ssl

IOException reading from HttpWebResponse response stream over SSL

I get the following exception when attempting to read the response from my HttpWebRequest: System.IO.IOException: Received an unexpected EOF or 0 bytes from the transport stream. at System.Net.ConnectStream.Read(Byte[] buffer, Int32 offset, Int32 size) at System.IO.StreamReader.ReadBuffer() at System.IO.StreamReader.ReadToEnd()...

How to use SSL3 instead of TLS in a particular HttpWebRequest?

My application has to talk to different hosts over https, and the default setting of ServicePointManager.SecurityProtocol = TLS served me well up to this day. Now I have some hosts which (as System.Net trace log shows) don't answer the initial TLS handshake message but keep the underlying connection open until it times out, throwing a ti...

SSL Certificate Mismatch in IE 7+, OK in Firefox 3.6+

Hello, We have a site www.name1.domain.com for which we successfully created and implemented an SSL cert. We then added another site, www.name2.domain.com, and are seeing some strange behaviour in IE7 and IE8 (surprise!). Basically, IE7,8 reports a mismatch of host name when we go to https://www.name2.domain.com/ . When I add and view ...

jQuery AJAX request (Rails 3) gets redirected and returns empty message body (only with SSL)!

I'm trying to do a manual jQuery AJAX request the following way: $("#user_plan_id").change(function() { $("#plan_container").load('/plans/' + this.value); }); I have the "rails.js" file included in my header, and a "<%= csrf_meta_tag %>". I see from my log that the request IS getting to the server (although without the authentici...

WebRequest using SSL

I have the following code to retrieve a file using FTP (which works fine). FtpWebRequest request = (FtpWebRequest)WebRequest.Create(svrPath); request.KeepAlive = true; request.UsePassive = true; request.UseBinary = true; request.Method = WebRequestMethods.Ftp.DownloadFile; ...

Is there a standard way to run a x509 key server?

Does anyone know of a project / product that has standardized how to access/download x509/SSL certificates over HTTP? I have seen RFC 4387 but haven't found anyone who implements it. Basically, I am trying to setup a key server for an internal application. So short of implementing my own, does anyone have any suggestions? ...

Amazon S3 - HTTPS/SSL - Is it possible?

I saw a few other questions regarding this without any real answers or information (or so it appeared). I have an image here: http://furniture.retailcatalog.us/products/2061/6262u9665.jpg Which is redirecting to: http://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg I need it to be (https): https://furniture.r...

Self - hosted WCF server and SSL

Hello, There is self - hosted WCF server (Not IIS), and was generated certificates (on the Win Xp) using command line like makecert.exe -sr CurrentUser -ss My -a sha1 -n CN=SecureClient -sky exchange -pe makecert.exe -sr CurrentUser -ss My -a sha1 -n CN=SecureServer -sky exchange -pe These certificates was added to the server code ...

Facebook LikeBox IFrame over SSL

the iframe version of likebox is by default over http. the developer wiki on facebook says on Using the Like Box with SSL I should load the FacebookConnect script over https , I don't what the FacebookConnect script only the iframe. I found that calling https://www.facebook.com/plugins/likebox.php?#ALLMYPARAMETERS# works and doesn't...

How does "Require SSL" affect ASP.NET MVC application lifecycle?

I have an application that taps into BeginRequest and EndRequest to set up and tear down NHibernate sessions like this: BeginRequest += delegate { CurrentSessionContext.Bind(SessionFactory.OpenSession()); }; EndRequest += delegate { var session = CurrentSessionContext.Unbind(SessionFactory); session.Dispose(); Containe...

WCF 4: Fileless Activation Fails On XP (IIS 5) that has SSL port enabled.

I have a service being hosted in IIS on XP via fileless activation. The service starts fine when there is no SSL port enabled for IIS but when the SSL port is enabled, I get the error message: System.ServiceModel.ServiceActivationException: The service '/SkillsPrototype.Web/services/Linkage.svc' cannot be activated due to an except...

Configuring WCF 4 with routing (global.asax) for both http & https endpoints

I'm still a newbie with wcf and not too well informed in .net in general. I have a WCF 4 web service that uses the global.asax routing approach and very simplified web.config using the standard endpoint method. This wcf service runs as an application with the default web site on iis 7.5 at present. I need it support both http and http...

secure data transport between web server and database server

I'm planning on provisioning a web server and database server in a server farm environment. They will be in the same network but not in the same domain, both windows server 2008 and the database server is sql server 2008. My question being, what is the best way to secure data in transport between the servers? I've looked into IPSEC an...

SSL + Jquery + Ajax

Hi I starting too look at a bit of security into my site. My site I would consider a very low security risk as it has really no personal information from the user other than email. However the security risk will go up a bit as I am partnering with a company and the initial password for this companies users will be the same password the...

Can we ask user for credit card number or paypal details,store credit card number on our server, can we use SSL in iphone application for transaction?

Can we get credit card number from user or paypal details & use them for premium service of our application ? is apple accept this application if we directly get this information & use it in our api on server for transaction. Using ssl will be accpted by apple ? I have check from 1) http://stackoverflow.com/questions/1763306/credit-c...

ssl, client / server hello message

Hi, I learn about ssl and i didn't anderstand why server create a random number and send it to the client? why client can't create it? ...

HTTPS WCF web service on cloud

Hi, I want to create a HTTPS WCF web service on azure and want to use it in a desktop application. Can any one guide me in right direction to achieve this? ...

IE8 error with Certificate

I have installed a certificate with multiple Common Names on a Red Hat server in the jks format. The web page can be accessed with Firefox and the certificate gets imported. However, IE8 gives the error "Internet Explorer cannot display the webpage". I added the cert with MMC and its properties shows "This certificate has an nonvali...

Trusted certificates becomes invalid

In a Sun Glassfish server I have deployed an application that communicates with an external webservice over SSL. I have manually imported certificates in cacerts.jks with java keytool cli (keytool -import -trustcacerts -keystore cacerts.jks -alias somealias -file somecert.cer). I verify that everything works, but then after a longer wh...

libssh2 channel SSL BIO usage

Hi, I'm writing a small ftp project for my own amusement which is suppose to be able to do 4 things: connect directly to a ftp connect directly to a ftp with SSL (wrapper) connect through ssh tunnel to a ftp connect through ssh tunnel to a ftp with SSL. I'm writing my program in plain C (unix, not that it matters in this case) using...