https

NGINX HTTPS not redirecting properly

NGINX HTTPS not redirecting properly I followed Cerbot’s instructions to get a HTTPS certificate for NGINX in my Debian server for a domain, but the HTTPS is not redirecting properly. I got the following in etc/nginx/conf.d/app.conf from Certbot’s automatic generation: server { server_name mnpd.khkm.dev www.mnpd.khkm.dev; # listen 8080; server_tokens off; location /.well-known/acme-challenge/ { root /var/www/certbot; …

Total answers: 1

Apache v2.4 is serving HTTP over port 443

Apache v2.4 is serving HTTP over port 443 aka enable https in apache2 with vhosts I am running into this trouble on Ubuntu 20.04. It looks a lot like a number of similar ones but, after hours of attempts it turned out it is not the usual one. I used certbot –apache to add HTTPS …

Total answers: 1

Debian (and ubuntu) having throubles in downloading apt-get updates if I use https

Debian (and ubuntu) having throubles in downloading apt-get updates if I use https As stated in the previous question: How can i force apt-get or apt to use only https connections deb https://deb.debian.org/debian bookworm main deb https://security.debian.org/debian-security bookworm/updates main deb https://deb.debian.org/debian bookworm-updates main security.debian.org doesn’t work if I use https protocol. With ubuntu I have …

Total answers: 1

Portainer docker container behind Nginx reverse proxy

Portainer docker container behind Nginx reverse proxy I have set up an nginx reverse proxy on an Ubuntu 22.04 server and I have successfully obtained ssl certificate from lets encrypt. The two keys are stored here: /etc/letsencrypt/live/test.ddns.net/fullchain.pem; /etc/letsencrypt/live/test.ddns.net/privkey.pem and in my default nginx config I have two paths helloworld and portainer. Both paths redirects to …

Total answers: 1

Adding PPA repository to Ubuntu LTS 22.04 seems to break https method of apt

Adding PPA repository to Ubuntu LTS 22.04 seems to break https method of apt I’ve already asked on the repository of ppa:ondrej/php on github, but they didn’t provide support, so I’m guessing it has to do with ubuntu. I couldn’t find anything about this online. I’m trying to install php 5.6 on a fresh (and …

Total answers: 1

Can't decrypt https traffic with wireshark

Can't decrypt https traffic with wireshark I am trying to decrypt https traffic according to these guides: https://linuxhint.com/decrypt-ssl-tls-wireshark/ https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/ But nothing is written to the .ssl-log.key file. I have Linux Mint 20.3 x86_64 , installed browsers Brave , Firefox and LIbreWolf . Asked By: Алекс Шевцов || Source I figured out what was the problem, …

Total answers: 1

How to get HTTPS response from a Website using OpenBSD base tools?

How to get HTTPS response from a Website using OpenBSD base tools? Using tools like curl or wget it’s easy to "get" the response of an HTTP GET request, but both tools aren’t installed by default on OpenBSD, and writing a portable shell script, it cannot be assumed that they are installed on ones another …

Total answers: 3

Squid (proxy) is eating up its own resources (and other issues)

Squid (proxy) is eating up its own resources (and other issues) I have several squid issues, but one at a time: WARNING! Your cache is running out of filedescriptors This can happen when the proxy are getting a lot of calls, and can be fixed by increasing the limit, but mine isn’t even "open" yet.. …

Total answers: 1

I think rsync://old-releases.ubuntu.com/ubuntu/dists does not match https://old-releases.ubuntu.com/ubuntu/dists, can you verify?

I think rsync://old-releases.ubuntu.com/ubuntu/dists does not match https://old-releases.ubuntu.com/ubuntu/dists, can you verify? I’m trying to maintain an rsync mirror of old-releases.ubuntu.com, and when I rsync the /ubuntu/dists directory, I get the same as what’s found at https://archive.ubuntu.com/ubuntu/dists. When I visit https://old-releases.ubuntu.com/ubuntu/dists, I get the versions I expect. From the rsync path, I get bionic, devel, focal, groovy, …

Total answers: 1

Download Windows ISO from microsoft using wget or curl

Download Windows ISO from microsoft using wget or curl Objective: download the official Win10_1909 iso into linux directly via command line Source: https://www.microsoft.com/en-in/software-download/windows10ISO After selecting edition and language you get 64bit links like as follows, valid for 24 hours https://software-download.microsoft.com/pr/Win10_1909_English_x64.iso?t=77395428-650e-4e5c-8bcc-97abca347eaa&e=1583937294&h=2b05fad63d3a6e2a0c4a20cb49f34e7c This works fine via any gui browser or any platforms, but we need this in …

Total answers: 3

How to trust self-signed certificate in cURL command line?

How to trust self-signed certificate in cURL command line? I’ve created a self-signed certificate for foo.localhost using a Let’s Encrypt recommendation using this Makefile: include ../.env configuration = csr.cnf certificate = self-signed.crt key = self-signed.key .PHONY: all all: $(certificate) $(certificate): $(configuration) openssl req -x509 -out $@ -keyout $(key) -newkey rsa:2048 -nodes -sha256 -subj ‘/CN=$(HOSTNAME)’ -extensions …

Total answers: 7

How to make SSH port fowarding for HTTPS?

How to make SSH port fowarding for HTTPS? I’ve created the following port forwarding: ssh -vL localhost:4433:example.com:443 remote-linux-host Note: I’m using 4433 on my local instead of 443 to avoid running with sudo. however when I go to https://localhost:4433/, after ignoring the certificate check, there is the following error (on both Chrome and Firefox): 404 …

Total answers: 2

Openssl command s_client always says 400 Bad Request

Openssl command s_client always says 400 Bad Request I am trying to test a server that is working normal in web browser, with openssl s_client option, connecting it directly using openssl returns the 400 Bad Request: openssl s_client -servername example.com -connect example.com:443 -tls1 (some information about the certificate) GET / HTTP/1.1 (and the error occurs …

Total answers: 4

Apache SSL: server cert does not include ID which matches server name

Apache SSL: server cert does not include ID which matches server name I’m trying to set up SSL on my apache2 webserver, but it seems that it does not work at all. I have followed a tutorial to create cert files with openssl and configured the /etc/apache2/sites-available/default-ssl.conf properly. Every time I try to open my …

Total answers: 9

Can Linux differentiate between HTTPS and OpenVPN traffic?

Can Linux differentiate between HTTPS and OpenVPN traffic? If I have a linux server that is receiving both HTTPS and OpenVPN traffic on the same port (TCP 443), and I can’t change either server port, how can I redirect just the OpenVPN traffic to a different server? From what I’ve read, at the protocol level, …

Total answers: 2

What is the correct way to use git with gnome-keyring and http(s) repos?

What is the correct way to use git with gnome-keyring and http(s) repos? Currently, whenever I git pull or git push to a http(s) repository, I get the following: $ git pull Username for ‘https://gitrepos.reposdomain.com’: me@mydomain.com Password for ‘https://me@mydomain.com@gitrepos.reposdomain.com’: This is ok for infrequent use, but starts to become really annoying very quickly. Unfortunately, switching …

Total answers: 4

apt-get fails: The method driver /usr/lib/apt/methods/https could not be found

apt-get fails: The method driver /usr/lib/apt/methods/https could not be found I tried to update my OS Debian jessie using the terminal and i get an error : “E: The method driver /usr/lib/apt/methods/https could not be found.” error? My sources.list : deb http://httpredir.debian.org/debian/ jessie main deb-src http://httpredir.debian.org/debian/ jessie main deb http://security.debian.org/ jessie/updates main deb-src http://security.debian.org/ jessie/updates …

Total answers: 5

How to install certificates for command line

How to install certificates for command line So in school we need to install a certificate to access https sites. In firefox, I can import the certificate. However, I can’t do so with the command line. For example, running git push I get: fatal: unable to access ‘https://github.com/user/repo’: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: …

Total answers: 7

Download HTTPS website available only through username and password with wget?

Download HTTPS website available only through username and password with wget? I’m trying to recursively download website which is normally available only when you login. I have valid username and password, but the problem is that I need to login through web interface, so using –user=user and –password=password doesn’t help. wget downloads only one webpage …

Total answers: 7