Ubuntu Servers :: HTTPS Forced Non Https:// Protocols?
May 22, 2011
I have set up certain portions of my web site to be forced https:// How do I force, non https:// protocols. I know this sounds confusing, so let me give you an example.
I can not log into our servers at work, Citrix, so; How do we use a https with Firefox?
I have Citrix Receiver installed, but one of the IT guys from work said to un-install it! How do I do that? and then they want me to load Cag from the web site...how do I do that?
Yesterday I put Win7 back on my pc at home - damn shame - and I was able to log into work through Internet Explorer, by putting the website in the trusted zone.
Am I supposed to do something similar with Firefox?
I found this on the net, and have done what it says...
Select a setup option:
1. Install Citrix Receiver for Linux 11.100 2. Remove Citrix Receiver for Linux 11.100 3. Quit Citrix Receiver for Linux 11.100 setup
Enter option number 1-3 [1]: 2
Please enter the directory containing the Citrix Receiver for Linux installation [default /usr/lib/ICAClient] or type "quit" to return to the menu:
The file is in fact the default, but I can't get the string to work!
A while back, I put a site up under a LAMP setup, and followed a guide from ubuntuforums that I googled to set up SSL encryption for the site.
That site works great, but since then, I've added some other sites to the same LAMP server. They load fine as well, but if I type in https:// before going to the latter sites, the browser attempts to redirect to the first, and warns that it is a fraudulent certificate, and that I'm at risk by going to the site.
Obviously, it isn't an attack site, the certificate is just set up for only one domain. How do I prevent my non-SSL sites from redirecting to the SSL-encrypted site?
A few days ago I installed a new SVN server using ubuntu 10.04 server editiopn at our company and it runs almost flawlessly. Almost that is. The server uses a self-signed certificate so all communications go over https. The strange thing is this. When I run some svn command from my (windows) pc, like update I get asked whether or not I want to accept the certificate. Then I choose "accept permanently" end all goes well. In future command I don't get that question anymore. But when my colleague does the same from his pc, he also gets the same question. Now, when he chooses "accept temporary", all goes smooth. But when he chooses "accept permanently", like I did, he gets an error saying:
RA layer request failed svn: OPTIONS of 'https://path_to_some_repo': Could not read status line: An established connection was aborted by the software in your host machine.
Of course I googled on this and could find two things: Server settings are wrong there's something wrong with the firmware of the router. The first couldn't almost be the case since it works for me and I followed the manuals. The second one couldn't be it either because when I log in with my account on my colleague's pc, it works. This is also the case when he logs on to my pc. So the problem exists specifically when he is logged in on his own pc. The setup of this machine is exactly the same as mine.
I am trying to get name based virtual hosts all running on HTTPS (port 443) so I can run multiple sites on the one IP.
The DocumentRoot needs to be different for each host.
[URL]
However, I am unable to find where to actually enable these hosts in the configs. The apache website says to put it in httpd.conf however that file is empty on my machine.
The existing default virtual hosts are in "/etc/apache2/sites-available/default" and "default-ssl"
The main config file is /etc/apache2/apache2.conf
I am running version 2.2.16 of apache
I need to use the same .htpasswd file for all the sites.
I have configured CNAMES on my domain for all of these hosts.
After setup Openldap server with TLS/SSL use ldaps, I install phpldapadmin and have an issue LDAP Server is configured and running. make some ldapsearch and it oki. I couldn't use https to browse LDAP server when I use http and I can't connect Could not start TLS. check your LDAP server configuration. This is my config
What is the best way to go about setting up multiple virtual hosts on the same box, one using http and one using https/ssl? I'd like to serve them from the same ip address if possible; I know it's possible in apache 1.3.
I am a squat on advanced Apache work. I would get a basic SSL functionality to work. So URL...works fine and gets me all the login windows I designed. however currently all the images and other extensions like .pdf are also using the https routing.some image referred on that https link e.g. URL...can be displayed using https but not http.I would like to JUST limit https usage to the login window html and ALL other images pdf's not secured html ( one that do not need password ) should use HTTP NOT HTTPS.
I've got a basic apache2 setup running w/ multiple virtual hosts, would like to try SSL (i.e. https).
I've got the IP networking side well and truly sorted but I need guidance on the apache/ssl config side. I have installed mod_ssl.
Does anyone have a good guide for Fedora that's recent? All I can find are ubuntu and old fedora 'core' guides, so not sure how much applies to F12. The best ones I can find so far is
I have 2 web server in my office : http and https. You will find attached the httpd.conf and ssl.conf. I can acces the https server from home, but not the http one.
What I did : configure the router to forward port 80 to my fedora 11 machine open port 80 with system-config-network created a virtualhost
The same exact steps have been done for port 443
I can access both server locally but only the https server remotelly.
Here are my iptables :
Code:
you can try to acces my servers using [url]
I made httpd to listen to port 8080, and done all the port forwarding/opening stuf, and it works. so is it a bug ?
Finally found my error seams like turning off UseCanonicalName to off did the trick
I really think it's a bug now. It was definitively working last week, I just added content to the main host of my website, and now i can't acces it from port 80. If someone think it's not a bug or find someting missing/wrong in my conf file.
I can't seem to get lvs to work with https/443. Works fine with port 80 and I found many examples on the net but none seem to work for port 443. Works fine when going directly to the server, just not through lvs. I thought it might be the send/expect statements but have tried various with no go.
What is the current status of HTTPS Everywhere add-on for FF? I understand it was previously compatible, but it is not now (I am running 3.6.11 on LL). This article on firesheep has me a bit freaked.
i have problem with chromium ...when i try opening website like [URL].. i get a message saying untrusted certificate and if i proceed then it crasehs in no time....it is d problem with www.facebook.com tooo..wat do i do ? what exactly is the problem..?
I'm just wondering how many people out there use a load balancer of some kind for terminating HTTPS/TLS/SSL before sending requests onto backend web servers?
And if you send the requests onto those backend servers using an Stunnel of some sort to keep the data encrypted between your load balancer and your webservers?
Freshly installed Ubuntu 10.10 amd64 on Asus K50IN laptop refuses to show secure HTTPS internet pages, while posting this here is OKay. It says connection timed out. I tried several browsers FireFox Arora Epiphany.
I have tried to configure my iptables to allow only HTTPS connections to the internet. Unfortunately, I didn't get that to work. I configured it like this:
Quote:
iptables -P INPUT DROP iptables -P OUTPUT DROP iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -t filter -p tcp --dport 53 -j ACCEPT iptables -A OUTPUT -t filter -p udp --dport 53 -j ACCEPT
[Code]....
Of course I am only trying to access websites via HTTPS Still, I was wondering if HTTPS somehow under the hood requires the HTTP port to be open or if my rules are in some other way wrong.
i hav the problem ...n i am having solution for it. ...i searched a lot on forum .but didnt find any proper solution for my problem. problem : " Cannot access some sites on Ubuntu 11.04 specially HTTPS sites. loading of certain sites was really slow" Solution : well. i found no one who could gave me solution that worked. so i studied some linux n here is solution ..ON terminal : sudo pppoeconfthen just follow instructions ...set to default every thing. it will configure all ur net settings on its own.restart ur pc. no need to dial anything. the net will auto dial itself without any problem..just make sure...u do it correctly ..read instructions..
I have my Linux laptop running Katatonic Koala at the moment. It is connected via CAT5 to a switch. The switch then connects to my router. All five of my computers are connected to the switch, actually. The only one that won't talk to any sites other than https secure sites is the Linux box. I am not well-versed in the inner workings of Linux and need some help in what I need to do so that regular http sites work. You guys always have the right anwers so I will wait humbly for your replies.
I had setup an SSL secure server awhile back, such that: [url] works but [url]does not (note the different: in the first, I use HTTPS, whereas the second I use HTTP) How can I get both to co-exist?
I am using the curl version 7.21.0. When I try the curl command from command like, things works fine for the http sites. But when I try https I get certificate error. I have source compiled curl with latest OpenSSL. I have also tried downloading the latest certificate bundle. With the same version of curl, same version of openssl with same certificate file I can get it work on the linux. But in the QNX OS I get this error.
./curl --cacert /mnt/temp/curl-ca-bundle.crt -v https://www.paypal.com * About to connect() to proxy 172.16.2.17 port 8080 (#0) * Trying 172.16.2.17... connected
I am running a Linux firewall (IPcop) to bridge two networks. Hosts on network A have to use a proxy server in order to get online. This server runs a transparent proxy (squid) configured to use the proxy needed to connect to the internet as an upstream proxy, therefore meaning all the hosts on network B can connect to the internet without the user having to configure a proxy address.
The problem is that HTTPS also has to go through the upstream proxy, which I'm told can't be proxied by my server transparently because of security issues. This means that hosts on network B can't currently access HTTPS sites.
Is there a plugin or some other way to check to see if a website has https available, and use that instead? I know some sites, like Wikipedia have a different hostname for SSL support while others have the same hostname, just What I would really like to seesome kind of header in the http reply or the html that saysSecureAvailable= is there any system like this in place? There's too many issues with with unencrypted http to continue having that as the default.