https

Set the certification to the NSHTTPURLResponse in iPhone

Hi all, I would like to send some information to a 'HTTPS' server and get the cookies and html code from the server. I have already complete the cookies and the html part. However, when I use the 'GET' method to set the url and use the statusCode to see the http status code, I found that the status code is 0. I found the error is about ...

Rewrite from https to http

I have 5 sites on one apache server. One of the sites is with SSL. So when the other sites are accessed with https then they are redirected to the SSL site which is incorrect. E.g. https://x.com (with SSL) http://y.com (normal site no SSL) If I access https://y.com then I get the content from x.com. How can I fix so https:...

Submitting HTTPS over an iframe in IE problem

I'm working on a script to automatically sign you in to basecamp for a project... so far i have come up with the following as something simple just a form you submit which posts to an iframe: <html> <head> <style> #bc1{ width: 100%; height: 350px; } </style> </head> <body> <iframe id="bc1" name="_bc1"></iframe> <form method="post" i...

Streaming HTTPs using Ruby

I wanted to open a https connection and keep it unclosed. I will be getting an xml document, which I will be saving in a file as it gets streamed. I tried net/https, but I was able to use Net::HTTP::Get.new() method, which stops after getting one response. My primary use is to save the xml that I am downloading into chunks of file. A...

NSURLConnection Succeeded with no HTTP Response

Riddle me this: I am using a NSURLConnection on an iPhone Simulator SDK 3.1.2 object to issue multiple sequential (not concurrent) https requests. Everything works fine 95% of the time, but every so often (maybe around 50-100 requests) I get the situation where the delegate method - (void)connectionDidFinishLoading:(NSURLConnection *)co...

iPhone sdk + HTTPS

Hi all, How can I send an HTTPS request from within my aplication? Thanx in advance. ...

Making HTTPS Requests in Twisted

I am trying to write a client that can make both HTTP and HTTPS requests depending on how it is configured. For normal HTTP, I have been using twisted.web.client.Agent and using agent.request(METHOD, HOST, HEADERS, CONTENT) to make the requests. What I care about is that host field, when I do HTTP it works doing something like "http://lo...

PHP - Maintaining session when redirecting from HTTP to HTTPS?

Hi, I'm working on a simple shopping cart. When the user clicks checkout the URL changes from HTTP to HTTPS. Unfortunately the session does not appear to carry over and I get errors about $_SESSION['cart'] (where I hold the info) not existing. I tried using mod_rewrite to redirect all HTTP to HTTPS so that the session would all be on H...

Can you force an HTML form to use HTTPS for relative URLs?

I have a website in which every page is served via HTTPS. On one of the pages I have a form whose action attribute is set to a relative URL. The page with the form can only be accessed via HTTPS and the page the form posts to can only be hit via HTTPS, yet in IE I get a security warning telling me I'm about to switch to an insecure con...

Whats the best Http Component which supports SOCKS and HTTPS for C#.NET

Hi , Iam coding an application which needs to do some web automation to some websites from our intranet. Some are simple web services while some will be https websites. My application needs to connect to them via socks proxies. Now httpwebrequest class does not support socks so Iam looking to code a complete HTTP wrapper using Sockets...

Does mod_ssl 2.8.31 work with Apache 2.2?

Hi experts, I'm trying to setup a mod_ssl - Apache server for authentication purpose. I just downloaded the latest mod_ssl package (2.8.31) and the CHANGE document says it's only been upgraded to Apache 1.3.41. However, 1.3.x is no longer maintained. Should I stick with the older version of the Apache just because mod_ssl said so or s...

Ajax https request issue

Hi friends, When I am calling a REST service through AJAX, its working fine. I am calling it with the URL staring with HTTP e.g.: http://www.myserver.com/customers. Its works really great. But when I am calling a same URL but with HTTPs e.g.: https://www.myserver.com/customers, I am not getting any response from server. Its not worki...

session question with virtual host

hello, everyone! i have a question about sessions hopefully someone can help me with. I have a apache test server set up that uses virtual hosts for http and https. I put the following files in my https and it works: mytest.php: // this starts the session session_start(); // this sets variables in the session $_SESSION['color']='red'; ...

c# HTTPS initial request from browser to webserver encrypted?

Hi, I have made a simple local server that is listening on 127.0.0.10:443 for HTTPS request from my browser. I have not used the proxy settings, just the url https://127.0.0.10/ just to see the initial request from the browser and I get encrypted data like: ►?? ↑ / 5 ♣ ?C ?↑;`????D♣9?¶#F%?? ?‼?¶? ? 2 8 ‼ ♦☺ ↓ ♣ ♣☺ ♠ ♦ ↨ ↑ ...

iPhone HTTPS post with xml header

Hi, I have to make a HTTPS Post with some XML data, but I need to send the XML in the HTTP header. Using the body I would do something like this request = [[NSMutableURLRequest alloc] initWithURL:url cachePolicy:CACHE_POLICY timeoutInterval:TIMEOUT_INTERVAL]; NSString *postLength = [NSString stringWithFormat:@"%d", [postData length...

SVC WebService works over HTTP, fails over HTTPS

One of my colleagues is having a problem with an AJAX call to a .NET WebService. The call works under HTTP, but the same call is having a problem under HTTPS. The webservice is written in .NET 4.0 with C# on an IIS 7 server. The secure website is at https://sql.data-rx.com/grouppharmdrugsearch/. There is an unsecured version at htt...

php session hijacking - is HTTPS enough? Suggestions for fingerprinting?

I use HTTPS, but want to minimize the risk of someone evil crafting their own cookies with a session ID that someone else actually uses recently. As a session variable I have an expiry time so the session is invalidated if it hasn't been used recently, so I figure the window of opportunity is when the victim is active or recently left...

After login, should all pages be https?

This will be a bit difficult to explain but I will try my best. There is a website that has the login form on every page with username/password fields. These pages are not using SSL. After the user fills in the username/password and submits the form, the form is sent to an authentication page which is https. I have a few questions about...

Error w/ C++ poco and HTTPSStreamFactory

I am trying to build a C++ app to access a XML resource. Using http the code works fine, from what I can tell from the docs, all I need to do to for the https to work is to make sure ssl is install (yes the dev edition is installed), and change the StreamFactory to HTTPSStreamFactory. Here is the code that works : Poco::Net::HTTPStream...

Want to call https request using jquery

Hi guys Suppose Server url is : https://example.com/employee and it's return json data I want to call this url using Jquery in iphone I wrote this code : $.ajax { type: "POST", contentType: "application/json; charset=utf-8", url: "https://example.com/employee", data: "{}", dataType: "json" success: function(res) { ...