https

Screen-scraping of a secure page of any site on https:// with asp.net in C#

I've done site scraping of secure page of any site on http by below code: string cookiedata = "fsfsfsdfsfsfsfsfsdf"; NetworkCredential credential = new NetworkCredential("xxx", "xxx"); HttpWebRequest request = HttpWebRequest.Create("https://ysats.com") as HttpWebRequest; //set the user agent so it looks like IE to not...

JAVA: POST data via HTTPS does not seem to get sent?

Hi guys (and girls), I have a problem POSTing data via HTTPS in Java. The server response is the same whether or not I send 'query'. Maybe someone can point out what the problem is... Thanks! Main class: package bind; public class Main { public static final String urlString = "https://www.sms.ethz.ch/cgi-bin/sms/send.pl"; ...

Sharing session variables from http and https versio

I am trying to fix an ASP.NET site that a friend had botched converting from older technologies. To the user, the site appears to have public and secured sections. Behind the scenes, the public and private sites are separate web applications with separate app pools. The difficulty arises because it appears that the applications share the...

Are there any downsides of running your full website in https

I have a website that makes heavy use of AJAX. There is an almost constant transfer of sensitive data. Because of this I was thinking of running my full website in HTTPS, making it secure throughout your stay. I was wondering if there are any downsides doing this. Performance is a huge issue for me, the faster the app runs the better. ...

Can Tomcat provide seperate (or HTTPS only) sessions for HTTPS requests?

I have a web application which contains both secure (SSL) and non-secure pages. A user can login to the site and must appear logged-in in both the SSL and non-SSL areas. (NB. SSL isn't implemented via Tomcat, but via Apache HTTPD servers which sit in front of Tomcat - so Tomcat has no SSL configuration.) The logged-in state is current...

Don't save form data over https

I'd like to submit data in a form, over HTTPS, without allowing the browser to save it. (credit card transactions) ...

tomcat 6.0.18 HTTPS not working

I am trying to configure tomcat for HTTPS on localhost. I am using self signed certification. I added folowing line of code to server.xml. <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" acceptCount=...

Https in java ends up with strange results

I'm trying to illustrate to students how https is used in java. But i have the feeling my example is not really the best out there... The code works well on my windows 7: I start the server, go to https://localhost:8080/somefile.txt and i get asked to trust the certificate, and all goes well. When I try over http (before or after accept...

What are the dangers in exposing static resources of your secure web application unsecured?

We are creating typical web applications secured by https. In order to be able to cache static resources, I would like to expose images, javascript files etc. over http. Otherwise they don’t get cahched. Is this advisable from security point of view? What are the risks involved? EDIT: I would like to have static content cached by proxie...

How to validate SSL certificate chain in ruby with net/http

How can I verify the certificates of a site like https://processing.ukash.com/ in ruby with net/http? https = Net::HTTP.new('processing.ukash.com', 443) https.use_ssl = true https.verify_mode = OpenSSL::SSL::VERIFY_NONE Works so far, but how do I verify that it's the right cert now? I saved the certificate from within firefox, but the...

Logging Into a site that uses Live.com authentication

I've been trying to automate a log in to a website I frequent, www.bungie.net. The site is associated with Microsoft and Xbox Live, and as such makes uses of the Windows Live ID API when people log in to their site. I am relatively new to creating web spiders/robots, and I worry that I'm misunderstanding some of the most basic concepts....

Is it possible to use HTTPS with OpenRasta?

Does anyone know if it is possible to use HTTPS with OpenRasta rather than plain HTTP? I need HTTPS so that sensitive information can be transferred without any risk.. ...

IIS SSL error "ssl_error_rx_record_too_long"

I have created a certificate using the following SSL command: makecert -r -pe -n "CN=www.yourserver.com" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 I assigned it to a web site on IIS, but when I try to hit the url of the web site I ...

Need to have testing server work with https: but don't have an SSL

I'm working on an online store. I have it setup on my testing server. I'm having a problem where when it goes to the checkout functions it wants to start calling https pages. I don't have an SSL certificate for this server. Is there something I can do with Apache to get this to work? Mod_Rewrite perhaps? I've played a little with rewrite...

How to make a page with a https iframe appear secure

Hi, I have a page on a website that contains a secure form inside an iframe. Although the form data submitted is secure the page doesn't appear secure as the URL in the browser is just http. Is there anything I can do to show the users that the form is secure? ...

XML RPC client for C# over secured socket (https)

I have a secured (https) XML-RPC server written in python, and I have tested it with a python based client. but I need a C# based client for it, I have given a try to xml-rpc.net but it is not working with https? can any one please help me out? or I will have to write a client from scratch? Thanks ...

Too many open files error in Glassfish3 while using https listener

I have a problem running webservice that requires https connection(Glassfish3). After running for a while, it eventually crashes. Log file show "Failed to load keystore type JKS with path ....config/keystore.jks due to ...config/keystore.jks (Too many open files)". lsof shows that a number of open files are constantly increasing (...

SharePoint : https area in a public website

I'm working on a public website that was built using SharePoint (WSS). We need to add an area in the site where people will be able to purchase items with their credit cards and obviously the area needs to be secured. The website is using Form Based Authentication and the users need to stay logged in when they are moved back and forth f...

Silverlight 4 RC + Out-of-Browser + WCF service hosted on HTTPS => How to make it work?

Hello, i have a WCF service which is hosted by IIS and a Silverlight application which calls that service. I have a clientaccesspolicy.xml and the application is able to call the service from HTTP. But if i install the application (because we need elevated permissions in the future) and call the WCF service via HTTPS i just get a "NotFo...

C# Sniffing https traffic from a 3rd party assembly with fiddler

I want to sniff https traffic with fiddler, but the traffic is generated via a 3rd party assembly instead of a web browser. Are there similar mechanisms available so that I can add the fiddler certificate into the trusted category or would you recommend any other trick? ...