ssl

Why should i use ssl?

I'm running a dating site and not using SSL at the moment. I've noticed major sites like facebook and twitter do not use https for login but just use plain old http, is there really any advantage to https-ing my site or it is only for cc transactions or so ? thanks in advance. ...

Asp.net mvc app running in Azure Dev. Fabric and RequireHttps attribute

I have a Asp.Net MVC that runs on Azure Dev. Fabric. I have a few pages that need to run under SSL, so I marked the corresponding controllers/actions with requiresHTTPs attribute. Now when I run the app, as soon as I navigate to pages that redirect to https, IIS throws 404 error. I created a self-signed certificate for IIS, thus https://...

Amazon widget and SSL

Hi, I'm trying to embed an Amazon "Recommended Product" widget into a website. We use SSL across all pages on the site. Unfortunately, the Amazon widget by default is embedded using a simple IFrame and although the source for the IFrame can be https://, the images and links within the IFrame are always http:// IFrame sample code <ifr...

While redirecting to secure server(ssl) in case data is huge , session is lost

In my application I need to use ssl. While redirecting from http//mydomain.com to https//mydomain.com session data is lost in case data is huge. I have tried removing https to http, but still no use. My server is on a linux machine. Please help me out. ...

Error : No credentials found by which to authorize the user Missing authentication credentials

Hello all I am having a problem and this is the first time I am setting up Mutial SSL for a payment portal the code below is what I am using and the error I am getting is: System.Web.Services.Protocols.SoapException: No credentials found by which to authorize the user Missing authentication credentials [cert] at System.Web.Services.P...

How do I redirect https:// requests to http:// in NGINX?

Is there a way to redirect https:// requests to http:// by adding a rule in the domain's vhost file? I'm using NGINX. ...

How to install Wildcard SSL Cert on IIS 7.5

I have a GoDaddy WildCard Certificate Installed in my Windows 2008 R2 Box. I'm running IIS 7.5 My cert is for *.MyDomain.com I plan to use it on 50-100 sub domains. Each one will have a unique IP. I have the cert installed the on server. for some reason it only works on the 1st site i installed, and not other sites. Those other sites ...

How to detect an incoming SSL (https) handshake (SSL wire format)?

I'm writing a server which is accepting incoming TCP connections. Let's suppose the server has accepted a TCP connection, and has already received 16 (or so) bytes from the client. Knowing those 16 bytes how can the server detect whether the client wants to initiate an SSL handshake? I've made an experiment, which showed that on my Linu...

Tomcat6 configured to use SSL does not work

I am trying to setup SSL to my web app and followed tutorial (http://techtracer.com/2007/09/12/setting-up-ssl-on-tomcat-in-3-easy-steps/), then hitting http://localhost:8443 returns "unable to connect" Environment: Tomcat6, windows 7 Tomcat6 is up and running, http://localhost:8080 displays tomcat page. Below is the step I took so fa...

Open file from SSL-enabled SharePoint site

I have a SharePoint web app that has SSL enabled and a desktop application accessing the Document Library. If I try opening a document without SSL enabled, the URI looks something like: \\[SiteUrl]\DavWWWRoot\Sites\[SiteName]\[DocumentPath] and I can successfully open and save the file. However, after enabling SSL, the URI is \\[SiteUrl...

How to upload a file on FTPS server using m2crypto

I am trying to use ftps to upload file to our FTP server. Login is trivial and works: from M2Crypto import ftpslib ftp = ftpslib.FTP_TLS() ftp.connect(host) ftp.login(username, password) as well as descending into directory for dir in directory: ftp.cwd(dir) However, when trying to retrieve directory content: if directory_name...

weblogic as ssl client (single side auth)

How can i make weblogic to work as client in ssl authentication. ...

How to simply generate SSL certificate and ServerSocket form Java code

Hello, Is there simply way to dinamic generate untrusted ssl certificate without domain and applay it to server socket - all from code, no commandline or additional files? Purpose is secure connection between two hosts witch know only IP and port to communicate each other - certificates generated randomly at server start and used as "un...

Grails Secure Login Design Questions along with Library & DB Choice

Hello, Am planning on building user administration module using Grails and the Spring Security Core plug-in for Grails. Also, am considering using MongoDB for the database system. Question(s): (1) What trade offs and benefits will my app gain by choosing MongoDB over MySQL or HSQLDB? (2) Is it super easy to way to implement (meaning...

Alternative for ssl_requirement plugin for Rails 3?

I have used ssl_requirement plugin for previous versions of Rails and it is awesome. But for Rails 3 I want to try out some new plugins or gems. Any suggestions? ...

Default SSL context init failed: null

When creating a SSL server, I got this exception: Default SSL context init failed: null. It seems that it comes from the fact it can't find the keystore and truststore. I try to set them from a jar file. The file exists in the jar but it seems that the resource cannot be found. String keystore = TestFramework.class.getResource("/securit...

Get SSLException form the SSLEngine Wrap method during handshake process

Hi When I run the client Hnadshake process on my java application in order to establish SSL connection, I get SSLException on the secod time that I call to the wrap method. I understand that in this point the client send the CLientKeyExchangeand ChangeCipherSpec to the server. The error message that I get from the exception is "General ...

Configuring Tomcat to accept DOD CAC card certificates

I’m running an application on a stand-alone tomcat 6 server on a Windows box. I want it to be able to request and receive client certificates from DoD CAC cards. I have a client machine running IE that set up correctly to pass the certs from a CAC card, I know its correct because when I go to a CAC enabled site IE pops up a window as...

SSL certificate testing

Hi, Is it possible to test a website under HTTPS during the development phase, i.e. without actually purchasing an SSL certificate? Thanks, Mike ...

How does browser generate symmetric key during SSL handshake

I have a small confusion on SSL handshake between browser and server in a typical https web scenario: What I have understood so far is that in the process of SSL handshake, client (browser in this case) encrypts a randomly selected symmetric key with the public key (certificate received from server). This is sent back to the server, se...