Questions tagged [https]

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

HTTPS connections are often used for payment transactions and for sensitive transactions in corporate systems. They are increasingly being used for social networking sites like Facebook and Twitter to help prevent identity theft etc.

HTTPS on Wikipedia

2586 questions
50
votes
2 answers

Serve http (port 80) and https (port 443) on same VirtualHost

I need to setup my VirtualHost on Apache to serve on both http and https (using standard ports) If I enable the SSL Engine (as per below) - I get an error when on port 80. The reason is, parts of the site need to be SSL but other parts don't. How…
kron
  • 775
44
votes
2 answers

Can not get rid of `net::ERR_CERT_COMMON_NAME_INVALID` error in chrome with self-signed certificates

There are numerous question on the web where people are having difficulty setting up self signed certificates for use on internal network. Just to link a few: Getting Chrome to accept self-signed localhost certificate Chrome accept self-signed…
Ashesh
  • 545
41
votes
4 answers

How to use Jenkins with SSL / https

I have a Fedora server running Jenkins which I install via yum. Everything is okay, I can access it with http://ci.mydomain.com . But now, I want to access it with https://ci.mydomain.com so the login with username and password is encrypted. How can…
Tim
  • 600
39
votes
5 answers

Redirect https to another https

I've been Googling for this question, and ironically annoyingly I can't find a concrete answer. I've answered this question myself in the past, and now I can't remember my own explanation. Several times a year, someone will ask me to do this. I'd…
Stefan Lasiewski
  • 24,541
38
votes
6 answers

Do all servers need to use the HTTPS protocol or just public facing servers?

I have a front end web server running over HTTPS - this is public facing - i.e. port is open. I also have a backend API server that my webserver makes API requests to - this is public facing and requires authentication - port is open. These 2…
danday74
  • 871
36
votes
2 answers

Save Remote SSL Certificate via Linux Command Line

Can you think of any linux command-line method for saving the certificate presented by a HTTPS server? Something along the lines of having curl/wget/openssl make a SSL connection and save the cert rather than the HTTP response content. The gui…
Jim
35
votes
2 answers

HTTP over port 443 vs HTTPS over port 80

What is the difference between http://serverfault.com:443 and https://serverfault.com:80 Which one is more secure theoretically?
mohsinulhaq
  • 453
35
votes
2 answers

Can I build my own Extended Validation SSL certificate?

I can create by own CA and generate a self signed SSL certificate this way. But what does it take to make the browser show the certificate as being an "Extended Validation SSL certificate" ? Can I create one myself and teach my browser to show it as…
Niels Basjes
  • 2,226
35
votes
6 answers

Restrict Apache to only allow access using SSL for some directories

I have an Apache 2.2 server with an SSL certificate hosting several services that should be only access using SSL. ie: https ://myserver.com/topsecret/ should be allowed while http ://myserver.com/topsecret/ should be either denied or, ideally,…
DrStalker
  • 7,356
33
votes
10 answers

How to deal with a 421 Misdirected Request?

I occasionally get the following 421 error: Misdirected Request The client needs a new connection for this request as the requested host name does not match the Server Name Indication (SNI) in use for this connection. However, refreshing the browser…
mseifert
  • 519
32
votes
7 answers

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com . When I go to https://example.com , it doesn't redirect and returns the page/200 status. I don't want this, I want it to redirect to https://www.example.com…
Thomas V.
  • 2,141
31
votes
3 answers

What effect does https traffic have on web cache proxy servers?

I just took two university courses on computer security and internet programming. I was thinking about this the other day: Web cache proxy servers cache popular content from servers on the web. This is useful, for example, if your company has a 1…
ejsuncy
  • 413
  • 1
  • 5
  • 7
31
votes
6 answers

Why are CentOS mirrors HTTP and not HTTPS?

As far as I know, HTTP is prone to man-in-the-middle attacks . As such, the repositories in Alpine Linux or the CentOS Mirrors are not HTTPS. In the olden days, having HTTPS used to be an expensive matter. It cost server CPU time and the…
MaduKan
  • 421
29
votes
3 answers

redirect wildcard subdomains to https (nginx)

I've got a wildcard ssl certification and I'm trying to redirect all non-ssl traffic to ssl. Currently I'm using the following for redirection the non-subdomainded url which is working fine. server { listen 80; server_name mydomain.com; #Rewrite all…
whatWhat
  • 559
28
votes
9 answers

Handling http and https requests using a single port with nginx

i was wondering if nginx is able to handle http and https requests on the same port . [*] This is what i'm trying to do. I'm running a web server (lighttpd) handling http requests, and a C program that serves a particular section of the document…
alemartini
  • 1,103
1
2
3
…
99 100