNS servers : 208.67.222.123 / 208.67.220.123 as DNS provider for my PC. When I go to an inappropriate http:// (adult content), I got redirected to https:// open dns site. I just ...
0
votes
1answer
487 views

Windows hosts: how can I redirect HTTPS site?

I have the following in my C:\Windows\System32\drivers\etc\hosts: 127.0.0.1 example.com It works when I use: http://example.com But does not work when I use: https://example.com, which gives error ...
0
votes
0answers
9 views

Securing email on the routeemail

I know that most emails use ssl but i wonder what happens with my email while it is in transit for example on the route to recipient there are many email servers and is ssh used on each hop? I believe ...
0
votes
1answer
160 views

Where does Firefox get the HSTS information from?

I have a local server serving HTTPS using a self-signed certificate. It does not serve http. The certificate is issued with cn=host1.subdomain1.domain1. The server is reachable under name host2, too. ...
0
votes
0answers
252 views

Chrome suddenly red HTTPS on mobile but not on desktop

Yesterday I enabled OCSP stapling for my website in nginx. Now when I check my website using Qualys SSL Labs I have 2 trust paths, 1 using a SHA1 root certificate and 1 using a SHA256 root ...
0
votes
1answer
131 views

Why would Chrome rewrite links within pages from the http:// to https:// scheme?

I'm completely stumped with this issue: When visiting a website which is a virtual host, without SSL support and with no reference to any https:// scheme within its database, or any file within it's ...
13
votes
4answers
3k views

Chrome adds weird HTTPS:1 header to all requests

I've been getting a lot of weird errors on websites that relate to HTTPS. These sites works great in FF and IE, but fail to load in Chrome. It appears that though I'm requesting an unsecured URL ...