ssl

Native XML WebService With Authentication Basic and SSL

I'm using SQL Server 2005 and the Native XML WebServices. The integrated authentication via HTTP:80 works fine. But i need the basic authentication which requires SSL. So if i change the web service to ssl i always get a connection reset (101). I tried several ports 80,443,9999 with the same outcome. What is the error? --EXEC sp_delete...

OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace (java version 1.6.0_17) trigger seeding of SecureRandom done seeding SecureRandom %% No cached client session *** ClientHello, TLSv1 RandomC...

Call https Payment gateway webservice from Windows consuming WCF

I have developed a WCF service in .Net and its Consumed as a window service. This WCF has binded with net.TCP binding from a ASP.net Website. this Website hosted with SSL certificate. I have Called Authorize.net CIM webserice from this WCF with Httpsbinding. This throwing exception as "could not establish trust relationship for the SSL...

GLassfish SSL Configuration Page Level

How to secure only some of the pages from the whole web application under glassfish V3 ? ...

SSL certificate for iPhone -> which CA?

I find all these work-arounds for NSUrlConnection's which use a closed API to access a non-trusted SSL certificate. The other options is to install the certificate first by using the Safari/Mail app.. I'd like to know what root certificates are installed, so I can get one from the trusted CA, the way you're supposed to do it.. Anyone ...

XML-RPC over SSL with Ruby: end of file reached (EOFError)

Hello, I have some very simple Ruby code that is attempting to do XML-RPC over SSL: require 'xmlrpc/client' require 'pp' server = XMLRPC::Client.new2("https://%s:%d/" % [ 'api.ultradns.net', 8755 ]) pp server.call2('UDNS_OpenConnection', 'sponsor', 'username', 'password') The problem is that it always results in the following EOFE...

Programmatically adding a trusted cert in Java

I use SSL to communicate between two components written in Java. I can't use a CA, so I have to self-sign everything. Unfortunately, this means that when I try to handshake, I get a SunCertPathBuilderException. I can create my own X509TrustManager that just trusts everything, but that sort of defeats the purpose of having a signed cert. ...

Can you use gzip over SSL? And Connection: Keep-Alive headers

I'm evaluating the front end performance of a secure (SSL) web app here at work and I'm wondering if it's possible to compress text files (html/css/javascript) over SSL. I've done some googling around but haven't found anything specifically related to SSL. If it's possible, is it even worth the extra CPU cycles since responses are also...

How do I force SSL for some URLs and force non-SSL for all others?

I'd like to ensure that certain URLs on my site are always accessed via HTTPS while all other URLs are accessed via HTTP. I can get either case working in my .htaccess file, however if I enable both, then I get infinite redirects. My .htaccess file is: <IfModule mod_expires.c> # turn off the module for this directory ExpiresActive off...

Auto enter pass phrase in case of Python ssl Client/Server

I need to create Client/Server application to send files from clients to Server. I use simple ssl sockets for that and authenticate with certificates. ms = socket.socket(socket.AF_INET, socket.SOCK_STREAM) ssl_sock = ssl.wrap_socket(ms, keyfile=".../newCA/my_client.key", certfile="...

Designing API for Iomega network drives web access over http/https

Hello! Can you share your experience of working with network shares like Iomega StorCenter or iConnect over http(s)? Especially: Login/logout workflow Browse functionality Reading/writing objects Reading/writing object properties Your recommendations Thank you! ...

Using HttpClient with SSL and certificates

While I've been familiar with HTTPS and the concept of SSL, I have recently begun some development and found I am a little confused. The requirement was that I write a small Java application that runs on a machine attached to a scanner. When a document is scanned this is picked up and the file (usually PDF) sent over the internet to our...

Client / Server security from mobile to website

Hey. Am new to the world of web programming and learning a bunch of fairly simple new pieces of tech, trying to piece them all together. So, we have a simple client (currently iPhone, to move to J2ME soon) that's pulling down lists of data via PHP, which is talking to a MySQL db. I have a rudimentary user/login system so that data is ...

Error accessing a Web Service with SSL

I have a program that is supposed to send a file to a web service, which requires an SSL connection. I run the program as follows: SET JAVA_HOME=C:\Program Files\Java\jre1.6.0_07 SET com.ibm.SSL.ConfigURL=ssl.client.props "%JAVA_HOME%\bin\java" -cp ".;Test.jar" ca.mypackage.Main This was works fine, but when I change the first line t...

SSL certificate issue when redirecting from 'https://example.com' to 'https://www.example.com'

I've mapped 'example.com' and 'www.example.com' to the same IP address with my hosting service provider. But because my SSL certificate only works for 'www.example.com', so what I want is when the user visit 'example.com', he will be redirected to 'www.example.com'. I'm using ASP.Net MVC and IIS 7. Thanks ...

SSL over TDS, SQL Server 2005 Express

I capture packets sent/received by Win Xp machine when connecting to SQL Server 2005 Express using TLS encryption. Server and Client exchange Hello messages Server and Client send ChangeCipherSpec message Then Server and Client server send strange message that is not described in TLS protocol What is the message? Server side captu...

Benefits of "Don't Fragment" on TCP Packets?

One of our customers is having trouble submitting data from our application (on their PC) to a server (different geographical location). When sending packets under 1100 bytes everything works fine, but above this we see TCP retransmitting the packet every few seconds and getting no response. The packets we are using for testing are about...

Intermittent Download Error from PHP web application over SSL with IE7 IE8

These are large (20-60mb) quickbooks files. Seemingly at random, IE users who are downloading them get "server returned an invalid or unrecognized response", and the download fails. Works 100% of the time in other browsers. This is over SSL. These downloads are being forced, I've tried every variation of headers I have seen. Currentl...

OpenSSL with Apache Tomcat 6

I use Tomcat with native extensions, so it is necessary to use OpenSSL for making certificates. Does anyone know how to make a certificate with OpenSSL and install it into Tomcat? ...

Change generated address for WCF service over wildcarded HTTPS

I am attempting to deploy a WCF service over SSL using the basic HTTP bindings. The WSDL which is being generated contains, for the service address, the internal DNS name rather than the name we expose to the world. I am using a wildcard SSL certificate so setting the host header as suggested here: http://stackoverflow.com/questions/57...