https

How to print out the HttpWebRequest in C#?

I'm having a problem with a POST I'm doing using the HttpWebRequest object from C#. In order to analyze the problem I would like to know exactly what is being sent over the wire. The problem is that I'm also using HTTPS so I can't sniff the wire. I need some way of printing out to the Console all the relevant information of the HttpWebRe...

PHP cURL - Can't connect to HTTPS site using cURL. Returns 0 length content

I have a site that connects using cURL (latest version) to a secure gateway for payment. The problem is cURL always returns 0 length content. I get headers only. And only when I set cURL to return headers. I have the following flags in place. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, fal...

Is a https query string secure?

I am creating a secure web based API that uses HTTPS however if I allow the users to configure it (include sending password) using a query string will this also be secure or should I force it to be done via a POST? ...

How to enumerate HTTP listeners from a Java EE web app

I have a web app with a web-based configuration UI. If the user accesses via HTTP, I want to alert the user that they should really use HTTPS and give them a link to click on to get to the HTTPS-prefixed URL. Now, this is pretty straightforward if we're on the default ports, but often, we're not - for example, HTTP might be on 8080, wit...

Can I force LWP::UserAgent to accept an expired SSL certificate?

I would like to know whether it is possible to force LWP::UserAgent to accept an expired SSL certificate for a single, well-known server. The issue is slightly complicated by the Squid proxy in between. I went as far as to set up a debugging environment like: use warnings; use strict; use Carp; use LWP::UserAgent; use LWP::Debug qw(+);...

How do I tell WCF to skip verification of the certificate?

Trying to make a web service call to an HTTPS endpoint in my Silverlight application results in this error: "Could not find a base address that matches scheme https for the endpoint with binding WSHttpBinding. Registered base address schemes are [http]" The same problem as was posted here: http://social.msdn.microsoft.com/Forums/en-US/...

Accessing a HTTPS website using a Flex/AIR HTML component?

Is it possible to access remote pages through https when using the HTML component inside a Flex AIR application? I'm looking to build a credit card payment integration into an AIR application and the easy way would be to send the user to a payment service within a browser embedded into the application. ...

HTTPS on iPhone

I need to be able to use https to connect to a server and I'm wondering if there's recommended way of doing this on the iPhone that's NOT: - an undocumented api call - does not require manually storing certificates in the app bundle Thanks all. ...

https with WCF error: "Could not find base address that matches scheme https"

I go to https://mywebsite/MyApp/Myservice.svc and get the following error: (The link works if I use http:// ) "The service '/MyApp/MyService.svc' cannot be activated due to an exception during compilation. The exception message is: Could not find a base address that matches scheme https for the endpoint with binding BasicHttpBinding. ...

How do I use a local HTTPS URL in java?

Using the Java URL class, I can connect to an external HTTPS server (such as our production site), but using a local URL I get "SunCertPathBuilderException: unable to find valid certification path to requested target". How do I get a valid certification path? EDIT: I'm not using this URL to directly create a connection, I am passing th...

How do you forward http request to a https url

Like the question says, if I have a request for a page on my site like this http://somename.something.here/Dada.aspx to something like this https://somename.something.here/Dada.aspx ...

How to speak SSL from a Windows MFC client?

Hi, I've an MFC application that currently uses CAtlHttpClient to query a web server for some information. I'd like to change this so that the query goes over securely, with server authentication, using SSL. Googling reveals that Microsoft has changed the way they support this several times, e.g., WinInet, WinHTTP, but for the life of...

Physically Separating Secure and Non Secure Web Requests

We have been doing some research into physically isolating the secure and non-secure sections of our web application into two applications. All "http" requests would be served by one server (or cluster) and all "https" requests would be served by another server (or cluster). The reason that we are looking into this is partially for the...

Using Shoes and download over https gives ssl errors

In a shoes application am trying to download stuff from some internal websites. I get this error Error in /tmp/selfgz14214/ruby/lib/net/protocol.rb line 66 undefined method 'closed?' for #<OpenSSL::SSL::SSLSocket:0xb6af94f0> I got the above error for this code. This give the above error if used from Shoes. require 'net/http' require ...

Client firewall blocks all ports but 80 and 443, need away to forward requets on port 443 to SSH or HTTPS

Hi, I am currently working at a client were they have locked down the network, except for ports 80 and 443. I need to connect to our server using SSH, but the same server also runs our website. We do not want to invest in a new server or place a second network card. I have been searching the internet for away to setup our linux server ...

How do I determine whether a page is secure via JavaScript?

I want to know if the page is being accessed via http or https using JavaScript. Is there some sort of isSecure() method, or should I just parse it out of the URL somehow? ...

How do I login and download a file from a https web page from Java?

Hi, I have to login into a https web page and download a file using Java. I know all the URLs beforehand: baseURL = // a https URL; urlMap = new HashMap<String, URL>(); urlMap.put("login", new URL(baseURL, "exec.asp?login=username&pass=XPTO")); urlMap.put("logout", new URL(baseURL, "exec.asp?exec.asp?page=999")); urlMap.put("file", new...

Is it smart to always redirect to https?

I am working on a project where the user will transfer his username to activate the internet. I want to always redirect the user to the https version and make the http version redirect to the https aswell, so there is only an http version. Is this a smart move? Could there be problems with mobile devices (WiFi enabled devices) Thomas ...

Best way to implement an SFTP server solution?

Hi folks, I'm currently setting up a commercial SFTP server and I'm just looking for some of your opinions on the set-up I'm currently thinking of implementing, as well as a recommendation as to what commercial Secure FTP server software would be best to suit. Bear in mind that the data i'm responsible for is highly sensitive so any com...

WCF sessions with HTTPS

I cannot figure out how to enable per-session instances for my WCF service while using HTTPS. (I'm not an ASP.NET expert but don't want to use ASP.NET session state if possible.) I am using .NET Framework 3.0. I have arrived at the following contradiction and am hoping that someone can tell me where there is a flaw in the logic. 1) The...