ssl

Weblogic application switches back to http after secure login via https

I have successfully configured SSL on Weblogic 9.2 MP3. I am able to login securely into the application using https and continue working on the application using https protocol. This is true in the case when user accesses the application giving following URL: https:/servername:7002/ If the user tries to access the above URL via HTTP i....

SSL insecure objects

Hi, On my page https://ol-shop.at/index.php?route=account/login it seems to be that there are insecure objects. Could someone please help me, taking a look on the source code. I don't know which url or object could be insecure. Thanks. ...

Android java.net.UnknownHostException: Host is unresolved: server_address:443

Hi everyone! I'm trying to get xml from server via https connection. If i do it with curl command curl -k -A "Mozilla/4.0" https://username:[email protected]/test/infoxml.ashx connection is successfull, but when i try it in java on android, it doesn't work. I'm using this code: URL url = new URL("https://user:[email protected]")...

Sending sensitive data as a query string parameter

We are reviewing the design of a system. And need to verify what we think may be a security issue. In this system some sensitive information is sent in the query string. Question is: Can the query string parameters be read as the request goes over the internet, even if the request is sent over https? Can the query string parameters be...

EV SSL Certificates – Extended Validation SSL Certificates

I have my own Finance Business Website. I need EV SSL Certificate to secure my costumer’s data, online transaction, trading & bill payment. Recently I found Cheapest EV SSL Certificates from ClickSSL.com. There are two different types of EV SSL Certificates: VeriSign Secure Site With EV SSL GeoTrust True Business ID EV SSL Which ...

PHP - HTTPS SSL Applying

Hi, How would I apply SSL HTTPS to my PHP Login system. My login system is basic here is how it goes: Fetches session and user then checks if its correct. I'll need some kind of SSL/HTTPS checking. Any examples? ...

Including Twitter Widgets.js via HTTPS

Hey all I'm having a minor problem with Mixed-content on HTTPS served pages on our site, when we include the http://platform.twitter.com/widgets.js Apparently Twitter doesn't have a valid certificate -- but hopefully I am mistaken. Do any of you have a solution to the problem. I've searched here and on google for a related problem, an...

Request user to sign string by client certificate and get this sign in PHP

I can authorize user by his client certificate with apache mod_ssl. Now I need to request user to sign some string with his client certificate and read this sign in my php script. I know how to do it with openssl_sign when I have key.pem on server but the client certificate is on client computer, installed in browser ...

How to setup WCF with wsHttpBinding, Transport Security with x509 certificate behind a load balancer (F5)

I'm having a difficult time setting up this WCF Service with wsHttpBinding, Transport Security, x509 and, the key part, the Load Balancer (F5). This all works without a problem in our Dev environment but as soon as I put it behind the F5 it fails giving me this message: System.ServiceModel.Security.SecurityNegotiationException: Could n...

Force SSL using ssl_requirement in Rails app

I have a Rails application which need to run under SSL. I tried ssl_requirement but seems I have to type in all the actions in every controllers. Is there any method that I can add a before_filter in application controller with ssl_requirement, so that the apps will redirect to https automatically when user request is in http? Thanks a...

Send IMAP commands to GMail using C#

I've been trying to access my GMail account to retrieve the unread emails from my email account. However, I only con perform login... Anything after that doesn't work. First of all I connect to the server, then send the login command and finally the examine command. The thing is that the responses that are receive refers only to the con...

How to terminate async read from SslStream?

I use SslStream with TcpClient in following way: I call BeginRead() method and waiting for its results. When results come, I read them, call BeginRead() again and so on... Sometimes I need create another SslStream with this TcpClient, i.e. perform another ssl handshake. How can I abort reading execution? It seams that if I try to cal...

Redirecting an "HTTPS" to "HTTP" on Microsoft IIS

I have a website thats currently being accessed on an "https" url but the certificate is expiring soon and we do not want SSL on this website anymore so just an "http" access is fine. How do I get the requests made to https url automatically redirect to the http url? This page might have been bookmarked by people and the bookmark will st...

How can I move my SSL cert from Tomcat to Apache

I am moving my site from a tomcat only instance to an apache httd/ apache tomcat setup. I'm trying to set up the ssl with mod_ssl on apache httpd. But I don't know how to convert my tomcat keystoreFile/keystorePass to the apache httpd SSLCertificateFile/SSLCertificateKeyFile format. I am pouring over the openssl man pages with no luck...

Android DefaultHttpClient accept all certificates for SSL session help

I am attempting to connect to a local HTTPS server using the apache DefaultHttpClient on a Android device. DefaultHttpClient httpclient = new DefaultHttpClient(); HttpPost httppost = new HttpPost("http://192.168.1.121:4113/services"); ... header and content filling in ... HttpResponse response = httpclient.execute(httppost); I am ...

Using HTTPS for the client-server communication

Hi, I would like to use the HTTPS to secure the communication between my client and the server. The first encrypted communication will be used to authenticate the user - i.e. checking his/her user name and password. After the user credentials will be successfully checked by server I would like to start getting some data in subsequent...

SSL and Load Balancing

What affect does SSL have on the way load balancing works? I know that you need to use sticky sessions if you have chosen to not store you session info in the DB or Out of Process but how does that effect SSL? ...

Set up https on the localhost.

I have an error occuring on a page that only happens when I access the page through https. I need to configure https on my local machine for testing but am not sure how to go about it? EDIT. Using IIS. Sorry for not including. ...

SSL certificate install ... .pfx, .cer and .txt files?

While I know nothing about SSL or installing SSL Certificates, I'm sure one of the many results Google will give me for CentOS, SSL certs and Apache would help. However, the certificate files which have been provided for this project are a .pfx file, .cer (the certificate) file and a .txt (apparently a certificate request) file, none of...

C#: SSL with SocketAsyncEventArgs?

Hi, I'm developing a socket server using C# .NET. I'm using the async model provided by the SocketAsyncEventArgs class, because it must be a high performance server to support many connections in short periods of time. Next, I want to secure the communication between clients and server, and I think I could use SSL. Is there any way of...