best way to see if HTTPS is enabled

[sdousley]

Hi, i have just found out what i am to do for my final year project for Uni, and know that i will need https protocol enabled in order to do it. What's the best way to see if it's enabled? And if not, how to install it?

[kkubasik]

is this in apache? the best way to check is simply attempt to connect with a browser that supports https and then try to force a secure connection.

[sdousley]

i have tried this, but i kep getting an error saying:

The connection to 192.168.0.1 has been terminated unexpectedly. Some data may have been transferred

whenever i try to open https://192.168.0.1 192.168.0.1 being my webserver i get that mesage

[gwalters]

nmap -p 443 192.168.0.1

Should tell you if https is up and running

[sdousley]

doesn't nmap just tell u what porrts are open on a pc? I have just tried that command, and it sez port 443/tcp is open, but i still get the error.

[the_unforgiven]

doesn't nmap just tell u what porrts are open on a pc? I have just tried that command, and it sez port 443/tcp is open, but i still get the error.

A port is shown open only when there is a daemon (or service in winbloze terminology) listening on it.

Try telnetting to port 443 - similar to telnetting to http port.
Something like telnet myhost https or telnet myhost 443 and try to carry out the HTTP dialog as usual - just like a browser would do.
If the server responds properly, you've got the server configured for https.
Otherwise, looking into logs of the server might help diagnose the problem.

The msgs returned by the server might be helpful too.

[wassy121]

If you are getting that "some data may have been transferred" error, it is because apache is listening on port 443, but doesn't have the SSLEngine turned on. If you run 'openssl s_client -host 192.168.0.1 -port 443' it will attempt to make an SSL connection to 192.168.0.1:443. You can then type something like:

GET / HTTP/1.0


In order to get the default webpage.

Best,

Samuel