Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [https]

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

1
vote
1answer
14 views

Self-signing SSL certificate to secure web traffic on ClearOS on LINUX

I am very much a beginner when it comes to SSL certificate for securing website traffic. I am currently running a Linux version of ClearOS web server. Everything works as it should, but now I want to ...
0
votes
0answers
12 views

Reverse proxy to localhost with https

I have an Ubuntu server. I used certbot to make my nginx web server use https. I force all connections to redirect from port 80 to port 443. Recently I installed MadSonic, a music server that uses ...
0
votes
0answers
18 views

Windows 10 Remote Desktop via HTTPS

My understanding is that Windows can support remote desktop (RDP) over an HTTPS tunnel, but I cannot seem to find any documentation how how to configure this. Can someone point me to where I can find ...
0
votes
1answer
33 views

Jira Server Rest API does not work Properly with SSL

I have a Jira instance running on a debian server which I want to access from a Cloud Application called HockeyApp. The Problem happens when HockeyApp tries to access the Project List of Jira (fails ...
0
votes
0answers
22 views

ERR_CONNNECTION_CLOSED error on some https websites

Overview: I'm getting an ERR_CONNNECTION_CLOSED when trying to access specific websites over https. This seems a fairly common issue, but I haven't been able to find anything quite like what's ...
-1
votes
2answers
75 views

Google Chrome shows https:// page as insecure, but when in incognito mode shows it as secure [on hold]

I'm using the latest stable version of Chrome, version 70.0.3538.110 (Official Build) (64-bit). When I open some websites via https:// , Chrome does not show a lock in the address line, and on the ...
1
vote
1answer
22 views

How to forward a SSL session?

Suppose I have two local machines A and B, and there is also a remote server C. Originally if I want to visit some resources on C, I can use: https://domain_of_C/some_resources Now the requirement is ...
0
votes
0answers
18 views

nginx/nextcloud settings https problems

I have a question concerning the setup of nginx/nextcloud on my cubietruck ARM-SOC. I originally posted the question on the nextcloud board but did not get a reply there. So I am hoping for help from ...
0
votes
1answer
44 views

how to download from a FTP over HTTP link?

I simply want to download this package listed on this link: https://ftp.icm.edu.pl/packages/NetBSD/ But I am not getting exactly what it is. FTP over HTTP? Thought I am able to see the files but I ...
0
votes
0answers
27 views

Can I log HTTPS URLs through SQUID proxy or TCPDUMP?

I can log HTTP URLs but I can't HTTPS in /var/log/squid/access.log. It just logs IPs. Would it be easier or better to go with other traffic tools such as TCPDUMP? Note that traffic is rerouted ...
0
votes
2answers
39 views

File permissions for openssl created files for https web server (lighttpd)

I've created the following files for my lighttpd webserver for https connections: $ ls -al /etc/lighttpd/ssl drwxr-xr-x 2 root root 4096 Oct 21 12:51 . drwxr-xr-x 4 root root 4096 Oct 20 16:04 .. ...
0
votes
2answers
130 views

Why does Chrome say “Your connection to this site is not secure” even if the certificate is valid?

My site has a valid certificate, but Chrome marks it as insecure. I tried my site using Brave and Firefox, and both mark it as secure. I also ran this online test, and everything looks fine: https:/...
0
votes
1answer
26 views

Why would an Nginx HTTP to HTTPS redirect not work for the www subdomain

I configured NGINX to redirect all HTTP traffic to HTTPS like this: server { listen 80 default_server; listen [::]:80 default_server; server_name domain.com www.domain.com; return 301 ...
2
votes
1answer
57 views

Nginx: How to avoid server_name duplicate warning

I serve a site from nginx that is available both with internal host names as well as external ones. I want to force external access to use https, but keep http for internal access (because I can't get ...
1
vote
0answers
13 views

Call to API on Magento driven website does not work anymore after change to http/https redirection [closed]

A customer asked me to install a tls-certificate on his web server and make for http->https redirection. After installing the certificate and adjusting the rewrite rules as follows everything seemed ...
0
votes
1answer
43 views

SBS 2011 What SSL certificate should I get to make connections to the server valid [closed]

I have a SBS 2011 server that is running a Microsoft Exchange 2010. The issue I'm facing is based around self signed certificates. The first issue is that Outlook won't work unless you install the ...
-2
votes
1answer
23 views

Is it possible to have stunnel listen to specific path?

I am able to configure Stunnel to listen for 'myserver:port', however I'd like to be able to have Stunnel listen for a specific path e.g. 'myserver:port/path' Does anyone happen to know if this is ...
0
votes
0answers
98 views

Setup Proxifier(or alternative program)

So they installed an internet service in my university and now we can go to a class connect the ethernet cable and connect to the internet. Problem is, in order to access the web we need to connect to ...
0
votes
1answer
542 views

Trouble with https:// access to various sites

I'm experiencing a rather odd problem right now. My PC is running Windows 10 Enterprise, v1803, and about 10 days ago, suddenly several web sites stopped working properly. I first experienced it ...
0
votes
1answer
34 views

Apache2 Web Server always serves HTTP even though I only have SSL set up

I am trying to host an SSL Apache2 web server on Ubuntu 16.04 on the domain mturk.bitasy.me but I have reason to believe the server is lying to me, somewhere at least. I have created two files in the ...
0
votes
1answer
79 views

curl and wget not working with https sites after upgrade to ubuntu 18.04.1

Seems to be a openssl related issue. Anyone have any ideas as to what this is? Note that the url works in a browser. With wget: # wget -d https://deb.nodesource.com/setup_8.x DEBUG output created ...
1
vote
3answers
5k views

Can my employer see websites viewed on personal phone using corporate Wifi?

I have a question that no one has been able to answer properly on the net. If I use a personal iPhone, connected to my company’s guest WiFi, and browse to, say, https://google.com/news, does my ...
2
votes
0answers
109 views

Overriding Firefox's blocking of less-secure https pages

I recently installed a web filter. Any time an https site is filtered, I get the error ssl_error_protocol_version_alert (Peer reports incompatible or unsupported protocol version), or occasionally, ...
2
votes
0answers
29 views

Making wget's --convert-links respect http vs https

I'm using the following command to mirror an https website: wget --directory-prefix=/tmp/mirror --mirror --no-host-directories \ --regex-type pcre --reject-regex "$SKIP_REGEXP" \ --convert-...
0
votes
1answer
31 views

Wondering about something regarding intermediate certificates and Weechat

I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS. Both Weechat'...
0
votes
0answers
46 views

All https sites are redirected to mysite which is hosted on a computer on my network

I am hosting my website on a computer on my home network. The computer uses Debian Stretch as an operating system. I use dynu.com to post my IP. A while ago I made my website HTTPS using letsencrypt....
0
votes
0answers
47 views

Google Search Console, verification, sitemaps, HTTPS vs HTTP properties

I am very unfamiliar with the google web tools like Analytics or Search Console, (so apologies if some of this doesn't make sense) and this is the first time I have dealt with verifying a site or ...
0
votes
1answer
41 views

HTTPS communication without requesting certificate

Is there a hack or the architecture of SSL/TLS allows communication with a Server without requesting it's certificate may be by pre downloading the certificate and installing it,The reason I'm asking ...
0
votes
0answers
62 views

FiddlerCore: HTTP Tunnel Issue

I have an application, and I am trying to intercept its requests with FiddlerCore. Using Fiddler, I see the requests as follows: (HTTP CONNECT tunnel into HTTPS request) When using FiddlerCore, I ...
0
votes
0answers
421 views

How to use a non-443 port with https?

I can't get https to work on port 3000. Here's my specific situation: I have my own VPS running Centos6/Apache. I am using botkit-starter-slack to run a bot from my server. I have SSL certs that pass ...
2
votes
1answer
191 views

HTTP or HTTPS for a torrent tracker?

I use bttrack as a private torrent tracker. I don't see any HTTPS option. Does HTTPS matter for a torrent tracker? My question is about security (not performance) but I accept any other information/...
0
votes
1answer
59 views

Block all non-HTTPS traffic when browsing

I am trying to get approval for a firewall rule from an external Windows system into our company network to access a proxy to get back out to the Internet. My needs will involve use of a web browser, ...
1
vote
1answer
128 views

How can I circumvent HSTS on an intranet subdomain?

So, I have control over a small webserver that controls a subdomain of an intranet domain; the domain has HSTS turned on, so I can't connect to my subdomain via HTTP; I also can't use self-signed ...
2
votes
1answer
870 views

HTTP/HTTPS Proxy and FFmpeg

I need to use FFmpeg behind an HTTP/HTTPS proxy server. I'm using the following command line: ffmpeg -v debug -http_proxy http://localhost:8888 -i "https://bitmovin-a.akamaihd.net/content/sintel/...
2
votes
1answer
404 views

Disable .dev redirection to HTTPS in Firefox

In February, Firefox began to force .dev requests to https. Is there a way to disable this? I'd rather update one config in a browser than the dozen or so changes I'll need to make in order to ...
128
votes
3answers
21k views

Why does my browser think that https://1.1.1.1 is secure?

When I visit https://1.1.1.1, any web browser I use considers the URL to be secure. This is what Google Chrome shows: Normally, when I try to visit an HTTPS site via its IP address, I get a security ...
2
votes
1answer
736 views

ERR_CERT_COMMON_NAME_INVALID with wildcard certificate with Apache

I'm new to managing SSL certificates so my problem might be simple to resolve. I'm trying to add my wildcard SSL certificate to my website hosted on a container running Apache on Azure Container ...
1
vote
0answers
325 views

Cant login to Developer Apple account - connection not secure

When I want to login to developer.apple.com on Safari I have error that Safari can't establish secure connection to https://idmsa.apple.com/IDMSWebAuth/login?appIdKey..... I could do that before ...
0
votes
1answer
40 views

How to set up a http website and a https website on single-ip server in Apache?

I want to set up a http website:http://example1.com, and a https website:https://example2.com using the following configuration: Listen 80 Listen 443 NameVirtualHost *:80 NameVirtualHost *:443 <...
0
votes
0answers
53 views

DNS,SSL - Local Network

I have a server with 2 IPS: 177.68.XX.YY (public IP) 192.168.10.1 (local IP) This server has a SSL certificate (from Let's encrypt) for https://example.com There are several devices on this server ...
2
votes
1answer
523 views

How do browsers send http and https requests accordingly

When we type a web site name without protocol, browsers give the correct web site with it's correct protocol (i.e. http or https) For example if I type google.com and hit return key, browser gives me ...
1
vote
2answers
673 views

Self signed certificate not trusted

I have created my own CA: openssl genrsa -out private/rootCA.key 2048 openssl req -batch -new -x509 -nodes -key private/rootCA.key -sha256 -days 1024 -config ./openssl.conf -out certs/rootCA.pem I ...
1
vote
1answer
1k views

curl HTTPS problems in debian 9

Recently I started to use Debian 9 (9.4, from Debian 8.x) and a script involving curl stopped working. I connect to internet through a squid proxy on localhost connected to a parent proxy. My ...
3
votes
1answer
188 views

Configuring SSL on Apache HTTPd installed on VMWare VM : bad certificate

I am building a Reverse Proxy server with Apache HTTPd 2.4.6, under CentOS 7 (freshly installed) running on a VMWare VM. I also followed recommandations of https://wiki.apache.org/httpd/...
0
votes
2answers
41 views

Firefox Hides Login Text Fields

My institution uses a separate login page for a community ShareLatex account. The page is not secured over https according to Firefox. Normally I can create an exception for these sites through the ...
1
vote
0answers
881 views

Chrome automatically blocking microphone

I'm trying to test out SpeechRecognition API on my website (which requires microphone use), but because of the policy, Chrome is automatically blocking microphone. First thing i tried was enabling it ...
0
votes
0answers
107 views

Firefox randomly forces HTTP instead of HTTPS

So I've had this problem for a while. I have the latest firefox 58.0.2 but this problem has persisted through multiple versions. Basically sometimes every site I go to (expect google) goes through ...
0
votes
2answers
1k views

How to hide the html body when using curl?

Currently I am experimenting with curl flags, looking how to get only the response headers, follow the redirection if any, encryption and authentication used and the round trip time. What flag ...
1
vote
0answers
753 views

HTTPS (letsencrypt) squid proxy on a domain?

I'd like to make a HTTPS squid proxy (this kind) that can be used by anyone to access any site. This is not a reverse proxy, it is for the whole internet. For security reasons, IPs on my subnet should ...
1
vote
1answer
43 views

Apache - Multi SSL certs voiding each other

I have on one of our servers two SSL certs running for two projects, one of which is a wildcard SSL issued to that domain only, which I'll call domain2.com. domain1.com, the other domain has the ...