Hello everyone, I've spent a few hours trying to configure my Apache server to use SSL with no public IP, just localhost. I've created the certificate OK, I think (it has been like a crash course on black magic for me), and when I try tro access https://localhost, the browser says "Connected to localhost..." on the status line but just ...
I need to provide secure communication between various processes that are using TCP/IP sockets for communication. I want both authentication and encryption. Rather than re-invent the wheel I would really like to use SSL and the SslStream class and self-signed certificates. What I want to do is validate the remote process's certificate...
I am writing a web service in Perl that will run under SSL (HTTPS) with client certificates. How can I determine which certificate is being used by the client in the current connection so I can filter out unwanted ones? Note: the web service is being run as a mod_perl script. ...
Hello all, I have an application that should run on IE and FF. I have a JSF page which include h:commandLink which point to action in the ViewHandler. the problem is that when I'm usin SSL and clicking the commandlink it get into the ViewHandler only with IE but not with FF. I'm using Weblogic 8.1 serever. this is the part of the web.x...
Ola, I need to develop a website (in C#, asp.net 3.5) that will require client certificates. I'd like to debug this, using Visual Studio. I have setup IIS to use a self-signed certificate using the excellent tool SelfSSL I have also setup the default site to require SSL and to require client certificates. But I do not know how to create...
I'm having an issue with an SSL certificate on one of my websites that seems to only occur at one client site. Another of our SSL certificates is working perfectly for them despite both being associated with the same trusted root (VeriSign Class 3 Secure Server CA). The certificate that isn't working claims that it is not associated wi...
An internal team, separate from my own, has stated that they prefer to do incoming authentication based on client certificates. Which sounds good to me, except that I haven't messed with them before and aren't quite sure where to start researching (Wikipedia went straight into a lot of detail that I'm not sure is pertinent to what I need...
I have a simple web service call, generated by a .NET (C#) 2.0 windows app, via the web service proxy generated by Visual Studio, for a web service also written in C# (2.0). This has worked for several years, and continues to do so at the dozen or so places where it is running. A new installation at a new site is running into a problem....
Hi, I need to generate a WCF proxy for a service exposed by our client. The service is locked down pretty tightly, so this is proving difficult. Also, I'm new to WCF, so I may be missing something obvious... The client has only opened up their firewall to our production server - so I can't generate the proxy from Visual Studio on my d...
There seems to be a bug in the SSL implementation of an https server I'm connecting to; the problem initially arose in my application, but I've since been debugging / reproducing it with the openssl commandline utility, so I'm fairly certain it has nothing to do with my application at this point. If I connect to the remote server with n...
I am seeing the "This Page contains both secure and nonsecure items." message when viewing a page on my site from with IE 6. This does not appear in both IE 7 or Firefox. I have done some research and it appears that the problem has to do with links to HTTP:// rather than HTTPS:// Would the fix just be to view the page source and find e...
I am currently trying to get a response from a server that is using SSL in C#. I have the code to do this in Java, but it looks like they do not translate 1:1. I do have some code that I found that works for regular pages, but not for the one I need (maybe because of the SSL thing). Here is the code: WebRequest request = We...
Hello, All I want is to send emails from my ruby scripts, over SMTP using SSL. I only find examples of doing it from Rails, or for Gmail with TLS. I found people talking about SMTPS support with ruby 1.8.5, but the libdoc doesn't mention it. Anyone with an example of sending mail over SMTP with SSL, on port 465? ruby -v ruby 1.8.7 ...
Is there an easy way or online tool for checking a site's SSL vulnerability issues? From the PCI standards I see that a site has to force SSLv3 or TLSv1 protocols and high security encryption algorithms. And I need to check if my site is compliant with those PCI DSS standards. ...
I'm attempting to add SSL to my server for sending customer details to a client. It appears to be working on the Server side with the digital certificate (.pfx) being loaded succesfully. The problem comes when I try to connect with the client. An AuthenticationException is thrown stating that the remote certificate is invalid. The cert...
I have developed a new web service. Now, I need to deal with security issue as we are intending to make it a secure service. In order to set up SSL and https, I need to obtain and install an SSL certificate. Who is the certificate authority? Do you know how to go about with this? Are there concise articles on this? Regards. D...
As a team project I need to connect from a C# client to a Java 6.5 SSL server, however when I get to the stream.AuthenticateAsClient line it hangs. C# connect code public static void connect(string server, Int32 port) { try { client = new TcpClient(server, port); stream = new SslStream(client.GetStream(), false); stream...
If your server has SSL enabled, and you're using YUI uploader, is it possible to upload using Firefox browser? We are currently having problems with firefox but uploading with IE (7) seems to be ok. Any ideas why it fails in Firefox (Note: the certificate was already accepted ) ? Thanks, Franz ...
We use a private certificate authority powered by OpenSSL to authenticate our customers. We provide a simple web-based utility which allows them to upload a CSR file for the certificate authority to sign. At the moment, we can only issue certificates for a fixed period, currently 365 days. However, our customers have asked if they can s...
Well im working agains a webservice that has a certificate that is not 100% correctly setup the certificate is setup for the domain *.domain1.com and the api is located at soap.shop.domain1.com/SOAP now i cant connect to this webservice as i then get a WebException "Could Not establish trush relationship for the SSL/TLS secure channel. -...