ssl

PHP with ODBC to remote db, where does driver need to be and can I drop SSL on the connection?

I need to connect from a web LAMP (PHP) environment to a remote Navision installation which has ODBC drivers on the server. Does the web server need the ODBC drivers on it locally as well? Or does PHP connect to the Navision server environment with it's own local drivers? Also, can I drop SSL on this connection for security - if so whi...

Difference between SSL & TLS

According to wikipedia: http://en.wikipedia.org/wiki/Transport_Layer_Security Seems like TLS is a replacement to SSL, but most websites are still using SSL? ...

IIS Express defaulting to port 44300 for https when enabling SSL

Hi there, When you initially set up IIS Express to enable SSL, it defaults the port to 44300. Unfortunately, when I try to access my site in on https://localhost/ it doesn't not working unless I use the port number 44300 - https://localhost:44300/. The links are generated using the following: <%= Html.ActionLink("Index", "Index", "Hom...

mootools doing POST shows as OPTIONS in firebug

I am sending a request using post, but on firebug I see the request type is OPTIONS. How do I avoid that? Here is the code I am using: var Req = new Request.HTML({'onSuccess':function(responseTree){ $('my_id').innerHTML=''; $('my_id').adopt(responseTree); ...

If you have an SSL Cert, why not use https for the whole site?

I was asked this question not too long ago, and didn't have a good answer... Is there a good reason why a site that has an SSL certificate wouldn't use https:// for their entire site rather than http:// Are there SEO issues? Performance overhead for the server? Just in case it matters, we use LAMP stacks. Thanks! ...

ssl not working correctly

I have an ssl certificate set up and when I use the https prefix google chrome puts a skull next to it and crosses out the https. Heres what the security information says: The identify of this website has been verified by go daddy secure certification authority. Your connection is encrypted with 128bit encryption...However, this page i...

SSL with Virtual Hosts on Apache in Amazon AWS EC2 environment

I am trying to set up two virtual hosts served over SSL on Apache in Amazon AWS environment. I understand that SSL cannot use Name Virtual Host on Apache unless: * I bind two IPs to Apache each serving a separate virtual host. Unfortunately, AWS does not allow me to bind more than one public IP to each EC2 machine * or I use SNI (server...

How to make Sinatra work over HTTPS/SSL?

As the title says... Google doesn't give anything useful concerning this. How do I set up and configure https/ssl for Sinatra apps? How to create a https route? etc. I have never used https for my apps before and have no experience tweaking Rack/whatever, so I appreciate detailed answers... ...

webView with https loadUrl shows blank page

I used webview to visit https link. the page always show blank. i found the way to dill with it public class WebViewClient extends Object { public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) { handler.proceed(); } } That's work fine. But i used API Android 2.1, the above method is belongs to ...

AS3: Sockets & HTTPS/SSL

Hey guys, I've had quite a bit of success implementing the Socket class in AS3, particularly with making HTTP requests to retrieve binary (images) or ascii (JSON) data. However, I need to be able to be flexible between HTTP and HTTPS - so given the current state of AS3's Socket class, this becomes a problem. My question isn't necessar...

Modifying Python code to use SSL for a REST call

I have Python code to call a REST service that is something like this: import urllib import urllib2 username = 'foo' password = 'bar' passwordManager = urllib2.HTTPPasswordMgrWithDefaultRealm() passwordManager .add_password(None, MY_APP_PATH, username, password) authHandler = urllib2.HTTPBasicAuthHandler(passwordManager) opener...

Configure JBoss 4.2.3.GA to remove weak & medium ciphers

Hi, I hoping someone could help related to configuring JBoss 4.2.3.GA to disable weak & medium ciphers. We've scanned JBoss with Nessus and it identified weak & medium ciphers on port 8443. I was able to remove those scan results by limiting the ciphers. I added the following to the connector in server.xml ciphers="SSL_RSA_WITH_RC4_...

Pylons - Redirects will drop from HTTPS to HTTP unless I specify the protocol... Is there a way to fix this?

On my Pylons website, I have my login form sending it's data to 'https://mysite.com'. Upon a successful login, a redirect takes place to send them to their profile page. redirect(url(controller='profile')) This sends the user to http://mysite.com/profile instead of https://mysite.com/profile. The only way I've found to fix this is to ...

How do I get nginx and phusion passenger to maintain sessions between 2 rails instances?

I'm using nginx with phusion passenger to run a rails app on an ec2 CentOS machine. I have a pretty standard set up with nginx, rails, phusion passenger and ssl (I think). My nginx.conf is below. So far it has worked out fine except that every time 2 requests hit the server at the same time, a new rails instance is created to serve the ...

Database connection error with Postgres & Movable Type

I'm trying to set up MovableType 4.34 using a Postgres database, and I'm getting the following (unhelpful) error message: Connection error: authentication method 7 not supported The database server doesn't support SSL connections, so I suspect that's to blame -- but I can't be sure (what is "authentication method 7" ?), and at any rat...

Choosing SSL client certificate in Java

Our system communicates with several web services providers. They are all invoked from a single Java client application. All the web services up until now have been over SSL, but none use client certificates. Well, a new partner is changing that. Making the application use a certificate for the invocation is easy; setting javax.net.ssl....

listener not working after ssl configuration was enabled in oracle 11g

I have configured ssl through net manager after added ewallet which is in READY mode. I even restarted the all the database services. But I am not able to figure the reason the listener not working. Need advise and let me know if you need anyother log or config files.. sqlnet.log: Fatal NI connect error 28750, connecting to: (DESCR...

RPX token URL problem

Hi there, I am using RPX in my CakePHP project. I have set the toke url like this: http://www.mysite.com/users/login Here is my login action code. function login() { $this->Ssl->force(); $this->layout = 'colorbox'; $this->pageTitle = "User Login"; } I have used SSL with the login form. Look above code( $this->Ssl...

How to use SSL on AWS EC2

Hello I have an AWS EC2 account and I am running an instance that serves as a web host for my PHP website... This is a private website that has no UI but only URLs to be requested by my other software to get some response from the server... I want the requests (that I send to the server) to be secured so I want to use https instead of ...

PHP ftp_login() not accepting username and password

We're migrating from PHP 4 to 5 (FINALLY!) I need a php script to connect to an external server over SSL-FTP. Long story short, this works on PHP 4, but not 5. <? $user = "USER"; $pass = "PASS"; $conn_id = ftp_ssl_connect("WEBADDRESS.com",21) or die ("could not connect"); $login_result = ftp_login($conn_id,$user,$pass); ?> On 5 it r...