ssl

Issue configuring Oracle database for SSL

Hello, I want to setup Oracle for SSL communication. I am not using SSL authentication for database user. As first requirement, generated self signed certificate using OpenSSL and added certificate to wallet. The wallet location is specified in server configuration. Created listener and it is starting however it does not provide any ser...

openssl header ssl

is there additional header which is presented by openssl before sending the message to socket ? Thanks ...

SSL received a record that exceeded the maximum permissible length. (Error code: ssl_error_rx_record_too_long)

I followed the official docs on https setup located here: https://help.ubuntu.com/6.06/ubuntu/serverguide/C/httpd.html#https-configuration I had to remove the +CompatEnvVars from SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire because it said it was an invalid command or something. So having removed that and ...

Client-side policy error using JacORB (Java/CORBA) with SSL

I'm trying to add SSL to an existing CORBA app, and I keep getting this error: org.omg.CORBA.NO_PERMISSION: Client-side policy requires SSL/TLS, but server doesn't support it vmcid: 0x0 minor code: 0 completed: No at org.jacorb.orb.iiop.ClientIIOPConnection.checkSSL(ClientIIOPConnection.java:535) at org.jacorb.orb.i...

SSL with Visual Studio Development Server

Is it possible to use SSL with Visual Studio Development Server (a.k.a. Web Application project)? I don't want to have to deploy IIS locally if possible. I'm running Windows 7. NOTE: I've seen this (http://connect.microsoft.com/VisualStudio/feedback/details/354576/add-https-support-to-visual-studio-asp-net-development-server) but I wa...

openssl ssl encryption

Hello, I want to discuss about openssl write and read method. Assume I have an data structure like below: /-----------------------------------------------------\ | my_header | PAYLOAD | \-----------------------------------------------------/ | | \ / ...

How to create X509 self signed certificate for use in Apache Tomcat

I have a Java application that runs on Windows Mobile devices using a 3rd Party JVM. The application communicates with an Apache Tomcat server over HTTP. We have also used HTTPS for some connections and the certificates were created using the Sun keytool utility. First a keystore was created using genkey, then the certificate exported...

Is info still encrypted if I use a <form action="https"> from a regular http page?

Say I'm at the url http://mysite.com/form.html. When viewing source, I see <form method="post" action="https://mysite.com/process"&gt; <input type="text" name="user" value="information"> <input type="submit"> </form> If I hit the submit button, will the form information be encrypted when it's sent to the process page/controller? ...

Where are the real risks in network security?

Anytime a username/password authentication is used, the common wisdom is to protect the transport of that data using encryption (SSL, HTTPS, etc). But that leaves the end points potentially vulnerable. Realistically, which is at greater risk of intrusion? Transport layer: Compromised via wireless packet sniffing, malicious wiretapping,...

How can I change Rails view code for site visitors using SSL?

My Rails app has some pages which are SSL-required and others which are SSL-optional. The optional pages use some assets which are served off-site (images from a vendor) which have both http and https URLs. I need to use https when the page is accessed via SSL to avoid the dreaded "this page contains both secure and insecure elements" wa...

What is the proper HTTP response to send for requests that require SSL

I'm designing an RESTful API where some calls are public over HTTP, and some require an API key and encryption over HTTPS. I'm deliberating on what response code should be sent if an HTTP request is sent to one of the private resources. So far the only one that jumps out at me is 412 - Precondition Failed, but the standard indicates th...

How to set up Mercurial with ssl/security

I've been following the hginit.com tutorial on how to use mercurial. Everything is going fine except it uses push_ssl=False. This does not work for my situation because I want pushes (and pulls if possible) to be secure. All the tutorials I've been able to find also use push_ssl=False. Can anyone give me pointers on how to set up ssl/sec...

MySQL query (over SSL) fails in IIS 7 using default AppPool identity

I am trying to run a website locally in Windows 7 under IIS 7. I have the AppPool configured to use "Classic" mode, but connecting to a MySQL DB that requires SSL fails. If I change the identity to my user account it works perfectly. It fails when using the default "ApplicationPoolIdentity" account. Is there something I'm missing somewhe...

conversion http to https

Hi this is my site, mysite I want to move my site from HTTP TO HTTPS , Also i want to redirect my site when user type 1.IF THEY TYPE LIKE happy.in To https://happylife.in 2.IF THEY TYPE LIKE http://happy.in To https://happylife.in 3.IF THEY TYPE LIKE www.happy.in To https://happylife.in What things i have to ...

SSL in overlay window for login

HI I have to implement login over SSL in my website. for example https://www.myweb.com/loginForm - this is the login form page https://www.myweb.com/loginProcess - this is the action which process the form -authenticates user. I am able to do this with usual web form but the problem is the overlay dialog box for login for example...

Apache2 VirtualHost Configuration with SSL

Hello! I'm new here and I have a strange problem which needs to be solved. Previously I searched in the whole forum and I've read all of related questions but I didn't find solution to my question. We have two servers and a firewall computer. On the Server#1 there is an Apache 2.2 web server and it forwards the incoming traffic to the a...

SSL, EV SSL, And URL Rewriting

We extensively use a third party app that we'll call thirdparty.com. thirdparty.com and mysite.com have a common navigation and look and feel, so to the users, they think they are always on mysite.com. What we're going to do is start url rewriting 3rd.mysite.com to display thirdparty.com, to make it look even more like a seamless experi...

Makecert problem under Windows 7

I'm creating a certificate to use with an SslStream, and I've been doing it this way under XP: makecert -r -pe -n "CN=aName" -ss my -sr localmachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 server.cer If I understand this correctly, this creates a certificate in server.cer, and creates a private key ...

Silverlight WCF with two-way SSL security certificates

Dear All! I would like to implement a server - client software with the following security requirements: WCF-Services need to be secured with SSL and Certificates for both, the server and the client Client certificates need to be generated programmatically upon user registration Client-certificates are deployed via a an automatically ...

How long do FireFox, Chrome, Safari, and Opera cache SSL/TLS session keys?

To try to use a reason SSL/TLS session key timeout on the server-side, I'd like to know how long popular browsers cache session keys on the client. Microsoft describes this information for Windows/IE here: http://technet.microsoft.com/en-us/library/cc776467(WS.10).aspx But, I haven't been able to find similar information for other po...