Questions tagged [https]
All about programs and services that use HTTPS.
217 questions
0
votes
3
answers
60
views
Can I use PERL_LWP_SSL_VERIFY_HOSTNAME with HEAD(1)?
Sure, PERL_LWP_SSL_VERIFY_HOSTNAME=0 will probably work if one is willing to write scripts: https://stackoverflow.com/questions/6795030/how-to-ignore-certificate-verify-failed-error-in-perl
But I just ...
-1
votes
1
answer
92
views
How to troubleshoot duckDNS from MacOS / Safari [closed]
A NCP (nextcloudpi) server is stationed at downwind.duckdns.org
Safari returns:
Chrome returns:
A private Safari browser returns the expected NCP webpage.
I seek a troubleshooting procedure to ...
1
vote
3
answers
1k
views
I just installed Debian. I was trying to install ProtonVpn but I can't pull the deb file with wget
I just installed Debian. I was trying to install ProtonVpn but I can't pull the deb file with wget. My system clock is up to date. I also tried adding different servers in the resolve.conf file but ...
0
votes
1
answer
251
views
Tunnel all https traffic from server through remote to bypass firewal
I have a remote machine I ssh where I'm running code that needs to access a specific https url (https://api.trustedservices.intel.com/sgx/certification/v4/qe/identity for example, or any other ...
1
vote
0
answers
158
views
http/https monitoring from terminal with top-like interface
I'm looking for a network monitor in a top-like interface, but I would like to be able to inspect all requests / responses, not just the IP addresses that are being connected to. I've found several ...
0
votes
1
answer
183
views
NGINX x-forwarded-proto not working
I have an ASP.NET app hosted in a Docker container, with a NGINX reverse proxy, hosted on a VPS. When running in production, the x-forwarded-proto header isn't being passed.
From what I understand, ...
0
votes
1
answer
734
views
How do I tell curl to try other protocols?
I tried downloading an Aeroméxico news item using
curl "https://www.aeromexico.com/en-us/am-news/new-Rome-route" -s --trace-ascii -
But it reports
== Info: HTTP/2 stream 1 was not closed ...
1
vote
1
answer
133
views
Why is my web server serving HTTPS content on port 80?
Apache webserver on Rocky Linux 9, with SSL certs obtained from LetsEncrypt. This is the config of a specific virtual host "myvhost", but the problem arises for all vhosts on my server:
/etc/...
0
votes
1
answer
157
views
Bot crawling getting 301/redirects instead of 404 so it's hiding from fail2ban. How is it getting 301 intead of 404?
I have fail2ban setup and it's working great for most scanning. It triggers off any 4xx in the nginx error log. However, note the following bot scan. Somehow THIS bot is triggering my server to return ...
3
votes
2
answers
3k
views
Is the Web server on repo.skype.com down? [closed]
For at least three days (today is 2024-06-01), repo.skype.com has been useless though up:
# cat /etc/apt/sources.list.d/skype-stable.list
deb [arch=amd64] https://repo.skype.com/deb stable main
# ...
0
votes
1
answer
264
views
NGINX HTTPS not redirecting properly
I followed Cerbot's instructions
to get a HTTPS certificate for NGINX in my Debian server for a
domain, but the HTTPS is not redirecting properly.
I got the following in etc/nginx/conf.d/app.conf from ...
2
votes
0
answers
736
views
How to SNI filter with nftables v1.0.8?
eg: permit classroom and block youtube which share an IP:
dig www.youtube.com +short | grep "$(dig classroom.google.com +short)"
142.251.32.78
https://serverfault.com/questions/988309/...
0
votes
1
answer
867
views
Why squid deny the https request but allow the same site with http request?
I want to allow dev just use github copilot and deny other request.
According to github info:
https://docs.github.com/en/copilot/troubleshooting-github-copilot/troubleshooting-firewall-settings-for-...
0
votes
0
answers
175
views
ufw rule supposed to block traffic but iptables allows it
As a test I wanted to temporarily block access to my website. So, I deleted http/https rules using ufw delete command. ufw is set to default deny incoming. The only remaining rule is the one allowing ...
0
votes
1
answer
490
views
Debian (and ubuntu) having throubles in downloading apt-get updates if I use https
As stated in the previous question: How can i force apt-get or apt to use only https connections
deb https://deb.debian.org/debian bookworm main
deb https://security.debian.org/debian-security ...
0
votes
0
answers
2k
views
Disable TLSv1.0 and TLSv1.1 using httpd CentOS7
I'm trying to disable TLS 1.0/1.1 for PCI Compliance, but having problems.
Running CentOS 7 / Apache 2.4.6
The Server is setup with multiple hosts.
All the documentation I've found is similar but ...
0
votes
0
answers
126
views
why do I have requests from inside apache server with source ports 80 and 443
On one machine, I have a web server running (apache) and responding on ports 80 and 443. On this machine, I have a firewall (shorewall) that blocks everything except what I authorize, and I therefore ...
0
votes
1
answer
92
views
How to identify on console for a remote server what TLS it is providing on an HTTPS endpoint
I would like to find a way, to identify what type of TLS a remote HTTPS endpoint is providing, using only "standard" Linux command-line tools.
I would like to know, what type of TLS the ...
1
vote
1
answer
228
views
SSL cert recognized by OpenSSL but not geventhttpclient
I have an instance of an NVIDIA Triton Inference Server. Then, there is the Python's client which uses geventhttp Python's package to perform the requests.
This is all deployed as microservices, so in ...
0
votes
1
answer
74
views
Http outperformed Http2 ,why, please help me to figure out?
I'm currently conducting performance testing on my NGINX web server container and I'm encountering some unexpected results. My tests show that HTTP performance is outperforming HTTP/2, despite SSL and ...
0
votes
0
answers
301
views
How to create a catch all https "default_server" for "Welcome to Nginx!" Page, using self signed certificate in /etc/nginx/conf.d/default.conf
I am running a LEMP server with Nginx, and have the "listen 80 default_server;" directive enabled for port 80 in the catch all /etc/nginx/conf.d/default.conf directive. When I browse to the ...
0
votes
0
answers
73
views
Apache - Move /wordpress installation to main website address
I just re-installed wordpress in Debian server and it sits in /var/www/html/wordpress directory. I used wordpress in the past, so I have partially configured things, just need to polish it a bit.
I ...
0
votes
0
answers
2k
views
How to configure Privoxy HTTPS inspection?
After following through the docs at www.privoxy.org, I have created a cert and key with openssl, placed them into the CA directory at /usr/local/etc/privoxy/CA/, and given permissions to the privoxy (...
0
votes
1
answer
3k
views
Getting the issuer or subject hash from a server's SSL certificate
Is there a way to check the issuer of subject hash of some server's SSL certificate?
I know that curl or wget search for the matching root certificate in /var/lib/ca-certificates/openssl or /etc/ssl/...
1
vote
0
answers
55
views
https:// url for port 8443 lands on index in /var/www NOT its correct sub Dir
After a long time I have finally got port 8443 to work albeit at the end of the URL(:8443).
However it lands on an html index page in the /var/www/ directory not in on the index in the correct sub ...
0
votes
0
answers
378
views
Error Trying to load http url using curl
I am beginner. I am trying to load HTTP URL using curl in my Ubuntu terminal.
The command I am using is
curl -L 'http://google.com'
But instead of getting source code. I am getting below error
curl: ...
0
votes
0
answers
199
views
How to check whether my network connection supports HTTP2, gRPC or WebSocket?
My ISP/AS/NAT is problematic since I think it blocks some transfer-layer protocols.
I want to check whether my connection to my domain behind a CDN (e.g. cloudflare) supports HTTP/2, gRPC, QUIC or ...
1
vote
0
answers
6k
views
curl(28) : ssl connection timeout
I try to tell only the details
My browsers have no problem with https sites. But when they get to tools like links, wget and curl, they run into trouble, sites like gitlab, github, google, etc. are ...
0
votes
1
answer
234
views
Can't decrypt https traffic with wireshark
I am trying to decrypt https traffic according to these guides:
https://linuxhint.com/decrypt-ssl-tls-wireshark/
https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/
But nothing is ...
1
vote
1
answer
1k
views
Which process is sending outbound requests?
I recently installed a Ubuntu desktop (only additional programs being google-chrome and VLC). When I enabled UFW and blocked everything outgoing by default, I noticed a bunch of outgoing attempts ...
1
vote
2
answers
2k
views
How to configure lighttpd to redirect HTTP to HTTPS?
I want to redirect HTTP requests to my website to HTTPS when the client browser supports it. My web server is lighttpd.
1
vote
0
answers
6k
views
curl OpenSSL SSL_connect: Connection was reset error
I am trying to run below command from azure VM. i am getting error. I have also validated the port connectivity and 443 is open for status.cloud.google.com. Is there anything else i am missing. please ...
3
votes
0
answers
1k
views
Configure dnf to use DNS-over-HTTPS (DoH) without using systemd-resolved
Is there a way to configure dnf to use DNS-over-HTTPS (DoH) without using systemd-resolved or a proxy (i.e. dnscrypt-proxy)? I dont like have local servers running on desktops (even on loop back ...
3
votes
3
answers
1k
views
How to get HTTPS response from a Website using OpenBSD base tools?
Using tools like curl or wget it's easy to "get" the response of an HTTP GET request, but both tools aren't installed by default on OpenBSD, and writing a portable shell script, it cannot be ...
2
votes
1
answer
6k
views
curl -- via proxy -- how to ignore self signed certificate
I can access insecure sites:
curl -k https://self-signed.badssl.com
I can access a site with mitmproxy:
curl --proxy 127.0.0.1:8080 --cacert ~/.mitmproxy/mitmproxy-ca-cert.pem https://google.com
How ...
3
votes
1
answer
14k
views
openssl verify - how to verify a single combined certificate bundle file
I maintain/enhance a product that uses a browser-based admin interface. We're late to the party and are only now looking to support HTTPS between the browser and our backend (Apache httpd in front of ...
1
vote
2
answers
3k
views
Curl Parallel requests using links source file
I have this script to go through a list of URLs and the check return codes using Curl.
Links file goes like this:
https://link1/...
https://link2/...
https://link200/...
(...)
The script:
INDEX=0
DIR=...
1
vote
1
answer
643
views
Is there some kind of hack that I can do to upgrade my Apache openssl from 0.9.8 to 1.1.1 ? Perhaps implement / recompile my own mod_ssl.so module?
I'm in desperate need for help. I've purchased a SSL certificate but my Apache server is running an old version of OpenSSL. Unfortunately I cannot re-install or re-compile Apache. It was installed ...
0
votes
1
answer
498
views
Server responses with IP Address instead of host name
I have a Backend which is used as a REST API. When I make a request to the server (GET https://subdomain.server.com/users/all) I get this response from the server:
GET https://87.69.152.36/users/all
...
0
votes
1
answer
576
views
Calcurse cant sync with Nextcloud
Hello I've recently setup a nextcloud instance with a calendar and wanted to sync my calcurse with it.
This is my calcurse-caldav config(password, username and hostname obviously changed):
[General]
...
0
votes
1
answer
286
views
SSL/TLS on linux mint using XAMPP?
I have a basic website that I want to get HTTPS on. It's like the crowning jewel to me. However, I am using linux mint for the server. All the tutorials I can find for it are on windows, using a ...
0
votes
1
answer
163
views
Nextcloud container can't be accessed
I'm trying to create a nextcloud setup in a debian 10 VM with https and mysql and docker-compose but when I acces https://cloud.example.org my browser says it can't be reached. If I acces the link ...
-1
votes
1
answer
217
views
Why can't http be changed to https in ubuntu?
Why can't http be changed to https in ubuntu?
Err:1 https://ports.ubuntu.com/ubuntu-ports focal InRelease
Could not connect to ports.ubuntu.com:443 (91.189.91.38). - connect (111: Connection refused)...
0
votes
1
answer
3k
views
Squid (proxy) is eating up its own resources (and other issues)
I have several squid issues, but one at a time:
WARNING! Your cache is running out of filedescriptors
This can happen when the proxy are getting a lot of calls, and can be fixed by increasing the ...
0
votes
2
answers
2k
views
Could not get nonce, let's try again when using acme
When I am using this command to generate a certificate on CentOS 7.6:
acme.sh --issue --dns dns_cf -d poemhub.top -d *.poemhub.top -k ec-256
shows this error:
[Sun Jul 11 23:09:28 CST 2021] Using CA:...
2
votes
2
answers
4k
views
How to add correct chain certificate when acessing url with wget?
There is a site (https://datashare.is.ed.ac.uk/bitstream/handle/10283/3192/CINIC-10.tar.gz) which I know is misconfigured and I can get the new chained certificate from here: https://whatsmychaincert....
0
votes
1
answer
421
views
Tools to investigate how DNS over TLS/HTTPS work / how resolve / if work correctly/ how establish tunnels etc
DoT DNS over TLS https://www.rfc-editor.org/rfc/rfc7858
DoH DNS over HTTPs https://www.rfc-editor.org/rfc/rfc8484
(nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- ...
0
votes
1
answer
1k
views
Safari does not use the private root CA certificate
I've created a private root CA and issued some SSL certificate for some https websites,
(I am not sure whether this should be called as self-signed certificate, in my case, the root ca certificate is ...
1
vote
1
answer
3k
views
Why is HAProxy forwarding HTTP2 requests as HTTP 1.1?
I'm trying to configure a load balancer between 2 servers with HAPoxy, this is my configuration:
frontend haproxynode
bind *:443 ssl crt /etc/ssl/private/isel.pem alpn h2,http/1.1
mode tcp
...
1
vote
1
answer
6k
views
How can I fix curl that seems to be stuck on NSS initialization?
curl, dnf and other cmd lines tools that depends on https are not working properly
$ curl -vvv --insecure https://google.com
* Rebuilt URL to: https://google.com/
* Trying 172.217.29.14...
* ...