ssl

Lifetime of the SSL session in https

We have an engaged (but friendly) discussion between coworkers about the life time of the SSL session underlying a https communication. When I establish a https connection to a server using a normal browser the underlying ssl creates a session (including a shared secret) using asymmetric encryption, the rest of the communication is encr...

Error 324 (net::ERR_EMPTY_RESPONSE): Unknown error.

I get the following error in Chrome every time I try to run my script on a Linux server: Error 324 (net::ERR_EMPTY_RESPONSE): Unknown error. In Firefox it just shows a blank white page. Whenever I run it on my local test server (IIS on Windows 7) it runs exactly the way it should with no errors. I am pretty sure that it is a problem wi...

QNetworkAccessManager/QNetworkReply with custom QTcpSocket?

Hi Is there any way to replace QSslSocket used by QNetworkAccessManager with my own implementation? I was really looking forward to use WebKit!! I'm working on attaching PKCS11 implementation to our Qt based software. So far the only way I found is to use QHttp - but doc says that this class should not be used.. I find QNetworkAcces...

Troubleshooting an SSL flood

Users connect to our webserver via https, and stay on a secured connection throughout their use of our service. A typical user session will establish a small handful of connections to the server (one or two). There are a very small number of exceptions we are trying to track down. Particular users will intermittently have handfuls of ...

Hosting someone elses SSL cert in IIS to allow https hosting on their domain from your own server

Currently customers have sites on my domain like https://customername.myapp.com. I'd like for them to be able to upload an SSL cert and then access my site via https://myappname.customername.com - how would one go about doing this programmatically in .NET/IIS 7? bump ...

SSL Client For Row Tcp/Ip in iphone

i want to make a client of SSL Server Socket in iphone but i cannot find any API in iPhone. i have valid certificate file with password ...

Multiple jboss hosting a domain and SSL

i have a need to have 2 jboss instances (horizontally clustered) both allowing SSL for the same domain. we were trying to figure out how to use one certificate to achieve this. is it possible to let each host have a keystore, and import the same SSL cert into each keystore? is that how it should be done? in the past our network team has...

LDAP over SSL on windows service

Hi, I have an application that connects to an LDAP server using SSL. The problem I'm having is that when I run it as a console application it connects successfully, but when I run the application as a windows service, it fails. There is some information that could help: ldap_sslinit ALLWAYS returns success 1 ldap_connect = 0 (Succes...

ASP.NET and The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel

I'm making an httpwebrequest using a public Root authority Certificat file X509. I only have the public key, not the private key. Everything works fine from a Console app but it does not work from an asp.net app. I get the error: "The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure chan...

User Authentication Across Multiple Domains

Posted a previous question on this, but have a followup. I was trying to create a workaround to use SSL on the expensive custom domain. I'm willing to live with bumping a user to https://app.heroku.com from http://www.app.com for certain secure pages, and have monkey-patched SSL required to make this happen. However, now this issue is...

SSL - How and when to use it

I have a client that needs SSL to protect online donations, but I have limited experience with how/when to use SSL. I understand that in purchasing a certificate that I am assigning that certificate to an entire domain (IP address really). Is there a way to isolate the encryption to only a single page of the website, or should I just...

Compilable C++ code to implement a secure SLL/TLS client using MS SSPI

As described here http://www.ddj.com/cpp/184401688 I do not have time to write this from scratch. Asked and not answered http://stackoverflow.com/questions/434961/implementing-ssl THE QUESTION IS: I am looking for some compilable working source code that implements MS SSPI (as alluded to in the thread above), procedural not OOP prefe...

HttpWebRequest SSL Authorization form

I've never tried before, but now I really need to get through authorization on Sprint's site (www.sprint.com). Could you guys help me to understand how this actually works? I'm trying to do like this, but obviously I'm missing something. Either something about cookies or ssl or other stuff, I don't know. HttpWebRequest webReques...

HttpWebRequest over SSL, Cerificates, etc

Could you guys show me a simple example of HttpWebRequest over SSL with authorization on a form, for example - how to get through gmail authorization? I can't find any normal example: - how to actually obtain a certificate? - how to pass credentials - and other stuff... ...

JavaMail mail.smtp.ssl.enable is not working

I read on several sites that, when using the JavaMail API, to set the property mail.smtp.ssl.enable to true. I have some code as follows: props.put("mail.smtp.host", "exchangemail1.example.com"); props.put("mail.from", "[email protected]"); props.put("mail.smtp.starttls.enable", "true"); // I tried this by itself and also together wi...

ReportViewer SSL error

Hello, I am using the ReportViewer control and periodically I get the following error: "Error encountered displaying report. The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Inner Exception: The remote certificate is invalid according to the validation procedure." I've be...

Accessing SSL enabled Google Apps feed with http protocol

Building an app using a calendar on a Google Apps domain that has SSL enforced domain-wide. I initially found the problem when building a Rails app using the GCal4Ruby library, which used the allcalendars feed URL with a non-SSL protocol (GCal4Ruby debug output snippet [sic]): … url = http://www.google.com/calendar/feeds/default/allcale...

Object not found - - Error 404

My url is : https://virtual.app.c7beta.com/rpc/json?c=Sticky&m=get_user_notes And I got the following error: Object not found! The requested URL was not found on this server. If you entered the URL manually please check your spelling and try again. If you think this is a server error, please contact the webmaster. Error 404 My c...

Tomcat HTTPS keystore certificate

Ran into another problem using SSL and Tomcat: I've configured a keystore which contains a key and a certificate (the server certificate I wish to present to the clients connecting to the site). I've done the same for the truststore (I'm going to need client authentication). The problem I have now is that when I connect to my Tomcat ins...

Mechanize on HTTPS site.

Have any of you guys/girls have used ruby's Mechanize library on a site that required SSL? The problem I'm experiencing at the minute is that when I try to access such a website the mechanize tries to use standard http protocol which results in endless redirections between http// and https:// ...