I have a Windows 2003 image with IIS6 installed that just installed a block of Windows Updates. This webserver was using port 443 and an SSL certificate properly up until this patch, and it will no longer respond at all on port 443 to requests. I have tried removing and re-installing the certificate, and it will still not respond on por...
I have a login control which authenticates (form authentication), but not using https/ssl. I figured out that it was the cookie path. I know it's case sensitive, so I set it to /newYork, which is exactly the way the directory name is cased (OS is Vista), but the authentication didn't work under https. I set it to /newyork and the auth...
How do I use the ASP.NET MVC 2 Preview 2 Futures RequireHttps attribute? I want to prevent unsecured HTTP requests from being sent to an action method. I want to automatically redirect to HTTPS. MSDN: RequireHttpsAttribute RequireHttpsAttribute Members RequireHttpsAttribute.HandleNonHttpsRequest Method How do I use this feature?...
Has anyone tried getting Tomcat to use SSL-J for Tomcat? I'm trying to set up Tomcat to use SSL-J for it's SSL sockets, but I'm having troubles getting things to work and I don't see anything helpful in the SSL-J documentation. Things work fine when Sun's default JSSE provider is used. Any help would be greatly appreciated. Using: Ja...
I am working on a .Net server application that uses SslStream to provide its SSL sockets. It works with some clients (such as those based on libcurl), but other clients throw errors due to the lack of the intermediate certificate(s). How can I associate the intermediate certificate with the SslStream or X509Certificate2 object to make ...
I have an application that connects fine over http. When trying https I got the error that says that the root cert is not trusted. I found URLs for my site certificate, its CA certificate, and the CA's root certificate and have added them through Safari to the phone. Now when I go to Preferences -> General -> Profiles I can see all my...
Should I use SSL to secure my custom made CMS? I will be trying to accept Credit card info through a form, after my clients' login. It sounds good to me, but what does everyone else think? ...
I'm trying to get secure web service connectivity on the iPhone over https via SOAP. Currently have http working with NSMutableURLRequest but it doesn't appear to support https. Any ideas what to use to get the secure web service access and processing I'm after? Any help appreciated // :) ...
Consider a page with a form that is visited via https. If the form action has a relative URL to the form page, is the https protocol retained? Ex: you visit: https://example.com/cart.html which contains the form tag: <form name="form1" method="post" action="SubmitOrder.aspx" id="form1"> Is the form submitted via https or http? ...
I'm using Delphi 2009 and the lastest Indy 10 from svn to send e-mails using SMTP, but it doesn't work with gmail (Google Apps hosted domain). When I try to send an e-mail I get "Must issue a STARTTLS command first". I tried googling about it but I found several forums and several solutions, but they all just bashed some code or just sa...
I want to apply a certificate to one of my sites on IIS. At the moment, I use a single IP address and use host-headers, to give them friendly names. Can I do this for my SSL site or do I have to use the server name? ...
What is the most secure way of registering new users? I know SSL is a good pick. But can I have SSL on user registration only? Take Wordpress for example. User registration is at http://en.wordpress.com/signup/. And the user registration form is sent to https://en.wordpress.com/wp-login.php. The same goes for login. How can I make ju...
I have an administrative website on our intranet that currently uses Integrated Windows Authentication through IIS. We would like to move this application to a public website and secure it with SSL so our users can access it from anywhere. I had been planning on using an HttpModule to redirect from http to https, but it doesn't look lik...
have anyone modified the ssl3ext.c before? this is an implementation of the server name indication, ssl/tls extension. Is there any documentation about this code? I need to understand and modify it.. ...
I'm using YUI on my site. It works fine with no errors when you access over HTTP. However, when IE users access the site over HTTPS they get the dreaded "this page contains secure and nonsecure items" error message, which makes it really close to unusable. I'm hosting the YUI files, so they're getting served up over HTTPS, but in the ...
Hi all! Here's the page in question: www.mchenry.edu/parentorientation. My question is: why does our Backend DB person handle the SSL this way, as a redirect? Isn't there a cleaner way to do it? BTW, we're running IIS. My suspicion is that she doesn't understand what needs to happen in order to make it cleaner, and she refuses to discus...
When attempting to use HttpWebRequest to retrieve a page from my dev server, I get a web exception: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel." The remote certificate is invalid according to the validation procedure... The url I'm attempting to read from is a plain-old h...
I have a scenario where an asp.net page is using the SSRS reportviewer control to display a report. we recently updated the IIS server to use an SSL certificate and now the same application has a HTTPS URL. Is it now, necessary to setup SSL certificate on the SSRS Report Server box as well? Or, can the (HTTPS)web application continue ...
Hi, In our flex/air application we are calling a web service over https. The web service is java based and has, at the moment, an untrusted certificate. When doing a POST to the service with some json, the payload on the server side is pretty garbled. A popup does occur asking whether you want to continue and even when I do and add...
Hi, I implemented my custom FTP class to work with a hosted server that I'm paying for. I use the FTP for backup, restore and update of my application. I'm now at the moment where I want to enable the ssl to put this in production. I asked my hosting company if they support the ssl protocal and they sad they do. So I modified my met...