https

Apache: force ssl redirect works for all cases but one??

we are registered under verisign for mydomain.com, but not www.mydomain.com, so all of my ssl redirects must also remove the www. (if any). so the redirect must go to https://mydomain.com it currently redirects to that with: mydomain.com www.mydomain.com http://mydomain.com http://www.mydomain.com but does not work for: https://www....

Using java class HttpsURLConnection

Hi all, I have a small piece of code which basically impements a HTTP-Client, i.e. it POSTS request and works with re RESPONSE. As long as HTTP is concenerned everthing work well. For some reason I now have to support HTTPS too. So here is briefly what I do in order to get a connection opened: URL url = new URL(serverAddress); HttpsU...

Every subsequent call to an Axis webservice fails

I've been having a strange issue with an Axis webservice which is called through the https protocol. Basically, when an invocation is made, the call goes through just fine. If the call is made again, the web service fails, returning me with the following message: <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelop...

Amazon S3 - HTTPS/SSL - Is it possible?

I saw a few other questions regarding this without any real answers or information (or so it appeared). I have an image here: http://furniture.retailcatalog.us/products/2061/6262u9665.jpg Which is redirecting to: http://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg I need it to be (https): https://furniture.r...

Problem switching back from forced SSL on certain pages using mod_rewrite

Client wants login pages to load via https. This is easily accomplished, but since the site uses pretty url's, we now stay in https mode when clicking around after login is finished. This breaks secure files which are uploaded in the CMS, stored above webroot, and downloaded by streaming through a php script if user has the appropriate...

facebook oauth secure?

I have been implementing the 'login through facebook' button on my e-commerce site by using the javascript sdk and the example here: http://developers.facebook.com/docs/authentication/ . However, i have noticed that the cookie created by the sdk can be transmitted through http (as opposed to https) and I am pretty sure this is not the s...

Why won't Javascript assembled Iframe load in IE6 over HTTPS although it will over HTTP?

The issue: The iframe won't load inside the <div id="shipnum"></div> tags on the review and submit page here (relevant HTML and javascript is also below): https://checkout.netsuite.com/s.nl/c.659197/sc.4/category.confirm/.f Login:[email protected] pass:test03 To produce problem: - Where it says "Your Third Party Shipper Numbers (To ente...

Whats the difference between GET and POST encryption?

What is the difference when encrypting GET and POST data? Thx for answer Edit: i need to write it more specific. When https-SSL encrypts both of this methods, what is the difference in way browser does this. Which parts are encrypted and which are not? I somewhere read, that the destination url is not encrypted in POST, is that true? I...

WCF configuration for WebHttpBinding(Restful) for supporting both HTTP and HTTPS

We are using AJAX Cascading dropdown and AutoComplete functionality with Restful WebService Services providing data. With one endpoint(non-secured) eveything was working fine, until we tried same web page with https. Our Webappplication needs to support both. Our of very few articiles/blogs on this issue I found 2 which applies to my req...

Selectively Redirecting HTTP requests to HTTPS requests in ASP.NET

What's the simplest and most effective way to selectively redirect HTTP requests to your ASP.NET page to its HTTPS equivalent? For example, if my page site URL is http://www.somesite.com, I want to redirect some (or all) page requests to https://www.somesite.com. What's the easiest way to do that? ...

What could be the best solution to avoid the conflict of http and https popups in IE?

What could be the best solution to avoid the conflict of http and https popups in IE? I have many Secured connection pages where i face this popup in IE, I want to handle it how to do that? ...

Cannot open xls file in IE

We have JSF web application that generates XLS file and gives user link to thes file. All works fine if access this file via HTTP. But IE(8) cannot open/save this xls file via HTTPS. There is following error message: Internet Explorer cannot download ...466088C5C313F92808BDB0AFF3447 from testhost. Internet Explorer was not able to op...

PHP http_get vs fsockopen to HTTPS server?

In PHP, what are the biggest considerations when choosing between using http_get("https://...") and a sockets loop with fsockopen("ssl://..."), fputs() and fread()? I’ve seen a couple of implementations lately that use the latter. Is that just old legacy code or is there some good reason for it? Thanks. ...

Preventing man in the middle attack while using https

Hi, I am writing a little app similar to omegle. I have a http server written in Java and a client which is a html document. The main way of communication is by http requests (long polling). I've implemented some sort of security by using the https protocol and I have a securityid for every client that connects to the server. When the ...

How to prevent HTTPS man-in-middle attack from the server side?

In the HTTPS security model, the weakest part is the list of trusted CA in the browser. There are many ways that someone could inject addition CA to the list that users will trust the wrong guy. For example, a public computer, or PC in your company. The administrator could force you to trust a CA issued by himself, it could be very inse...

What is the difference between APR implementation of SSL and JSSE implementation of SSL on TOMCAT5.5

Hi I'm configing SSL to support HTTPS on TOMCAT 5.5. So I referred to "http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html" which elaborates on how to implement SSL. Document describe two ways to implement SSL namely APR implementation, JSSE implementation. I wonder the difference between them, including their shortcomings and adva...

iPhone https post request

Ho all! I'm trying to' make a login with the iPhone into a https server.. I tried different solution, also asihttprequest and the solution works fine with http normal website, but with https the return data is the same of the login page... I news to' make something different for https? Thanks in advance this is the code that I tried: on...

How to get SSL certificate info with CURL in PHP?

Hi, I would like to be able to read the SSL certificate information with CURL. From the Linux console I get this response header: GET https://www.google.com/ -ed Cache-Control: private, max-age=0 Connection: close Date: Sun, 20 Jun 2010 21:34:12 GMT Server: gws Content-Type: text/html; charset=ISO-8859-1 Expires: -1 Client-Date: Sun, 2...

https login form

What should i consider when switching a simple(user+pass) login form from http to https? Are there any differences when using https compared to http? From what i know the browser won't cache content server over https, so page-loading might be slower, but other that that i know nothing about this. Anyone has any experience with this thi...

Selfhosted WCF and SSL (Again)

Hello, I've configured ssl usign httpcfg set ssl, after this I've written next code: using System; using System.Net; using System.Security.Cryptography.X509Certificates; using System.ServiceModel; using System.ServiceModel.Description; using System.ServiceModel.Security; namespace SelfHost { internal class Program { pr...