#1 2017-11-19 13:58:40

Deltabeard
Trusted Member
Registered: 2017-11-18
Posts: 3

Reverse proxy https issue

Hi,

I have a reverse proxy setup. I would like to use my website with https only, so I have my server redirect all http traffic to https.
Whilst forcing IPv4 connections, I successfully get the redirect header when I connect to http. However, I am unable to connect to my web server using https.
I get a "port 443: Connection refused" error when I use "curl -4 https://deltabeard.com" command to test the website.

Does the reverse proxy not support https requests (port 443)?

My VPS is running in Italy (*.220). Please let me know if more information is required.

Thanks in advance.

Edit: Mininode 8

Last edited by Deltabeard (2017-11-19 14:13:10)

Offline

#2 2017-11-20 11:49:05

mikho
Low End Mod
From: Hell and gore == Sweden
Registered: 2013-03-02
Posts: 1,354
Website

Re: Reverse proxy https issue

To my knowledge Italy (Inception) doesn’t support https.
Only my locations do at this time.

Offline

#3 2017-11-20 15:10:42

Deltabeard
Trusted Member
Registered: 2017-11-18
Posts: 3

Re: Reverse proxy https issue

That's quite disappointing. I don't think there was any indication of this when purchasing this VPS.
I guess I'm forced to redirect only IPv6 users to the https website.

Is supporting https a planned feature?

Offline

#4 2017-11-21 00:56:25

WSS
Trusted Member
Registered: 2016-12-22
Posts: 286

Re: Reverse proxy https issue

Handling HTTPS would mean to either have access to your certificate, or vending a certificate in your name for the FQDN.  Most people would prefer that others not do that on their behalf; even more administrators would prefer not to handle that on your behalf.


RbyeR4Nm.png

Offline

#5 2017-11-21 14:44:12

mikho
Low End Mod
From: Hell and gore == Sweden
Registered: 2013-03-02
Posts: 1,354
Website

Re: Reverse proxy https issue

WSS wrote:

Handling HTTPS would mean to either have access to your certificate, or vending a certificate in your name for the FQDN.  Most people would prefer that others not do that on their behalf; even more administrators would prefer not to handle that on your behalf.

 
Nope .. you can forward the port directly, thats how it works with Virtualizor.

Once Inception migrates from Solus it will work without any problems. Don't know when that will happen though

Offline

#6 2017-11-21 23:33:31

DavidGestionDBI
Provider-Moderator
From: Montreal, Canada
Registered: 2015-01-10
Posts: 599
Website

Re: Reverse proxy https issue

We do offer HTTPS too.


-----------
David B. |  Technical Director at Gestion DBI ||  Want to receive our promotions?
IT consulting and Hosting Provider | 24/7 Technical Support

Offline

#7 2017-11-22 07:30:34

Backtogeek
Low End Boss
From: ~/
Registered: 2013-02-13
Posts: 3,547
Website

Re: Reverse proxy https issue

mikho wrote:
WSS wrote:

Handling HTTPS would mean to either have access to your certificate, or vending a certificate in your name for the FQDN.  Most people would prefer that others not do that on their behalf; even more administrators would prefer not to handle that on your behalf.

 
Nope .. you can forward the port directly, thats how it works with Virtualizor.

Once Inception migrates from Solus it will work without any problems. Don't know when that will happen though

Christmas, it is my present to myself.


http://LittleHappyCloud.net KVM VPS with 1TB Bandwidth for €3.00

Offline

#8 2017-11-22 16:49:33

WSS
Trusted Member
Registered: 2016-12-22
Posts: 286

Re: Reverse proxy https issue

mikho wrote:
WSS wrote:

Handling HTTPS would mean to either have access to your certificate, or vending a certificate in your name for the FQDN.  Most people would prefer that others not do that on their behalf; even more administrators would prefer not to handle that on your behalf.

 
Nope .. you can forward the port directly, thats how it works with Virtualizor.

For some reason, this never occurred to me.  Yeah, a direct port->port proxy would work fine.  You're slightly less susceptible to a MitM attack this way, too.


RbyeR4Nm.png

Offline

Board footer