ssl

.NET HttpListener - no traffic when listening to "https://*.8080" when browser proxy is set???

Hi, Background - I can get HttpListener working fine for HTTP traffic. I'm having trouble with HTTPS traffic however. QUESTION: How can I change the code below so that a browser request to a "https" URL will actually be picked up by my HttpListener? Notes - At the moment with firefox's proxy settings set to "localhost:8080", when ...

Is there a way to load a different cacerts than the one specified in the java_home/jre/lib/security folder?

I have a single installation of java in a system that runs 2 or 3 applications. All the applications use the same runtime. Is there a way to specify a different keystores for the ca certs than the one in java_home/jre/lib/security. That is, is there an option to specify an "extra" keystore that is loaded and added to the certs loaded ...

Setting up SSL on a local xampp/apache server

I'm trying to access a Active Directory from my local webserver. To do this I'm using the latest version of xampp and a PHP script called adLDAP. If I understand things right, I need to enable SSL to access https URLs. I've tried to google it but with no luck :( Could anyone link a tutorial or explain to me how to install SSL on xampp/ap...

How to generate a certificate request with SubjectAltNames on IIS 6.0 ?

I'm looking for a way to add a Subject Alternative Name in my certificate request in the IIS 6.0 certificate creation wizard. It seems I can only fill the Subject field and not the Subject Alternative Name. Trying to follow this guide (http://support.microsoft.com/kb/931351) using certreq.exe doesn't help, it fails without any hint exce...

NHibernate Detecting SSL

I'm testing support for encrypted connections from my client application to my SQL server using SSL. I've setup my test certificate and added "encrypt=true" to my connection string and everything is working fine. If I connect to my SQL server using Management Studio I can view the connection properties and verify that yes, the connectio...

Accepting bank account information in a form

What security concerns are there when accepting a user's bank account information (account number and routing number) via a form on a page that is using SSL, and posting it back to the server where I then curl off a HTTPS request to send that information to an ACH service like First ACH or ACH Direct via their API? We wouldn't be saving...

Does the majority A-grade browsers cache content over https to disk?

I have read somewhere that javascript and css files that only get cached in memory sooner or later get pushed out by other content. Is this true? Are there any other issues regarding cashing SSL-objects? ...

Anyone got Twitter xAuth working with the Compact Framework yet?

This question is related to a number of other questions on oAuth on the Compact Framework (one, two) but seems slightly more specific to me, as it specifically involves getting Twitters xAuth API call (meant for non web applications to be able to do oAuth) working on the Compact Framework. Are SSL HTTP connections and the encryption me...

How to create a ssljms connection using GlassFish 2.1.1 and OpenMQ ?

Is it possible to configure that? In that case, what parts would be involved, MDBs and Producers? ...

Getting rewrite to work with SSL in a MVC Zend Framework app

I am following the Zend Framework quickstart document and got stuck on the .htaccess rewrite rules. I am using this: RewriteEngine On RewriteCond %{REQUEST_FILENAME} -s [OR] RewriteCond %{REQUEST_FILENAME} -l [OR] RewriteCond %{REQUEST_FILENAME} -d RewriteRule ^.*$ - [NC,L] RewriteRule ^.*$ index.php [NC,L] This works find when I acce...

anonymous ASP.net form with SSL, sharepoint

Hi I want to create contact form with SSL. I have created simple asp.net contact form without ssl and now i must add it. It is in Sharrepoint project but seems to be the same case as in asp.net form. I have anonymous webapplication and won't be any login usecase, so whole webapplication must work via http:// but when user go to contact ...

SSL socket connection on iPhone

Is there a way to reuse SSL socket connections on the iPhone. I'm seeing an extra 3-4 second overhead in doing SSL handshaking. I'm using NSURLconnection currently to do the API calls and each one of them is taking 4-5 seconds on Wifi. Any suggestions would be greatly appreciated. ...

Retrieve Data for SSL Tracking

I need to write an app that retrieves data on expiring SSL certs. What is the best way to locate this data for application purposes? ...

Request builder call not returning when using ssl(https)

Hi , I am using GWT. Currently using gwt-rpc to for login authentication. For only login purpose i want to use ssl(https) and so instead of using gwt-rpc i am trying Request Builder and calling a servlet with https. When in Servlet URL i use protocol as http the request builder works perfectly and response returns to client side(onRespon...

Implementing SSL tunnel in C#

As a part of a larger application I need to implement an SSL tunnel in C#. I was wondering if there's a better way of doing that instead of writing each step of SSL negotiation myself which sounds like reinventing the wheel. Do you know if there are any libraries that I could use to minimize the code I need to write or any tutorials whi...

MessageSecurityException on SSL enabled WCF service

Hi, We have server to server WCF service call failing and throwing following exception message. We are using certificate to authenticate to downstream services. The services are load balanced, but keeping just one server on load balancer also shows up the same behaviors. These failures are not consistent. Any help is greatly appreciate...

C# Ignore certificate errors?

I am getting the following error during a web service request to a remote web service: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure. Is there anyway to ignore this error, and co...

Gwt How to call servlet/rpc through https from page originated from http

Hi , is there any way to call servlet or make a gwt-rpc call from gwt client and get back the response. Or to call RPC over https only for login purpose. Please suggest any method or workaround to implement the above task ...

How to make iPhone application accept incorrect server certificate but only specific one?

I need to work with private HTTPS API and client has incorrect certificate on the host. Certificate is for www.clienthost.com and I'm working with api.clienthost.com. So I need to connect via HTTPS to api.clienthost.com ignoring incorrect certificate but still make sure it is the one for www.clienthost.com and not something else. I found...

SSL signed certificates for internal use

I have a distributed application consisting of many components that communicate over TCP (for examle JMS) and HTTP. All components run on internal hardware, with internal IP addresses, and are not accessible to the public. I want to make the communication secure using SSL. Does it make sense to purchase signed certificates from a well-...