For pages like checkout etc, I have this code in place inside the OnInit function of the page that redirect the page to the "https" version of it: if (!HttpContext.Current.Request.IsSecureConnection) { HttpContext.Current.Response.Redirect(SiteNavigation.ResolveAbsoluteUrl(true, HttpContext.Current.Request.Url.PathAndQu...
The Problem: I am creating a vb6 application that will connect to a particular web service located on a a HTTPS site. The problem is, the HTTPS site I'm accessing requires all request to accept it's certificate policy. (as its a self-signed ssl certificate) Basically I need the application to accept security certificate dialog boxes aut...
I have heard that SSL v2 is a lot less secure than SSL v3 due to flaws in the encryption algorithms it uses. I would like to force my websites running on IIS 7 to use SSL v3. Anyone know how this is done? Also is it worth forcing 128-bit encryption as well? Has anyone had any performance issues with doing this? ...
Hi, I'm trying to get Tomcat 6.0.20 working with SSL authentication. I used keytool to create a new certificate, put it into my user dir, and set the tomcat authentication to this (server.xml): (Omitted) --> <Server port="8005" shutdown="SHUTDOWN"> <!--APR library loader. Documentation at /docs/apr.html --> <Listener className="...
I have a REST server made in Grizzly that uses HTTPS and works wonderfully with Firefox. Here's the code: //Build a new Servlet Adapter. ServletAdapter adapter=new ServletAdapter(); adapter.addInitParameter( "com.sun.jersey.config.property.packages", "My.services"); adapter.addInitParameter( ResourceConfig.PROPERTY_CONTAINER_REQUE...
I'm running PHP 5.2.6 on Windows, I have extension=php_curl.dll and extension=php_openssl.dll uncommented in php.ini; as such I can see the following in phpinfo: curl cURL support enabled cURL Information libcurl/7.16.0 OpenSSL/0.9.8g zlib/1.2.3 openssl OpenSSL support enabled OpenSSL Version OpenSSL 0.9.8g 19 Oct 200...
I verified that when I start GlassFish through MyEclipse, SSL will not work. However, when I start GlassFish using "asadmin..." SSL works. Any ideas why? ...
When should I enforce SSL for secure pages in an ASP.NET page life-cycle? I mean should I do it inside page_load? or OnInit? or some other function? I am using the following code to enforce SSL for certain pages, but where should I put this code? Earlier I placed it inside OnInit function, but that did not work well with ASP.NET wiza...
When I include ckeditor aka fckeditor (version 3.0.1 revision 4391), which I downloaded from their site last week, into a page that is SSL encrypted, I get the Firefox broken lock icon and the warning "Warning: contains unauthenticated content". However, IE8 doesn't give this error at all. I checked the headers (Live HTTP headers), and e...
When should I enforce SSL for secure pages in an ASP.NET page life-cycle? I mean should I do it inside page_load? or OnInit? or some other function? I am using the following code to enforce SSL for certain pages, but where should I put this code? Earlier I placed it inside OnInit function, but that did not work well with ASP.NET wizard...
I have an embedded web server with a self-signed SSL certificate. After I get past the Web Browser's warning about the SSL Certificate being self signed, I am seeing a difference between IE8 and Firefox 3.5.5. In IE8, if I try to download a PNG file, it will download every time. In FireFox, it will give me an error every other time. ...
I'm developing an application in Rails (2.3.4) and there are some parts that need to run over a secure protocol, for example, the login form, the credit card form, etc. How can I do just these pages be https, and all other pages remain http? How can I test ssl in development environment? ...
Alright, so this is absolutely killing me... If anyone could help me, I would be the happiest man on the face of the earth... So, I need to create a C++ email client for a project at school, and I've been using the POCO open source C++ library, and I've been fine for working with email servers that do not need SSL authentication, but an...
Hello, I need to be able to encrypt the MySQL traffic from a web server to a database server. I know how to set MySQL to use SSL based on the server and client settings in my.cnf however, this needs to be done using mysql_connect() in PHP. This may be a 2 part question. 1) Does mysql_connect() use the MySQL client settings that are s...
I have been running into walls with this for a while. I am attempting to setup multiple IP addresses on Snow Leopard so that I can develop with SSL certificates. I am running XAMPP - I don't know if that is the problem, but I guess I would run into the same problems, considering the built in apache is turned off. So first up I looked i...
We are upgrading the server from Windows 2003 to 2008. As part of the process, I need to configure a port with a SSL certificate. When I ran the following command: netsh http add sslcert ipport=1.2.3.4:8000 certhash=certificatehash appid={someGUID} I got the following error: SSL Certificate add failed, Error: 1312 A specified logon s...
I have an in-house HTTP server written in Java; full source code at my disposal. The HTTP server can configure any number of web sites, each of which will have a separate listen socket created with: skt=SSLServerSocketFactory.getDefault().createServerSocket(prt,bcklog,adr); Using a standard key store created with the Java keytool, I c...
I have managed to modify my ssl3ext.c file inside Mozilla Network Security Services. I have run the SSLSample programs smoothly. But could not confirm that the sample program really utilize ssl3ext.c. My questions are: How can I use SSL extension for my client program? How can I call my SSL extension functions inside my client program?...
Ok, situation: an https / ssl page jquery a form submitted via ajax to a non-ssl pagge getting no usefull response the same scenario, non-ssl to non-ssl works perfect. I can view my console, but cant get any usefull info from it why the request fails... $.ajax({ type: "POST", url: form.attr("action"), data: form.serialize(), err...
Hello, I have two applications running in the same java virtual machine, and both use different keystores and truststores. A viable option would be use a single keystore and import all the other ones into the shared keystore (e.g. keytool -import), but it would really help my requirements if I could use separate keystores for separate ...