1

I created an azure VM and installed Gitlab's omnibus package in it. I'm using it as my personal git repo and a couple of my friends use it too. The problem is that is it not secure, it's using http. You can easily see the password being used in login if you monitor the http traffic using Wireshark or fiddler. I don't want to spend money to buy a certificate from a CA. Is there any other way I can secure that site?

marked as duplicate by Steffen Ullrich tls Sep 1 '17 at 5:56

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    Do you know what Let's Encrypt is? – drewbenn Sep 1 '17 at 4:57
  • I actually don't know that. I'll read about it thanks. – Lance Sep 1 '17 at 5:00
  • @LanceContreras: apart from being a duplicate to other questions on how to be secure without SSL: 1. SSL certificates can be free as drewbenn already pointed out, 2. SSL does not magically make a site secure. It only protects against the specific attack of sniffing and man in the middle. But it does not help against XSS, CSRF, SQL injection and many other possible and common attacks. – Steffen Ullrich Sep 1 '17 at 5:58