Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

0
votes
0answers
8 views

Apache HTTPS ProxyPass certificate location

I'm trying to set up an Apache server that uses ProxyPass to pass HTTPS requests on to another server. Let's call the proxy server ALPHA and the target server BETA. ALPHA does not run HTTPS, but ...
1
vote
1answer
31 views

Google is re-indexing pages after redirecting URLs from HTTP to HTTPS incorrectly

I upgraded my site so that all pages have gone from using HTTP to HTTPS. I didn't consider that Google treats HTTPS pages differently than HTTP. I recreated my sitemap to so that all links now ...
1
vote
3answers
26 views

How can I make a browser trust my SSL certificate when I request resources from an external server?

I have installed an SSL certificate on one of my domains and it works perfectly, but on some pages I include a Google Font, which causes my certificate icon to change in: instead of: The reason, ...
1
vote
0answers
15 views

Facebook likes reset after moving to HTTPS

I've got a question regarding the Facebook like button. We worked on a piece recently that embeds a number of social share buttons (please see the source code below). When the piece was released, it ...
0
votes
2answers
63 views

Lost website rankings as a result of using a 302 redirect instead of a 301

I have an online store and during the last 2 days I noticed a big change in its SERPS for some keywords. The site is indexed in local Google for 5 keywords, and the online store is based on Magento ...
0
votes
0answers
17 views

HTTP to only HTTPS Google wmtools [duplicate]

I recently changed one of my sites to HTTPS only and redirecting traffic to HTTPS from HTTP. This is all working fine however Google webmaster tools is complaining that it cannot access the http ...
3
votes
2answers
76 views

Switching to HTTPS - redirect question

Following the recent Google announcements about improved ranking for sites running on https we have a number of clients asking about this. Is it safe to just 301 redirect all pages to their SSL ...
0
votes
0answers
15 views

convert multiple domains to a single domain

I have an apache server hosting with one IP address hosting a www and a 'sub' domain using . which worked fine until I needed an EV certificate which works on only 1 domain...and can't be used until I ...
8
votes
2answers
133 views

Are there any disadvantages to Cloudflare’s “Flexible SSL”?

Cloudflare let you serve your site over SSL without having to purchase and install a security certificate, a product they call “Flexible SSL”. (They act as a proxy and serve your site over SSL from ...
1
vote
1answer
51 views

Apache Rewrite Rule non-www to www + http to https + remove trailing slash

I would like to accomplish the following: rewrite non-www to www redirect from http to https remove trailing slash e.g. http://medexpress.co.uk should redirect to https://www.medexpress.co.uk ...
5
votes
3answers
103 views

New Google SEO benefit with SSL - with only a few sections in SSL, or always on?

Google just announced that SSL will affect site ranking positively: http://googlewebmastercentral.blogspot.se/2014/08/https-as-ranking-signal.html I have an Easter Island tourist agency called Easter ...
0
votes
0answers
21 views

How do I notify Google of a change of address from http to https? [duplicate]

I've just switched a site from http only to https only (on the same domain name), and have 301 redirects from old to new in place on a page by page basis. How do I now inform Google, using Webmaster ...
0
votes
1answer
22 views

Will previous 301 redirect still be cached if site switches to using SSL?

For reasons only my past self knows I put a 301 redirect in place to force all traffic to example.org from www.example.org. Put simply it dropped the www. subdomain. Now I would like to change it so ...
0
votes
0answers
31 views

Is it possible to get safe SSL certificates for free? [duplicate]

I was looking at reseller hosting at host xxxxxx. They provide unlimited free SSL certificates which I can resell to my clients. This looks too good to be true. I sent them a mail if they're ...
0
votes
1answer
35 views

Rewrite URL with masking from HTTP to HTTPS site (on a different server) are certs needed on first server?

I have a *:80 virtual host in Apache 2.2.15 which is just a bunch of URL rewrites like: ServerAlias foo.bar biz.baz tit.tat RewriteRule / http://somesite.com (R=301,L) ServerAlias differentsite.com ...
2
votes
2answers
52 views

How to convince Google to list HTTPS version of website? [duplicate]

Having finally configured HTTPS for my company's website, I'm wondering now if there are any steps I can or should take to convince Google's search results to list the site as an HTTPS link rather ...
3
votes
2answers
216 views

Will canonical tag referencing unsecure HTTP URLs on a HTTPS page cause the unsecure message?

If a secure HTTPS page has a canonical tag referencing the HTTP version, will this cause the message in the browser that the page is using unsecure elements and prevent the green lock icon appearing? ...
0
votes
2answers
36 views

Using SSL Certificates with shared hosting/different domain provider

I need to add a HTTPS address to an existing domain. Unfortunately there two companies involved: One for shared web-hosting, and one for the domain. How do SSL Certificated domains work in such ...
1
vote
1answer
35 views

Secure Image is being called Insecure?

I have an image using the secure protocol (https://) but the image is being called insecurely from our homepage using the protocol (http://) - How is this possible? Our SSL Certificate is installed ...
0
votes
1answer
77 views

Using Google Webmaster Tools “change of address” feature for HTTP to HTTPS migration

I'm trying to use change of address in Google Webmaster Tools, and I've followed the instructions and set a 301 redirect for all requests to HTTPS. My site has always used HTTP with a 301 for no-www, ...
0
votes
0answers
11 views

Putting reviewboard behind SSL [closed]

Does anyone know how to put reviewboard behind SSL using wild card certs? I am using reviewboard 1.7.18. This is my first time and I need help with this. Please do not point me to common apache/httpd ...
1
vote
1answer
24 views

Can a HTML form submit to a secure SSL location that keeps the user on the HTTPS site?

I've enabled SSL for my apache server so when I attempt to go to https://mysite/private/index.html, my browser displays a generic dialog asking me to provide my username and password to log in. How ...
1
vote
0answers
20 views

Configuring SSL on tomcat 7 and the files and format required

There exists lot of information on the web and on stackoverflow regarding configuring SSL on Tomcat but it's still confusing and things have not worked for me. I have received two files from the ...
1
vote
1answer
16 views

Can I create CSR for Symantec EV SSL from another machine?

Given the additional checks to validate the organisation for the EV certificates, must the CSRs be created from the actual production web servers? In my capacity as a contractor, I thought I would ...
2
votes
1answer
92 views

Can forwarding https://example.com requests to https://www.example.com be a security risk?

I maintain a retail store's eCommerce website, provided by a 3rd party. The HTTPS links do not load ('ERR_CONNECTION_TIMED_OUT') unless you put in the WWW before the doman name. The HTTP links forward ...
1
vote
2answers
89 views

Search for my web site returns HTTPS results

My home page is set to Google and Google adds ?gws_rd=ssl to it. When I type search term form my site into search box Google returns bunch of indexes (different pages within my site) that starts with ...
0
votes
1answer
61 views

Why does 301 redirect work for http but not for https?

Through my domain registrar I have set up a domain, essayme.co.uk, to automatically forward to https://google.com. If I go to http://essayme.co.uk it works as expected and redirects me to ...
3
votes
3answers
430 views

Is there a way to disallow crawling of only HTTPS in robots.txt?

I just realized that Bingbot is crawling my company's website's pages over https. Bing already crawls the site over http, so this seems frivolous. Is there a way to specify Disallow: / for https ...
1
vote
1answer
68 views

What's the catch with a 4.99$ ssl certificate

I was browsing the web in search of a cheap SSL certificate just for domain validation. Then I came across a site that sells a certificate for 5 year in a ridicules price of 4.99$ and the one year is ...
2
votes
1answer
55 views

SSL certificate that does not verify identity

(I'm fairly sure I know the answer, but just in case...) We want SSL on an internal-use webserver, but the usual ones don't work for the usual reasons (not static IP, subdomain issues etc.). Server ...
3
votes
1answer
50 views

Nginx and Google Appengine Reverse Proxy Security

The scenario is that I have a Google compute node running Nginx as a reverse proxy to the google appengine. The appengine is used to service REST calls from an single page application (SPA). HTTPS ...
2
votes
1answer
22 views

Plesk refuses to let me set a new SSL certificate

I got a problem when I try to update/change a SSL certificate on a PLESK managed server. One problem might be that I am not so confident at this topic. The setup is the following: I use an virtual ...
0
votes
1answer
35 views

Google Chrome issue with SSL

Using this code: RewriteEngine on RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} My site goes to HTTPS if I type in www.domain.com. HOWEVER, only Google Chrome refuses ...
4
votes
1answer
75 views

How can I serve all resources under HTTPS instead of HTTP without changing their URLs in the HTML code

I know that by using an .htaccess file I can redirect everyone to https://. However, my SSL certificate complains if all the content isn't served under HTTPS. Is there a way to convert all the ...
0
votes
1answer
14 views

SSL not valid for domain

I am in the process of setting up a webmail server and one of the requirements is to have a signed SSL which I obtained through StartCom. During the setup it asked me to define a sub-domain name ...
2
votes
1answer
128 views

Does an SSL Certificate actually require a dedicated IP?

My web host which I have been with for at least going on 8 years now is requiring a dedicated IP address, which is $3.33/Month now for assigning a SSL Certificate with my web hosting package and ...
0
votes
1answer
52 views

Remove www from HTTPS request in Nginx

I have the following code: server { listen 443; server_name www.domain.com; ssl on; ssl_certificate /etc/nginx/ssl/domain.com.crt; ssl_certificate_key /etc/nginx/ssl/domain.com.key; return ...
1
vote
1answer
25 views

Get cipher used for HTTPS with nginx

Background I would like to run several Tornado instances with nginx as a load balancer and static file server. Since both are to be running on the same machine (or atleast the same, private network) ...
6
votes
2answers
82 views

Does Googlebot support TLS v1.2? If not, what will my TLS v1.2-only site look like to it?

I currently redirect all non-HTTPS connections to HTTPS, and support TLS v1, TLS v1.1, and TLS v1.2. I reconfigured my testing server to accept only a very limited and secure cipher suite and TLSv1.2 ...
1
vote
1answer
28 views

protocol relative URLs from other domains

If I am configuring https://foo.mysite.com where I have an SSL cert with CN=foo.mysite.com, but index.html has includes/images/etc loading from http://othersite.com/cat.png and ...
2
votes
1answer
112 views

SSL not working on home page

Recently set up a server for a client and installed a Comodo Positive SSL certificate. In firefox everywhere on the website I can see the padlock icon which shows the Comodo verification, except the ...
1
vote
0answers
49 views

Are there any usable free options for SSL certificates? [closed]

I'm aware that there are old questions in the same vein, but they're from ~2010 and everything has moved on a lot since then. Also, a caveat below excludes the common old answer. Background: I've got ...
3
votes
2answers
91 views

cPanel SSL installation

I've tried transferring SSL issued by GoDaddy to Linux based server. The website was originally hosted in Windows. After the installation is completed, I got a message like this in cPanel: ...
1
vote
0answers
82 views

Migrate a ASP.NET web service from http to https. How to create a SSL certificate that works in test environment on IIS 7.5?

I have a question regarding a web service, http and https. First of all, there is a quite similar question with an accepted answer on StackOverflow. Like the questioner on SO, I have a simple working ...
3
votes
3answers
52 views

HTTPS and HTTP URLs point to different places?

I own and use a domain for a project. When I type in my domain preceeded by HTTPS instead of HTTP, I am re-directed to a compromising website. How is this possible? Did somebody buy the HTTPS ...
2
votes
0answers
17 views

Measuring percentage of visitors connecting over https [duplicate]

Does Google Analytics expose information about the connection protocol used by site visitors? I don't see any option in the customization section... is this something I'd have to use a custom variable ...
1
vote
1answer
73 views

Non HTTPS site is indexed as HTTPS in Google Search

I have hosted a site over shared hosting (ipage) and not have setup SSL certificate (which I don't need), but some how Google have indexed it as HTTPS link which popup security error on opening it. ...
1
vote
2answers
25 views

eCommerce checkout security

I'm developing an eCommerce site and using SagePay as a card processor. Customers will enter their delivery/invoice details into a form which is then submitted to a checkout page. This page encrypts ...
14
votes
5answers
549 views

Force Using SSL on Site now?

I am starting to see a majority of websites starting to use SSL as a standard practice for viewing the website securely now thanks to the revelations of Edward Snowden about the NSA surveillance that ...
0
votes
0answers
62 views

HTTPS redirect to HTTP not working with 'www' subdomain

I have 2 rules on my site: one to force the www subdomain, and another to force the HTTP protocol: RewriteEngine On RewriteBase / RewriteCond %{HTTPS} =on RewriteRule ^ ...