ssl

Why does Request.IsSecureConnection return false when true is expected.

I have an aspx page which is checking Request.IsSecureConnection to ensure it is true, if not it does a redirect to the the secure page at https://www.domain.com/page.aspx. The server has an SSL cert installed for the domain, and the browser shows the padlock icon. The same code ran fine on a different server, but now Request.IsSecureC...

Stomp over SSL USING PYTHON.............

iam trying to find a good python client to test stomp over ssl im using a Fuse Message Broker...........and intend to implement atleast client side authentication later......... can anyone help me get started ...

Is this acceptable for passing a password?

I have a website that requires a user to authenticate themselves with a user name and password. I would like to use SSL, but I don't have an SSL certificate. But I do something else that I think is okay. My site is primarily AJAX based and requires JavaScript, otherwise nothing will work. When the user tries to login, I query the data...

How do I use OpenSSL with WinSock?

I've scoured the web and have not found anything for this... Does anyone have a simple code sample of using WinSock with OpenSSL? I am looking for a simple Visual C++ 2005 or greater code sample that creates and opens a winsock connection and applies the necessary SSL settings using OpenSSL and frees all resources appropriately. ...

SSL not verified in IE

I have a SSL cert that verifies fine in all browsers but IE, and I have no idea why. ...

How can I send emails through SSL SMTP with the .NET Framework ?

Is there a way with the .NET Framework to send emails through an SSL SMTP server on port 465? The usual way: System.Net.Mail.SmtpClient _SmtpServer = new System.Net.Mail.SmtpClient("tempurl.org"); _SmtpServer.Port = 465; _SmtpServer.EnableSsl = true; _SmtpServer.Credentials = new System.Net.NetworkCredential("username", "password"); _S...

How do I enable more handshake ciphers in CFStream?

When running the method: CFReadStreamSetProperty(theReadStream, kCFStreamPropertySSLSettings (CFDictionaryRef)tlsPacket->tlsSettings); To secure the connection of a CFReadStream, my iphone client returns the error: Error Domain=kCFStreamErrorDomainSSL Code=-9824 "Operation could not be completed. (kCFStreamErrorDomainSSL error -9824...

How to connect to a SSL with a handshake, in C#?

So I am trying to connect to Apple's Push Notification server with C#. I asked a question about this here. I was given a Java example. I have tried now (about 50 iterations) and I can't seem to get my C# to do the same thing. Could someone help me connect to an SSL with C#? Or even better, could someone make a C# equivalent to the Ja...

Transfering encrypted data server to server, between 2 PHP scripts

I need to transfer data from a PHP script on my local server to a remote API (also written in PHP) on my hosting server. It is basically a primitive version control system, and I use both HTTP GET and HTTP POST to transfer files and strings. I would like the connection encrypted, but my (shared) web host tells me I can't use SSL because...

Does anyone know why an Apple Push Notification development certificate would work locally, but not on my hosting server?

My client certificate seems to work locally, but not on my hosting server. So I have a "p12" that I exported my certificate to (for push notification development). I can perform a push from both my OSX and Windows boxes (on local network). The moment I move the push and certificate out to my hosting server, I get a timeout. The Apple Pu...

Which Cipher Suites to enable for SSL Socket?

I'm using Java's SSLSocket to secure communications between a client and a server program. The server program also serves up HTTPS requests from web browsers. According to "Beginning Cryptography with Java", page 371, you should always call setEnabledCipherSuites on your SSLSocket / SSLServerSocket to ensure that the cipher suite that e...

Problem viewing sites with SSL certs

I am managing a number of websites that use SSL certificates and have had a few complaints from individuals that are not able to view some of these sites in secure mode. The problem persists regardless of browser or version that is used, does not affect viewing in non-secure mode, and only occurs with a few of the secure sites, not all....

Tibco SOAP request over https - SSL certificate verification problem

Hello, I'm using Tibco BusinessWorks to consume a soap web service over an HTTPS connection. The instructions boil down to: Export certificates using a web browser. Use the Tools->Trusted Certificates->Import PEM format to folder within the project. In the SSL Config of the Transport Details tab, point to the trusted certs folder you...

Moving from one https page to another with a different certificate

Hello Imagine a bog-standard Signup page, which captures some user info like Name, Address etc. It has a Buy Now button on it, which transfers to a payment site (WorldPay). Now, the requirement is that everything should be secure, so that means (and correct me if I'm wrong) A) I need to get and install an SSL certificate on IIS. B) I...

Getting IE6,7,8 to reliably download office documents over ssl from our site

I have an ASP.NET web application the entire site is browsed over HTTPS using a valid commercial certificate. In one part of the application it is possible to download an Excel spreadsheet. The download is initiated from a POST (PostBack from a LinkButton) The Response is cleared (Response.Clear(), Response.BinaryWrite(bytes[])) blah et...

How can I reuse server configurations in nginx?

When configuring nginx with a site that has ssl, the examples I find online basically duplicate the location settings. Most examples only have the default root location so it's not that big of a deal, but when you have a few locations and rewrite rules in place duplicating this configuration gets messy to maintain. I've considered proxy...

Handling subdomains and https with .htaccess

In the .htaccess example below, if someone types in a URL like the following... http://mysite.com/ricks-motorcycles ...it will automatically load the page from x.com's subdirectory under public_html called "ricks-motorcycles". This technique is called Proxy Throughput. RewriteEngine On RewriteRule ^ricks-motorcycles/(.*)$ http://x.co...

Error decrypting file

Hi, i encrypt a file using ideas from tldp.org/LDP/LG/issue87/vinayak.html. I downloaded and compiled this source code for encrypting/decrypting a simple text file. Once compiled I do: ./blowfish input_file.txt output_enc.txt output_dec.txt I use the options: G for generating a key E for encrypting the file, so output_enc.txt is ...

The correct way to set up SSL in .NET

I am putting together a retail site and want to know what the 'correct' way to implement an SSL in a .Net project is? I realise that that is a bit open ended but i find the MS documentation on the matter a little confusing. I want the whole site to use SSL, and I have also read that the cookie used must also have certain switches turne...

JavaScript Method results in Non Secure Item IE6

So I am baffled by this one. I have a function that is responsible for a non-secure item warning message to appear when viewing my web page from with IE6 on SSL. If I comment out the entire function the message goes way. If I just comment out the one method call it remains. What is really driving me nuts is if I remove all of the logic f...