Questions tagged [https]

HTTPS is the secure version of the hypertext transfer protocol (HTTP). It usually uses port 443 and is powered by the TLS (formerly SSL) cryptographic protocol.

Filter by
Sorted by
Tagged with
0
votes
0answers
10 views

Bad route appended to URL when redirecting from http to https

I have a WordPress site hosted on OVH and I'm having issues when redirecting from http to https. http://www.example.com redirects nicely to https://www.example.com https://www.example.com redirects ...
0
votes
2answers
64 views

What makes Open Graph checkers unable to detect Open Graph data?

My page, after adding SSL certificate, cannot have preview fetched by Facebook or Twitter when sharing the link. I have followed The Open Graph protocol and include the following open graph tags: &...
1
vote
2answers
45 views

Apache redirect HTTP to HTTPS without preventing HTTP

Background I've added an SSL cert using Lets Encrypt/Certbot on my Debian 9 (Stretch) host. To modify my Apache configuration, essentially certbot copies the vhost.conf file, wraps it with and ...
1
vote
0answers
19 views

Why does turning off “Force SSL with https redirect” keep http links redirect to https?

I realize this question can be an XY one. After upgrading my site from http to https, FB OpenGraph og:image not pulling images anymore. The solution seems to be using http links rather than https in ...
61
votes
5answers
7k views

Why should I pay for an SSL certificate?

I paid for an SSL certificate from Namecheap, I think it was certified by ComodoSSL. It cost me 7$, it took them a week to activate and I had to do it myself from SSH while editing my site's ...
0
votes
0answers
17 views

Exception: System.Net.WebException: The underlying connection was closed - IIS

I have very strange trouble and it's difficult to me to find solution for this error. Currently i have some services (.NET) hosted on the IIS on different servers. On one of the servers there are ...
0
votes
0answers
8 views

Should my sitemap and robots.txt have http or https urls for the given scenario [duplicate]

My website is running on node.js and runs in http on port 3000 I am using NGINX to enable https access so that all pages are served as https I have placed my sitemap.xml and robots.txt inside the ...
0
votes
0answers
13 views

cPanel cgi-sys Error Redirect when using HTTP but works fine using HTTPS to access website

I have added an addon domain in cPanel, I intend for http://website.example to redirect to https://website.example, but this doesn't seem to be the case. Before the site redirects the user according ...
0
votes
1answer
25 views

HTTPS time out for newly installed SSL certificate on Nginx

Recently I bought a SSL certificate on GoDaddy and set it up in my Nginx server like this: server { listen 443 ssl default_server; server_name www.mywebsite.example; ssl on; ...
1
vote
1answer
44 views

Researching .htaccess Syntax

In my template .htaccess file I have been copying and pasteing alot of rules and researching .htaccess for around 2 weeks in an attempt to try and better understand the syntax, different modules & ...
0
votes
0answers
32 views

OVH active SSL for domains used for redirection

I have 2 domains: domain-a.example is my main website and domain-b.example is a domain used to redirect users to my main website (domain-a.example). On my ovh dashboard I set the redirection from ...
0
votes
1answer
41 views

New SSL certificate is not propagated

I have installed a new SSL certificate on my server and removed the old one but when I open the website using new PC and new browsers, I still view the old certificate in the browser. I have windows ...
0
votes
1answer
22 views

Why does a domain-validated certificate issued by certificate authority for example1.com works on example2.com?

Doesn't that completely defeat the purpose of having the first domain verified by a certificate authority when the certificate also works on other domains? How are they different from self-signed ...
2
votes
2answers
108 views

Why do SSL certificates expire?

Why do SSL certificates usually expire after a certain given period of time?Can't it really be a thing of once applied and verified, then it should be a lifetime venture?
1
vote
0answers
33 views

Partner referral sales have tanked two months after HTTPS migration, switch back?

On march 2nd I migrated my website from http to https and also put the site on a new VPS that I configured. I have 301'd all urls to https and I have no mixed content warnings. I have also added the ...
0
votes
1answer
39 views

forcing SSL without 301 redirect

Is there a way to force an SSL lock without using a 301 redirect, such as server side? I'm happy to supply context if requested.
2
votes
1answer
42 views

Firebase and Godaddy: Hosting redirection to www doesn't work for https

I have a website whose domain name is example.com from GoDaddy and my SSL certificate and hosting is on firebase. Currently www.example.com forwards properly to https://www.example.com but https://...
2
votes
2answers
37 views

Google Search Ranking and Switching to HTTPS

We have switched to an HTTPS site to replace the client's old site. The domain name is the same, but the majority of pages have different names and different URLs compared to the old site. Redirects ...
2
votes
0answers
31 views

After redirecting to canonical domain and HTTPS, Google Search Console reports most of my pages are now excluded

In Google Search Console - Coverage for one of my sites it says : Error 0 Valid with warnings 22 Valid 10 Excluded 11.1k Expanding Excluded, it's 6,000 for pages with redirect and 3,400 with a soft ...
0
votes
0answers
32 views

How can I access https file via https request without 403 forbidden in IIS?

I recently installed a site certificate to secure our website. We sell software and there are many installed users who are using some pre-website change versions of our software. Internally, the ...
1
vote
1answer
45 views

Moving from HTTP to HTTPS in Google Search Console (May 2019)

I have a client whose websites I have just moved from http to https. He's also asked me to update Google Web Master Tools too. Web Master Tools is now called Google Search Console, and appears to ...
1
vote
0answers
28 views

None https websites access issue under the same IP [closed]

I found a weird issue today for none-https website. I have 5 sites hosted on the same IP. Only 1 website has ssl enabled, name it Site A. However, When I access https version of none-https sites like ...
0
votes
0answers
38 views

HTTPS On AWS Bitnami Wordpress - HTTP Working But “This site can’t be reached” On HTTPS

I've installed Wordpress on AWS EC2. The site works fine on HTTP. I've got a third party cert installed via Certificate Manager. Current setup that doesn't work: EC2 install. wp-config.php set to ...
0
votes
1answer
31 views

SSL on staging server

I have three servers: development, staging and production. I use dev as a messy environment on which I write my code. Production is my clean, sparkly, shiny tidy web server. When pushing a new version ...
1
vote
1answer
40 views

Will referrer info get lost in Google Analytics if i 301 from HTTP to HTTPS?

If we have a bunch of backlinks from HTTPS sites, but they link to the http://example.com version of our site or example.com. Even if our site is HTTPS and once traffic gets driven to those URLS ...
1
vote
0answers
137 views

Let's Encrypt certificate renewal failure: “too many failed authorizations recently”

I am running a website on my Raspberry Pi with 2 different domain names. Installing the certificate for https:// when it became necessary was no problem. But renewing it seems impossible. I have ...
1
vote
1answer
61 views

Alias subdomain to subfolder (not redirect) with .htaccess (with HTTPS), error ERR_TOO_MANY_REDIRECTS

Well, I'm trying to accomplish this task by using this .htaccess: Options +FollowSymLinks RewriteEngine On # HTTPS (not working: ERR_TOO_MANY_REDIRECTS) # RewriteCond %{HTTPS} off # RewriteRule (.*)...
0
votes
1answer
27 views

Is it recommended to add SSL certificate protection to the domain's subdomains (webmail,webdisk,cpanel)?

I bought web hosting under FastComet and they have a free Let's Encrypt SSL service that comes with the package. There is an option to include the domain's subdomains (webmail,webdisk,cpanel) to ...
0
votes
1answer
29 views

Trying to understand the difference between two Apache SSL config statements

I'm using Apache 2.2.34, OpenSSL 1.0.2l. Yep, I know its sun-setted and not supported, but plans to upgrade it are not immediate. I'm trying to understand the difference between these two statements....
0
votes
2answers
33 views

Add SSL to a domain which is hosted from the same directory as another domain on nginx

I have a sub domain for eg subdomain.maindomainA.example which is pointing to subdomain.maindomainB.example [SSL enabled]. The A record of subdomain.maindomainA.com points to the IP address of ...
1
vote
1answer
116 views

Change of Address, Error in site redirection on Google Console

I am trying to change my domain on Google Search console using Change of Address tool, and for some reasons Google is throwing an error saying: The old site redirects to edbinx.com, which does not ...
1
vote
4answers
67 views

Sudden Drop In Google Analytics Search Console Metrics After Linking HTTPS Property

I recently switched to HTTPS having no prior experience with GA, GSC, etc. I didn't realize until last week that I had to change the property and view settings in GA accordingly so I did that. I then ...
1
vote
1answer
76 views

How to disable TLSv1.0 and TLSv1.1 in VSFTPD on Debian 10 Buster?

I'm done with the insecure FTP and serve only FTP over SSL in my VSFTPD on Debian 10 Buster. The man page is not clear at all as per my question: How do I disable the 20 years old TLSv1.0 and also ...
1
vote
1answer
32 views

Do broken backlinks from HTTP websites matter or does Google only count HTTPS links now?

Some pages have been removed not redirected from the website of a client and now there are some broken backlinks but mainly coming from websites that are HTTP (have not migrated to HTTPS). How does ...
1
vote
3answers
46 views

How can I stop Google Search Console “index coverage” emails for the HTTP site now that I have migrated to HTTPS?

We have migrated our site to HTTPS from HTTP, so added HTTPS site in Google search console. But didn't remove HTTP site. We are receiving notifications continuously for HTTP site for index coverage ...
1
vote
1answer
101 views

Do I need cPanel's AutoSSL if I also enable Cloudflare's SSL?

All of the websites I manage use cPanel, which also offers free SSL certificates. However, some of these domains use Cloudflare for their DNS, and they also get their SSL certificates from Cloudflare ...
1
vote
1answer
72 views

.htaccess: Redirect all HTTPS to a subdomain, but EXCLUDE one subdomain folder

In summary: (Notice the "https") I have https://www.example.com All need to be re-directed to https://sub.example.com EXCEPT https://xyz.example.com/api Here is my current .htaccess: ...
1
vote
0answers
44 views

After implementing HTTPS, “require valid-user” in subdirectory no longer asks for password, just gives 401 Not Authorized

I'm not very knowledgeable about server scripting, however I've only just installed SSL certificate for the domain. The main website (hosted by GoDaddy) is now working fine on SSL/TLS and I've ...
1
vote
1answer
331 views

Enabling cPanel AutoSSL alongside Cloudflare

We have a domain that is running behind Cloudflare that we would also like to have a valid (and free) SSL certificate on the origin server (running cPanel with AutoSSL). Currently the AutoSSL script ...
1
vote
1answer
78 views

haproxy with tls and ClientHello mesage with server_name extension

My goal is to configure haproxy as loadbalancer for multiple web servers with tls. I found some articles and it states that ClientHello message can contain extension with server_name. IIUC this is ...
1
vote
2answers
54 views

Move from HTTP to HTTPS and crawling requests

I have moved my web site from http to https, http is fully redirected to https and they are identical in content. I have added both properties to Google Search Console, when I ask Google for crawl (...
3
votes
1answer
53 views

What can I do when my Cloudflare SSL certificate isn't authorizing?

It's been over 24 hours since I activated SSL in the Crypto section of Cloudflare, but my Universal SSL Status still says "Authorizing Certificate". When I visit my site, Chrome says that the site ...
3
votes
5answers
121 views

Is HTTP to HTTPS redirect required even if site is only on HTTPS?

I have a new website and from day one, it was on HTTPS. For example: https://www.example.com/ Do I still need to redirect HTTP to HTTPS to avoid content duplication? For example, should I still set ...
1
vote
0answers
39 views

HSTS and redirecting to www. sub domain

I am trying to setup HSTS for my website but running into some problems regarding the response headers and the use of a sub domain. What I would like is for all HTTP traffic to redirect to https://www....
1
vote
0answers
37 views

changed site from http to https and now its unreachable by google [closed]

I move my website from http to https and now it does not appear in the google search resutls, it was appearing on the top search resutls. In google search consolte when I do fetch for the website it ...
2
votes
1answer
108 views

HTTPS site to HTTPS site referral traffic not showing up in Google Analytics

I have a site (site A) which used to get allot of traffic from a 3rd party site industry niche portal website (site B), both sites used to be HTTP. Traffic was viewable as referral traffic in Google ...
1
vote
0answers
17 views

Get Google Analytics to show seamless search console data from HTTP property to HTTPS property after migration

Background: Google Search Console (GSC) can provide up to 16 months of search performance data, and this can be reported in Google Analytics (GA) when GSC and GA are associated (GA > Acquisition > ...
1
vote
0answers
49 views

Wordpress + Cloudflare SSL redirects to apache root?

We recently deployed our new website and when trying to use it over SSL with cloudflare, it redirects to the Apache root dir? I generated origin TLS certificates and downloaded those from cloudflare ...
0
votes
0answers
18 views

Jetty9 authentication without credentials

I have a Mendelson AS2 server with Jetty9 as the https server. Currently all my vendors use basic authentication and certificate to connect to the AS2 server. I now have a vendor that does not support ...
0
votes
1answer
64 views

HTTPS Re-directing

We built a site for a client to advertise a new block of apartments they had built. The apartments have now all been sold so we have been asked to forward the domain to another domain until there is ...