ssl

Clojure and SSL/x.509 certs quetion

I need to write a simple program for work that does the following: read a config file connect to a bunch of servers establish a ssl socket pull info form the server's x509 cert, expire date and hostname for now email a report when its done items 3 and 4 are things that I have had bad luck researching/googleing and I do not know java ...

Create a SSL certificate on Windows

Hi all, Since I'm very new to SSL certificates, and the creation and usage of them I figured maybe StackOverflow members can help me out. I'm from Holland, the common way of online payments is by implementing iDEAL. An online payment protocol supported by the major banks. I have to implement a 'professional' version. This includes crea...

Generating a Word doc with an image embedded into it over SSL in JAVA.

Here is some code snippet to give you an idea of what I got so far. I can output the Word document fine this way. I can also access the image via the URL in the browser, but the Word documents src does not appear to be hitting the servlet(according to some logs I have). ExportServlet.java ` response.setContentType("application/ms-...

Rewrite http to https on some pages only using .htaccess

Hi, I know there is lots of topics regarding my question. I checked them all and tried them out but can't make it work. I need to rewrite http to https on some pages only. After visiting https pages the URL would go back to http. This is what I have so far: # Rewrite Rules for domain.com RewriteEngine On RewriteBase / #Rewrite www ...

How to enable SSL for a standalone Sinatra app?

I want to write a quick server app in Sinatra. It has to be self-contained (i.e. not use apache/nginx/passenger) but also has to support SSL. Is there an easy way to enable SSL support for Sinatra (using WEBRick for example)? ...

How to do mutual certificate authentication with httplib2

I'm using httplib2 to make a request from my server to another web service. We want to use mutual certificate authentication. I see how to use a certificate for the outgoing connection (h.set_certificate), but how do I check the certificate used by the answering server? This ticket seems to indicate that httplib2 doesn't do it itself,...

using ssl with aspnet mvc creates a problem when posting data on to the page which is secure

I know there are many posts regarding and it works fine if the action method which i am calling is just a get method, but it fails if the action method has a 'Post' attribute because in the code we do a redirect to the url and not a post I am using code below... using System; using System.Web; using System.Web.Mvc; namespace Helpers {...

SSL, Tomcat and GRAILS.

I want to implement SSL in grails. I cannot find the file /conf/server.xml in grails folder structure. Has any implemented it? Much appreciated. ...

AWS EC2 Instance is gone after reboot when ssl certificate is bound to website

I have gone many hours trying to get this working........ Here are my specs: -Windows server 2008 (installed IIS7 after initial AMI) -Sql server 2005 Standard (Installed registered copy) -.NET Framework 3.5 (website with SSL needed) Any instance from my most current AMI with everything installed and the website running will reboo...

Java RMI + SSL + Compression = IMPOSSIBLE!

I've setup RMI + SSL. This works great. But it doesn't seem possible to slip compression in between RMI and SSL. So that the RMI requests are compressed before they're sent over SSL. I've seen some posts online suggest using SSLSocketFactory.createSocket() which takes a Socket to wrap SSL over a compressing socket. But that seems like i...

Implement 3270 protocol in Java

I've got a big problem with IBM HACL for accessing a server which speaks 3270 protocol. The library keeps crashing, and our JNI wrapper is actually a bug-fixing layer for the poorly-implemented and poorly-documented library (and I suspect we have introduced new bugs with it too). Moreover, in our company, everybody knows Java, and could ...

Set user-agent header during HTTP CONNECT over SSL?

I am using the WebClient class in .NET 2.0 to perform an HTTP POST over SSL. Currently I'm manually setting the user-agent header like so: wc = new WebClient(); wc.Headers.Add("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"); This works fine, except for when I make the request through a proxy server that does HTT...

HttpClient+SSL+ Trusted Certificate.

Hi All, I'm using Commons HttpClient API to connect to one of our Servers. This server uses SSL and also it uses valid Certificate (issued by Verisign Trust Network). My Browser never complains as i connect to the server. But my java program throws Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorExcep...

Switching between HTTP and HTTPS with SSL-Ext and Struts 1.2.9

Hi, I'm using the sslext extension for Struts to enable/disable passing data over HTTPS. I've implemented it so that https is only used for credit card processing. Its working fine when switching to https but I cannot get it to switch back to http. I've tried hitting another action where I've specified the following: <set-property pr...

SSL Nonsecure Items Prompt

Hi Everyone, Would you happen to know of any tools that can be used to find which item on a webpage is causing the following prompt, "This item contains both secure and nonsecure items. Do you want to display the nonsecure items?" I have a web based program, programmed in classic asp. On an SSL site, we are getting the above prompt. ...

Find non-secure http request being sent on secure page triggering IE6 "non-secure items notice"

I have a page that is under SSL. However, in IE6, I get a notification: "This page contains both secure and non-secure items" etc. I've looked at all the HTTP requests for that page in both Firebug and Wireshark, and non of it seems to be sent over plain HTTP, all the resources are being fetched over SSL/TLS. However, IE6 still give...

WCF RIA Services and communicating via SSL

I have a simple Silverlight application that use WCF RIA Services to communicate with the ASP.NET application on my web server. By default I assume that this communication is plain and not encrypted in any way. How do you request it use SSL or some other method to ensure that all data via the WCF RIA Service is secure? ...

Acegi, Grails, JBoss, SSL going back and forth from http<>https

I have installed SSL on my server. My question is how can i forcehttps only on selected controllers/pages via the acegi plugin. Acegi plugin supports a property forcehttps, which when set to true makes all the pages secured once the user logs in. I want to change this behaviour where once the users log off, they should be redirected to ...

SSL iframe is embedded on other web site

Iframe from domain with SSLcertificate will be embedded on other site (foo.com). Must foo.com have SSL cerificate? If foo.com has SSL certificate, will it be an security error? foo.com has SSL certificate for foo.com, but iframe domain has other SSL certificate. If foo.com hasn't got SSL certificate, will it be an security error? ...

Securing Web Service communication with SSL using CXF

Hi all, I am trying to secure communications via SSL/TLS for one of our Web Service using CXF 2.2.5. I am wondering how to update client and server Spring configuration file to activate this feature. I found some information on CXF's website (CXF Wiki) for the client configuration, here is the given example: <http:conduit name="{http:...