Questions tagged [https]

HTTPS stands for HTTP Secure and is a combination of HTTP and SSL/TLS (Secure Sockets Layer/Transport Layer Security) and is used to provide an encrypted connection to a website.

HTTPS connections are often used for payment transactions and for sensitive transactions in corporate systems. They are increasingly being used for social networking sites like Facebook and Twitter to help prevent identity theft etc.

HTTPS on Wikipedia

2586 questions
27
votes
4 answers

Redirect all http requests behind Amazon ELB to https without using if

Currently I have an ELB serving both http://www.example.org and https://www.example.org . I would like to set it up so any request pointing to http://www.example.org is redirect to https://www.example.org . The ELB sends the https requests as http…
Jordan Reiter
  • 1,390
27
votes
2 answers

List of top-level domains (TLDs) that require HTTPS connections, like .dev

I know the .dev top-level domain requires all sites to support only encrypted HTTPS connections, disallowing any HTTP connections. Are there other such TLDs?
Basil Bourque
  • 1,005
  • 3
  • 13
  • 22
26
votes
4 answers

Can a Reverse Proxy use SNI with SSL pass through?

I need to serve several applications over https using one external ip address. The ssl certificates should not be managed on the reverse proxy. They are installed on the application servers. Can a reverse proxy be configured to use SNI and pass ssl…
user319862
  • 827
26
votes
9 answers

Multiple domains with SSL on same IP

I know that a dedicated IP is needed for setting up SSL. What happens if we add SSL for domains sharing an IP ? (Namevirtualhost)
nitin
  • 2,619
25
votes
1 answer

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the " This Connection is Untrusted " message and the "technical details" say www.groups.example.com uses an invalid security certificate. The certificate is only valid for the…
pee2pee
  • 369
25
votes
3 answers

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration . I can still do this in CentOS 7, except the list no longer includes Firewall configuration as an option.…
ste
  • 383
22
votes
2 answers

https timeout while http works

I've set up SSL for my domain and it works from Apache perspective. The problem is that accessing my domain over HTTPS sometimes results in timeouts. When it doesn't work, it takes some time to access my website over HTTP but it never times out. Why…
6bytes
  • 805
22
votes
3 answers

Adding HSTS to nginx config

I recently changed my nginx config to redirect all http traffic to https (and all www traffic to no-www). Would it make sense to also add add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; to my server blocks as well?…
Hassan Baig
  • 2,825
22
votes
3 answers

Configuring SSL With Virtual Hosts under Apache and CentOS

I've got two websites being served from a CentOS instance. One of those has SSL enabled, the other is just served on port 80. So, http://siteone.com and https://siteone.com both work fine, as does http://sitetwo.com . The issue is that…
gtcaz
  • 323
21
votes
1 answer

"server certificate verification OK" but "ALPN, server did not agree to a protocol"

I am making a curl call curl -v ... https://... and the verbose output contains .... * ALPN, offering http/1.1 * SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256 * server certificate verification OK .... * ALPN, server did not agree to a…
Craig Hicks
  • 777
21
votes
3 answers

Chrome reports ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY connecting to local web server over HTTPS

Summary Chrome is reporting ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY when I try and connect to my local web server over HTTPS. I am almost certain this problem has to do with my recent Windows 10 upgrade, but I don't know how to fix it. What worked…
NathanAldenSr
  • 385
21
votes
4 answers

"SSL input filter read failed" Apache and 443

I have a little problem with my apache conf. When I read the error log, here is what I can see: [client xxx.xxx.xx.xx] AH01964: Connection to child 1 established (server www.mywebsite.com:443) [client xxx.xxx.xx.xx] AH01964: Connection to child 6…
user3013440
  • 321
21
votes
6 answers

Is there any way to cache HTTPS requests in a proxy server?

We are using Squid proxy server in our environment and we want to cache HTTPS requests. Is there any way to configure Squid or in general a proxy server to cache HTTPS requests?
Supratik
  • 2,214
19
votes
2 answers

Redirect all requests to HTTPS, except for one subdirectory

I'm trying to move from self-signed certificates to Let's Encrypt certificates on my nginx webserver. Currently, I redirect all requests to http/80 to https/443 , which uses a self signed certificate I created a while ago. Now - from what I…
SaAtomic
  • 349
19
votes
2 answers

Where is the private key after using certreq for CSR generation on Windows 10?

I tried to follow the website below for instructions on how to generate the CSR for my web server: http://www.entrust.net/knowledge-base/technote.cfm?tn=8649 However, it only generates the CSR. Where is the private key? I was told that the key is…
Chong Lip Phang
  • 295
  • 1
  • 2
  • 7
1 2
3
…
99 100