ssl

Ignore certificate authority (self-signed) with BITS

Hi, I'm trying to upload a file with a client application using BITS (Microsoft's Background Intelligent Transfer Service) via HTTPS. The development server I'm uploading to/testing with does not have a properly signed certificate for SSL (it's self-signed). This means that the transfer always errors out, as BITS recognizes that the c...

SSL Encryption and an external image server

I have an ASP.NET web site technology that I use for scores of clients. Each client gets their own web site (a copy of the core site that can then be customized). The web site includes a fair amount of content - articles on health and wellness - that is loaded from a central content server. I can load the html for these articles from ...

Information about SSL and apache

Every now and then and since the last week more often I get questions about HTTPS & SSL. So no I wanted to get more into it and looking for some good information about the subject. Furthermore, I have develop on XAMPP and VISTA and I am looking for a good tutorial to get SSL working on this environment. Has anyone got good resources o...

Opera web browser: HTTPS server responds with certificate, then client ACK but then no data is sent back

I have a server (which I do not have a lot of control over, it is our production server thus I am hands off) that serves a page for to me over HTTPS. Using wireshark I was able to watch the communication. What I observe is: Opera (the web browser we are using) sends SYN request Server responds with SYN ACK Opera acknowledges ACK Opera...

SSL Certificate only works within Local Network

I am running windows server 2003 standard and have installed the ssl cert as per Godaddy's instructions. Let me know what information you need from me. Attempting to access the website securely outside of our network the page does not load. Thanks in advance! ...

Can I create self-signed certificate in Java which will be automatically trusted by web browsers?

Hi, I've generated a self-signed certificate for my Java app using keytool. However, when I go to the site in a browser it always pops up with a warning - saying this site does not own the certificate - is there a way to self-sign/doctor a certificate so I won't get these warnings in a browser? Both server and browser are located on t...

Map controls for sites running https

A team I work with is currently in an unfortunate situation. They've spent a lot of time integrating the google map control on their site but they didn't discover that to run google maps on a https site you must license the control (and it isn't cheap) and the same goes for bing maps. So my question is do you know of any cheaper/free ma...

Simple client/server, TCP/IP encrypting the message stream, SSL (C++)

Hi, Basically my question is the exact same one as this: http://stackoverflow.com/questions/937459/simple-client-server-tcp-ip-encrypting-the-message-stream-ssl The difference is that I need this for pure C++, not .NET. I cannot use 3rd party libraries, so unless it's a Windows system component (like the above) I need something with ...

PHP imap gmail not connecting [Edited!!]x2

I have some php code that I'm trying to use to connect to gmail using imap. Here's the code: $hostname = '{imap.gmail.com:993/imap/ssl/novalidate-cert}INBOX'; $tmp_username = 'username'; $tmp_password = 'password'; $inbox = imap_open($hostname, $username, $password) or die(imap_last_error()); And I get this error output everytime i tr...

"Server certificate untrusted" error in iPhone application

I am using my iPhone application on my iPhone 3G OS 3.0.1 without any problems. The application connects to an API URL at https://api.serverdensity.com/1.0/ and all requests go through it. A user of the app has reported that they are now suddenly getting an error "untrusted server certificate". No other users are experiencing this issue...

ASP.Net MVC RedirectToSsl Issue

Hi, I am working on eCommerce app Using Asp.net 3.5 MVC. On my Cart View I have checkout button that redirect to Checkout action on the same controller: <%= Html.ActionLink("CheckOut", "CheckOut") %> My controller looks like this: [RequireSsl(Redirect=true)] public ActionResult CheckOut() { return View(); } ...

Force SSL/HTTPS with Zend Framework and mod_rewrite

I have a Zend Framework application that I want to force into HTTPS using mod_rewrite. I am pretty lost when it comes to mod_rewrite. Here is my current .htaccess file in the root of my application. RewriteEngine on RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_FILENAME} !-s RewriteCond %{...

Login to web page using C#

I would like to login to a certain web page, and download few pages as logged in user. I think I theoretically know what to do, based on an answer to this stackoverflow question, but I have no idea, where in the address should I put the login credentials. In the question above, it is quite obvious, but it is not so obvious at Aukro. I'd ...

What do CAs (Certificate Authority) deliver from CSR ?

I need an SSL certificate for a web server. I can generate a self-signed SSL certificate with the following OpenSSL commands: openssl req -newkey rsa:512 -x509 -days 365 -nodes -out cert.pem -keyout cert.pem openssl dhparam -inform pem -in cert.pem -outform pem -out dhparam.pem 512 cat dhparam.pem >> cert.pem If I want to have a CA-si...

ProxyServlet with SSL

I have some proxy servlet(link text): , and I want to make the connection(con A and con B on the diagram) to this servlet secure(with SSL). This proxy works under Maven Jetty Plugin. I have configured jetty to handle ssl request: <connector implementation="org.mortbay.jetty.security.SslSocketConnector"> <port>8443</port> <maxIdle...

secure attribute on cookies created in javascript

When cookies are created purely client-side in javascript by setting document.cookie(), what effect does the "secure" attribute have on them? In particular: are client-created cookies sent to the server in the "Cookie:" header of subsequent requests? can client-created be modified by subsequent Set-Cookie headers from the server? in t...

C# ssl stream wont stop buffering before sending.

I am trying to use C# to connect over a ssl socket to a server and send xml data back and forth. It seems that data won't be sent till it has reached a certain packet size 1000 bytes, upon which all the packets are just smashed on top of each other. Is there a way to force ssl library to send out packets as I send them? I am using Ss...

Hijacking connection string with network packet analyzer

I guess everything is possible but I am wondering how easy is it for someone to hijack a connection string with a network packet analyzer or equivalent tool. A winforms application fetches data directly from an MSSQL server. (Supposing there are no webservices in the middle for extra protection) 1) Is it possible for someone with an a...

flex XMLSocket over ssl

i am writing a flash app that receives its data over a XMLSocket. On the testmachine that worked really fine, but now the data will be ssl secured. Is there any XMLSSLSocket or something similar available? If not XMLSocket a normal SSLSocket would be a great help as well. ...

Multiple SSL certificates to access one ASP.NET application in IIS

Hi, I have an ASP.NET application that's currently accessible via a single domain name, with an SSL certificate. We'd like to be able to access the same application via a second domain name. The non-SSL part is easy, just set up a second host header value for the website in IIS. We know we'll need a second SSL certificate for the second...