ssl-certificate

Using JMeter + Maven with https protocol

I have been trying hard to make https request work with JMeter+Maven. Whole Scenarios is - Lauch app URL > login to app (this is https) > on Home page (this is http) I recorded these tests using HTTP Proxy of JMeter. And then as specified here changed the "HTTP request protocol" of sampler to "https" Now when I execute the test form Ma...

Java keytool easy way to add server cert from url/port

I have a server with a self signed certificate, but also requires client side cert authentication. I am having a rough time trying to get the raw CA server cert so I can import it into a keystore. Anyone have some suggestions on how to easily do that? Thanks. ...

If you have an SSL Cert, why not use https for the whole site?

I was asked this question not too long ago, and didn't have a good answer... Is there a good reason why a site that has an SSL certificate wouldn't use https:// for their entire site rather than http:// Are there SEO issues? Performance overhead for the server? Just in case it matters, we use LAMP stacks. Thanks! ...

new X509Store(StoreName.My, StoreLocation.CurrentUser) hasn't any certificate

This function for sending data on server, when server had HTTP protocol everything was good, but HTTP protocol was changed on HTTPS and I got a problem, I was trying update my method, but my store (X509Store) have no certificate. How should look this method? static public List<object> SendRequestCook(string textRequest, string url, st...

https: Apache TLS renegotiation: Debian, Apache2, openssl. How to?

On modern browsers, my site gets marked as sorta insecure: Google Chrome for example says "The server does not support the TLS renegotiation extension" in the "Page Information". HTTPS runs fine though, the connection is encrypted and the certificate is valid. # openssl version OpenSSL 0.9.8g 19 Oct 2007 # cat /etc/debian_version 5....

Tomcat SSL: No trusted certificate found

I created a certificate using keytool: keytool -genkey -alias tomcat -keyalg RSA Exported and imported it into my keystore: keytool -export -alias tomcat name.crt keytool -import -file name.crt When I do keytool -list I have 2 entries: tomcat, Sept 15, 2010, keyEntry, Certificate fingerprint (MD5): ... mykey, Sept 17, 2010, trust...

Using self-signed certificates with keytool for development purposes

When generating a self-signed certificate using keytool, can I use an IP address for the Common Name? Once I generated the certificate, I exported it so I can install it in my clients/browsers. In Windows, I ran mmc.exe and added it as a Trusted Root Certificate Authority. However, when I navigate to the IP address in my browser, i...

How do I force makecert to output the private key to a file (not the Crypto store)?

I want to generate a key pair for use within my applications, but exporting them manually from the mmc is a pain. How can I use commandline parameters, or otherwise end up with a private certificate that resides on the hard drive, suitable for later distribution? ...

Howto ignore SSL certificate error in WebService request ?

Question: I have written a console program that uses the SQL server 2005 web service to upload reports to SQL Server 2005 reporting service (so that I don't have to upload 100 reports by hand everytime). It works fine locally, and remotely. But now, the problem is one server uses SSL so rs.Url = "https://hostname/ReportServer/reportserv...

Need publick key (RSA bits) from self signed certificate progmatically

Hi, I have created a self signed certificate for my web application using the openssl functions. In the browser when the certificate is viewed there is a field "Public Key" whose value is set to "RSA(2048)". What are the openssl function calls present to retrieve this "public key" field of the certificate from my application ? For e...

SQL Server 2008 installing certificate issued to outer name

Does anyone know how to bind to SQL server 2008 sertificate that doesn't issued to the server local name? I need to connect to a data-base from other domain over ssl. the SQL server 2008 server has an inner name inside the domain (private name) and name for accessing it from the outer network, WAN (outer name). I am trying to install a...

Pythons M2Crypto raises exception in ssl_ctx_load_verify_locations when loading certificates

M2Crypto raises a TypeError when loading SSL CA certificates. I'm getting the path of an SSL certificate from an instance of a Django model. My code worked perfectly because I was pulling the path of the certificate from a Django model My code: from M2Crypto import SSL from django.db import models class MyModel(models.Model): ...

EV SSL Certificates – Extended Validation SSL Certificates

I have my own Finance Business Website. I need EV SSL Certificate to secure my costumer’s data, online transaction, trading & bill payment. Recently I found Cheapest EV SSL Certificates from ClickSSL.com. There are two different types of EV SSL Certificates: VeriSign Secure Site With EV SSL GeoTrust True Business ID EV SSL Which ...

.NET certificates (C#)

Hello, My website is doing some http posts to another server and I need to attach a certificate. I am using this code to open the certificate store and getting the certificate I need: X509Store store = new X509Store(StoreName.My, StoreLocation.CurrentUser); store.Open(OpenFlags.ReadOnly); X509CertificateCollection certCollection = sto...

Https connection without SSL certificate.

If I use a https connection without a SSL certificate, is the connection safe? the information is encrypted? I'm a little bit confused about this =/ thanks! ...

C# in VS2010, using WCF, Hierachical Certificates and IIS6

Hi guys, We've been working a lot in an application developed in VS 2010, C#, and WCF. We use Transport as the security mode, and in the TransportSecurity Properties set to None and None. We are hosting the service in IIS6. After working a lot we managed to make it work using https. The Certificate we used was a self created one, creat...

SSL certificate install ... .pfx, .cer and .txt files?

While I know nothing about SSL or installing SSL Certificates, I'm sure one of the many results Google will give me for CentOS, SSL certs and Apache would help. However, the certificate files which have been provided for this project are a .pfx file, .cer (the certificate) file and a .txt (apparently a certificate request) file, none of...

How to simply generate SSL certificate and ServerSocket form Java code

Hello, Is there simply way to dinamic generate untrusted ssl certificate without domain and applay it to server socket - all from code, no commandline or additional files? Purpose is secure connection between two hosts witch know only IP and port to communicate each other - certificates generated randomly at server start and used as "un...

Certificate - How they get dealed out?

Hello, I am interested in web security right now. So I read about PKI and Diffie Hellman authentication forms. Now I am reading about certificates and I ask me how that works. So I know Browser have some trusted certificates in it, so you trust the pages, the company which the browser is from, trusts already. So when A trusts B and B ...

What books will help me learn everything I can about SSL/PKI?

Since SSL is the backbone of the secure internet, (now technically called TLS), what are some good books I should read up on to understand all aspects of it? I suppose I'll need to learn some math, some PKI books, crypto, and Sysadmin books as well. Since that isn't a complete list I'm interested in hearing what you think is wise to lea...