FAQ Database Discussion Community


SSL certificate multiple domain. Reuse certificate

ssl,https,dns
Mi question is really simple: I have one server that owns multiple domains inside. Recently I bought a SSL certificate for one of them. Is there any possibility to reuse that one certificate? In other words, is SSL certificate related to the domain, or the hosting machine?...

HTTPS request in twisted that checks the certificate

python,ssl,https,twisted,twisted.web
In my twisted app I want to make an asynchronous request to Akismet to check for spam. Akismet reasonably uses HTTPS, so I've been following the web client guide on SSL in the docs. But there's this part that worries me: Here’s an example which shows how to use Agent...

How to log in to an HTTPS website with Jsoup?

java,https,jsoup
I've been interested in webcrawlers recently and decided to try Jsoup. I'm not exactly sure how to log into a website with it though. I saw another SO post about it but couldn't piece together how to do it. I've been trying to crawl around with a site www.tickld.com and...

How to make a website work only with https [duplicate]

asp.net,ssl,https
This question already has an answer here: How to force HTTPS using a web.config file 3 answers How do I make a website to work only with https? Is there any method to make my website work only if the protocol is https? For example let me say http://www.mywebsite.com,...

Encryption of message in client and server communication

php,encryption,https,client-server
How to encrypt the text travelling between client and server in the following code. I am aware that https will encrypt the tunnel but I want to know how to encrypt the text. if I use any algorithm of encrytion at the script, being server side script, the encryption will...

PHP Fat-Free-Framework plus Node.js and Secure Websockets

php,node.js,https,websocket,fat-free-framework
I have been tasked with testing the feasibility of using F3 and Node.js along with Socket.IO for our upcoming web-app. The app will use https exclusively. The boss likes F3's templates so that is why we aren't using Node exclusively server side. F3 will be used to serve up the...

Redirect HTTP traffic from 443 port to SSL

.htaccess,redirect,ssl,https,virtualhost
I've a site www.example.com that redirects HTTP traffic to HTTPS using RewriteEngine: <VirtualHost *:80> ServerAdmin [email protected] ServerName example.com ServerAlias www.example.com DocumentRoot /var/www/example.com/ .... RewriteEngine on RewriteCond %{HTTP_HOST} ^example.com [NC] RewriteRule ^(.*)$ https://www.example.com$1 [L] RewriteCond %{SERVER_PORT} ^80$ RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L] </VirtualHost> The problem I've found is that google has indexed...

2 way SSL authentication not working using Apache httpclient: JAVA

java,apache,ssl,https,apache-httpclient-4.x
2 way SSL authentication in JAVA using apache httpclient (certificates are self signed) not working for me. I am getting Bad cert fatal error from Server. I looked at captured pcap in wireshark and I see client is not sending it's certificate. Here is what I have done so far,...

Excluding certain pages from being redirected to https

wordpress,.htaccess,redirect,https,http-redirect
I'm using the following rules on my WordPress website to: Redirect all http pages to https Redirect the careers page to http <IfModule mod_rewrite.c> RewriteEngine On # Go to https if not on careers RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} !^/careers$ [NC] RewriteRule ^(.*)$ https://www.mywebsite.com/$1 [R,L] # Go to http if...

Https upload MultipartForm returns 401 unauthorized

c#,forms,file-upload,https,http-status-code-401
I’m trying to upload a coverity scan result to coverity. This is my code: public static void Main( String[] args ) { var client = new HttpClient { Timeout = TimeSpan.FromMinutes( 20 ) }; var form = new MultipartFormDataContent { { new StringContent( "my tooken" ), "token" }, { new...

Problems connecting via HTTPS/SSL through own Java client

java,ssl,https,sslhandshakeexception
I'm trying to establish a connection to trackobot.com to receive some JSON data. The server only allows connections through HTTPS/SSL. Here is the code: java.lang.System.setProperty("https.protocols", "TLSv1,TLSv1.1,TLSv1.2"); URL url = new URL("https://trackobot.com/profile/history.json?username=USER&token=TOCKEN"); InputStream is = url.openStream(); JsonParser parser = Json.createParser(is); openSteam throws javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure I read through several...

.js/.css code from external source not loading while only in https

jquery,css,linux,https,apache2
There's a problem here.. I used to include google fonts in my website running on a http server. At the moment, I try to run the same website on a https server instead, but it seems that all the external sources like Google fonts or jQuery are not included. It...

How to set up SSL (TLS) / HTTPS on Spring Boot using AES-256?

java,spring,ssl,https
I set up SSL on my Spring Boot server using RSA (How to configure SSL / HTTPS on Spring?) by following their guide: Created a new keystore and key using keytool -genkey -alias <alias> -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore keystore.p12 -validity 3650 Placed these lines in my application.properties...

.htaccess - rewrite with https and trailing / in one step has unintended conseqences

apache,.htaccess,mod-rewrite,redirect,https
I added an ssl certificate to my website recently using cloudflare. I added some lines to my .htaccess to use https by default. Looking at google page speed insights, I notice that when visiting a sub-directory of my website using http, three redirects were occurring. For example the following redirect...

Not able to access Server-Sent-Events over Mobile 3g Network

nginx,https,proxy,server-sent-events
I am having an issue with Server Sent events. My endpoint is not available on mobile 3G network. One observation I have is that a https endpoint like the one below which is available on my mobile network. https://s-dal5-nss-32.firebaseio.com/s1.json?ns=iot-switch&sse=true But the same endpoint when proxy passed using an nginx and...

Chrome under Windows 7 and 8 cannot connect to embedded Jetty 9.2.x over HTTPS

google-chrome,https,operating-system,restlet,embedded-jetty
We're using Jetty 9.2.x in the embedded mode in conjunction with Restlet 2.3.1 to develop our application sever. Recently we've enabled support for HTTPS, which utilises a certificated signed by a self-established CA. Everything seemed to be working correctly when connecting to this server from various web browsers under Linux...

Flask ssl. Always writes connection is unsecure

python,ssl,https,flask
I'm triyng to make a flask app that will use open ssl. So far I've done this: from flask.ext.script import Manager, Server from flask.ext.migrate import Migrate, MigrateCommand from OpenSSL import SSL import os from project import app, db app.config.from_object(os.environ['APP_SETTINGS']) migrate = Migrate(app, db) manager = Manager(app) manager.add_command('db', MigrateCommand) manager.add_command("runserver", Server(ssl_context=('./server.crt',...

Reverse Tunnel over JSCH (SSH) and HTTPS

java,apache,ssh,https,http-tunneling
I have to implement a reverse tunnel from client to server. I have used JSCH with the following command session.setPortForwardingR(rport, lhost, lport); and it works (see also Reverse SSH tunnel with JSCH Java)! next I have to tunnel my ssh session over an HTTPS stream 2-way authenticated: client -> firewall...

Is there a command-line alternative to SOAP-UI for linux, for sending SOAP to HTTPS Service?

java,linux,web-services,soap,https
I wish to run SOAP-UI on a linux (solaris) machine with very limited functionality, where we don't even have a UI, and so I cannot install any software on it or open X11 forwarding. I can however run java applications, and could settle for any alternative to SOAP-UI. The objective...

REST HTTPS login with Ruby - Connection Reset by peer

ruby,rest,https
I am trying to do a REST API login over HTTPS. I keep getting Connection reset by peer (Errno::ECONNRESET): require 'net/http' require 'net/https' uri = URI.parse("https://.../login.jsp") https = Net::HTTP.new(uri.host,uri.port) https.use_ssl = true req = Net::HTTP::Post.new(uri.path) req['userid'] = 'myemail%40hostname.com' req['passwd'] = 'mypassword' res = https.request(req) puts res.body I'm not sure what...

Ruby OpenSSL Errors - Missing CA Certs (Who is Justin?)

ruby,windows,ssl,https,openssl
I'm writing a little utility script that deals with some RESTful API's over HTTPS using Ruby's Net::HTTP module on Windows. I consistently get this error: C:/Ruby22-x64/lib/ruby/2.2.0/net/http.rb:923:in `connect': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (OpenSSL::SSL::SSLError) from C:/Ruby22-x64/lib/ruby/2.2.0/net/http.rb:923:in `block in connect' from C:/Ruby22-x64/lib/ruby/2.2.0/timeout.rb:74:in `timeout' from C:/Ruby22-x64/lib/ruby/2.2.0/net/http.rb:923:in `connect'...

Getting SSLHandshakeException in java

java,eclipse,ssl,https,digital-certificate
I ma getting SSL Hand Shake error in eclipse while calling https restful web service from simple java stub but, can access this URL from browser after importing Client Digital Certificate to browser which was shared by service provider. Hiding End point URL for security purpose. Please help me, i...

Replace IIS Express certificate with sha-256 certificate

https,iis-express,sha
Since sha-1 is no longer secure and Google Chrome now shows an error when using https with a sha1 certificate, how do I replace the IIS Express certificate with a sha-256 self-signed certificate?

REST adapter to work with https

javascript,node.js,express,https
I am writing an REST adapter in Express that translates incoming REST calls to another REST API as exposed by the northbound device. So essentially, a client device is sending a request to a REST API exposed by the adapter and the adapter sends a REST request to an another...

Clojure: wrap-ssl-redirect on heroku?

https,clojure,ring
I've just tried add this wrapper (-> routes (wrap-ssl-redirect)) for auto redirecting http to https, but when I deploy to heroku, the https:// doesn't get green in my browser, and the website doesn't load. Isn't the default heroku port 443, which should also be the default from wrap-ssl-redirectfunction? What is...

Front-end development with conditional HTTP and HTTPs routes

angularjs,http,https,frontend
I am currently using MEAN stack for web development. My questions is how do I mix/redirect HTTP and HTTPs pages on the same website? For most scenarios I am communicating with the back-end using HTTP protocol. And for some pages I absolutely need to use HTTP (For example /shop route...

How to set up a meteor server on https connection?

ssl,meteor,https
I have a local meteor server running on port 3000.Then I want add the SSL Certificate to my project.I have generate the SSL files, what should I do the next?

Require https with Spring Security behind a reverse proxy

java,https,spring-security,reverse-proxy
I have a Spring MVC application secured with Spring Security. The majority of the application uses simple http to save resources, but a small part processes more confidential information and requires an https channel. Extract from the security-config.xml : <sec:http authentication-manager-ref="authenticationManager" ... > ... <sec:intercept-url pattern="/sec/**" requires-channel="https"/> <sec:intercept-url pattern="/**" requires-channel="http"/>...

Apache blocking (not simply rewriting or redirecting) standard http request

django,apache,http,https
I have a site with a particular path that I am attempting to use as a download repository for another piece of software. Because this site is distributed to be used by third parties I cannot rely on the certificate of this site to be legit (third parties can install...

wget ssl alert handshake failure

ssl,https,wget
I am trying to download files from an https site and keep getting the following error: OpenSSL: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure Unable to establish SSL connection. From reading blogs online I gather I have to provide the server cert and the client cert. I have found steps on how...

Redirect domain.com/folder with www to non-www and at the same time http to https

.htaccess,redirect,https,subfolder,no-www
I have installed into a sub-folder of my domain a Web App. Example: domain.com/webapp I want to use the Web App with SSL enabled: https://domain.com/webapp I want to redirect at same time: WWW to NON-WWW and HTTP to HTTPS only for the sub-folder "webapp". Trying with the code fund in...

Automate HTTPS Login

qt,post,login,https
I'm looking at a login page, and I need to create a POST message for it. Here is the login page source. <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <title></title> <link rel="stylesheet" href="style.css" /> <script language="javascript" src="jquery.js"></script> <script type="text/javascript" language="javascript">$(document).ready(function(){});</script> </head> <body...

Error on Downloading .msi File from my Website

c#,asp.net,.net,https,windows-installer
I have an .msi file on my website for download, but the issue is when we downloads the file following error occurs: On Chrome: On Internet Explorer: After executing the file following Error Occurs: Same Errors occurs on every other browser. So kindly tell me how do i fix it?...

Client certificate authentication

authentication,ssl,https,ssl-certificate,x509
I am new to SSL and Certificates . I have been doing my research about client certificate authentication. I have read this and wiki. So If I have to implement a client certificate auth solution for my B2B REST service should I do following Ask clients to generate their own...

Check if request comes over HTTP or HTTPS in socket listener

c#,sockets,http,https
I have multi threaded async socket listener. I want to check if the request comes as secure or not. But I want to check that in AcceptCallBack method not ReceiveCallBack. I will do that because I want my code to work for both HTTP and HTTPS. If request comes from...

GET request throws error after app implemented SSL: Mixed Content: This request has been blocked; the content must be served over HTTPS"

angularjs,http,ssl,https,flask
Mixed Content: The page at 'https://www.example.com/dashboard' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://api.example.com/inventory/10/'. This request has been blocked; the content must be served over HTTPS. We have this Angular web app that runs with Flask on the back-end. Everything was working fine until we implemented...

squid ssl-bump 3.5.4: error - Error negotiating SSL connection on FD 10: Success (0)

https,proxy,ssl-certificate,squid,man-in-the-middle
I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ --disable-dependency-tracking --disable-silent-rules --enable-inline\ --disable-arch-native --enable-async-io=8 \ --enable-storeio=ufs,aufs,diskd,rock \ --enable-removal-policies=lru,heap --enable-delay-pools \ --enable-cache-digests --enable-icap-client \ --enable-follow-x-forwarded-for \...

Nodejs https request UNABLE_TO_GET_ISSUER_CERT_LOCALLY

node.js,ssl,https
OS: debian sid Nodejs: v0.10.38 I have a request to a private service that use authentication: var https = require('https'); var options = { host: 'private.service.com', path: '/accounts/' + '123323' + '/orders', method: 'POST', headers: { 'Content-Type': 'application/x-www-form-urlencoded', 'Content-Length': 0, 'Authorization': 'Bearer ' + 'asdsdgcvxcvxcv' } }; var request =...

Error in android application: javax.net.ssl.SSLPeerUnverifiedException: No peer certificate

android,security,ssl,https
Good day, may ask for advice. My code is worked properly, but one day for no apparent reason and without changes to the code on the server stopped working, displaying this error I have checked the decisions referred to by links, but none of them gave the desired result. Perhaps...

https site not working on php upgrade

php,joomla,https
I tried to upgrade Joomla version from 3.3.6 to 3.4.1 which ended up in "could not open joomlaupdate.xml for writing" error. I had to upgrade php from version 5.3 to 5.5 which ended up in the https site not working.http site works fine.Now I've downgraded to 5.3 and still the...

How To Improve Security For Simple File Download From A Web Server?

security,https
Dear StackOverflow community, ====================================== TL;DR VERSION: Before we proceed further in our relationship with a cloud web portal provider, I'd like to insist that they provide us a secure way to obtain a copy of our data from their web server. Secure for authenticating ourselves without leaving ourselves vulnerable to...

How does DNS server know the IP address of an SSL's URL?

ssl,https,dns
The SSL/TLS (https) protocol encrypts both of the web page url and its content. So I'm wondering how could the DNS server know the ip address of the requested url if it is encrypted? Any documented reference or idea?

Load images from “HTTPS” type of url and display in UIImageview

ios,objective-c,https,uiimageview,xcode6
I am developing an iOS app in which I receive "HTTPS" URLs from server for images. I am now unable to load images from those URLs. I have tried several frameworks like AFNetworking, SDImageView, etc. But none of them are able to load image from these type of URLs. Update:...

Redirect to a 3rd party HTTP page from HTTPS without the certificate error

java,jsp,security,https,warnings
We have a web application. Our homepage is in HTTPS. When a user clicks a link to go to the content provider's website (where HTTPS is not yet enabled), we get the following error image. Any ideas to circumvent this? Our view is a JSP which posts to the 3rd...

Certificate chain valid in Chrome, not Firefox or Android

google-chrome,firefox,ssl,https,certificate
We had to update our certificate for our ecommerce website recently and ever since we've noticed weird behavior in Firefox and other browsers. About half the computers in the office, as well as my home computer complain that the certificate chain is not complete (Very odd it's not universal). I...

Redirecting http to https

apache,.htaccess,redirect,ssl,https
I'd like to redirect all of my http traffic to https, currently in my htaccess file I have the following redirecting my http traffic: <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTP_HOST} !^www\. RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L] </IfModule> This redirects all of my non-www to www. What is the best way to...

HTTP to HTTPS mapping using proxy servers

apache,ssl,https,proxy,squid
I have a java application which is trying to call a HTTPS endpoint which is setup in my internal network. Also this request go through a corporate proxy. Having said that, I don't want to implement a HTTPS client at my application level. Instead I will just trigger a plain...

Send http form post attributes via https

java,html,forms,ssl,https
I'm using openshift which provides shared ssl so I'm able to access my website using https://url, my question is: Should I need to change anything on my HTML form code or only at my servlet to secure data transfer from client to server?...

How to configure SSL / HTTPS on Spring?

java,spring,ssl,https
I'm working on a Spring Java app that requires HTTPS, and I followed Spring's guide to configure SSL. My application.properties file contains the following: server.port = 8443 server.ssl.key-store = classpath:keystore.p12 server.ssl.key-store-password = password server.ssl.key-password = password server.ssl.keyStoreType = JCEKS server.ssl.keyAlias = alias When the app is run, the console outputs...

Does an HTTP tunnel take place on the same socket than CONNECT?

sockets,https
I'm trying to implement an HTTP proxy for learning and debug purpose. The support of plain HTTP transactions was pretty straightforward to implement and now I'm looking to implement support for SSL/TLS tunnels. From RFC 7230: A "tunnel" acts as a blind relay between two connections without changing the messages....

iOS9 ATS: what about HTML5 based apps?

cordova,https,sencha-touch,ios9
According to the documentation from https://developer.apple.com/library/prerelease/ios/releasenotes/General/WhatsNewIniOS/Articles/iOS9.html#//apple_ref/doc/uid/TP40016198-DontLinkElementID_13, Apple forces to use HTTPS over HTTP in iOS 9. App Transport Security App Transport Security (ATS) lets an app add a declaration to its Info.plist file that specifies the domains with which it needs secure communication. ATS prevents accidental disclosure, provides secure default...

Openshift trustwave intermediate ssl cert issue

ssl,https,ssl-certificate,openshift
So I have got an application on openshift and I am trying to enable SSL on there. I already have an SSL cert from my previous host which is with Trustwave and seemed to work fine. So I have setup an alias for my-domain.com and have put a CNAME redirect...

Get image with curl via https

php,image,curl,https
I have script which gets image from http and it works fine, but when I try to get image from https link it is not working. I am using curl, and I have found this Get image via https and php but it is not working. My code: $image_url="https://ssl.gstatic.com/accounts/services/mail/phone.png"; $slika...

Pattern matching in htaccess rewrite condition

apache,.htaccess,mod-rewrite,https
I have a rewrite condition in an .htaccess file which is used to 'not' force specific URLs to use a HTTPS connection but it's matching erroneously on other URLs at present, here's the rewrite rule... RewriteCond %{HTTPS} off RewriteCond !/go/ [NC] RewriteCond %{HTTP_HOST} ^app\.ihasco\.co\.uk [NC] RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] And...

Permission denied when implementing JavaScript within an iframe from the parent page

javascript,jquery,iframe,https,tinymce
I am trying to implement JavaScript within an iframe from the parent page. I read Invoking JavaScript code in an iframe from the parent page, however, get the following error. Error: Permission denied to access property "showIt" document.getElementById('targetFrame').contentWindow.showIt(); I've tried implementing this both on jsfiddle as well as my server...

Check if URL is HTTPS or HTTP protocol?

java,android,http,https
I am currently using the following to read a file from android docs here and here. The user selects (in the settings screen) if their site uses HTTP or HTTPS protocol. If their website uses the HTTP protocol then it works for both HttpURLConnection and HttpsURLConnection, but if their site...

How to change a connection to Github from SSH to HTTPS?

git,github,ssh,https,git-remote
I created my first repository in Github yesterday. When making the connection I used SSH instead of https, so I went through a little painful SSH key creation and connection process. At some point I got stuck and the connection failed. I wondered at that moment how I could revert...

https for main domain and http for subdomain

.htaccess,http,mod-rewrite,redirect,https
So i need very simple codes for .htaccess I want to redirect all traffic to https in main domain and redirect all traffic to http in subdomain without WWW. Right now i am using this code to redirect all traffic to https RewriteEngine On RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}...

Why use HTTPS for Azure Blob Storage

security,azure,ssl,https,azure-storage-blobs
I have an ASP.NET website which requires login and uses SSL on all pages to protect the user's credentials and authentication cookie. Say one page has an image element with the following src: https://mystorageaccount.blob.core.windows.net/mycontainer/myimage.jpg?sv=... This requests an image file from a private blob container on Azure Storage, using a time-limited...

Copied ssl cert to a test site, how do I remove it?

http,ssl,drupal,https,softlayer
I copied my site to a new virtual server with Softlayer but when I did the the security cert came to. now every time I try to log to my new development site it give warnings saying that the site has taken its cert from another source. I am using...

Htaccess: HTTPS redirection on page + sub pages

apache,.htaccess,mod-rewrite,redirect,https
Im trying to set a htaccess rule that redirects all pages that come under a specific url to https they currently default to http. Im trying to set a overall rule that includes anything after the /enrolments/ page. As multiple locations are included and more being added, so i do...

IE10 Page can't be displayed, other browsers can

web-services,internet-explorer,ssl,https,windows-server-2012
I started with a problem connecting to a webservice on a remote server [internal] from a custom made program. We tested the ws from Firefox and Chrome - both latest and it connects instantly. But in IE10 (latest version for windows 2012 not R2) we get a page can't be...

Wildcard SSL - Which to chose and what is the key differences?

ssl,https,certificate,ssl-certificate
I have been left in confusion for quite some time in deciding which CA should i approach to obtain a SSL certificate. Much comparison has been made from different CA but I do not see what is the key differences that sets each other apart except the price they offer....

Jquery load https url

javascript,jquery,http,https
I have this problem. In external web site I have a script like this: <div id="idtest"></div> <script src="//example.com/widget.js" type="text/javascript"></script> example.com is in https (allow both http and https). In the server in the script widget.js I have: $('#idtest').load("https://example.com/index.html") I get this error: Mixed Content: The page at 'thepage' was loaded...

Does case matter in HSTS header Strict-Transport-Security?

https,http-headers,hsts
In http response there can be header Strict-Transport-Security. I was sure that it must be written in Train-Case, like it is on dropbox.com: $ curl --silent --head https://dropbox.com | grep -i strict Strict-Transport-Security: max-age=15552000; includeSubDomains But on one site I saw it written in kebab-case (this site is not publicly...

Is this a secure connection?

javascript,https
I have a function that opens new browser tab and loads a lot of data into it: var contact_id = $('#contact_id).val(); $.ajax({ type: 'POST', url: 'contacts.php', data: 'id' + contact_id, success: function(data) { var win = window.open("data:text/html, " + encodecURIComponent(data)); win.focus(); } }); The users connects thought https protocol and...

Neo4J force HTTPS

ssl,https,neo4j
I'm using Neo4J server in Ubuntu server @ AWS. my instance only contains Neo4J, so the web server i'm using is the Neo4J built in web server. I've successfully added SSL certificate to my server and a secured connection is present using https. Is there a way for me to...

Mixed Content Page: requested an insecure stylesheet error

javascript,php,css,.htaccess,https
I have a website working on it. when i open any page with http:// protocol, every thing is loaded correctly, but when i try to load the page with https protocol, the page loaded but without css and javascript file. The console shows the following errors. Mixed Content: The page...

ServiceStack Soap 1.2 HTTPS Client

c#,soap,https,servicestack,soap1.2
I have a ServiceStack based Soap Client, which operates correctly for HTTP but when I try to use HTTPS it gives me this error ServiceStack.WebServiceException: The provided URI scheme 'https' is invalid; ex pected 'http'. Parameter name: via ---> System.ArgumentException: The provided URI scheme 'http s' is invalid; expected 'http'....

Instaling updated SSL Certificates breaks Java web integration?

java,wcf,ssl,https,keystore
We have a .Net WCF service hosted on a Windows 2013 server. The SSL certificate for the service which is exposed via HTTPS was nearing expiration. An updated certificate was generated and applied to the server. All of our .Net client applications continued to function as normal, but our Java-based...

htaccess force https on specific query param and remove www generally

regex,apache,.htaccess,mod-rewrite,https
Grateful for some help with this. I am attempting to force https on a certain view identified by a query param in the url. But the rule seems to conflict with other rules that force the removal of the www subdomain. My .htaccess currently looks like this: RewriteCond %{QUERY_STRING} !(^|&)param=(foo)(&|$)...

SSL certificate is not installing

iis,ssl,https
I'm facing an issue in installing SSL certificate in IIS and below are the step before I got the certificate from my CA. Generated a private key file using OpenSSL with: "openssl genrsa -out key_name.key 2048" command. Generated .csr file with: "openssl req -out CSR.csr -key key_name.key -new -sha256" command....

IBM MobileFirst adapter call ssl error

ssl,https,mobilefirst,mobilefirst-server
I am trying to get json data from an application via an http adapter of IBM mobilefirst. The app is accessible with https and i get this ssl error: "Runtime: Http request failed: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExpiredException: NotAfter: Sat Jul 26 21:15:15 EEST 2014" This is the xml of the adapter: <wl:adapter...

Get client's IP address from an HTTPS hosted website using jquery

javascript,jquery,https,ip-address
I am working on an application where I need to save Client's IP Address. I have used the following code: function GetIPAddress() { if (window.XMLHttpRequest) xmlhttp = new XMLHttpRequest(); else xmlhttp = new ActiveXObject("Microsoft.XMLHTTP"); xmlhttp.open("GET", "http://api.hostip.info/get_html.php", false); xmlhttp.send(); hostipInfo = xmlhttp.responseText.split("\n"); for (i = 0; hostipInfo.length >= i; i++) {...

Tomcat SSL Cert Renewal Issue (SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure)

java,apache,tomcat,ssl,https
Attemping to renew a certificate that expired earlier this month and I can't seem to get it to work. Apache Tomcat 7.0.34 Centos Java 1.7.0_65 (Root Cert) I've tried Both gdroot-g2_cross.crt (Java Root) And gdroot-g2.crt seperately and neither worked (intermed Cert) gdig2.crt (tomcat Cert) The one I was given by...

How to connect to a Tor bridge from node.js?

node.js,https,tor
I am new to Tor. I have recently managed to execute a query from node.js while running a tor server instance on my PC. I have used the following piece of code: var Agent = require('socks5-https-client/lib/Agent'); var request = require("request"); var q = "https://www.example.com/"; request({ url: q, agentClass: Agent, agentOptions:...

Downloading website over HTTPS fails

java,ssl,https,certificate
Here is the example that doesn't work: public class Temp { public static void main(String[] args) throws Exception { new URL("https://float.software").openConnection().getInputStream(); } } Going to https://float.software/ in my browser works just fine. But java throws this exception: Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to...

Java client certificates and keystores

java,ssl,https,ssl-certificate
we are trying to build a MUTUAL/2WAY authentication mechanism. Because we hit two different hosts, we have the same client certificate stored in the client keystore container under two different aliases (please note the same fingerprint): [email protected]:/opt/golem# keytool -list -keystore ./client.keystore -storepass ________ Keystore type: JKS Keystore provider: SUN Your...

How do I accept a self-signed SSL certificate using iOS 7's NSURLSession

ios,swift,ssl,https,self-signed
I have the following code (swift implementation): func connection(connection: NSURLConnection, canAuthenticateAgainstProtectionSpace protectionSpace: NSURLProtectionSpace) -> Bool { return protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust } func connection(connection: NSURLConnection, didReceiveAuthenticationChallenge challenge: NSURLAuthenticationChallenge) { if challenge.protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust { if challenge.protectionSpace.host == "myDomain" { let...

Tomcat support for HTTP/2.0?

tomcat,https,tomcat7,tomcat8,http2
Does anyone know what is the lowest version of Tomcat that supports HTTP/2.0? I've been looking everywhere on their site and I cannot find any details regarding this.

Camel http4 download file using Basic authentication over Https

https,apache-camel,basic-authentication
I am trying to download a file from a Https url which requires Basic authentication. I am using HTTP4 I am trying to download from url - https://ebc.cybersource.com/ebc/DownloadReport/xxx.csv?authMethod=Basic&authUsername=scott&authPassword=tiger After the file is downloaded I need to save it to a folder. Here's what my code looks like from(xxx) .to("http4://ebc.cybersource.com/ebc/DownloadReport/xxx.csv?authMethod=Basic&authUsername=scott&authPassword=tiger") .to("file:target/messages/download");...

Unable to Resolve PKIX Path Building Failed

https,certificate,mobilefirst,mobilefirst-adapters
I try to connect to https web service using below code. adapter.xml: <connectivity> <connectionPolicy xsi:type="http:HTTPConnectionPolicyType"> <protocol>https</protocol> <domain>somewhere.com</domain> <port>443</port> <connectionTimeoutInMilliseconds>30000</connectionTimeoutInMilliseconds> <socketTimeoutInMilliseconds>30000</socketTimeoutInMilliseconds> <maxConcurrentConnectionsPerNode>50</maxConcurrentConnectionsPerNode>...

mobile vs dektop authentication with client certificate HTTPS

c#,authentication,ssl,https,x509certificate
Is there a different between mobile-authentication and desktop-authentication via certificate and https? And when, how to solve mobile authentiction with certificate? We try to accomplish a connection to a site eg. https: example.com and authenticate the user via certificate. Before setup a CA and generate necessary certificates. C# code from...

Wordpress: Changed HTTP to HTTPS, now security certificate error

wordpress,security,https
I was trying to secure my website and found a blog on wordpress which shows how to change HTTP to HTTPS from the wordpress settings. I did what it said and now my website won't let me navigate further than the home page. I tried logging into the admin page,...

What is the best and current way to move to HTTPS on a large website?

https,spdy,http2
From watching HTTPS everywhere on YouTube they suggest that HTTPS and SPDY combined will be quicker than just serving web pages/assets over HTTP but then since reading SPDY is Dead. Long Live HTTP/2 and what with with HTTP2 support being a way off I am in two minds as to...

https post request using httpClient and cert.em

java,ssl,https,httpclient,ca
I have a piece of code that sends a payload to a https endpoint(or should). I also have a CA chain in .pem format and this how in code I try and add that use it to do the POST. HttpClient client = new HttpClient(); Gson gson = new GsonBuilder().setPrettyPrinting().create();...

Configure Apache as reverse proxy and tomcat over https

apache,tomcat,https,reverse-proxy
Is there any issues if I configure apache reverse proxy with https which will communicate with tomcat over again https. e.g Browser-> HTTPS -> Apache -> HTTPS-> Tomcat Thanks in advance....

X.509 versus Whte Listing Authentication

security,ssl,amazon-web-services,https,x509
My company is transitioning to cloud based application servers. Key applications will continue to run in-house but selected new applications will run on cloud based application servers. Many of the in-house application servers provide REST endpoints to client applications. Right now the company uses white listing for client authentication. This...

Convert a full wordpress site to HTTPS

php,wordpress,.htaccess,ssl,https
I'm trying to get a wordpress site to HTTPS, but everything I try gives me a redirect loop. I've edited the htaccess, I've set it in PHP, I've even downloaded a wordpress plugin to convert it, but every method gives me a redirect loop error. I know that something has...

How to run Spring application by Maven Tomcat7 via HTTPS?

spring,maven,tomcat,ssl,https
To enable HTTPS, I have create self-signed ssl certificate using keytool -genkey, then configured the same in pom.xml In pom.xml, i used the following code: <plugin> <groupId>org.apache.tomcat.maven</groupId> <artifactId>tomcat7-maven-plugin</artifactId> <version>2.2</version> <configuration> <!-- application path always starts with / --> <path>/</path> <!-- http port --> <port>8080</port> <httpsPort>8443</httpsPort>...

Getting images from https with Java

java,https
Is there a way to get images from a https url with Java? What I am trying so far: URL url = new URL("https://ns6.host.md:8443/sitepreview/http/zugo.md/media/images/thumb/23812__yu400x250.jpg"); System.out.println("Image: " + ImageIO.read(url)); But, I am getting: Exception in thread "main" javax.imageio.IIOException: Can't get input stream from URL! Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No Caused by:...

How can I send this XML request to my server and have it send to and get a response from another server

xml,https,coldfusion
My situation is I need to send an XML request to a user validation server from my desktop application that is installed on multiple users workstations. The validation server has a strict whitelist policy so they will not accept the request from multiple users whose IP would probably change regularly....

Consume Web service over ssl using XFire

java,ssl,https,webservice-client,xfire
My project use xfire as a web service client api. My project is in legacy Servlet/JSP. We used XFire eclipse plugin to generate client stub. Web-service has Migrated to SLL (HTTPS). Is there any easy way to consume Webservice over SSL in XFire. I found some code at http://docs.codehaus.org/display/XFIRE/HTTP+Transport. I...

forcing silex framework to generate https links

php,symfony2,https,routing,silex
My entire application should be accessed over HTTPS, The vhost is correctly configured and when I call any of my application pages with the HTTPS prefix, it responds correctly. However when I try to access a page through a generated link within my application. it always points to a regular...

Loading Deezer Javascript SDK over https times out

javascript,https,deezer
Loading the Deezer Javascript SDK over http from http://cdn-files.deezer.com/js/min/dz.js works fine, but when trying to download it over https from https://cdn-files.deezer.com/js/min/dz.js, the request times out, both in the browser and with e.g. curl. Based on another answer, I understood that the SDK should be available over https too, so is...

“Could not establish trust relationship for the SSL/TLS secure channel.” Exception on signalr2.2, https, .net client, custom certificate

asp.net,.net,ssl,https,signalr
I got some exception in testing signalr .net client with custom self-signed certificate. There was no exception on http. Is there any problem in setting up the self-signed certificate in my code? Note that, there is no problem in my certificate file because it runs my https mvc sites well....

Web Service Client - Construction Failing Due To Timeout (Proxy Issue)

java,web-services,soap,https,proxy
I have a webservice in Java 1.6 that extends javax.xml.ws.Service. The WSDL URL is located at an HTTPS endpoint and I am behind a corporate proxy (NTLM I believe). I have the proxy host, port, username, and password. I have verified that I can access the WSDL using curl if...

some of my https requests in Jmeter arbitrarlily switches to plain http but keeps the port on 443

https,jmeter
The request samplers are set up to use https and port 443. But sometimes JMeter sends a http request but keeps the port on 443, like http://example.com:443/?param=example It should be https://example.com/?param=example on port 443 It works like 75% of the time. What would cause Jmeter to decide to go for...

First authentification in order to get token

php,android,ssl,https,token
I am writing mobile client for online store. I have written REST API for accessing data on the server. Now I need to authentificate the user. I have read a lot about this,and came to the simple solution. Firstly, when user run application first time, he must enter exactly password...

set the OpenSSL_HOME variable

amazon-web-services,https,path,openssl,command-prompt
I am trying to configuring HTTPS based on this tutorial: Configuring HTTPS for your Elastic Beanstalk Environment I am stuck at the following section: To set the OpenSSL_HOME variable Enter the path to the OpenSSL installation: c:\ set OpenSSL_HOME=path_to_your_OpenSSL_installation My openSSL is installed in c:\OpenSSL, so would I write set...