Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.

learn more… | top users | synonyms (2)

1
vote
3answers
508 views

URL without trailing slash makes Apache look in non-SSL DocumentRoot

I have configured a virtual host in Apache for serving content over SSL/TLS. Since I also want to allow other sites on my domain to use regular http, I have two document roots, one at /home/www/html ...
1
vote
2answers
570 views

Automatic redirection from http to https with .htaccess authentication in virtual hosting

Hi I have configured Virtual host on apache with .htaccess authentication with SSL. It's working fine when I typed url https://www.example.com:9004/test.php but when I typed ...
1
vote
3answers
99 views

Shared SSL hosting receives all SSL requests but why is Google getting it wrong?

The website is hosted on a shared server that supports SSL. The web hosting provider secures our website using SSL: https://domain.com instead of http://domain.com Ever since then all the client ...
1
vote
2answers
114 views

1024 bit to 2048 bit certificate differences in how we access our portal

Why now that we have gone from 1024 to 2048 do we need to put the www in front of our portal site when we never used to.
1
vote
1answer
462 views

URL Rewrite for SSL

I have SSL configured for a cart directory in my website. I'm having a very difficult time trying to configure SSL for a different directory within the same website. I ask the question on SO, and was ...
1
vote
2answers
922 views

cname forward from https to http

We are migrating web host and I wonder if it is possible in the migration phase to do a CNAME forward from https://address1.com to http://address2.com. Would the certificate still work even if the new ...
1
vote
1answer
542 views

How is Facebook avoiding mixed content (SSL/non-SSL) warnings?

I signed up to Farmville and I get a URL like: https://apps.facebook.com/onthefarm/index.php?ref=tab At the bottom of the page are ads which are served not using ssl - they are pulling in regular ...
1
vote
1answer
229 views

Force SSL on IIS site with NT authentication

We recently implemented SSL on our reseller portal and have been receiving complaints about needing to log in twice. This is of course because they bookmarked the site before we had SSL so their ...
1
vote
3answers
2k views

Unable to download microsoft excel files from a IIS SSL site

The web master at my corporation added SSL to the web site and now none of my users can download Microsoft word and xcel files the sites generates. According to Microsoft the following must be down. ...
1
vote
3answers
40 views

How can I make a browser trust my SSL certificate when I request resources from an external server?

I have installed an SSL certificate on one of my domains and it works perfectly, but on some pages I include a Google Font, which causes my certificate icon to change in: instead of: The reason, ...
1
vote
1answer
37 views

Rewrite URL with masking from HTTP to HTTPS site (on a different server) are certs needed on first server?

I have a *:80 virtual host in Apache 2.2.15 which is just a bunch of URL rewrites like: ServerAlias foo.bar biz.baz tit.tat RewriteRule / http://somesite.com (R=301,L) ServerAlias differentsite.com ...
1
vote
1answer
16 views

Can I create CSR for Symantec EV SSL from another machine?

Given the additional checks to validate the organisation for the EV certificates, must the CSRs be created from the actual production web servers? In my capacity as a contractor, I thought I would ...
1
vote
1answer
26 views

Get cipher used for HTTPS with nginx

Background I would like to run several Tornado instances with nginx as a load balancer and static file server. Since both are to be running on the same machine (or atleast the same, private network) ...
1
vote
1answer
73 views

Non HTTPS site is indexed as HTTPS in Google Search

I have hosted a site over shared hosting (ipage) and not have setup SSL certificate (which I don't need), but some how Google have indexed it as HTTPS link which popup security error on opening it. ...
1
vote
2answers
127 views

Finding different Windows XP Service Packs via User-Agent string

I am planning to get rid of the SHA1 certificate signing algorithm in our certificates and switch over to SHA-256. Problem is, that Windows XP (before SP3) is not supporting this. Therefore I need to ...
1
vote
1answer
51 views

Why do CDNs charge so much for private SSL? [closed]

I've been looking at various CDN services, and many of them seem to charge a pretty hefty fee compared to the free shared SSL offering. One in particular, CDN77, is offering private SSL for $700/year. ...
1
vote
1answer
138 views

SSL works on https://dedicatedip but not https://domain

My SSL certificate works on my apache web server but only when I do https://Dedicated_vps_ip. When I do https://domain.com it just doesn't work. I've tried almost everything. What am I doing wrong? ...
1
vote
1answer
60 views

Shared web hosting issue where Google is incorrectly indexing https content from another website

I am using shared hosting from a reasonably well known Australian web hosting company and have come across an unusual issue where Google is indexing pages on my website from another website on the ...
1
vote
1answer
61 views

Mixing self signed certs with traditional SSL

I have a traditional SSL cert going to a subdomain secure.mydomain.com on my domain. My host required me to have a dedicated IP in order to do this. I would also like to use HTTPS on my site for when ...
1
vote
1answer
780 views

HTTP/HTTPS duplicate content 301 vs canonical

I thought I would ask a question as the amount of different sources that say this is right or that isn't right is unbelievable. Let me tell you my situation, at the moment, my boss wanted me to add ...
1
vote
3answers
673 views

How to find Google PageRank of a SSL/HTTPS Page

If a page is using HTTPS it will display its page rank as the page rank of its homepage, for instance this page is displaying a PR8 - https://addons.mozilla.org/en-US/firefox/user/publiser45/ But ...
1
vote
1answer
147 views

Will Google's decision to encrypt all searches from Chrome mean that we lose all keyword data in Google Analytics?

Context. At the end of 2011 Google announced that they would start encrypting searches for logged in users. What does this mean for sites that receive clicks from Google search results? When you ...
1
vote
1answer
425 views

Extended validation certificate not changing browser bar green in Firefox

I'm having some problems with an Extended validation certificate on a site that isn't showing the green bar correctly in Firefox. Chrome and IE are working fine. When I load the page the bar appears ...
1
vote
1answer
348 views

Remove SSL from Google Search results

I am working on a WordPress site that serves up HTTP pages statically. The problem is that some of the pages are shown as HTTPS in Google Search results. For instance, if the search term "Example ...
1
vote
1answer
51 views

Are there considerations for expiring SSL certs for inactive domains?

I have a few domains that have effectively been "retired" though our company plans to keep them registered in perpetuity. However, soon a few of the SSL certs for the inactive domains are set to ...
1
vote
1answer
530 views

SSL on multiple directories

I have a website that is http, but has a port set up for https for a specific directory that is for the shopping cart. Now I'd like to use our SSL on a different directory in the same site as well. ...
1
vote
2answers
561 views

How to submit sitemap when your website has partial https? - Error: “Not in Domain”

My website is an eCommerce that is set up to do HTTP for the item browsing portion, but HTTPS for things like shopping cart, contact us, etc.. (anything that has forms on it). I've submitted my ...
1
vote
2answers
4k views

How to find unsecured content on a webpage [duplicate]

Possible Duplicate: Identify “non-secure” content IE warns about Firefox reports HTTPS page to contain non-secure elements My webpage is running SSL and it's showing that ...
1
vote
3answers
2k views

How to avoid basic authentication warning when using protected directory?

I used cpanel on my hosted site to set up a password protected directory to allow downloads of specific files. I send people a link to the file by email and include their username and password so ...
1
vote
1answer
410 views

SSL is not enabled in Heroku

Since Heroku has integrated the piggybank_ssl addon by default, trying: heroku addons:add piggyback_ssl or heroku addons:add ssl:piggyback results in: ! This add-on is now a standard ...
1
vote
1answer
120 views

Extra configuration needed after installing SSL certificate?

We recently developed two rather simple PHP applications for AXA (European bank). URL's are axa.tfo.be/incentives/cipres and axa.tfo.be/incentives/zrkk (access to both sites is restricted to visitors ...
1
vote
1answer
101 views

An ssl server as a reverse proxy to a regular server

If I have a server, secured with ssl, which is setup as a reverse proxy to another server, will the traffic still be encrypted?
1
vote
2answers
177 views

How to make SSL/https connection on development server?

I dont want to pay for certificate because its just for my development site can i install any certificate to enable encryption i dont care if browser going to warn against it or not as long ssl will ...
1
vote
2answers
84 views

What kind of SSL do I have?

I am maintaining a site for someone. He needs to know what type of SSL the site has because that data has to submitted to his bank. I've never been asked such a question. I have cpanel access. But ...
1
vote
2answers
9k views

Free HTTPS hosting with PHP support [duplicate]

Possible Duplicate: How to find web hosting that meets my requirements? I'm looking for free hosting with HTTPS and PHP support. Of course a subdomain is enough. Something like Google's ...
1
vote
1answer
329 views

HTTPS on my ASP.NET 2.0 application

I have an application developed using asp.net 2.0 and the goal is to make the webpage secure by using the https protocol. I have searched all over the internet for some insight on how to accomplish ...
1
vote
1answer
122 views

How do SSL certificate authorities verify domains?

What is a reasonable and reputable SSL certificate signing authority -- and how do they verify the domain in the simplest case? Do they simply send an email to the Technical Contact for the domain ...
1
vote
1answer
48 views

www.mydomain.com secure but not mydomain.com? [duplicate]

Possible Duplicate: www.mydomain.com secure but not mydomain.com? Hi We've got our website running and https / ssl works just great. EXCEPT when users enter http://www.mydomain.com and ...
1
vote
1answer
133 views

fully encrypt website using SSL

I had been trying to use SSL for the following site http://bit.ly/e8Lj32 , although the SSL certificate is signed properly by networksolutions , each time the pages are loaded it still displays an ...
1
vote
1answer
399 views

YouTube Embed SSL Errors

Anyone else have problem using a YouTube Embed Code on a https site? The security warning pops up in Internet Explorer telling your users they are loading unsecured data on a secure site. YouTube ...
1
vote
0answers
22 views

How do I notify Google of a change of address from http to https? [duplicate]

I've just switched a site from http only to https only (on the same domain name), and have 301 redirects from old to new in place on a page by page basis. How do I now inform Google, using Webmaster ...
1
vote
1answer
27 views

Can a HTML form submit to a secure SSL location that keeps the user on the HTTPS site?

I've enabled SSL for my apache server so when I attempt to go to https://mysite/private/index.html, my browser displays a generic dialog asking me to provide my username and password to log in. How ...
1
vote
1answer
23 views

Configuring SSL on tomcat 7 and the files and format required

There exists lot of information on the web and on stackoverflow regarding configuring SSL on Tomcat but it's still confusing and things have not worked for me. I have received two files from the ...
1
vote
1answer
28 views

protocol relative URLs from other domains

If I am configuring https://foo.mysite.com where I have an SSL cert with CN=foo.mysite.com, but index.html has includes/images/etc loading from http://othersite.com/cat.png and ...
1
vote
0answers
50 views

Are there any usable free options for SSL certificates? [closed]

I'm aware that there are old questions in the same vein, but they're from ~2010 and everything has moved on a lot since then. Also, a caveat below excludes the common old answer. Background: I've got ...
1
vote
0answers
90 views

Migrate a ASP.NET web service from http to https. How to create a SSL certificate that works in test environment on IIS 7.5?

I have a question regarding a web service, http and https. First of all, there is a quite similar question with an accepted answer on StackOverflow. Like the questioner on SO, I have a simple working ...
1
vote
1answer
208 views

Where to place web.xml outside WAR file for secure redirect?

I am running Tomcat 7 and am deploying a bunch of applications delivered to me by a third party as WAR files. I'd like to force some of those apps to always use SSL. (All the "SSL" apps are in one ...
1
vote
0answers
127 views

Does any SSL certificate authority handle third-level .name domains? [closed]

I am the owner of a third-level .name domain of form subdomain.example.name. The .name domain hierarchy is somewhat unusual in that generally one registers a third-level domain such as mine, rather ...
1
vote
0answers
193 views

How can I set a secure flag on cookies generated from a Python application?

I have an application written in Python running behind Apache and SSL. I am not seeing a secure flag on my cookie: apache Server version: Apache/2.2.15 (Unix) I have added a configuration line to my ...
1
vote
1answer
307 views

Internet Explorer receives 403 Error when viewing dev environment SSL test certificate (using MAMP)

I've been developing a site with MAMP which has a handy way of generating (obviously) unverified SSL certificates for testing purposes. All was well when testing with Chrome, Firefox, Safari you ...