ssl

Can I run Tomcat securely on port 443 and insecurely on 8080

Let me explain my situation. Currently, I have a lot of applications running on Tomcat 6, on the default port 8080. I just created some applications that will need a log in. I'm going to buy an SSL certificate to install on this server. I don't like the idea of using port 8443 because it makes the URL more complicated. If I run Tomca...

Convert a PKCS#8 private key to PEM in java

Hello everyone I'm trying to convert a PKCS#8 private key that I generate in my java program to a PEM encoded file. Security.addProvider(new BouncyCastleProvider()); SecureRandom rand = new SecureRandom(); JDKKeyPairGenerator.RSA keyPairGen = new JDKKeyPairGenerator.RSA(); keyPairGen.initialize(2048, rand); KeyPair keyPair = ke...

Can I use jquery.form.js in an https page

I'm developing a web form that is SSL encrypted. I have jquery.form.js local on the server. Yet, the page renders with error "jquery undefined". The error goes on to explain that it can't find jquery.form.js. What does that mean? Can't I include that js file into a page that is SSL encrypted? Thanks, TheGetz ...

HTTPS, URL path, and query string

This is a follow up post of my previous question (it was about username/password) Are the path to the resource and query string passed securely to the server if I use HTTPS? i.e. URI: http://server/path/to/a/resource?with=a&query=string Server: server path: /path/to/a/resource query string: with=a&query=string ...

RIA Services and SSL by configuration?

According to this I need to set an attribute in code to get SSL encryption for my RIA service calls. Is there no way to do this with a configuration file? (I currently use Visual Studio 2008 and Silverlight 3.) ...

Different SSL-certificates for different parts of site

I have a site on example.com that loads all its static components from s.example.com (an amazon cloudfront distribution). Now i would like to make some pages of example.com to use https so i thought i'd buy a ssl certificate for example.com, but since the pages loads images and other stuff from s.example.com the https will break since s...

How do I check if a SSLSocket connection is sane on Java?

Hi, I have a SSLSocket pool and I need to check if the socket connection is sane before borrowing the object. The isConnected, isInputShutdown and isOutputShutdown are useless because they don't check if both sides are connected and if I try to write or read from the socket I might get a SocketException. Here is my code for testing a c...

Which verisign SSL Certificate should I go with?

I'm looking an option to buy a verisign ssl certificate for my company. previously we were using godaddy but godaddy ssl is not installed on blackberry. we can install manually or programmatically but its a extra over head for users. you can see here what problem we are facing with goddady So now we are moving to verisign ssl certifica...

Silverlight WebClient issue when remote server is down.

I am developing an application in Silverlight which communicates with a remote server over SSL, here is the code private void button1_Click(object sender, RoutedEventArgs e) { WebClient wc = new WebClient(); wc.DownloadStringCompleted += new DownloadStringCompletedEventHandler(wc_DownloadStringCompleted)...

Synchonous SSL certificate handling on iPhone

Hi, I was wondering if anyone can help me understand how to add SSL certificate handling to synchronous connections to a https service. I know how to do this with asynchronous connections but not synchronous. NSString *URLpath = @"https://mydomain.com/"; NSURL *myURL = [[NSURL alloc] initWithString:URLpath]; N...

Apache 2 types SSl using VirtualHosts

I have 2 different applications. 1) tools.helpme.com Require Client Certificates from users! SSLCACertificateFile /usr/local/etc/apache22/certs/cacert.pem SSLCertificateKeyFile /usr/local/etc/apache22/certs/server.key SSLCertificateFile /usr/local/etc/apache22/certs/server.crt SSLCertificateChainFile /usr/local/etc/apache22/certs/serve...

How to set up OpenSSL so I can send mail with PHP vis Gmail SMTP?

Hey Guys, I have been sat solid looking for the answer to this question, I have tried many techniques and I just cannot get this to work. I am using the PHP Mailer libraries to send an email through Gmail SMTP server, I am using PHP 4 with iis6 on a windows 2003 box. This is the error I am given: Strict Standards: date() [function....

ASP.NET form's data encryption without SSL

Normally, if I complete a form, the data will be sent to the server as raw plain text which could be read by sniffers. I want to encrypt form's data client-side (like username, password,...) and then send them to the server. It seems that there are two ways: 1- Using SSL (in my scenarion, I can't use) 2- Using custom ActiveX control. 3...

SSL Connection problem to web service from Java bean

Hi, I have written an application that connects to a SSL web service (including client certificate) through jaxws. For this to work I have a wstrust.jks that contains trusted root certificate for ws, and client.p12 that is the client certificate to use when connecting to ws. I have then created a custom SSLSocketFactory to be able to us...

What would cause SSL negotiations to succeed under .NET but fail under Java ?

We have to create a web service client using Apache CXF in Java. The thing is I cannot seem to get the SSL session to properly engage. Either it fails altogether, the server fails to decipher what is sent to it once the application data is transmitted or I fail to read the responses from the server. However when trying the same transa...

.htaccess - help with a rewrite rule for ssl

So I've got a website and an SSL certificate. Everything is set up and working, however, both http://example.com/checkout and https://example.com/checkout work. I'm hoping there's a way to write a rule where anything going to /checkout is rerouted to https. Ideas? ...

How can I configure WCF to accept SSL and non-SSL

I need some help configuring WCF to support multiple environments. One environment allows anonymous authentication over standard HTTP and the other uses Windows Authentication over SSL. I can configure WCF to support either of the environments, but not both within the same web.config file. Here's what allows anonymous over http: <be...

C# HttpHandler Path and SSL

Hey All, I have an HttpHandler which resizes images and works great for JPG, GIF, and PNG. The issue I am having is two fold. 1) If I try to navigate to a page with an image on it via SSL (https://...) then the lock doesn't appear in the title bar in IE or FF. I have confirmed this is due to the image. If I remove the handler the lo...

Securing ELMAH with no admin accounts

Hi all, I'm wanting to secure ELMAH in an internet facing application. The system uses Forms Authentication, but doesn't currently have any non-user accounts (e.g. Admins). The user accounts are set up in an automated fashion. I don't really want to shoehorn any admin accounts into the system (the current DB schema for the users would ...

subversion co command against https problems

when I carry out the following command: svn co https://192.168.10.130/svn/project I get a prompt asking me for 'Administrator' password. When I type in a password, it asks me for a username and password. What I don't understand is, I guess the 2nd stage is the user set-up in visualsvn, but what is the password for administrator? Is it...