ssl

Internet Explorer Warning when embedding Youtube on HTTPS site?

Our application is run over HTTPS which rarely presents any problems for us. When it comes to youtube however, the fact that they do not present any content over SSL connections is giving us some head ache when trying to embed clips. Mostly because of Internet Explorers famous little warning message: "Do you want to view only the web...

Slow SSL Connection on SSL + LDAP

Hi guys, I have installed Ruby on Rails and am using Webbrick server. My Apache Server re-routes from port 80 to port 443 to have a SSL connection and LDAP. After the LDAP Authentication, MY SSL Page loads very slowly, sometimes, it just dosent load at all, sometimes blank page instead of project home page. IF I cancell the redirect...

How to secure login and member area with SSL certificate?

Background: I have a asp.net webapplication project that should contain a public and a member area. Now I want to implement a SSL decription to secure communication between the client and the server. (In the university we have a unsecured wireless network and you can use a wlan sniffer to read username/password. I do not want to have thi...

Where to find a Free Open Source SSL for IIS, and how to install it

I'm looking for a free Open Source SSL Toolkit where I can install SSL's on my staging server for testing. I checked out OpenSSL.org but was unable to find anything for IIS. Does anyone have any idea where I can find such a thing? ...

Send User-Agent through CONNECT and POST with WinHTTP?

I'm trying to POST to a secure site using WinHttp, and running into a problem where the User-Agent header isn't being sent along with the CONNECT. I am using a lightly-modified code sample from MSDN: HINTERNET hHttpSession = NULL; HINTERNET hConnect = NULL; HINTERNET hRequest = NULL; WINHTTP_AUTOPROXY_OPTIONS AutoPr...

Sending email with SSL in VB6

How to send emails in Visual Basic 6 with SSL option enabled? ...

Redmine connecting to SVN through SSL

I am having trouble connecting Redmine to a locally hosted subversion repository using SSL. I suspect it's the self-signed certificate that usually triggers a warning in the SVN client and browser. When I try to connect to the local repo through SSL in Redmine, I get a red "Revision not available" error. When I try connecting through ...

How to activate SSL(HTTPS) in Glassfish 3.0 embedded API?

We are implementing an application with a webservice as component and decided to use the Glassfish 3.0 embedded distri to provide the webservice. And it works. We need a SSL(HTTPS) connection to the webservice, but we didn't find any documentation or hint how to activate it programmatically via the embedded API. Thus we tried to config...

Identify valid server in XML-RPC request using PHP

I'm working on a client-server system, where the client makes XMLRPC requests to the server. The client part of the system is handed to a third-party, meaning that he could eventually modify the code or re-route the xmlrpc requests. Now, hoping the third-party won't modify the code, I need a way to make sure that the server the client s...

Within a web browser, is it possible for JavaScript to obtain information about the SSL Certificate being used for the current page?

Is there a method for JavaScript running in a browser to determine which CA certificate is being used to authenticate the remote host for the browser's current SSL connection, and also obtain properties of that certificate, such as the name of the CA? If not, are there any other options for programatically obtaining this information, su...

Need example of Java Client Destop App consuming Two-way SSL Secured webservice

I'm looking for an example of a java desktop application that consumes a Two-way SSL secured web service. Any tutorials or examples would be great, especially if they are based on the Eclipse IDE. Thanks. ...

Maximum open ssl connections on Windows

version: erlang R13B Hi all, how can I increase the amount of ssl ports/handles that my network server is able to create on Windows? On linux I was able to successful create about 1000 connections using: -env ERL_MAX_PORTS 80000 -P 268435456 and changing the maximum open fd's using ulimit. On windows apparently there is no effect u...

Selenium and HTTPS/SSL

I'm running selenium-rc 1.0.3 on a Mac OS X & Windows 7 and both seem to be giving my the annoying accept cert error in firefox. In reading the docs they say I should be able to just use the *firefox run mode and rc should take care of it for me via a proxy or something, but this appears to not work. The only solution that I was able to ...

WCF Certificates without Certificate Store

My team is developing a number of WPF plug-ins for a 3rd party thick client application. The WPF plug-ins use WCF to consume web services published by a number of TIBCO services. The thick client application maintains a separate central data store and uses a proprietary API to access the data store. The thick client and WPF plug-ins are ...

SSL Form Post in ASP.NET MVC 1.0

I'd like to use SSL for the post action on the login page of my MVC 1.0 app. I've seen some articles related to the [RequireSSL] attribute in ASP.NET MVC Futures. However, since this works using a redirect, I assume it's not an option (can't redirect a POST, correct?). Ultimately, my goal is to get the Html.BeginForm method to render ...

In Apache .htaccess file using mod_rewrite, is it possible to force www AND force https for a domain ?

RewriteCond %{HTTP_HOST} !^www.example.co.uk$ [NC] RewriteRule ^(.*)$ https://www.example.co.uk/$1 [R=301,QSA,L] thats for the www, but I cannot figure out in a one-pass way how to force the https too? ...

Java SSL sockets without authentication or stores?

I have two java applications that need to talk to each other over an encrypted TCP socket, but they don't need to authenticate each other (one will accept() a connection from the other). Can anyone point me to a tutorial/code-snippet that will help me set these up? I'm looking for something fairly simple and I'd like to not have to supp...

Switching Between HTTP and HTTPS in ASP.NET MVC 1.0

I'm using MVC 1.0 and have created a "RequireSSLAttribute" (like the one in ASP.NET MVC 1.0 Futures but ignores SSL directives for local computer). I want to SSL-enable the sign up and login pages to protect the passwords that are being sent. However, I want the rest of the site to be non-SSL. By adding the [RequireSSL] attribute to m...

M2Crypto SSL and compression method

How to set compression method for SSL/TLS connection created with M2Crypto and TwistedProtocolWrapper ...

Handling authentication for a web app

Hello, Sending username and password as plaintext, but trough HTTPS; then on server hash(salt+password) and compare that with the hash in the DB. (salt is per-user) Doin' it right? :) Cheers PS: I'm using Ruby/Sinatra, gonna serve via lighttpd, I think. ...