https

How do I make my ASP.NET application serve pages only over HTTPS?

I want my application to serve all of its web pages over SSL, so I added the lines... <secureWebPages enabled="true"> <directory path="." /> </secureWebPages> ... to my Web.config and the resulting compiler error is: Build (web): Unrecognized configuration section secureWebPages. I am running Visual Studio 2008 ...

Certificates for SSL-enabled embedded systems

I have an embedded system that I expect to be in use for the next 15 years or so, and it has an https-based administration console. From what I understand: If I have a self-signed certificate, web browsers will complain. If I have a CA-signed certificate, it will expire fairly soon over the lifetime of the product, and web browsers wi...

Securely persist session between https://secure.yourname.com and http://www.yourname.com on rails app

My rails site posts to a secure host (e.g. 'https://secure.yourname.com') when the user logs into the site. Session data is stored in the database, with the cookie containing only the session ID. The problem is that when the user returns to a non-https page, such as the home page (e.g. 'http://www.yourname.com') the user appears to hav...

plain http images with a https/ssl page

Is it still not kosher to have a https page with images that are not accessed via SSL? (ie imagine a web app which is SSL for all important content, but images and styles are coming via a plain http CDN). ...

J2ME HTTPS Connection Problem: Certificate was issued by an unrecognized entity

I am developing a little J2ME application that will read our grades from our university's server. With Desktop Applications, It is fine, I can do it but in J2ME, it always gives me this error, even I use well-known services like HTTPS Google, I still get the same error. urlConn = (HttpsConnection) Connector.open("https://stars.b...

IE Mixed Content Warining when using https URLs and http:443 URLs?

I'm getting the good ole' "This page contains both secure and nonsecure items." dialog in IE when connecting to an HTTPS site. No big deal... I've just got something coming in over a non-secure connection so that should be an easy fix, right? So I go into "View > Web Page Privacy Policy..." to look to see where I've included an HTTP fil...

http authentication between using ant/ivy retrieving dependency from nexus?

I have an issue when attempting to retrieve a dependency from a nexus repository when running ant with ivy. the dependency is never resolved, when running with verbose output the suspect line is '[ivy:retrieve] authentication: k='@' c='null'. I have tried many different variations of providing the credentials configuration to ivy, but ...

The HTTP request was forbidden with client authentication scheme 'Anonymous'

I am trying to configure a WCF server\client to work with SSL I get the following exception: The HTTP request was forbidden with client authentication scheme 'Anonymous' I have a self hosted WCF server. I have run hhtpcfg both my client and server certificates are stored under Personal and Trusted People on the Local Machine Here is t...

Redirect to https login page

I have a site that has a mix of http and https pages. Under the root of the site, one folder has all the http pages and another has all the https pages. Login is over https and sends the user to the other pages. When a session expires the forms authentication redirects to the Login page but the browser uses http and the user gets a 403 e...

SSLException: Received fatal alert: certificate_unknown - what does it mean?

Hi, I am getting the "javax.net.ssl.SSLException: Received fatal alert: certificate_unknown" error when attempting to send a HTTPS message. I believe the message is due to the endpoint not recognising the sent certificate or is rejecting it. But I want to be doubly sure this is a server issue and not a local client issue before I go b...

SSL certificate exception problem in Firefox

Hi there, and thanks in advance for your help or any tip that could get me out of here. I work on a JEE app with a JBoss server and an Apache. I'm not really familiar with SSL connections and certificates, I understand the basic, but I have to deal with it. So on my local configuration (localhost) I have my connection certificate config...

Windows Service Hosting WCF Objects over SSL (https) - Custom JSON Error Handling Doesn't Work

I will first show the code that works in a non-ssl (http) environment. This code uses a custom json error handler, and all errors thrown, do get bubbled up to the client javascript (ajax). // Create webservice endpoint WebHttpBinding binding = new WebHttpBinding(); ServiceEndpoint serviceEndPoint = new ServiceE...

Is there a way to force HTTPS protocol in a Kohana 2.3 site?

I've got a site built on top of Kohana 2.3 which I now have to make all links https. I set this in application/config/config.php. $config['site_protocol'] = 'https'; This makes all links on the site use the https protocol. Except, when I first enter the site via http, it will not automatically forward to https. Is there a way to ma...

Dealing with HTTP content in HTTPS pages

We have a site which is accessed entirely over HTTPS, but sometimes display external content which is HTTP (images from RSS feeds, mainly). The vast majority of our users are also stuck on IE6. I would ideally like to do both of the following Prevent the IE warning message about insecure content (so that I can show a less intrusive o...

How does HTTP Analyzer work?

Halo, i am interest in methods, which http analyzer uses to capture data. I would like to write program which saves emails sent via web based clients. The problem is https and HTTP Analyzer solves it, but i dont know how. I got one interesting answer on my question before, but it doesnt reveal as much as i would like to know. Progra...

How to catch https data before send?

How can i catch https data(for example email) from browser before they are encrypted with ssl and send to the network? does anyone have idea? I am looking for programmatical solution. How it works. I am not looking for any program,want to make my own. Thx. ...

HTTPS requests over open proxy servers

I will keep this simple. It's possible, or there is a special type of proxy for this? ...

Configure a Port with an SSL Certificate w\o using Httpcfg

Hi, When one develops a self-hosted WCF http server, one of the steps needed is to bind an SSL certificate to a port number: httpcfg set ssl -i 0.0.0.0:8012 -h 0000000000003ed9cd0c315bbb6dc1c08da5e6 as stated in: http://msdn.microsoft.com/en-us/library/ms733791.aspx However, It is hardly expected that in my deployment environment one w...

Calling a wsdl in php over https

I'm trying to connect to the next webservice: https://grab.beta.agiv.be/Tools/CRABTools.svc?wsdl I also have to add a header element which I have already created Can i call it just using php soapclient or zend_soap_client? Or do I have to use nusoap_client? I try something like: $soapclient = new nusoap_client($wsdl); $header = ""; /...

Calling a wsdl in php over https using Zend Soap Client

When I'm trying to connect to a webservice I always get the next fault SoapFault exception: [s:Sender] An error occurred when verifying security for the message I also have to use a security header, full soap request is send: <env:Envelope> <env:Header> <ns2:Action env:mustUnderstand="1"> http://ws.agiv.be/crabtools/ICRABTools/GetAddr...