Finally figured out what the problem with replication was.

The credential protection space used the wrong port (even though it was
set to default for https protocol…) and the wrong authentication method
(again the default one…).