ssl-certificate

Is it possible to have SSL certificate for IP address, not domain name?

I want my site to use URLs like http://2.2.2.2/... and https://2.2.2.2/... for static content to avoid unnecessary cookies in request AND avoid additional DNS request. Is there any way to obtain SSL cert for this purpose? ...

X509Certificate not getting transmitted to the server

We have a function to send files to a public server usin X509 cert in C#, but the issue is on the receiving end the cert is not being picked up. we get a 403.7 message saying cert not supplied. the code to add the cert is as followed: try { X509Certificate certificate = X509Certificate.CreateFromCertFile(cer...

Multiple websites with SSL one application

I have written an ASP.NET MVC application that allows the user to specify their own custom domain. I have IIS configured to send all requests to the default website so I do not need to use host headers. Everything works perfectly. The only problem is SSL. I know this question has been asked multiple times in many forums but the answers ...

wildcard ssl on sub-subdomain

Hi, we have wildcard ssl certificate for *.domain.com, and have a website with sub1.sub2.domain.com safari 4.0.4 on MacOsx pops up a certificate error(presumably because of wildcard interpretation), while safari 4 on windows does not. also ie8 behaviour is mixed at best, some ie8 do not display the certificate error and some do not. ...

How do I extract web wiki pages, which are password protected?

I wish to get a few web pages and the sub-links on those which are password protected. I have the user name and the password and can access them from the normal browser UI. But As I wish to save these pages to my local drive for later reference, I am using WGET to get them: wget --http-user=USER --http-password=PASS http://mywiki.mydoma...

Should client pay for things overlooked in the spec?

For a client, I developed a web-application and took responsibility for the hosting of the site. They squeezed the price really low (fixed-price contract), but I wanted the project so took it anyway. The system just records sales details and generates reports off this data. The information is sensitive to some extent, but not mission cr...

Can I reuse SSL certificate on a local machine with the same (locally configured) URL?

Here's a possible scenario. Let's say I have a website "https://www.mywebsite.com" and there is a valid SSL certificate purchased for this domain. I want to "mimick" this website on my LOCAL machine for a testing purpose. So let's say I set up a locally-configured "https://www.mywebsite.com" (which is in essence https://localhost/mywe...

SSL and authentication across multiple domains

I am building an app with Ruby on Rails which allows users to sign up and create their own subdomain: joebloggs.myapp.com So at the very least I need a wildcard SSL certificate to handle when users are passing sensitive data (authentication, payment etc). In addition, we are allowing users who want to, to map their own domain to thei...

Keytool create a trusted self signed certificate

I am trying to use the (java) keytool to create a self signed certificate but when I attempt to use it I get the following exception (see bottom for entire exception). ...<5 more exceptions above this> Caused by: sun.security.validator.ValidatorException: No trusted certificate found at sun.security.validator.SimpleValidator.b...

Do I need an SSL certificate if using a secure webservice?

Hi, I'm using a third party web service. In order for my users to be able to access their third party account, they need to log in. I provide the interface for them to log in to the third party site from my site. My question is, do I need a SSL certificate if the webservice already provides one? The webservice has a special Login metho...

OCSP responder with WCF client

How to invoke a OCSP responder service by using WCF client? More details about OCSP can be found at http://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol ...

OpenSSL Ignore Self-signed certificate error

I'm writing a small program with the OpenSSL library that is suppose to establish a connection with an SSLv3 server. This server dispenses a self-signed certificate, which causes the handshake to fail with this message: "sslv3 alert handshake failure, self signed certificate in certificate chain." Is there a way I can force the connecti...

Getting Java to accept only one SSL certificate

I've got a java applet that loads some pre-installed native code extensions to display custom content in the browser. Some of this content may include native code to be loaded by the JVM. Obviously, this is a security concern. I'd like to enforce that all content comes only from authorized servers. The path I've been following to acco...

PKIX path building failed while making SSL connection

I'm integrating with a Merchant Account called CommWeb and I'm sending an SSL post to their URL (https://migs.mastercard.com.au/vpcdps). When I try to send the post, I get the following exception: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to f...

Use an HTTPS Cert with bucket as a domain name on Amazon S3

I created a bucket similar to "mycdn.mysite.com" on Amazon-s3, as expected the files are available using that http://mycdn.mysite.com/files/foo.gif. This works fine with http, I would like to somehow add a SSL certificate so that the files are served up via https, similar to https://mycdn.mysite.com/files/foo.gif. Is it possible to add...

OpenSSL binaries for Windows without Visual C++ 2005/2008 Redistributables

I want to use the Win32 OpenSSL binaries from Shining Light Productions for the sole purpose of generating self-signed certificates. Unfortunately, my PC has a newer version of Visual C++ 2008 Redistributables, instead of the version recommended by Shining Light Productions. Since I didn't see any static builds on the download page, wha...

Create a SSL certificate on Windows

Hi all, Since I'm very new to SSL certificates, and the creation and usage of them I figured maybe StackOverflow members can help me out. I'm from Holland, the common way of online payments is by implementing iDEAL. An online payment protocol supported by the major banks. I have to implement a 'professional' version. This includes crea...

Ruby Generate Self-Signed Certificate

I'm trying to generate a self-signed certificate in ruby, but am running into trouble. This is what I currently have right now: require 'openssl' if ARGV.length != 3 then puts "USAGE: #{__FILE__} <type[der|pem]> <private-out> <public-out>" exit end type = ARGV[0].downcase privateKeyFile = ARGV[1] publicKeyFile = ARGV[2] valu...

Credit Card Validation not working on Invalid SSL (ubercart and Authorize.net)

For testing purposes I have and SSL certificate set up on a dev site where the domain does not match SSL domains valid for that certificate. Would it still be possible to validate credit cards with Authorize.net even though the certificate domain is invalid? ...

Where to find a Free Open Source SSL for IIS, and how to install it

I'm looking for a free Open Source SSL Toolkit where I can install SSL's on my staging server for testing. I checked out OpenSSL.org but was unable to find anything for IIS. Does anyone have any idea where I can find such a thing? ...