ssl

Is there any java ssl tunel / reverse proxy appliaction which can install itself as a windows service?

I think that everything is in the title. ps. I'm looking for something simple, without tomcat like huge set of configuration xml's. ps2. open source regards p. ...

force client browser URL switch from http to https

Hi all, I have a specific set for my websites. Apache on port 80 stunel on 443 forwards decrypted msg to 80 stunel on 2222 forwards encrypted to 443 WAN-> NAT 443 -> stunel:443 WAN-> NAT 80 -> stunel:2222 This obviously uses "WAN ssl" only for connections on port 443 from WAN. Is apache mod_rewrite able to force http:// like url to...

What happens on the wire when a TLS / LDAP or TLS / HTTP connection is set up?

I'm rewording my question so hopefully I can get a better response. I asked a similar question on serverfault here, and think that a proper and valid TLS server is one that expects the "STARTTLS" command. Is it true that STARTTLS can be issued to a properly configured LDAP or HTTP TLS server without needing an extra port? I know tha...

FtpWebRequest EnableSSL error

I'm getting a "The remote certificate is invalid according to the validation procedure" exception message with the following code: ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(MyCertValidationCb); var request = (FtpWebRequest)WebRequest.Create(new Uri(myUri)); request.EnableSsl = tru...

Java "no cipher suites in common" issue when trying to securely connect to server.

Hi, I have an issue when a client (not mine) connects to my server securely. It seems that the connection is being refused on the basis of mismatching ciphers, but I have verified that the server indeed shares some of the ciphers with the client. Could it be an issue with the unknown cipher (Unknown 0x0:0x60)? If so, what must I do t...

Configuring JAX-WS over SSL through CXF

hey, I am having somewhat related issue only. Recently the external SOAP interface which were generating client for changed to https one. and I had an old code base at hand which was generating the java files through cxf and unsecured, http:// based wsdl. I chnaged the uri and on maven side everything works fine even the test pass. but w...

Java SSL/TLS ignore expired cert? (java.security.cert.CertPathValidatorException: timestamp check failed)

I am having an issue with a api that I communicate to via SSL. I am thinking the exception is coming due to the fact that the SSL cert has expired. The problem is that I do not administer the API box. Is it possible to ignore expired certificates? Exception: [ERROR,TaacWorkshop] Problem deleting user group from CADA: org.apache.thrif...

SslStream Delays after inactivity

Hi SO, I have written a client app to talk to a third party server app. Its comms is over a custom port with SSL usng the SslStream class. The server allows permanent connections however I've found I have to ping the server with a command within 60 seconds to maintain a reasonable level of responsiviness. After 60 seconds the comms sti...

Using Encrypt=yes in a Sql Server connection string -> "provider: SSL Provider, error: 0 - The certificate's CN name does not match the passed value."

Hi geniuses (is that genii?) I'm using 'Encrypt=yes' in a Sql Server connection string, because i need the tcpip traffic to be encrypted, but on opening the connection i get the error: A connection was successfully established with the server, but then an error occurred during the pre-login handshake. (provider: SSL Provider, error: 0 ...

Mono, WebClient & invalid SSL Certificates

I'm trying to port an existing Application to Mono 2.6.7/Linux. One Task is to receive data via the WebClient method from Servers with an invalid SSL Cert. Our .Net 3.5 Code under Windows to accept all certificates works fine: ServicePointManager.ServerCertificateValidationCallback = TrustCertificate; StreamReader webReader = new Strea...

How support multiple TrustStores in java SSL client application

Hi, In our java application we need to communicate with a list of servers on SSL using https protocol. The list of servers to communicate will change at runtime. Initially we do not have any of the server's certificate. At runtime, we will obtain a new server's certificate and add the public key certificate into a truststore; and any new...

Disable hostname checking for SSL connections?

Hi guys, I'm using clojure-http to make the following POST: (clojure-http.resourcefully/post "https://android.apis.google.com/c2dm/send" {"Authorization" (str "GoogleLogin auth=" auth-token)} {"registration_id" registration-id "data.msg" "blah" "collapse_key" "blah"}) And getting this exception: java.security.cert.Certifica...

How to force usage TLS instead of SSL in .Net

How can I force my .Net application to establish connection with some Java Web Service using TLS instead of SSL ? Proxy to Web Service is generated as standard Web Reference (not WCF). Web Service url is https://........ . Some details: From my .Net 4.0 application I'm invoking Java Web Service hosted on JBoss & Redhat. This web servi...

Client/Server Authentication with SSLStream

Hello, I have a client and server application which use SSLStream to communicate over port 80. Both the client and the server are running as Windows Services. Everything works in my test environment (my development computer, under the OS Windows 7 Ultimate). My problem is that when I go to deploy the client and server application to ...

Programmatically establish an SSL encrypted connection to a windows share

I'm trying to programatically make a connection to a windows share. So far, so good. I just use the WNetAddconnection2 API. Let's me pass userid, pwd, etc. Now I've been given the requirement that this connection be SSL. I can't find any information anywhere about being able to do this. WNetAddConnection2 certainly doesn't support ...

How to change HTTP protocol for HTTPS on a MVC2 application???

I have an application developed on MVC2 but I need it to change from HTTP to HTTPS after authentication. How do I manage that and where do I have to put the code? Thank you, Ignacio ...

Using a commercial SSL certificate but self-signed for images server. Will this cause security warnings in browser?

We are planning on using a SSL certificate from GoDaddy on our primary application domain. But, we serve our images, css, and javascript files from a second domain. If we use a self-signed certificate for the domain serving the images and so forth, will it work without giving the user a warning message regarding the self-signed certifica...

Having problem generating a certificate request from a sql 2005 server

Hi all, I'm trying to generate a certificate request from a sql 2005 / windows 2008 server, so that i can get a certificate made and thus enable encryption on my sql connections from clients. On the server, i do: start -> run -> mmc add 'certificates' snapin choose 'computer account' choose 'local computer' Right click the Certificat...

Call a webservice via ssl and use a client pass

I call a webservice via HttpWebRequest. Now the owner of the service send a key and said I would need to use it in the future to access the service via ssl. Is there any way to use this key? The key itself is similar to the key when you prepare your server for ssl. ...

QNetworkRequest and default SSL configuration

I'm using the following piece of code to make HTTPS requests with a server. QNetworkRequest request; //request.setSslConfiguration(QSslConfiguration::defaultConfiguration()); request.setUrl(QUrl("https://www.someurl.com/")); QNetworkReply *reply = manager->get(request); Everything seems to be working with my test server, but I would...