ssl

Using mechanize to visit a site that requires SSL

I need to visit a site (https://*) that requires me to install two certificates in Firefox before I can visit it successfully. One I can export as a .p12 file (Client Certificate), and one is a .crt file (CA Certificate). If I try accessing this site without these certificates, I get a "failed handshake error". How do I visit this site ...

Is there any security risk if we install SSL Certificate at the load balancer instead of the servers?

hi! i'm doing a bit of research on this, so is there any security risk if we have the SSL certificate installed at the load balancer instead of the server? and what is the industry best practice to install SSL certificates? on server, load balancer, or ADC? thanks a lot! ...

Securing WCF REST service for use with iPhone application

Hi all, I've a created a simple WCF REST service which I intend to consume from an iPhone application. The service works fine but now I'd like to secure it. In my test enviornment (IIS on Windows 7) I already setup a self signed certificate using makecert.exe. I also overridden the validate() method so I can use a custom username & pa...

Validating a CAcert certificate in C#

I'm currently creating a C# program which will be fetching some data over https from my server. The server in question is using a CAcert certificate (http://www.cacert.org/), and I need a way of validating the servers certificate (checking the Subject and that it is signed by the cacert root certificate). I'd like to do this without hav...

Steps to trouble shoot SSL

Hi, I am trying to trouble shoot a two way SSL handshake mechanism. I get an error Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target This indicates that one of my keystore or my truststo...

How to fix SSL error when not using www

My website has a SSL certificate for www.reallygreattoys.com. If you try to go to the site with https://reallygreattoys.com (no www), it gives you the untrusted connection message. Putting code in global.asax to redirect it does not work. I have code that works just fine for non https, but I suspect the certificate check happens befor...

What level of TLS encryption is supported by the .NET Compact Framework 3.5

I want to use an AES 256-bit web service with a Windows Mobile 6.1 application (.netcf 3.5). I can't seem to find an answer ANYWHERE as to what types of encryption the SSL/TLS stack on the .net compact framework supports. Maybe I'm just being blind... Please help! Going crazy! ...

SSL post transmission encryption

There is an external server posting data back to my server that is coming from an https address. The address it is posting to on my end is an http (no SSL) address. How does SSL encryption work between servers? Will this data be encrypted between the external server and my server, or does there need to be SSL on both ends to have the da...

SSL page redirecting to SSL page on another server.

My company wants to change domain names. Requests to http://ServerA/folder/page.aspx need to go to http://ServerB/folder/page.aspx. I can do most of the redirection in IIS and it works fine. I have a concern that I don't seem to have the ability to test. Are there any problems/concerns form using the same technique for SSL pages? ...

How to set up a ColdFusion MySQL datasource over SSL?

Is there a way to set up a ColdFusion data source to connect to a MySQL server over a secure connection using SSL? I don't see any obvious option to enable a SSL connection on the data source in CF administrator. The only option I can think of is to use the "connection string" field. This is for a current configuration that is set up....

How to use ssl with codeigniter?

How can I have CodeIgniter load certain pages using ssl? I have an apache2/mode_ssl server. I only want certain pages to use ssl. mod_ssl uses a different document root than non-secure pages. For example: https (port 443) would serve pages out of /var/www/ssl_html/ And http (port 80) serves pages out of /var/www/html/. How would I get co...

Using an SSL certificate with .htaccess rewrite

I'm wondering, if I have an .htaccess rewrite setup on a virtual subdomain, ie. bm.example.com that has a rewrite to www.example.com/index.php?u=someId and I have an SSL certificate on www.example.com, will I run into problems if I try and access https://bm.example.com? ...

Need a HTTPS-capable Python XML-RPC server

I already have a very simple threading XML-RPC server in Python: from SocketServer import ThreadingMixIn class AsyncXMLRPCServer(ThreadingMixIn, SimpleXMLRPCServer): pass server = AsyncXMLRPCServer(('localhost', 9999)) server.register_instance(some_object()) server.serve_forever() Now I want to make it accessible exclusively over...

What does it take to utilize SSL?

I just purchased an SSL certificate from my hosting provider, at the request of a bank I'll be doing Credit Card transactions with. As of yet, I'm not sure if I'll be sending my users to their site to do the transactions or if I'll just be sending CC information to their site to do the transactions. My confusion is in regards to coding a...

ASP.NET MVC - How to Redirect Secure?

I have an MVC app that is working fine, but I now want to add in an SSL site to the app. This is a separate site in IIS, with the SSL certificate, but for re-use, I'm just pointing the SSL site to the same directory as the regular site. What I'd like to do now, is direct the user to a certain controller (payment) if they come in on the...

Signed applets having certificate denied sporadically over HTTPS

We self-sign some java applets that we put on our web application, which usually runs across HTTPS. Sporadically we get exceptions in the java console: load: class <our class name> not found. java.lang.ClassNotFoundException: <our class name> at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source) at java.lang.ClassLo...

SSL Connections with ADODB

I have a project we are about to wrap up, but just got a request from the DBA to make all our connections SSL. So I switched the driver to mysqli in the object that turns out ADODB instances, but I don't see any native method to create secure connections. To make things more difficult, there is a different set of certs and keys per con...

Verifying peer in SSL using python

Hi, I was trying to find out how I can go about verifying a self-signed certificate by a server in python. I could not find much data in google. I also want to make sure that the server url Thanks in advance for any insights. ...

WCF over SSL - 404 error

Okay, I must be missing something utterly simple here, because I've been googling for days, and looking at dozens of answers there, and here on SO, and i just CANNOT get this to work, no matter what i've tried. The service works perfectly fine when called over plain HTTP. Here's our setup... we have a domain, http://www.mydomain.com . ...

asp.net mvc routes over https ssl

I have a website that uses Routes to do some URL rewriting. Note, I am not using MVC..just the Routes that make MVC famous :P Anyways the site works completely well...and all is well I enabled SSL on the entire site and accessing the site in https, I can get static files..I can access the aspx files directly...but the Routes no longer ...