https

https stops working after site publish

I am working on Windows Server 2003 (IIS6), which has two asp.net sites running in seperate app pools. One of the sites has an ssl certificate installed and was running fine on https. The other site has no certificate and does not require https The problem I have is that when I publish my app from vs2005 to the site with ssl the https u...

"This page contains both secure and nonsecure items" Themes & SSL

So I have this website that will be accessed via an SSL connection ("https://mystupidwebsite/etc...") I am using themes in conjunction with a single css file. when the page is rendered though, the CSS link tag in the header still has the http://mystupidwebsite/etc... full path. How do I get it to regester the css file correctly, with t...

Session lost when switching from HTTP to HTTPS in PHP

When sending the user to a checkout page, they are switched from http://mysite.com to https://mysite.com. As a result, $_SESSION variables are lost. The site has a valid SSL certificate which may or may not be of some use. ...

What's the best way to specify a proxy with username and password for an **https** connection in python?

I read somewhere that currently urllib2 doesn't support authenticated https connection. My proxy uses a basic authentication only, but how to open an https based webpage through it . Please help me. Thanks. ...

invalid security certificate and domain names

Hello, I recently purchased a security certificate for a website valid for www.example.com but not for *.example.com (wildcard version - more expensive) The problem i have now is that although users can type http://example.com , the secure version (ssl enabled pages) https://example.com raises the invalid certificate exception - which is...

How do you test HTTPS with Rails script/server?

I need to test HTTPS connections to my local Rails script/server instance in development it doesn't seem to be supported and I wasn't able to Google-up any solutions. Here's what it looks like from the client perspective: ted@teflon-ted ~/Downloads[master]$ grep tedslaptop /etc/hosts 127.0.0.1 api.tedslaptop.com ted@teflon-ted ~/Dow...

Detecting https requests in php

The problem that I am having has to do with the need to keep some urls of a website protected by https and the rest kicked to http. Normally, you have $_SERVER['HTTP_HTTPS'] or $_SERVER['HTTPS'] (depending on your flavor of Apache). You also can check the port - it's 80 for normal traffic and 443 for https. My problem is that the cert...

How to create a secure credit card gateway using paypal / ruby on rails / active merchant.

I am creating a store using Active Merchant and PayPal sandbox right now. It seems to be working fine, but I don't think it is even remotely secure. I don't really know too much about HTTPS and how to implement secure connections. I am currently passing the credit card and billing information in the session (probably not the smartest i...

iPhone Security Guidelines

Silly question: Does Apple provide specific guidelines for contacting servers via http vs https? Also, what data is considered to require https (ie password, geopoint, bank data, etc.) Is there a concrete guideline from Apple on this? More specifically, does anyone know exactly how Apple checks/verifies that an application should or shou...

How do you set up SSL and Nginx Proxying?

I have Nginx listening to traffic on port 80 and proxying certain request to Apache over port 8080. I am going to set up Nginx to listen to port 443 for https traffic, but my question is how should the proxying be done now? Does the proxy to Apache need to be https or has Nginx already decoded it so I can keep sending it to Apache over p...

Small SSL offloading proxy for windows

I'm working on a service where in production, we're going to use hardware load balancers with SSL offloading capabilities. However our dev environments don't have this capability, but I want to keep the configuration as close as possible to how it runs in production. Additionally, even for testing, the sites need to be SSL protected(t...

Are https URLs encrypted?

Are all URL's encrypted when using SSL(https) encryption? I would like to know because I want all URL data to be hidden when using SSL(https). If SSL gives you total URL encryption then I don't have to worry about hiding confidential information form URLs. ...

Can I use NSURLCredentialStorage for HTTP Basic Authentication?

I have a cocoa class set up that I want to use to connect to a RESTful web service I'm building. I have decided to use HTTP Basic Authentication on my PHP backend like so… <?php if (!isset($_SERVER['PHP_AUTH_USER'])) { header('WWW-Authenticate: Basic realm="My Realm"'); header('HTTP/1.0 401 Unauthorized'); //Stuff that users...

Is it possible to have a secure web form without an https server ?

I have a website hosted on a provider which doesn't give me with a fixed ip adress so I cannot use https. I would like to edit some page using a webform but in a secure fashion. The client would be an iphone type device, so a java or flash applet would be out of the question. Is there a way to still have a secure connection between th...

HTTPS connections over proxy servers

Is it possible to have HTTPS connections over proxy servers? If yes, what kind of proxy server allows this? ...

IE warning workaround? Page w/Secure and insecure items

I have a page that is viewed secured with 'https' in the URL, that also contains youtube urls to play video from youtube. Since the youtube URL contains 'http' with no 's' IE is giving an a warning dialog of "This page contains both secure and non-secure Items." Is there a way I can workaround this in Javascript? Maybe after the page...

Using a HTTPS Resource in Yahoo Pipes?

Is possible to use a HTTPS: resource in a URLBuilder in Yahoo Pipes? I have used a HTTP: easily, but when I change it to HTTPS: I get an error. ...

How do you avoid security message in IE7 when using HTTPS?

In IE7 my web site always causes the browser to prompt a "Security Information" dialogue box: This page contains both secure and non-secure items. Do you want to display the non-secure items? How can I avoid getting this message when traveling between non-secure and secure pages (HTTP to HTTPS)? ...

WebClient + HTTPS Issues

I am currently integrating with a system created by a 3rd party. This system requires me to send a request using XML/HTTPS. The 3rd party send me the certificate and I installed it I use the following code: using (WebClient client = new WebClient()) { client.Headers.Add(HttpRequestHeader.ContentType, "text/xml"); System.Text.ASC...

How to use HTTPS in ASP.Net appllication

Hi all My Asp.Net web application has so many web pages. But i want to use HTTPS for only Login.aspx page. How can i do??? Pleaes Help me..... thanks ...