Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

3
votes
0answers
41 views

Redirecting www and non www to HTTPS on blogger

I have a blog on Blogger and have activated HTTPS. This link works: https://www.example.com But this does not: https://example.com/ Is there a solution to this problem?
3
votes
0answers
169 views

Angular2 on Heroku ask for ssl while using symfony2 api

I launched a nodejs app on Heroku which is basically the front of a website in angular2. The app should receive the database information from an api powered by symfony3 hosted on OVH. It seems that ...
2
votes
0answers
31 views

After redirecting to canonical domain and HTTPS, Google Search Console reports most of my pages are now excluded

In Google Search Console - Coverage for one of my sites it says : Error 0 Valid with warnings 22 Valid 10 Excluded 11.1k Expanding Excluded, it's 6,000 for pages with redirect and 3,400 with a soft ...
2
votes
0answers
65 views

How can I fix two conflicting SSL certificates? (One expired)

Background: I recently inherited management of a web project and ran into an issue with an expired SSL certificate. The site is hosted on AWS with a wildcard certificate generated from ACM, which is ...
2
votes
0answers
27 views

Does an SSL certificate targeted at users in China need to be generated by a Certificate Authority in China by law?

The company I work for is hosting a web page secured with login and password and working through SSL with a certificate generated in USA. This is already on production. They want to expand the ...
2
votes
0answers
20 views

Assessing TLS capabilities by examining user agent strings from log files

I have a long list of browser user agent strings pulled from website access logs which I would like to analyze to determine the TLS capabilities of our site's visitors in order to get a ballpark ...
2
votes
0answers
420 views

Non-www to www redirect not working in Firefox; Works in Chrome with nginx server

I've configured my website to have https with www scheme. I opted to redirect all the traffic from non-www to www, at the time of setting up LetsEncrypt SSL certificate and it works absolutely fine on ...
2
votes
0answers
578 views

First Byte Time is slow after SSL installation

This is the first time I try to install SSL for one of my clients but I can't figure out what I am doing wrong. Here is without SSL: https://www.webpagetest.org/result/...
2
votes
0answers
153 views

SSL Caching prevends https requests

I use the W3 Total Cache Plugin for Wordpress. If I enabled "Cache SSL (https) requests" in W3 Total Cache and testing my site at https://securityheaders.io for security reports, then I get only one ...
2
votes
0answers
325 views

Cannot “fetch as Google” in Search Console after implementing HTTPS because of redirect

We have recently switched from HTTP to HTTPS. When I tried to "fetch as Google", it says the URL has been redirected and I am not able to see how the website is going to look. Is it because Google ...
2
votes
0answers
624 views

Using AutoSSL/LetsEncrypt To Give Cert to SubDomain Pointing to Separate Server

Background I have a primary website hosted on a LAMP-based VPS, with WHM and cPanel. I've installed the Let's Encrypt cPanel plugin to use with AutoSSL, and that is working for the main site. ...
2
votes
0answers
72 views

Facebook share counter reset after HTTPS

I just moved my blog to https and, of course, all the facebook shares counters are now reset to 0. I've spent several hours reading stuff online and I got the solution to point the og:url tag to the ...
2
votes
0answers
133 views

Googlebot not indexing https pages with 301 redirect

I recently installed a new SSL in my blog and i forced 301 redirect on all http to https pages. It took like 2 months for google to index https content, infact i am seeing a small boost in rankings. ...
2
votes
0answers
295 views

GoDaddy OCSP issues

I work for a company that runs round 2000 websites and a while back we enabled OCSP stapling in our server config. For the better part of a year this worked without issue, but in recent weeks we've ...
2
votes
0answers
53 views

Timeouts after SSL

We recently received an email from our web host saying that they had identified a problem with our SSL certificate and they would reissue another certificate for free to resolve this. Prior to the ...
2
votes
0answers
21 views

Why does my server require an SSL handshake on certain jpeg images and not others?

I am wondering why does my server require an SSL handshake on certain jpeg images and not others? I have about 16 images on a page and it always seems like the 2nd 4th and 5th image require a ...
2
votes
0answers
404 views

CloudFlare and Avast strict transport

This weekend, we started using CloudFlare*. One of our users is reporting that Avast, the anti-virus software, has blocked our site due to a certificate error. Presumably this is because our ...
2
votes
0answers
116 views

Self hosted Windows Communication Foundation (WCF) application and IIS using 443 on different IPs

I have a server that has self hosted WCF application and IIS installed. Server has two IPs assigned. Is it possible to have the WCF application use 443 on IP1 and IIS use 443 on IP2? WCF binds to ...
2
votes
0answers
259 views

IIS 7.5 and authenticating client certificates

I am trying to understand if the functionality I am seeing is how client certs and SSL is supposed to work, or if I've done something wrong. I have a site running under IIS 7.5 that is using a cert ...
2
votes
0answers
709 views

How can I set a secure flag on cookies generated from a Python application?

I have an application written in Python running behind Apache and SSL. I am not seeing a secure flag on my cookie: apache Server version: Apache/2.2.15 (Unix) I have added a configuration line to my ...
1
vote
0answers
32 views

Partner referral sales have tanked two months after HTTPS migration, switch back?

On march 2nd I migrated my website from http to https and also put the site on a new VPS that I configured. I have 301'd all urls to https and I have no mixed content warnings. I have also added the ...
1
vote
0answers
23 views

Will referrer info get lost in Google Analytics if i 301 from HTTP to HTTPS?

If we have a bunch of backlinks from HTTPS sites, but they link to the http://example.com version of our site or example.com. Even if our site is HTTPS and once traffic gets driven to those URLS ...
1
vote
0answers
79 views

Let's Encrypt certificate renewal failure: “too many failed authorizations recently”

I am running a website on my Raspberry Pi with 2 different domain names. Installing the certificate for https:// when it became necessary was no problem. But renewing it seems impossible. I have ...
1
vote
0answers
42 views

After implementing HTTPS, “require valid-user” in subdirectory no longer asks for password, just gives 401 Not Authorized

I'm not very knowledgeable about server scripting, however I've only just installed SSL certificate for the domain. The main website (hosted by GoDaddy) is now working fine on SSL/TLS and I've ...
1
vote
0answers
33 views

HSTS and redirecting to www. sub domain

I am trying to setup HSTS for my website but running into some problems regarding the response headers and the use of a sub domain. What I would like is for all HTTP traffic to redirect to https://www....
1
vote
0answers
16 views

Get Google Analytics to show seamless search console data from HTTP property to HTTPS property after migration

Background: Google Search Console (GSC) can provide up to 16 months of search performance data, and this can be reported in Google Analytics (GA) when GSC and GA are associated (GA > Acquisition > ...
1
vote
0answers
48 views

Wordpress + Cloudflare SSL redirects to apache root?

We recently deployed our new website and when trying to use it over SSL with cloudflare, it redirects to the Apache root dir? I generated origin TLS certificates and downloaded those from cloudflare ...
1
vote
0answers
33 views

Add HTTPS (SSL certificate) to users custom domain names on a website builder

I have a website builder where users can add their domain name, and I need some direction on how to get it set up with HTTPS, I presume through LetsEncrypt. Example: Without domain: djdemo.vibecast....
1
vote
0answers
20 views

Heroku and 123 Reg showing IIS page only on naked domain

I've got a site set up with SSL that works as expected when manually typing in 'https://example.com' or 'http://example.com'. However, when I navigate to just 'example.com' I get an IIS hosting page. ...
1
vote
0answers
69 views

Combining password protection and redirects in .htaccess file

I'm a designer who developed a simple site with HTML and CSS. I'm completely new to .htaccess so it's not surprising I'm struggling to get the file to work as I want. Problem 1: I want to password ...
1
vote
0answers
113 views

IIS website only allowing https connection, no http

We are running two websites on IIS (site1.site.example and site2.site.example). Both sites have the same bindings but with different host names (as above), on IP address * and for ports 80 and 443 (...
1
vote
0answers
11 views

Installing a free world-compatible SSL certificate in WHM/Cpanel

It's been a while but here I am again. I just found out today that users of chrome 69 or later will see a big "insecure" message for webpages beginning with http:// such as mine and even Bing's ...
1
vote
0answers
21 views

Social sharing count (Specially Facebook and Twitter) when moving to HTTPS

How can I get back the social sharing count (Specially Facebook and Twitter) when moving to HTTPS? Note : WordPress Site (I don't think platform does not related to this question. But if it is ...
1
vote
0answers
77 views

Facebook debugger is caching different IP addresses for same domain

I have problem with Facebook debugger, I tried to scrape domains few times, and I got strange results. Facebook debugger is caching different IP addresses for the same domain. I saw a few different ...
1
vote
0answers
343 views

CloudFront very slow TTFB after enabling HTTP/2

My site was running on HTTP/1.1 with CloudFront at front, Webpagetest reports the load time usually at 2 seconds. Yesterday I enabled HTTP/2 (and SSL) on CloudFront, hoping to see an improvement. The ...
1
vote
0answers
18 views

double authentication for https password protected password

I am hosting a customer's OpenCart store on my own domain hosting. I have add-on domain in my CPanel for customer's domain and created sub domain for it to ease access. Other than the double ...
1
vote
0answers
181 views

After HTTPS migration can we leave the old sitemap as it is and upload the new sitemap with HTTPS URLs?

We are migrating from HTTP to HTTPS. We left our old sitemap as it is and uploaded the new sitemap with HTTPS pages with new name. I read it at Google’s Search Console Help: Move a site with URL ...
1
vote
0answers
236 views

Multiple SSL server blocks with nginx on single ec2 instance

I've asked this question before and I think I found a potential answer on the nginx Website, which is to have multiple internal IPs for the Web server to listen on. I don't know how to do that with ...
1
vote
0answers
63 views

After installing SSL through cpanel in shared hosting I get warnings and errors with subdomains and SMTP without SSL or TLS

I manage my wordpress site that is hosted in a shared hosting plan, but I am not a web developer. A couple of days ago, I purchased an SSL and migrated from http to https with the help of a wordpress ...
1
vote
0answers
498 views

Get a Lets Encrypt SSL certificate through ZeroSSL for a .ovh.net subdomain

I'm trying to set up https connection in one of my API. I normally make requests to my API through this address: http://vps******.ovh.net:8090 I'd like to be able to make HTTPS requests. I use the ...
1
vote
0answers
36 views

What issues will I encounter if the new /shop section of my website is HTTPS

I am about to launch a new section of my website which is a small store for gift vouchers and a few branding products. My site is well ranked/positioned in Google organically and paid. However, for ...
1
vote
0answers
256 views

Correct way to redirect from HTTP domain to a different HTTPS domain on the same server?

Hello I have two different domain names pointing to the same server (same IP in DNS records). One domain (example1.com) has SSL enabled and has a fully working website on it. The other domain's (...
1
vote
0answers
109 views

Google Indexed cgi-sys/default-webpage for mobile, but shows the site correctly in desktop search

I moved my page to HTTPS. In the search result from a PC, it is indexed correctly, but on mobile google indexed my webpage as cgi-sys/defaultwebserver.php. To solve this problem I blocked cgi-sys ...
1
vote
0answers
25 views

The indexed page number decrease after migrating from http to https

My website is migrating from http to https, but both http and https URL can work. The indexed page number in https increase, but decrease in http. Why does the indexed page number in http decrease? ...
1
vote
0answers
388 views

Rewrite external HTTP resource links to proxied HTTPS using Apache/PHP

First off, disclaimer... I know what I'm asking for is against specification and recommendation but the boss wants it done. Having said that... I'm the person responsible for a Moodle installation (...
1
vote
0answers
75 views

How to keep https website from reloading when user hits back button?

Every time the user goes back to a page on my website in the browser it reloads. I believe this is a result of it being an SSL site. I have a test subdomain from the same git repo, but it is not https....
1
vote
0answers
342 views

Making a Let's Encrypt-secured site viewable on Windows Mobile 6.5

I operate a web application that I intend to make available through HTTPS to users of barcode-scanning PDAs running Windows Embedded Handheld 6.5 Professional, which was Microsoft's branding for ...
1
vote
0answers
677 views

Forcing SSL on Wordpress crashes site?

So I have just installed a paid Comodo SSL on my website. I can visit my website with https://homepage.com/ but the https appears grey. Currently that isn't my worry. But when I visit the website ...
1
vote
0answers
584 views

“The domain example.com is no longer parked by GoDaddy.” error message trying to host a Heroku App

I have a Heroku App, a Godaddy domain (which I have added in my heroku app domains) and I need to use a free ssl provided by Cloudflare. I am struggling to find out the best workaround for this. I ...
1
vote
0answers
30 views

Shared hosting IP changed to https from http

I had a shared hosting on my service provider. Since last 6 months everything was going fine. But recently after some server problems, that halted services for many days and restored back, I am no ...