ssl

How do I run my application as superuser from Eclipse?

I'm running in to an error when I try to run my server application from Eclipse. The error is java.net.BindException: Permission denied. I think this is because I am using port 443 to set up an SSL connection. I can get around this problem if I run my code on the command line using java and sudo. Is there a way to set up Eclipse so that ...

ASP.NET Login via SSL doesn't persist when switching to non-SSL

I have an application I would like to force SSL on the login page and on the page that the CC is entered on. I would prefer to keep the rest of the application free of SSL. I have the code working to force SSL on certain pages, and remove SSL on others. The problem I have is that if I log in with SSL enabled the user is only authentic...

Decrypting data from a secure socket

I'm working on a server application in Java. I've successfully got past the handshake portion of the communication process, but how do I go about decrypting my input stream? Here is how I set up my server: import java.io.IOException; import java.net.ServerSocket; import java.net.Socket; import java.util.ArrayList; import java.util.Hash...

Implement SSL with SSPI: How to start?

Hi, I want to implement an SSL client using SSPI. Where can I find step-by-step guides, code examples, etc.? Thanks in advance. ...

ssl security information on internet explorer 6

Hi all, I dont want that my webpage show security information about this page contains both secure and nonsecure... this only happen in ie6, i am testing with the program ietester. I know that the problem is in file mootools-1.11-uncompressed.js in this line if(!$("ie_ready")){var C=(window.location.protocol=="https:")?"://0":"javascr...

Google Charts of SSL

Hi, I need to get the free Google charts working over SSL without any security errors. I am using c# and asp.net. As Google charts does not support SSL by default, I am looking for a robust method of using there charts but ensuring my user doesn't get any security warnings over their browser. One thought was to use a handler to call t...

Test SSL Certificate for MQ SSL Testing

I am in the process of testing MQ calls over the SSL. I woul like to know where i can get some demo SSL certificates. That i can use them for testing. I also would like to know if there any code sample which i can use to pass SSL kind of connection. The exaple i am looking is in C# ...

Automating the Choose a digital certificate dialog

I am using WatiN (2.0.10.928) with C# and Visual Studio 2008 to test a SSL secured website that requires a certificate. When you navigate to the homepage a "Choose a digital certificate" dialog is displayed and requires that you select a valid certificate and click the 'OK' button. I'm looking for a way to automate the certificate selec...

Axis over SSL and authentication with a PKCS#12 keystore

I have PKCS#12 keystore that I've sucessfully imported in my browser for accessing a server that needs 2-way SSL authentication. Works perfectly reaching any https URL there. However, I'm unable to access an URL in the same server, and from the same host when using Axis 1.4. The given Axis faultString is: javax.net.ssl.SSLHandshakeExc...

Invalid keystore format from tomcat

I'm using tomcat5.5.17 and java1.6. I tried to setup ssl. After generating the key/cert using keytool and modified server.xml. I got the following error when I restart tomcat. Apr 6, 2010 5:35:34 PM org.apache.coyote.http11.Http11BaseProtocol start SEVERE: Error starting endpoint java.io.IOException: Invalid keystore format at s...

Cocoa NSStream works with SSL, with socks5, but not at the same time

Upon connecting (to an FTP, at first without SSL) I run: NSArray *objects = [NSArray arrayWithObjects:@"proxy.ip", [NSNumber numberWithInt:1080], NSStreamSOCKSProxyVersion5, @"user", @"pass", nil]; NSArray *keys = [NSArray arrayWithObjects:NSStreamSOCKSProxyHostKey, NSStreamSOCKSProxyPortKey, NSStreamSOCKSProxyVersionKey, NSStreamSOCKSP...

Getting EOFException while trying to read from SSLSocket

Hi, I am developing a SSL client that will do a simple request to a SSL server and wait for the response. The SSL handshake and the writing goes OK but I can't READ data from the socket. I turned on the debug of java.net.ssl and got the following: [..] main, READ: TLSv1 Change Cipher Spec, length = 1 [Raw read]: length = 5 0000: 16 03...

Browser security when calling HTTP assets via a SWF on a HTTPS site

We have a site that runs on HTTPS and needs to pull in various JS assets to run a video player on the page. We get a browser security warning on this page because the JS files we are externally calling are being accessed via HTTP, not HTTPS. E.g. // HTTP reference on a HTTPS site <script src="http://the-cdn.tld/player.js"&gt;&lt;/script...

Cannot run file_get_contents() on PHP 5.2.9-2

Hello, I am having the same problem as described below. http://marc.info/?l=php-general&amp;m=124104032703506 That is, I can't run file_get_contents() on PHP 5.2.9-2. The guy answered his own question by: "Sorry, didn't pay attention to the registered streams :-( You need to install a PHP package with ssl or compile it with --with-...

creating secure log-in with php and ssl

In the past whenever I have developed a system with secure authentication i have just used ssl with the entire application so that all connections between the server are encrypted. However the application I am currently developing doesnt require this - only the payment process and the login has to be encrypted. The style of login is muc...

SSL Authentication with Certificates: Should the Certificates have a hostname?

Quick Version of Question Gmail, TD (Canadian Bank), Royal Bank (Canadian Bank) all use ssl. When you inspect their certificates they all have Common Name (CN) mail.google.com Or more generally: Common Name (CN) <url> Is this needed to prevent man in the middle attacks? Summary JBoss allows clients and servers to authent...

Unencrypted mail is received on an Stunnel port

Stunnel is listening on port xxxx, and will establish a secure SMTP connection upon receiving "EHLO" from the remote server. I want to modify the code so that if "HELO" is received instead of "EHLO" the message is forwarded directly to the local mail server. In other words, I want to use the same port for both encrypted and unencrypte...

Opening SSL URLs with Python

Hi folks, I'm using mechanize to navigate pages, it works pretty well. Unfortunately I have a random error come up, by random I mean it occasionally appears. URLError at /test/ urlopen error [Errno 1] _ssl.c:1325: error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad record mac> I really need help on this one :) ...

Android HttpClient and HTTPS

Hi all, I'm new to implementing HTTPS connections in Android. Essentially, I'm trying to connect to a server using the org.apache.http.client.HttpClient. I believe, at some point, I'll need to access the application's keystore in order to authorize my client with a private key. But, for the moment, I'm just trying to connect and see ...

Is there a way to get SSL certificate details using JavaScript?

Hi all, I'd like to gather certain details of an SSL certificate on a particular web-site. I know this is straightforward using the openssl tool on Linux/MacOSX. However is the same or similar possible in JavaScript? I understand that the browser handles socket connections and that the SSL handshake occurs prior to any party sending da...