ssl

Why is Perl's IO::Socket::SSL->new() failing?

When I execute this line: $client = IO::Socket::SSL->new("pilot-payflopro.paypal.com:443"); my IO::Socket::SSL::errstr() is configuration error failederror:00000000:lib(0):func(0):reason(0) my $! is 'invalid argument' Has anyone run into this before? ...

WCF with SSL- not finding localhost

Hi guys, I'm trying to get WCF to use SSL with ANYTHING for FIVE DAYS now. I've gone through countless walkthroughs, generated more certificates than a mail order diploma company, even tried hot fixes. After working with MS dev tools since VB1, I am now considering flipping burgers as a career option. WCF, as far as I can see, is a comp...

asp:Login control requests

Hi All, ran into an issue, we are using webforms with a site with this dir structure: root: / secure : /securepages/ we only want users who are logged in to access /securepages/. currently we are using the login control, 3.5, forms auth, all is working ok but know we have thrown assl cert into the mix and the issue is that the login ...

Open SSL generate Private Key with password from File

Hello, I have this command openssl genrsa -des3 -out host.key 1024 it asks me for a password, I want to automate it! how I can make it read the password from a text file (host.pass) so it will not ask me or have it ignore the password (which one is better?) Thanks ...

How do I do an HTTPS request with Erlang?

I tried the inets library but it timeouts. I don't think it supports https. I am trying to use ibrowse, but it isn't working. ...

SSL question java web application

Hello, I configure my web application to use SSL using my own self signed certificate. Everything is working fine but here my whole site is https now as i used :- <transport-guarantee>CONFIDENTIAL</transport-guarantee> However, i only want my login page to use SSL and not complete site. What changes do i need to make in my application...

telling java to accept self-signed ssl certificate

It looks like a standard question, but I couldn't find clear directions anywhere. I have java code trying to connect server with probably self-signed (or expired) certificate. It gives something like this [HttpMethodDirector] I/O exception (javax.net.ssl.SSLHandshakeException) caught when processing request: sun.security.validator.Vali...

Custom SSL handling stopped working on Android 2.2 FroYo

For my app, Transdroid, I am connecting to remote servers via HTTP and optionally securely via HTTPS. For these HTTPS connections with the HttpClient I am using a custom SSL socket factory implementation to make sure self-signed certificates are working. Basically, I accept everything and ignore every checking of any certificate. This h...

How important is it to use SSL on every page of your website?

Recently I installed a certificate on the website I'm working on. I've made as much of the site as possible work with HTTP, but after you log in, it has to remain in HTTPS to prevent session hi-jacking, doesn't it? Unfortunately, this causes some problems with Google Maps; I get warnings in IE saying "this page contains insecure conten...

Can't connect to HTTPS using X509 client certificate

Hi - I'm new to cryptography and I'm a bit stuck: I'm trying to connect (from my development environment) to a web service using HTTPS. The web service requires a client certificate - which I think I've installed correctly. They have supplied me with a .PFX file. In Windows 7, I double clicked the file to install it into my Current Use...

How can I use WCF with only basichttpbinding, SSL and Basic Authentication in IIS?

Hello, Is it possible to setup a WCF service with SSL and Basic Authentication in IIS using only BasicHttpBinding-binding? (I can’t use the wsHttpBinding-binding) The site is hosted on IIS 7, with the following authentication set up: - Anonymous access: off - Basic authentication: on - Integrated Windows authentication: off !...

Using libcurl & SSL

Hi there. I've found there is really very little information around on this topic. I already have a dll making successful posts using libcurl. I've compiled libcurl with openssl for ssl functionality. Here is an exert of my original curl setup. curl_easy_setopt(handle, CURLOPT_ERRORBUFFER, errorBuffer); //curl_easy_setopt(c...

Send file FTP over SSL with custom port number

I have asked the question before but in a different manner. I am trying taking form data, compiling into a temporary CSV file and trying to send over to a client via FTP over SSL (this is the only route I am interested in hearing solutions for unless there is a workaround to doing this, I cannot make changes). I have tried the following:...

How to disable weak-ciphers on rmi port on Jboss 4.2.3GA?

I don't have any service connector port setting for rmi in file /deploy/jboss-web.deployer/server.xml. I have an mbean for org.jboss.invocation.jrmp.server.JRMPInvoker in /conf/jboss-service.xml in which I have settings for ports, serveraddress, etc. How do I specify cipher-suites for rmi so that I am able to disable week ciphers (less t...

How to extract CN from X509Certificate in Java?

Hi, I am using a SslServerSocket and client certificates and want to extract the CN from the SubjectDN from the client's X509Certificate. At the moment I call cert.getSubjectX500Principal().getName() but this of course gives me the total formatted DN of the client. For some reason I am just interested in the CN=theclient part of the DN...

Why does this redirect not work? Java SSL

Hello, I have a page HelloWorld.xhtml in /Login folder. I have set this constraint for this page. I am using jdbcRealm:- <user-data-constraint> <description/> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> I have a filter on this page and in filter i do this :- if (...

iPhone SSL Website Certificate Warning

I have a few sites that have SSL Certificates installed. When an SSL request is made with my employer's iPhone, this error message is displayed: Accept Website Certificate The certificate for this website is invalid. Tap Accept to connect to this website anyway. I've pulled up the same pages in other browsers, including Safari...

How can I connect to a mail server using SMTP over SSL using Python?

Hello, So I have been having a hard time sending email from my school's email address. It is SSL and I could only find this code online by Matt Butcher that works with SSL: import smtplib, socket __version__ = "1.00" __all__ = ['SMTPSSLException', 'SMTP_SSL'] SSMTP_PORT = 465 class SMTPSSLException(smtplib.SMTPException): """Ba...

How to specify a cipher for an SSL connection in .NET?

How can I specify a cipher suite to use in an SSL Connections? I know that Mentalis Seclib got this feature however they don't maintain the project (and there are issues in that library with x64 OSes) as they say .NET Framework 2.0 introduced those features. However I couldn't find a way to do this in .NET Framework 3.5. To be more s...

Can't send client certificate via SslStream

I am doing an SSL3 handshake using an SslStream, but, in spite of my best efforts, the SslStream never sends a client certificate on my behalf. Here is the code: SSLConnection = new System.Net.Security.SslStream(SSLInOutStream, false, new System.Net.Security.RemoteCertificateValidationCallback(AlwaysValidRemoteCertificate), new System.N...