https

conditional statement for redirecting IPs using .htaccess?

Hey guys, I am hosting my own server and have two ip addresses for it (one for people connecting from within intranet and one for people connecting from outside) and I have two dynamic dns's redirecting to these ip's. I have just installed/setup SSL on my apache2-based server, and am trying to use .htaccess to force users to use https. I...

Help with SSL Vulnerability (Mixed Content)?

Hey guys I have my own webserver that is hosting a website that I recently installed/setup a self-signed SSL cert. Securing the website seemed to go fine, but in firefox and IE I sometimes get pop up boxes that say something along the lines of "There is a mix of secure and insecure information on this page..." and in the firefox error co...

Apache SSL Configuration Error (SSL Connection Error)

I am trying to configure Apache on my server to work with ssl, but everytime I visit my site, I get the following message in my browser: SSL connection error. Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have. Error 107 ...

Find out what resources are not going over HTTPS

I have an ASP.NET site which should transport completely over HTTPS. However, in Google Chrome I get a warning that the page includes resources which are not secure. How can I find out which those resources are and why they wouldn't be going over HTTPS? ...

Force HTTPS on certain URLs and force HTTP for all others

I have a client project where I need to force HTTPS for a certain folder and force HTTP for all others. I can sucessfully enforce HTTPS for the folder I desire but then all links back to the rest of the site end up being through HTTPS. I'd like to have a rule which forces requests for anything 'not' in the secure folder to be forced back...

fopen returns Resource id #4

<?php $handle = fopen("https://graph.facebook.com/search?q=mark&amp;type=user&amp;access_token=2227470867|2.mLWDqcUsekDYZ_FQQXYnHw__.3600.1279803600-100001317997096|YxS1eGhjx2rpNYLNE9wLrfb5hMc.", "r"); echo $handle; ?> Why does it echo Resource id #4 instead of the page itself? ...

Allowing http iframe to call javascript on https parent frame

I have an https page (https://example.com/main.php) that has an iframe with a non-https source (http://example.com/inner.php). Both files are on the same server - just one is accessed with https and the other is not. I need the non-https page to be able to execute javascript on the https main.php page using code such as parent.myfunction...

Safe file upload without https (ssl layer)

Hello, I'm PHP developer and I know very little when it comes to https/ssl, but I would like to offer my client safest possible way of uploading file to webpage (i.e. webftp as part of client service on page). Which way should I look? Thank you in advance, I will clarify my question if needed. ...

Avoiding CannotSendRequest exceptions when re-using httplib.HTTPSConnection objects

My code makes a bunch of https calls using httplib. I want to re-use the httplib.py connection object, but if I do, I sometimes get CannotSendRequest exceptions because the connection ends up in a strange state because some other bit of code blows up mid-way through a request. So what I want is a way to cache the connection object such...

form submit in a non secure page

I would like someone to answer this and if possible provide some reference links to back it up (if possible). Need to prove to someone its not secure. If I have a form with the post method on a non-secure page, but the action attribute is pointing to a secure URL, is the submitted form secure? ...

Problems with rewrite module and negation patterns

I have the following problem: If the url contains the keyword "formulario-" and it is a http connection, I want to redirect to the https version. If the url doesn't contain the keyword "formulario-" and it is a https connection, I want to redirecto to http version. I tried the following .htaccess but it doens't work properly: Rewrit...

Simple Gmail login via non-webview / browser HTTPS POST

I am trying to build a very simple app, but it's turning out to be a much more difficult task than one could imagine. I need to use a simple User Interface , with the basic two text fields, UserName & PassWord (done), and once the login button is depressed, it logs into gmail (or any corporate Gmail account) via an https POST (I think ...

How to setup selfhosted https WCF service with embedded certificates on client and server?

Im creating a simple WCF service for receiving crash reports. The service will run self-hosted as a console program and must run without any installation of certificates. Security-wise i need to ensure that the data send by the client is only send to our server and that the data is not intercepted. From the server point of view i would...

Getting SSL context for HttpsURLConnection from X509Certificate

hi, I am pretty new to certificates, but I have to do something like this (in Java): 1) I have requestor's certificate in my hand: X509Certificate[] certs = (X509Certificate[]) request.getAttribute("javax.servlet.request.X509Certificate"); 2) I need to request another url with that certificate (is it even possible?), something like:...

SSL/TLS/HTTPS sites are very slow in a C#/.NET WebBrowser control, but fine in Internet Explorer

Background I'm modifying AutoWikiBrowser to work with a MediaWiki site hosted on a secure server. I allow the user to login manually via a WebBrowser control in a C# application, and then save the stored cookies for use in HttpWebRequest's. The Problem The problem I'm having is that any site which uses SSL/TLS (https:// urls) takes an...

How can I determine on the server-side when an incoming request is HTTPS?

Is there a HTTP environment variable I can use to work this out? ...

IE secure and unsecure items issue

Hi all, I'm trying to get rid of the error pop-up window that appears in IE saying "page contains both secure and non-secure items". I have made sure all the links are pointing to https:// rather than http://. I have also looked at the fiddler and firebug logs to see that all the requests are being made to https:// links only. Here's...

Problem loading html with flash page using https in Internet Explorer.

I have a html paga which loads a flash(flex) swf file. Using https it loads successfully with Chrome, Safari and Firefox, but not with Internet Explorer. Another page, a simple aspx page, does load in Internet Explorer using https (and no flash in it). Haven't found anything so far on the internet to solve this... Anyone? UPDATE: When...

How do I get paster serve to serve both HTTP and HTTPS requests at the same time?

For now I have the following lines in a project configuration on pylons: [server:main] ... ssl_pem = /path-to-pem/file-name.pem so paster serves only HTTPS requests but not HTTP. Any HTTP request causes the following exception in paster debug console: Traceback (most recent call last): File "/home/eigenein/Projects/Python/Pylons/li...

How to run Wordpress admin on a different subdomain?

Hello, I have the requirement of running the Wordpress admin over https. We use a cdn to deliver cached content for the site but the cdn cannot accept secure traffic (only one SSL cert per IP allowed, and we run several sites off it). I cannot control redirects for httpS://www.mysite.com/. I would like to have: http://www.mysite.com/b...