ssl

Setting Dynamic proxyName in server.xml

I have a complicated set up involving an F5 Load Balancer and a server running 3 applications on tomcat 6. For reasons I won't go too deep into, I had to set up my applications like this: The Load Balancer has the certificates for the domains: appA.mydomain.com appB.mydomain.com appC.mydomain.com Between the load balancer and the appl...

ASP.NET - consume web service - https only - how?

I have web services built with ASP.NET and ASP.NET clients consuming them. When consuming the webservices, how would I to force the clients to use https? I don't want to force the whole site to use https by turning on require SSL in IIS. Can I use the IIS7 URL rewrite module to re-route http requests to https? ...

HttpClient 4 SSL and client side certificates

Hi All, I am having trouble working out how I can get get HttpClient 4 to use SSL in the way I need. I have X https servers that I send requests to. One requires a client side certificate while the others have trusted certificates and therefore require no client side certificate. I have no issue connecting to the server requiring the c...

How do you set up an SSL cert that HttpClient under Android will accept?

I'm connecting to a REST service using HttpClient under Android. I'd like to be able to write code where I could pull the host, port, etc. out of a properties file and not have to write fake Schemes and other things like that in order to do the development work. In other words, the live site will have a cert. The dev site will have a sel...

Access Client Write Key & Server Write Key from OpenSSL C API

Hello, I have a need to access the encryption (cipher, write) keys that are generated from the master key that is generated from the OpenSSL C API. I know I can access the master key using the SSL struct as follows: ssl->session->master_key Unfortunately looking at the OpenSSL code has not gotten me very far as the API is not very ...

Is using SSH (PuTTy) secure if I do not have an SSL certificate on server?

We have a small office server running Linux Centos for internal use. I can connect to it externally though using Putty with SSH. Since the server does not have any kind of SSL certificate, is using putty ssh still secure? Thanks ...

Why am I getting an OpenSSL::SSL::SSLError only on Windows?

I'm downloading files from a HTTPS website. I've narrowed the problem down to this: >> require 'open-uri' >> open('https://www.gmail.com/') # just as an example C:/Ruby/lib/ruby/1.8/net/http.rb:586:in `connect': certificate verify failed (OpenSSL::SSL::SSLError) from C:/Ruby/lib/ruby/1.8/net/http.rb:586:in `connect' from C:/Rub...

Is it possible to force the WCF test client to accept a self-signed certificate?

I have a WCF web service running in IIS 7 using a self-signed certificate (it's a proof of concept to make sure this is the route I want to go). It's required to use SSL. Is it possible to use the WCF Test Client to debug this service without needing a non-self-signed certificate? When I try I get this error: Error: Cannot obtain M...

Django: HTTPS for just login page?

I just added this SSL middleware to my site http://www.djangosnippets.org/snippets/85/ which I used to secure only my login page so that passwords aren't sent in clear-text. Of course, when the user navigates away from that page he's suddenly logged out. I understand why this happens, but is there a way to pass the cookie over to HTTP so...

Problem to Import certificate to Apache tomcat: Failed to establish chain from reply

Hi, After I got certificate, I tried to import it as specified here: http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Edit%20the%20Tomcat%20Configuration%20File But I got this error: C:\Program Files (x86)\Java\jre6\bin>keytool -import -alias tomcat -keystore C:\ SSL.keystore -file C:\SSL\SSL_Internal_Certificate_for_isdc-plannin...

Java Webstart Truststore SSL

Hello Experts. Need some guidance. I have java webstart app and I want it to connect to a server via SSL.just adding a property like:System.setProperty("javax.net.ssl.trustStore","my.keystore");But since a JAWS program is downloaded from server didn't work and don't have a my.keystore on local file system. So decided to distribute the...

iPhone development: How to implement HTTPS connection?

Hi all, I am working on an iPhone project which need to connect to the IIS server over HTTPS or SSL protocol. Can anyone tell me how to implement HTTPS connection in iPhone? Any advice would be appreciate. Thank you in advance. ...

Safest communication method between applications on same machine

What is the safest communication method between two applications on the same machine, both Java and C/C++ clients with a Java server. Are SSL sockets safe enough or they can be broken by "man in the middle" attacks? The main concern here is how the clients can trust the local server? Would introducing a remote server improve the secur...

Broken ssl, what to do

I have a site and i implemented ssl there. but when i browse it, the security seals dont come. i asked to godaddy, they replaid: Thank you for contacting online support. I cannot replicate the issue you have described. The error you described is caused by the way your site has been designed. If you receive this error, you have a comb...

Need only to change links from https to http to access files with no SSL?

I have SSL enabled for subdomain.mydomain.com so I can access files via https://subdomain.mydomain.com. Now please tell me if I'm right.. if I have file somwhere in subdomain.mydomain.com called index.php I can securely access it via: https://subdomain.mydomain.com/someFolder/index.php but I can also access it via http://subdomain.myd...

web application with secured sections, sessions and related trouble

I would like to create web application with admin/checkout sections being secured. Assuming I have SSL set up for subdomain.mydomain.com I would like to make sure that all that top-secret stuff ;) like checkout pages and admin section is transferred securely. Would it be ok to structure my application as below? subdomain.mydomain.com ...

Encrypting passwords.

My iphone application wants to connect to server by giving username and password. How can I send this password securely. Anyone please help. I am a beginner. ...

Retrieve SSL session id in asp.net

Hi all, is there any way to retrieve the SSL session Id serverside in asp.net? thanks in advance and greetings Tim ...

Is there a way to do FTP-SSL with Perl's Net::FTP module?

I'm working on a project that requires me to download files from FTP using Perl. I just found out that I've got the option to use FTP-SSL. It seems that this is just SSL encrypted FTP (similar to HTTP vs. HTTPS) and I should just have to send the "AUTH TLS" or "AUTH SSL" commands to the FTP server. The question: is there a way to do thi...

ASP.NET MVC: How to implement a wild card SSL for more than one static domain on a single IP?

A wild card SSL allows any domain prefix: *.mydomain.com accepts ssl.mydomain.com secure.mydomain.com anything.mydomain.com Given that MVC can route the request to the correct view based on the URL, is it as simple as loading the wildcard SSL cert on an IP, then use DNS to map the various names to the IP? ...