Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [https]

All about programs and services that use HTTPS.

HTTPS is that is tunnelled through /. Beyond that HTTP and HTTPS are identical. Since there is no STARTTLS command for HTTP, HTTP and HTTPS must be served on different ports. HTTP is typically served on TCP port 80 and HTTPS is typically served on TCP port 443, but HTTP and HTTPS can be served on (distinct) ports with any port number.

Use this tag for questions on programs and services that use HTTPS. For questions specific to web servers the Server Fault Stack Exchange is probably more appropriate.

205 questions
91
votes
5 answers

apt-get fails: The method driver /usr/lib/apt/methods/https could not be found

I tried to update my OS Debian jessie using the terminal and i get an error : “E: The method driver /usr/lib/apt/methods/https could not be found.” error? My sources.list : deb http://httpredir.debian.org/debian/ jessie main deb-src…
GAD3R
  • 63,407
  • 31
  • 131
  • 192
80
votes
7 answers

How to trust self-signed certificate in cURL command line?

I've created a self-signed certificate for foo.localhost using a Let's Encrypt recommendation using this Makefile: include ../.env configuration = csr.cnf certificate = self-signed.crt key = self-signed.key .PHONY: all all:…
l0b0
  • 50,672
  • 41
  • 197
  • 360
62
votes
5 answers

Why is there no https transport for debian apt tool?

With all the paranoia that came with NSA revelations, I'm wondering why the Debian package installation mechanism does not support HTTPS for its transport, let alone use one by default. I know Debian packages have some sort of signature validation…
zaadeh
  • 1,173
  • 1
  • 12
  • 17
62
votes
4 answers

Most straightforward way of getting a raw, unparsed HTTPS response

What would be the most straightforward way of making a GET request to a url over HTTPS, and getting the raw, unparsed response? Could this be achieved with curl? If so, what options would you need to use?
Acorn
  • 825
  • 1
  • 7
  • 11
37
votes
3 answers

What tool can I use to sniff HTTP/HTTPS traffic?

I'm looking for a command line tool that can intercept HTTP/HTTPS requests, extract information such as: (content, destination, etc.), perform various analysis tasks, and finally determine if the request should be dropped or not. Legal requests must…
slm
  • 363,520
  • 117
  • 767
  • 871
35
votes
8 answers

Apache SSL: server cert does not include ID which matches server name

I'm trying to set up SSL on my apache2 webserver, but it seems that it does not work at all. I have followed a tutorial to create cert files with openssl and configured the /etc/apache2/sites-available/default-ssl.conf properly. Every time I try to…
pixelmusik
  • 611
  • 1
  • 6
  • 9
23
votes
3 answers

How to see list of curl ciphers?

My understanding is that during ssl negotiation, the client (i.e. curl) sends a list of ciphers to the server, and the server replies with its preferred choice. How do I see the list of ciphers that curl is sending?
Benubird
  • 5,752
  • 10
  • 36
  • 41
18
votes
2 answers

Monitor outgoing web requests as they’re happening

I want to see a list of all outgoing HTTP requests from my desktop. I think it should be possible to monitor HTTPS hostnames as well for local clients using Server Name Indication (SNI). OS X has a nice GUI utility called Little Snitch, which is a…
Daniel
  • 1,207
  • 3
  • 14
  • 30
11
votes
4 answers

Download Windows ISO from microsoft using wget or curl

Objective: download the official Win10_1909 iso into linux directly via command line Source: https://www.microsoft.com/en-in/software-download/windows10ISO After selecting edition and language you get 64bit links like as follows, valid for 24…
Curi0usM3
  • 123
  • 1
  • 1
  • 6
11
votes
2 answers

Untrusted package apt-transport-https

I am using Debian wheezy and I would like to install the package apt-transport-https, which allows to access apt repositories through the https protocol. What really puzzles me is that the apt-get gives me the following message: $ sudo apt-get…
Giorgio
  • 797
  • 2
  • 13
  • 28
10
votes
2 answers

How to make SSH port fowarding for HTTPS?

I've created the following port forwarding: ssh -vL localhost:4433:example.com:443 remote-linux-host Note: I'm using 4433 on my local instead of 443 to avoid running with sudo. however when I go to https://localhost:4433/, after ignoring the…
kenorb
  • 20,250
  • 14
  • 140
  • 164
10
votes
4 answers

Openssl command s_client always says 400 Bad Request

I am trying to test a server that is working normal in web browser, with openssl s_client option, connecting it directly using openssl returns the 400 Bad Request: openssl s_client -servername example.com -connect example.com:443 -tls1 (some…
Luciano Andress Martini
  • 6,490
  • 4
  • 26
  • 56
10
votes
3 answers

wget doesn't support https

I want to download https://example.com using the wget command, but it says “unsupported/unrecognized protocol”. I tried using the --secure protocol='' but that does not work. I downloaded the tar file from GNU wget and tried configuring that but I…
user124096
  • 101
  • 1
  • 1
  • 3
7
votes
2 answers

How to verify a service is listening on both ipv4 and ipv6?

I want to check whether https service is listening on both IPv6 and IPv4. And also when I am accessing url via browser, I want to know request is served by IPv4 or IPv6.
SecureTech
  • 1,379
  • 3
  • 13
  • 18
6
votes
4 answers

`openssl`: Subject Alternative Name

I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain: $ echo -e "GET / HTTP/1.1\nEOT" | \ openssl s_client -connect google.com:443 2>&1 | \ grep…
Mathias Bynens
  • 319
  • 5
  • 17
1
2 3
…
13 14