ssl

Perl web-service (server) best practices

I'm currently using a modified HTTP::Daemon::Threaded server in combination with SOAP::WSDL and Pod::WSDL to provide web services used by a variety of client types and roles. ---- that's not the question, the following is ----- I'd like to arrive at an optimal solution (as far as is possible) with respect to the following topics: Req...

Flash under SSL

I have a difficulty to display Flash contents under SSL only by IE. Is this simply IE's bug? Firefox can display the Flash. ...

SSL Tomcat Configuration

I am using tomcat 5.5 and configured keystore and added this connector inside server.xml file <Connector port="443" minProcessors="5" maxProcessors="75" enableLookups="true" disableUploadTimeout="true" acceptCount="100" debug="0" scheme="https" secure="true"; clientAuth="false" sslProtocol="TLS"/> But I am not sur...

How to use reverse proxy to redirect all url's not on my site to the web

I'm thinking of using an apache reverse proxy and an SSL certificate to secure surfing by various laptops roaming about in wireless land. My thought was have the users set this https proxy as their proxy in their web browsers, but I haven't found a way of redirecting them immediately to pages on external websites like http://www.msdn.mi...

php user authentication libraries / frameworks ... what are the options?

I am using PHP and the codeigniter framework for a project I am working on, and require a user login/authentication system. For now I'd rather not use SSL (might be overkill and the fact that I am using shared hosting discourages this). I have considered using openID but decided that since my target audience is generally not technical,...

Why would anyone use Heroku (security-related)?

Heroku seems great, but most non-trivial applications require authentication, and conventional authentication schemes require an SSL connection, and it's impossible to get https://your_app_name.com (you can only get https://your_app_name.heroku.com). So if you're using Heroku, is it that: You don't mind directing users to another doma...

WebSphere 6.1: can not start admin console after SSL-cert installation

I installed a self-signed certificate and restartet. Now i can't start the admin console any more. I am really new to websphere, and must have some errors when installing the certificate. When I connect to https://localhost:9043/ibm/console I get the following error in firefox: ssl_error_no_cypher_overlap and the following exception...

Java's keytool command with IP addresses

I'm trying to get an image via an https URL, and am having some problems. I generate a keystore with Java's keytool command. If I specify the common name (CN) equal to my hostname, such as CN=JONMORRA, and then try to query via my hostname, such as https://JONMORRA:8443/ then it works fine. However, if I specify the common name as my ...

Single SSL Certificate, Multiple Sites?

I asked this as part of another question but feel like it should have its own: With a shared hosting plan, is there any way to secure multiple domains (assuming the host allows multiple domains under a single plan) with a single SSL certificate? I know that private SSL certificates require a dedicated IP but I am looking for work-aroun...

Connecting to APNS for iPhone Using Python

I'm trying to send push notifications to an iPhone using Python. I've exported my certificate and private key into a p12 file from keychain access and then converted it into pem file using the following command: openssl pkcs12 -in cred.p12 -out cert.pem -nodes -clcerts I'm using APNSWrapper in Python for the connection. I run the fo...

Monitor a HTTPS connection with URL class (Java)

I would like to monitor a simple url. But when its a https server I get a handshake exception. Its possible to verify state of a https url the way browser use to connect? (without having a local certificate). I don't know how browsers do to get content from a https url but I would like to make it the same way. Without need to store a spe...

Best Security Framework to secure and authenticate an iPhone app which uses REST?

I built an iPhone app which transfers data via a REST web service (Jersey) via JSON objects to a Java middle tier back end... Question(s): (1) What is the best way to secure the login / authentication of this iPhone App? (2) Is there an open source or commercial framework used to acquire this type of functionality? So far I have com...

Not able to connect using Stunnel on reconnect

When I setup stunnel as a client on a machine to forward to another system on SSL port. I am able to connect once using that but when I disconnect from that server and then try to connect again it doesn't connect and shows the following in the logs: 2009.07.24 10:00:58 LOG5[4164:800]: my_server connected remote server from 192.168....

Tomcat Server/Client Self-Signed SSL Certificate

I have an Apache Tomcat 6.x server running with a self-signed SSL certificate. I want the client to present their own certificate to the server so I can authenticate them based on a database of users. I have it all working based on an example I found online, but the example came with canned certificates and a pre-build JKS datastore. ...

RHEL/Apache ssl.conf configuration problem

We've got multiple subdomains, each with it's own virtualhost entry in httpd.conf and (for those supporting https) in ssl.conf as well. Our main www subdomain has a GoDaddy cert associated with it. The subdomain I'm configuring right now ("api.bulbstorm.com") has an ssl.conf virtualhost entry that looks like this: <VirtualHost 172.16....

Is it possible to install/access SSL for my Google App Engine app?

Since App Engine is so locked down I assume there is no way to setup an SSL certificate to allow credit card payments. In the absence of this, how is it possible to secure handle payments in an App Engine app? ...

.Net - X509Certificate2 vs X509Certificate

What is the difference between the two? ...

Mod_Rewrite Force HTTP On All Files Except One

Hi, Sorry if this has been asked before, but I couldn't find it. I have a folder which when I visit loads in both HTTPS and HTTP. I want all the files in that folder to load in HTTP except for one file. The file I need in in HTTPS is: login.php and this folder is called "forum". Also if it helps: All the files in the folder are *.php. ...

Avoiding SSL "You are about to be redirected to a connection that is not secure." message

I have a login screen which I'm serving over SSL. The user fills in their login/password, this gets POSTed to the server. At this point I want to jump out of SSL, so I redirect them back to the same page with no SSL. This causes the browser to show a warning dialog "You are about to be redirected to a connection that is not secure". ...

Setting up Wildcard subdomain (with reverse proxy) on apache 2.2.3

Hey All, What I am trying to achieve is the following: I want to have numerous subdomains such as abc.domain.com redirect to a url such as www.domain.com/something?subdomain=abc Since I am redirecting to a fully qualified domain, I needed to use a reverse proxy to avoid the change of the URL in the browser. (using the [P] Flag and turn...