tls

Is there anyway to dynamically free thread-local storage in the Win32 APIs?

I need to make use of thread-local storage in a cross-platform project. Under *IX I am using pthreads and can avoid memory leaks thanks to the nice destructor function pointer passed as the second argument to pthread_key_create, but in Windows TlsAlloc has no such thing. Nor can I find a general place where any function is called on thre...

Negotiating TLS with ESMTP over sockets

I have a simple SMTP client, to which I am attempting to add TLS support. I am unsure as to what occurs after the client issues the 'STARTTLS' command. Most sources (including the RFC itself) describe it as the negotiation of a TLS session, but this is not particularly clear. How does one go about doing this? My client is written in ...

Transfering data using Sockets on the iPhone using SSL/TLS

Hi, I've been asked to prototype an application which share information with a server via sockets using SSL/TLS. I've been asked to make the application in both C#(MonoTouch) and ObjectiveC(Cocoa). I've been successful with the MonoTouch route, and developed a fully working client server pair, which can communicate and share data secur...

PHP 5.3 CodeIgniter Gmail SMTP Timeout

I have use gmail smtp to send email from the web application that I wrote using CodeIgniter without a problems until recently. This is the snippet of my code: $config['protocol'] = 'smtp'; $config['smtp_host'] = $this->smtp_host; $config['smtp_port'] = $this->smtp_port; $config['smtp_user'] = $this->smtp_username; $config...

sendmail tls "verify=failed" - CA config?

I've been trying to get my sendmail config to do TLS for quite a while now. I'm running FreeBSD, pretty much stock -- sendmail, apache, bind. I have a NetSol certificate, this works fine for Apache https connections. I'm trying to get this same certificate to work for TLS. First question: is this a bad idea? I can confirm the option...

RFB Protocol 3.8 vs 4.x

Hi, I have a library (C++ code) use the RFB protocol. however, i drive into refersh issue when i use it via TLS and RFB 3.8. I can't repreduce it with RFB 4.x or without TLS. Does anyone know it there is change between those versions affect TLS??? BTW - when i increase the packet buffer i'm sending to 8K (instead of 4k), most of the issu...

HTTPS and BASIC authentication

When I use HTTP BASIC authentication along with HTTPS, are the username and password securely passed to the server? I would be happy if you can help me with some references. I mean, it would be great if I can cite StackOverflow Q&A as a reference in, say, assignments, reports, exams, or even in a technical paper. But I think I am not t...

SSL handshake problem? (was: Web page hangs, only clearing browser cache helps)

Please see at the end, as I constantly update with latest investigation data. Currently, I need help with server-side WireShark log. I experience strange issues with ASP.NET MVC web application. Few users experience form post timeouts and hangs, so that after clicking submit it just lasts forever and does not advance to next page. The s...

HTTPS, URL path, and query string

This is a follow up post of my previous question (it was about username/password) Are the path to the resource and query string passed securely to the server if I use HTTPS? i.e. URI: http://server/path/to/a/resource?with=a&query=string Server: server path: /path/to/a/resource query string: with=a&query=string ...

PHP LDAP Question

I am desperately trying to get a LDAPs client in PHP working. My code is in place, and it works using the standard LDAP protocol. However, when I change ldap://server to ldaps://server, it doesnt work. Setting the debug mode to 7 yeilds this error. I should add that this a linux server using openSSL. TLS: can't connect: The Diffie Hel...

.NET UDP & DTLS

Is there a native way to provide DTLS support for UDP sockets in .NET? edit by native I mean those that are in .NET framework out-of-the-box. ...

What happens on the wire when a TLS / LDAP or TLS / HTTP connection is set up?

I'm rewording my question so hopefully I can get a better response. I asked a similar question on serverfault here, and think that a proper and valid TLS server is one that expects the "STARTTLS" command. Is it true that STARTTLS can be issued to a properly configured LDAP or HTTP TLS server without needing an extra port? I know tha...

Java SSL/TLS ignore expired cert? (java.security.cert.CertPathValidatorException: timestamp check failed)

I am having an issue with a api that I communicate to via SSL. I am thinking the exception is coming due to the fact that the SSL cert has expired. The problem is that I do not administer the API box. Is it possible to ignore expired certificates? Exception: [ERROR,TaacWorkshop] Problem deleting user group from CADA: org.apache.thrif...

How to force usage TLS instead of SSL in .Net

How can I force my .Net application to establish connection with some Java Web Service using TLS instead of SSL ? Proxy to Web Service is generated as standard Web Reference (not WCF). Web Service url is https://........ . Some details: From my .Net 4.0 application I'm invoking Java Web Service hosted on JBoss & Redhat. This web servi...

Difference between SSL & TLS

According to wikipedia: http://en.wikipedia.org/wiki/Transport_Layer_Security Seems like TLS is a replacement to SSL, but most websites are still using SSL? ...

How to link non thread-safe library so each thread will have its own global variables from it?

I have a program that I link with many libraries. I run my application on profiler and found out that most of the time is spent in "waiting" state after some network requests. Those requests are effect of my code calling sleeping_function() from external library. I call this function in a loop which executes many, many times so all waiti...

How can I make cookies secure (https-only) by default in rails?

In a Rails controller, I can set a cookie like this: cookies[:foo] = "bar" And specify that the "secure" (https-only) flag be on like this: cookies[:foo, :secure => true] = "bar" :secure is false by default. How can I have cookies be secure by default, application-wide? This is on Rails 2.3.8 ...

Can browsers connec to a proxy over SSL/TLS?

If I set up a proxy (such as Squid for example) configured with certs to listen for HTTPS are browsers able to connect to the proxy over TLS/SSL? Example of what I'm asking: Browser Proxy Server yahoo.com -> TLS -> Squid -> HTTP -> yahoo.com I've set up a proxy listening on 443, but am not having success getting...

Confirmation email from devise on rails3 using gmail not arriving.

I've set the following up. ---------------------- config/environments/development.rb ---------------------- 29 ActionMailer::Base.delivery_method = :smtp 30 ActionMailer::Base.perform_deliveries = true 31 ActionMailer::Base.raise_delivery_errors = true 32 33 ActionMailer::Base.smtp_settings = { 34 :enable_starttls_au...

Android java.net.UnknownHostException: Host is unresolved: server_address:443

Hi everyone! I'm trying to get xml from server via https connection. If i do it with curl command curl -k -A "Mozilla/4.0" https://username:[email protected]/test/infoxml.ashx connection is successfull, but when i try it in java on android, it doesn't work. I'm using this code: URL url = new URL("https://user:[email protected]")...