Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Is there a way by just looking at the apache logs you can tell if the user-credentials is encrypted or not? Meaning some kind of encryption e.g ssl or plain-text.

Thanks.

share|improve this question
add comment

1 Answer 1

up vote 0 down vote accepted

There is usually no indication in an apache access log that the request was served over https instead of http.

If you want to log the protocol, you can follow the instructions in the accepted answer of this question: http://serverfault.com/questions/359476/how-to-log-the-url-scheme-http-https-in-apache

share|improve this answer
    
what about the user who logged not using https? –  asadz Feb 11 '13 at 21:26
    
I want to alert on someone logging on http protocol? –  asadz Feb 11 '13 at 21:28
    
Are you asking about the login process for your site? If you started logging the protocol to your log files, you could see when a user used the url of your login process without https. –  Stephen Ostermiller Feb 11 '13 at 21:34
    
how? the answer link you showed only refers to the case when https is used. You saying that activity would be seen in non-http e.g access log. –  asadz Feb 11 '13 at 21:36
1  
I don't think I'm understanding what you are asking. It sounds to me that you have a site that supports both http and https and are trying to discover if users are using insecure login. If this isn't correct, please edit your question to clarify. –  Stephen Ostermiller Feb 11 '13 at 23:13
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.