ssl

SSL Connection works in Console App but not Glassfish

I am having trouble connecting to an LDAP server in my JSP application. I am running the application on GlassFish v2. The following code works well in a console application but fails when used in the jsp: java.security.Security.addProvider( new com.sun.net.ssl.internal.ssl.Provider()); System.setProperty("javax.net.ssl.trustStore"...

Is it possible to install SSL on Google app engine for iPhone application?

I am using python language for google app engine based iphone application .I want to install/access ssl on python. I am unable to find a way to install/enable it in python file. please guide me how can I make my application to connect to ssl As I want to Apple enable push notification services on my application Its urgent. ...

What should I do If I want to maintain session between HTTP and HTTPS - Asp.Net

What should I do If I want to maintain session between HTTP and HTTPS.. In my site's public area some pages are HTTP and some are HTTPS but I want to keep common session for both.. ...

Is data retrieved over SSL cached by the client browser?

I know that data retrieved over SSL (https) is encrypted over the wire, but once it arrives at the browser, is it stored in the client's browser cache? If so, is it stored encrypted or in plain text? This probably depends on the browser, so perhaps different browsers do different things? Modern browsers better behaved than outdated on...

What is https and SSL? How do they work? How can they be used in PHP?

I know the general definition but I need more details on how to implement them in general and PHP in specific, and what exactly are the features I gain from them? ...

Why do Windows Updates kill self-signed SSL certificates?

It seems that every time Windows auto-installs security updates, all of our secure sites return "connection was reset..." messages. After I remove and reapply new self-signed SSL certificates, the sites are back up and running. All of our sites with Verisign or Network Solutions certs are never affected by these updates. 2 questions: ...

"Could not establish secure channel for SSL/TLS" in .NET CF application on smart phone

I have a stubborn communications issue with an application running on the .NET Compact Framework 3.5 on Windows Mobile smartphones. I am constructing a web request using this code: UTF8Encoding encoding = new System.Text.UTF8Encoding(); byte[] Data = encoding.GetBytes(HttpUtility.ConstructQueryString(parameters)); httpRequest = WebRequ...

How to create a certificate for local development with SSL?

I am currently doing local development on a webproject using a LAMP stack. Since my production application will be using https for login, I'd like to be able to mimic this in my local dev environment so that all the url's remain consistent. I am new to ssl certificates so could anyone please point me to some reference on how to do this...

Two Domains on one website?

Hey guys, I'm investigating a little problem for my employer. My company runs a website under an SSL certificate for the domain www.domainone.net.nz (Yes, New Zealand) However, there's been a high-level marketing decision to change our primary domain to www.domaintwo.co.nz. So, easy, right? Buy a new SSL cert for www.domaintwo.co.nz ...

Why is HttpContext.Request.Url not matching what's in the address bar?

Ok, so I want to force https/ssl on parts of my ASP.NET MVC site. Found lots of great sources including an ActionFilter here: http://blog.tylergarlick.com/index.php/2009/07/mvc-redirect-to-http-and-https/ Whenever I enable the ActionFilter however I end up in a redirect loop. The problem is that if I type https://www.mysite.com/ into th...

How can I support SSL without encryption in a .Net server?

We have a client/server based architecture where many clients (written in Java) connect to the server (using a custom protocol), and all comms use SSL. The server used to be written in Delphi and used OpenSSL for SSL support. We did a complete rewrite of the server in .Net 3.5 SP1 and have the SSL working fine using SslStream over a TcpC...

SSL on entire site or just part of it?

I have a site... let's call it mysite.com. On this site, there's the sign up section which I think should be the secure part of this site. a) Should I enable ssl on the entire site, or just the sign up part (e.g. signup.mysite.com) b) What are the pros and cons of enabling it for the whole site? ...

Using .htaccess to control HTTPS on certain pages

I've got a site that requires (obviously) HTTPS for checkout. The current fix put in place involved making the whole site run in SSL mode, but this is causing problems. How would I change this... RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L] To only set a certain URL (say basket.php) as HTTPS? ...

Silverlight: Accessing SSL WCF service on nonstandard SSL port

I've made a copy of my production website for staging purposes. My Silverlight app is served on port 81, and tries to access a WCF service via SSL on port 2443. I've verified that the service is reachable by typing in the URL: https://mydomain.com:2443/UtilService.svc -- I get the "you have created a service" page. But when my SL app ...

SSL Speed: 128 vs 256 bit

I've decided to encrypt my entire site with SSL, even if only parts of it are actually necessary. End result being that the site is now a bit slower. So, my questions are: Should I have only encrypted the members section of the site (keeping in mind I do have login forms on the frontpage)? Should I perhaps decrease the encryption to 12...

Adobe Air sockets and SSL

Hi all! I'm writing an Air application which uses sockets. I need to connect to nexus.passport.com:443 using SSL. Is this possible? If so, how? I use JavaScript for the programming. Thanks in advance. ...

Self Signed SSL acceptance Android

Ive looked everywhere on the internet and while some people claim to have found the solution, it either does not work or there is no Sample code to back it up. Does anyone know how to accept a self signed cert in java on the android? A code sample would be perfect. Thanks, Faisal ...

Is it possible to get Java to ignore the "trust store" and just accept whatever SSL certificate it gets?

I am trying to write an SSL client that sends mail using the javax.mail API. The problem I am having is that the server request that I use SSL, but the server is also configured with a non-standard SSL certificate. The web pages I have found say that I need to install the certificate into the trust store. I don't want to do that (I don't...

Creating a security exception for a self-signed certificate

I have a Debian box that I would like to talk to a remote server over SSL. The remote server has a self-signed certificate. How can I instruct my local machine to create a permanent security exception for the remote machine? Note: I need a command line method for this ...

Why is my Silverlight client not finding the clientaccesspolicy file when I switch to SSL?

I've developed a Silverlight client that has worked fine on regular HTTP, but now that I'm trying to get it to work on SSL, I'm getting the following error: An error occurred while trying to make a request to URI [URL removed for security] This could be due to attempting to access a service in a cross-domain way without a proper cross-d...